last executing test programs: 6m4.566364332s ago: executing program 3 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="080c000080000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2, @ANYBLOB="7bf8c7541b5fb2dadfd799466317216bc71f86aff479e81beca717b4c75db3546a61e18059cacf7ddd8a05c2dda3380d16a1a4ba72d8a6159f87b0d5da8af02edaa765588e25bd2ac226ebd3046a5ff80d9545c45a2f9c0457b4356dbc3e096a720c2f96f9ea9dd7aa6a94dfaf6884a49f083cb1b96ef85aafc367e011d750230e618c423d13c0c4642ae1c46af5512f2ea75ae2ad3f1164bf16b40bea9ad9"], 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) 6m2.462414859s ago: executing program 3 (id=570): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = syz_io_uring_setup(0xf04, &(0x7f00000003c0)={0x0, 0x34f0, 0x10000, 0x4, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x28, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0, 0x2120, 0x0, {0x1}}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x4001ffe, 0xa68d7c519fc00ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000006380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f00000049c0)="bc", 0x1}], 0x1) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f0000000000)={0x2, 0x2, 0x5, 0x8001, 0x2, 0x10000}) close(r4) 6m1.642201622s ago: executing program 3 (id=576): pipe2(&(0x7f0000000040), 0x0) memfd_create(0x0, 0x3) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) socket(0x1a, 0x1, 0x1) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x3}, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 6m1.530475937s ago: executing program 3 (id=577): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r4 = getpid() syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x74, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0xac, 0x0, 0x0, 0x1000, 0xffffffff, r4, 0x0, 0x108}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14"], 0x7c}}, 0x0) 6m1.432694667s ago: executing program 3 (id=578): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x149000, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc4c03d12, &(0x7f0000000040)={0x19, 0x17}) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000002100), 0x2002012, &(0x7f0000000500)=ANY=[@ANYBLOB="66643dbe3925047b27f3e261ddfde690f404e78c039f4f975ee7366d55ec2d73ea196894958bdfacc059bca50a284b97d14bd2da14ec01e7e19c5660dfddd6a72138fdaabfcc7ddee3227a0e2bab8189d69e618cbf5a090c0f187bd9a297b7c71ffac8bb0b1dd0aeee516504cd3841370d0425406a6b6004f4b11c7351", @ANYRES32=r0, @ANYRES8=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r0]) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r9 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$getregset(0x4204, r9, 0x201, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x3, r9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) close_range(r6, r7, 0x0) 6m0.061860604s ago: executing program 3 (id=586): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x6, @pix={0xb, 0x9, 0x32315258, 0x2, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x2, 0x3}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x5, 0x0, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000004c0)) 5m44.481231433s ago: executing program 32 (id=586): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() add_key(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000002c0)={0x6, @pix={0xb, 0x9, 0x32315258, 0x2, 0xe, 0x8, 0x5, 0xa, 0x0, 0x2, 0x2, 0x3}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x5, 0x0, 0xb7, 0xfffffffe}}, 0xe4) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e1c, @dev={0xac, 0x14, 0x14, 0xfc}}, 0x10) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f00000004c0)) 4.310324035s ago: executing program 2 (id=3433): syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_le_set_cig_params={{0xd9}, {0x9, 0x7}}}}, 0x9) 4.221053192s ago: executing program 2 (id=3435): r0 = socket(0x2, 0x80805, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) io_setup(0x77b, 0x0) io_destroy(0x0) io_setup(0x2278, 0x0) write$UHID_INPUT(r4, &(0x7f0000000080)={0x18, {"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", 0x5bb1f126059684ef}}, 0x1006) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000300)=""/198, &(0x7f0000000400)=0xc6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) 3.750809213s ago: executing program 0 (id=3438): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) read$FUSE(r0, &(0x7f0000002740)={0x2020}, 0x2020) 3.601208799s ago: executing program 0 (id=3440): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r0, &(0x7f0000000540)=""/157, 0x9d) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800003, 0xb481166f5bcbd471, 0xffffffffffffffff, 0xd0fb8000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 3.268721555s ago: executing program 0 (id=3445): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="791048000000000079001a0000000000"], 0x0, 0x8, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.268468538s ago: executing program 2 (id=3446): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0xcc, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x3ff, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x2, 0x4b, 0x6}]}}}}}}}}, 0x0) 3.202963618s ago: executing program 0 (id=3448): socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.202445589s ago: executing program 0 (id=3451): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xe, 0xa}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x0) 2.951068385s ago: executing program 0 (id=3453): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00b69f00000017"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x27, "eee0e956e8b4090d1989af5eafb9fd161f02e43468d7eaa3c5164af4ea2766ab0a83f3c3b37fb4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.38015547s ago: executing program 2 (id=3461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.379210084s ago: executing program 2 (id=3462): socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.310640865s ago: executing program 2 (id=3463): execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') close_range(0xffffffffffffffff, r1, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, 0x0, 0x0) syz_usb_connect(0x0, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 1.383859277s ago: executing program 4 (id=3480): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0xff, @remote, @local, {[], {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x3ff, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0x2, 0x4b, 0x6}]}}}}}}}}, 0x0) 1.320929841s ago: executing program 4 (id=3481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, 0x0, 0x64) 1.210823289s ago: executing program 4 (id=3482): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x34, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PREV_BSSID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x200048d0}, 0x40000) 1.210596793s ago: executing program 4 (id=3483): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b700009100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1.199990655s ago: executing program 4 (id=3484): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x30) 1.139987503s ago: executing program 4 (id=3485): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xe0, 0xb, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x420, 0xb0, 0x81, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x3, 0x5}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000980)={0x40, 0x24, 0x2f, {0x2f, 0x23, "1ba57fb04d4f1e07d695f268e872852798b2974b1fc634f26cda14d95e6688adb139e26a477975a81c7f29ce7c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 370.591904ms ago: executing program 1 (id=3490): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r1, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="54010000", @ANYRES16=r2, @ANYBLOB="017d26bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0600cd00000000002d0133008020090008021100000108021100000050505050"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 370.241473ms ago: executing program 1 (id=3491): r0 = syz_open_dev$vcsa(&(0x7f0000002d00), 0xb19, 0x80000) lseek(r0, 0x7, 0x3) 290.341392ms ago: executing program 1 (id=3492): r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 228.789658ms ago: executing program 1 (id=3493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x4}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 228.046439ms ago: executing program 1 (id=3494): r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7c}, {0x3, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r4, {}, {0xe, 0xa}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x40810) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x0) 0s ago: executing program 1 (id=3495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r2}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[], 0x64) kernel console output (not intermixed with test programs): 0x0 [ 383.613031][ T5845] hid-generic 0004:FFFFFFFF:0000.0028: unknown main item tag 0x0 [ 383.613043][ T5845] hid-generic 0004:FFFFFFFF:0000.0028: unknown main item tag 0x0 [ 383.613055][ T5845] hid-generic 0004:FFFFFFFF:0000.0028: unknown main item tag 0x0 [ 383.613066][ T5845] hid-generic 0004:FFFFFFFF:0000.0028: unknown main item tag 0x0 [ 383.626947][ T5845] hid-generic 0004:FFFFFFFF:0000.0028: hidraw1: HID v0.00 Device [syz0] on syz0 [ 383.832346][ T5916] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 383.982799][ T5916] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 383.983306][ T5916] usb 6-1: config 0 has no interfaces? [ 383.983328][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.985466][ T5916] usb 6-1: config 0 descriptor?? [ 384.225038][T13626] jffs2: notice: (13626) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 384.261418][ T5845] usb 6-1: USB disconnect, device number 48 [ 384.392072][ T58] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 384.543263][ T58] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 384.545933][ T58] usb 9-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 384.545951][ T58] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 384.547478][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 384.547493][ T58] usb 9-1: SerialNumber: syz [ 384.759919][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.762217][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.780309][ T58] usb 9-1: 0:2 : does not exist [ 384.808074][ T58] usb 9-1: USB disconnect, device number 22 [ 384.915278][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 386.006908][T13668] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 387.198161][ T43] audit: type=1800 audit(1787767802.580:1757): pid=13669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1623" name="file1" dev="9p" ino=79429809 res=0 errno=0 [ 387.773306][ T2376] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 387.831637][T13661] Process accounting resumed [ 387.922953][ T2376] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 387.928000][ T2376] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.933174][ T2376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 387.937736][ T2376] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 387.944983][ T2376] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.948555][ T2376] usb 9-1: Product: syz [ 387.950424][ T2376] usb 9-1: Manufacturer: syz [ 387.952608][ T2376] usb 9-1: SerialNumber: syz [ 387.956745][ T2376] usb 9-1: config 0 descriptor?? [ 387.960293][T13677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 388.002361][ T2376] rc_core: IR keymap rc-streamzap not found [ 388.005066][ T2376] Registered IR keymap rc-empty [ 388.008395][ T2376] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0 [ 388.015119][ T2376] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 388.472083][ T5845] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 388.806259][ T5845] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 388.847697][ T5845] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 388.847754][ T5845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.904345][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.904389][ T5845] usb 6-1: SerialNumber: syz [ 388.914298][ T58] usb 9-1: USB disconnect, device number 23 [ 389.372915][T13686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.377512][T13686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.464680][ T5845] usb 6-1: 0:2 : does not exist [ 389.497834][ T5845] usb 6-1: USB disconnect, device number 49 [ 389.555933][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 389.856258][ T43] audit: type=1800 audit(1787767805.240:1758): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1639" name="file1" dev="9p" ino=79429809 res=0 errno=0 [ 389.874038][T13726] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1640'. [ 390.081541][T13729] Process accounting resumed [ 390.372124][ T5845] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 390.522079][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 390.522862][ T5845] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 390.524237][ T5845] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 390.524291][ T5845] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 390.524335][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 390.524371][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 390.524407][ T5845] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 390.524456][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.733200][ T5845] usb 6-1: usb_control_msg returned -32 [ 390.733270][ T5845] usbtmc 6-1:16.0: can't read capabilities [ 391.287813][T13751] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 391.288726][ T5711] usb 6-1: USB disconnect, device number 50 [ 391.293341][T13751] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -19 [ 392.733895][T13771] afs: Unknown parameter 'fsname' [ 393.524907][ T5711] Process accounting resumed [ 393.559146][ T43] audit: type=1800 audit(1787767808.940:1759): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1652" name="file1" dev="9p" ino=79429809 res=0 errno=0 [ 394.497854][T13804] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 394.501905][T13804] Cannot find map_set index 2 as target [ 395.221228][ T43] audit: type=1326 audit(1787767810.600:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.221528][ T43] audit: type=1326 audit(1787767810.600:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=76 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.221617][ T43] audit: type=1326 audit(1787767810.600:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.221844][ T43] audit: type=1326 audit(1787767810.600:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.223162][ T43] audit: type=1326 audit(1787767810.610:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.223310][ T43] audit: type=1326 audit(1787767810.610:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.224241][ T43] audit: type=1326 audit(1787767810.610:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.224362][ T43] audit: type=1326 audit(1787767810.610:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.226783][ T43] audit: type=1326 audit(1787767810.610:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.226807][ T43] audit: type=1326 audit(1787767810.610:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13825 comm="syz.1.1661" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701efec code=0x7ffc0000 [ 395.562740][ T5845] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 395.932511][ T5845] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 395.934977][ T5845] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 395.934999][ T5845] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.935832][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 395.935844][ T5845] usb 6-1: SerialNumber: syz [ 396.101245][ T5526] Process accounting resumed [ 396.149397][T13828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.149698][T13828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.159100][ T5845] usb 6-1: 0:2 : does not exist [ 396.190192][ T5845] usb 6-1: USB disconnect, device number 51 [ 396.213735][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 396.820929][ T5845] hid_parser_main: 22 callbacks suppressed [ 396.821011][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821041][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821055][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821067][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821078][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821090][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821102][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821113][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821125][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.821137][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: unknown main item tag 0x0 [ 396.827734][ T5845] hid-generic 0004:FFFFFFFF:0000.0029: hidraw1: HID v0.00 Device [syz0] on syz0 [ 397.062088][ T42] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 397.072224][ T5845] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 397.212868][ T42] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.214916][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 397.214943][ T42] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 397.214973][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 397.214993][ T42] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.215013][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.215033][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.215054][ T42] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 397.215075][ T42] usb 7-1: config 168 interface 0 has no altsetting 0 [ 397.216011][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 397.216037][ T42] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 397.216066][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 397.216086][ T42] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.216106][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.216127][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.216148][ T42] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 397.216170][ T42] usb 7-1: config 168 interface 0 has no altsetting 0 [ 397.217178][ T42] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 397.217203][ T42] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 397.217230][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 397.217250][ T42] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 397.217269][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 397.217286][ T42] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 397.217304][ T42] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 397.217324][ T42] usb 7-1: config 168 interface 0 has no altsetting 0 [ 397.220919][ T42] usb 7-1: string descriptor 0 read error: -22 [ 397.221047][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.235414][ T42] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 397.241599][ T5845] usb 6-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 397.253678][ T5845] usb 6-1: config 0 has no interfaces? [ 397.253696][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.273350][ T5845] usb 6-1: config 0 descriptor?? [ 397.453728][ T5845] usb 7-1: USB disconnect, device number 39 [ 397.462278][ T58] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 397.538240][T13802] usb 6-1: USB disconnect, device number 52 [ 397.632361][ T58] usb 9-1: Using ep0 maxpacket: 8 [ 397.633367][ T58] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 397.634528][ T58] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 397.634545][ T58] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 397.634557][ T58] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 397.634569][ T58] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 397.634589][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.786859][T13802] Process accounting resumed [ 397.850102][ T58] usb 9-1: GET_CAPABILITIES returned 0 [ 397.850172][ T58] usbtmc 9-1:16.0: can't read capabilities [ 398.055677][T13802] usb 9-1: USB disconnect, device number 24 [ 398.753844][T13802] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 398.892121][ T58] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 398.902113][T13802] usb 6-1: Using ep0 maxpacket: 8 [ 398.902578][T13802] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 398.903378][T13802] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 398.903400][T13802] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 398.903411][T13802] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 398.903422][T13802] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 398.903434][T13802] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 398.903452][T13802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.052775][ T58] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 399.053727][ T58] usb 9-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 399.053786][ T58] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 399.054614][ T58] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 399.054664][ T58] usb 9-1: SerialNumber: syz [ 399.089126][T13924] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 399.108330][T13802] usb 6-1: usb_control_msg returned -32 [ 399.108445][T13802] usbtmc 6-1:16.0: can't read capabilities [ 399.262727][T13916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.263048][T13916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.268922][ T58] usb 9-1: 0:2 : does not exist [ 399.288557][ T58] usb 9-1: USB disconnect, device number 25 [ 399.324009][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 399.666080][T13929] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -71 [ 399.667225][ T58] usb 6-1: USB disconnect, device number 53 [ 399.804293][T13931] 9pnet_virtio: no channels available for device syz [ 399.987436][ T5711] Process accounting resumed [ 400.063010][T13936] netlink: 1712 bytes leftover after parsing attributes in process `syz.0.1688'. [ 401.482067][T13802] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 401.642792][T13802] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 401.650405][T13802] usb 9-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 401.654934][T13802] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 401.661847][T13802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 401.665506][T13802] usb 9-1: SerialNumber: syz [ 401.800750][T13972] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1695'. [ 401.884443][T13971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.884686][T13971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.904762][T13802] usb 9-1: 0:2 : does not exist [ 401.952378][T13802] usb 9-1: USB disconnect, device number 26 [ 402.043710][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 402.101048][ T66] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 402.425853][T13993] usbip-vudc usbip-vudc.0: failed to lookup sock [ 402.722022][ T5845] Process accounting resumed [ 402.730876][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 402.730941][ T43] audit: type=1800 audit(1787767818.110:1791): pid=13997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1699" name="file1" dev="9p" ino=79429809 res=0 errno=0 [ 403.184257][ T5845] hid_parser_main: 22 callbacks suppressed [ 403.186434][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.189238][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.191884][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.194460][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.197415][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.200969][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.204492][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.207869][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.211141][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.211165][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: unknown main item tag 0x0 [ 403.230915][ T5845] hid-generic 0004:FFFFFFFF:0000.002A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 403.422193][ T5711] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 403.452099][ T5526] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 403.572025][ T5711] usb 9-1: Using ep0 maxpacket: 8 [ 403.573880][ T5711] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.575535][ T5711] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 403.575558][ T5711] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.575570][ T5711] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.575581][ T5711] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.575593][ T5711] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.575612][ T5711] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.604022][ T5526] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 403.607333][ T5526] usb 7-1: config 0 has no interfaces? [ 403.608141][ T5526] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.658764][ T5526] usb 7-1: config 0 descriptor?? [ 403.995087][T13802] usb 7-1: USB disconnect, device number 40 [ 404.226854][ T5711] usb 9-1: usb_control_msg returned -32 [ 404.226913][ T5711] usbtmc 9-1:16.0: can't read capabilities [ 404.583458][T13802] usb 9-1: USB disconnect, device number 27 [ 404.587191][T14038] usbtmc 9-1:16.0: usbtmc_ioctl_request failed -71 [ 404.792591][ T5845] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 404.942688][ T5845] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 404.943511][ T5845] usb 7-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 404.943524][ T5845] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.944294][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 404.944305][ T5845] usb 7-1: SerialNumber: syz [ 405.153719][T14044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.154054][T14044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.169640][ T5845] usb 7-1: 0:2 : does not exist [ 405.201795][ T5845] usb 7-1: USB disconnect, device number 41 [ 405.227568][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 405.495258][T14037] cgroup: fork rejected by pids controller in /syz0 [ 408.558173][T14108] bond0: entered promiscuous mode [ 408.559012][T14108] batadv0: entered promiscuous mode [ 408.573550][T14108] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 408.573661][T14108] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 408.581303][T14108] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 408.593468][T14108] bond0: left promiscuous mode [ 408.600199][T14108] batadv0: left promiscuous mode [ 409.102018][ T42] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 409.252599][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 409.253090][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 409.253982][ T42] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 409.254005][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.254017][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.254029][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 409.254040][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 409.254060][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.382649][ T2376] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 409.459187][ T42] usb 7-1: usb_control_msg returned -32 [ 409.459249][ T42] usbtmc 7-1:16.0: can't read capabilities [ 409.605755][ T2376] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 409.606910][ T2376] usb 9-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 409.606924][ T2376] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.608094][ T2376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 409.608106][ T2376] usb 9-1: SerialNumber: syz [ 409.828633][T14116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.830468][T14116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.965011][ T2376] usb 9-1: 0:2 : does not exist [ 410.019222][T14127] usbtmc 7-1:16.0: usbtmc_ioctl_request failed -71 [ 410.023737][ T5831] usb 7-1: USB disconnect, device number 42 [ 410.037633][T14110] usbtmc: can not find device for minor 0 [ 410.060078][ T2376] usb 9-1: USB disconnect, device number 28 [ 410.091090][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 410.246340][T14130] netlink: 'syz.0.1722': attribute type 1 has an invalid length. [ 410.279813][T14130] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.283971][T14130] bond2: (slave bond3): making interface the new active one [ 410.287163][T14130] bond2: (slave bond3): Enslaving as an active interface with an up link [ 410.846995][ T43] audit: type=1800 audit(1787767826.230:1792): pid=14147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1725" name="id" dev="configfs" ino=41702 res=0 errno=0 [ 412.011861][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 412.912057][ T5526] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 413.062583][ T5526] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 413.067323][ T5526] usb 9-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 413.067391][ T5526] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.076587][ T5526] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.076631][ T5526] usb 9-1: SerialNumber: syz [ 413.295223][T14171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.295463][T14171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.303349][ T5526] usb 9-1: 0:2 : does not exist [ 413.321768][ T5526] usb 9-1: USB disconnect, device number 29 [ 413.337791][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 414.232566][ T5526] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 414.404623][ T5526] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 414.409923][ T5526] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 414.412538][ T5526] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 414.416294][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.419743][ T5526] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.419801][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.424022][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.424078][ T5526] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 414.424134][ T5526] usb 9-1: config 168 interface 0 has no altsetting 0 [ 414.439150][ T5526] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 414.441571][ T5526] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 414.447982][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.448047][ T5526] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.448077][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.448105][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.448134][ T5526] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 414.448163][ T5526] usb 9-1: config 168 interface 0 has no altsetting 0 [ 414.476408][ T5526] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 414.478942][ T5526] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 414.478966][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.478980][ T5526] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.478993][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.479033][ T5526] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.479048][ T5526] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 414.479062][ T5526] usb 9-1: config 168 interface 0 has no altsetting 0 [ 414.516529][ T5526] usb 9-1: string descriptor 0 read error: -22 [ 414.518580][ T5526] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.554413][ T5526] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 414.746077][ T5526] usb 9-1: USB disconnect, device number 30 [ 415.217912][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1743'. [ 417.854264][ T5711] Process accounting resumed [ 417.883140][ T43] audit: type=1800 audit(1787767833.270:1793): pid=14276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1759" name="file1" dev="9p" ino=79429809 res=0 errno=0 [ 418.538321][T14282] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1762'. [ 419.933733][T14314] usbip-vudc usbip-vudc.0: failed to lookup sock [ 419.997709][T14315] usbip-vudc usbip-vudc.0: failed to lookup sock [ 420.969229][T14339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1775'. [ 421.769357][ T5526] usb 6-1: new full-speed USB device number 54 using dummy_hcd [ 421.807519][ T2376] hid_parser_main: 22 callbacks suppressed [ 421.807757][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807778][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807790][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807883][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807897][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807909][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807921][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807933][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807945][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.807963][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: unknown main item tag 0x0 [ 421.809560][ T2376] hid-generic 0004:FFFFFFFF:0000.002B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 421.923741][ T5526] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 421.926657][ T5526] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.926682][ T5526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 421.926702][ T5526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 421.930473][ T5526] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.930488][ T5526] usb 6-1: Product: syz [ 421.930495][ T5526] usb 6-1: Manufacturer: syz [ 421.930504][ T5526] usb 6-1: SerialNumber: syz [ 421.931820][ T5526] usb 6-1: config 0 descriptor?? [ 421.932491][T14350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 421.945299][ T10] hid-generic 0004:FFFFFFFF:0000.002C: hidraw2: HID v0.00 Device [syz0] on syz0 [ 421.982098][ T5526] rc_core: IR keymap rc-streamzap not found [ 421.982158][ T5526] Registered IR keymap rc-empty [ 421.983040][ T5526] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 421.987658][ T5526] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 422.082008][ T10] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 422.202017][ T5845] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 422.242719][ T10] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 422.243753][ T10] usb 9-1: config 0 has no interfaces? [ 422.243778][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.246356][ T10] usb 9-1: config 0 descriptor?? [ 422.362712][ T5845] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 422.363541][ T5845] usb 7-1: config 0 has no interfaces? [ 422.363566][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.366813][ T5845] usb 7-1: config 0 descriptor?? [ 422.512765][T13802] usb 9-1: USB disconnect, device number 31 [ 422.597203][ T58] usb 7-1: USB disconnect, device number 43 [ 423.170921][T14370] tun0: tun_chr_ioctl cmd 1074025675 [ 423.170967][T14370] tun0: persist enabled [ 423.174935][T14371] usbip-vudc usbip-vudc.0: failed to lookup sock [ 423.177628][T14370] binder: 14369:14370 ioctl c0306201 800003c0 returned -14 [ 423.177878][T14370] binder: 14369:14370 ioctl c0306201 80000280 returned -14 [ 423.178457][T14370] binder: 14369:14370 ioctl c0306201 800001c0 returned -14 [ 423.178657][T14370] binder: 14369:14370 ioctl 40089413 80000140 returned -22 [ 424.212141][ T2376] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 424.329436][ T50] Process accounting resumed [ 424.362247][ T2376] usb 9-1: Using ep0 maxpacket: 8 [ 424.362854][ T2376] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 424.364007][ T2376] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 424.364033][ T2376] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.364045][ T2376] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.364057][ T2376] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.364068][ T2376] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.364087][ T2376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.578400][ T2376] usb 9-1: usb_control_msg returned -32 [ 424.578450][ T2376] usbtmc 9-1:16.0: can't read capabilities [ 424.706345][ T58] usb 6-1: USB disconnect, device number 54 [ 425.137687][ T58] usb 9-1: USB disconnect, device number 32 [ 425.138978][T14394] usbtmc 9-1:16.0: usbtmc_ioctl_request failed -71 [ 426.354897][T14420] netlink: 'syz.4.1801': attribute type 12 has an invalid length. [ 427.024904][ T2376] Process accounting resumed [ 427.050745][ T43] audit: type=1800 audit(1787767842.430:1794): pid=14428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1803" name="file1" dev="9p" ino=79429809 res=0 errno=0 [ 427.113246][T14436] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1806'. [ 427.113559][T14436] unsupported nlmsg_type 40 [ 427.115585][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 427.169809][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1806'. [ 427.361710][T14439] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 427.361827][T14439] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 427.416367][T14440] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1808'. [ 427.418791][T14440] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1808'. [ 427.663097][T14445] overlayfs: failed to clone lowerpath [ 427.667636][T14443] usbip-vudc usbip-vudc.0: failed to lookup sock [ 427.844600][T14449] overlayfs: failed to resolve './cgroup': -2 [ 427.861441][T14449] overlay: ./file0 is not a directory [ 428.069920][T14456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1813'. [ 428.116174][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'. [ 428.842428][ T2376] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 428.867912][ T5845] hid_parser_main: 54 callbacks suppressed [ 428.870181][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870216][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870281][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870301][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870321][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870338][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870358][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870378][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870403][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.870422][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: unknown main item tag 0x0 [ 428.875736][ T5845] hid-generic 0004:FFFFFFFF:0000.002D: hidraw1: HID v0.00 Device [syz0] on syz0 [ 428.994465][ T2376] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 428.997369][ T2376] usb 7-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 428.997392][ T2376] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.998403][ T2376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 428.998423][ T2376] usb 7-1: SerialNumber: syz [ 429.122161][ T5845] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 429.232783][T14480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.233157][T14480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.247850][ T2376] usb 7-1: 0:2 : does not exist [ 429.262351][ T2376] usb 7-1: USB disconnect, device number 44 [ 429.276663][ T5845] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 429.277752][ T5845] usb 9-1: config 0 has no interfaces? [ 429.277780][ T5845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.280673][ T5845] usb 9-1: config 0 descriptor?? [ 429.304085][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 429.547560][ T58] usb 9-1: USB disconnect, device number 33 [ 430.246284][ T58] Process accounting resumed [ 430.520470][T14508] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 430.520567][T14508] FAULT_INJECTION: forcing a failure. [ 430.520567][T14508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.520683][T14508] CPU: 1 UID: 0 PID: 14508 Comm: syz.4.1829 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.520699][T14508] Tainted: [L]=SOFTLOCKUP [ 430.520703][T14508] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 430.520710][T14508] Call Trace: [ 430.520714][T14508] [ 430.520718][T14508] dump_stack_lvl+0x100/0x190 [ 430.520737][T14508] should_fail_ex.cold+0x5/0xa [ 430.520751][T14508] _copy_to_user+0x32/0xd0 [ 430.520768][T14508] simple_read_from_buffer+0xcb/0x170 [ 430.520788][T14508] proc_fail_nth_read+0x1af/0x230 [ 430.520805][T14508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.520822][T14508] ? rw_verify_area+0xce/0x6d0 [ 430.520837][T14508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.520854][T14508] vfs_read+0x1e4/0xb40 [ 430.520872][T14508] ? __pfx_vfs_read+0x10/0x10 [ 430.520887][T14508] ? find_held_lock+0x2b/0x80 [ 430.520899][T14508] ? __fget_files+0x215/0x3d0 [ 430.520911][T14508] ? __fget_files+0x21f/0x3d0 [ 430.520925][T14508] ksys_read+0x12a/0x250 [ 430.520941][T14508] ? __pfx_ksys_read+0x10/0x10 [ 430.520961][T14508] do_int80_emulation+0x166/0x650 [ 430.520974][T14508] asm_int80_emulation+0x1a/0x20 [ 430.520984][T14508] RIP: 0023:0xf71474eb [ 430.520993][T14508] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 430.521005][T14508] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 430.521016][T14508] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54065d0 [ 430.521023][T14508] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 430.521029][T14508] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 430.521035][T14508] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 430.521041][T14508] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 430.521055][T14508] [ 431.082297][ T5845] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 431.115281][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'. [ 431.243227][ T5845] usb 7-1: Using ep0 maxpacket: 16 [ 431.332386][ T42] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 431.367496][T14512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1831'. [ 431.367583][T14512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1831'. [ 431.376873][ T5845] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.380079][ T5845] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 431.383761][ T5845] usb 7-1: no configurations [ 431.383775][ T5845] usb 7-1: can't read configurations, error -22 [ 431.562505][ T42] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 431.563358][ T42] usb 6-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 431.563371][ T42] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.564135][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 431.564148][ T42] usb 6-1: SerialNumber: syz [ 431.770230][T14517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.770458][T14517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.778807][ T42] usb 6-1: 0:2 : does not exist [ 431.795728][ T42] usb 6-1: USB disconnect, device number 55 [ 431.809668][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 432.274390][T14530] usbip-vudc usbip-vudc.0: failed to lookup sock [ 432.584553][T14537] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1838'. [ 435.064536][T14558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 435.345558][T14551] syz.1.1841 (14551) used greatest stack depth: 19624 bytes left [ 435.612024][ T2376] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 435.762787][ T2376] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 435.763931][ T2376] usb 9-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config [ 435.763953][ T2376] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 435.765056][ T2376] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 435.765077][ T2376] usb 9-1: SerialNumber: syz [ 435.916185][ T42] Process accounting resumed [ 435.978404][T14563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.979206][T14563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.994803][ T2376] usb 9-1: 0:2 : does not exist [ 436.020094][ T2376] usb 9-1: USB disconnect, device number 34 [ 436.128831][ T5755] udevd[5755]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 436.379094][T14577] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1849'. [ 436.942079][ T5845] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 437.092109][ T5845] usb 6-1: Using ep0 maxpacket: 8 [ 437.092612][ T5845] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.093634][ T5845] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 437.093657][ T5845] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.093668][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.093681][ T5845] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.093692][ T5845] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.093712][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.302762][ T5845] usb 6-1: usb_control_msg returned -32 [ 437.302827][ T5845] usbtmc 6-1:16.0: can't read capabilities [ 439.626801][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.629863][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.705286][T13802] usb 6-1: USB disconnect, device number 56 [ 440.181351][T14643] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1870'. [ 440.261757][T14650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.277235][T14646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.330849][T14654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1875'. [ 440.330908][T14654] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1875'. [ 440.884987][T14671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1882'. [ 440.909471][T14671] hsr_slave_1 (unregistering): left promiscuous mode [ 441.024958][T14629] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.029378][T14629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.031830][T14629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.038246][T14629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.040855][T14629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.474831][T14131] bond0: (slave syz_tun): Releasing backup interface [ 441.493271][T14684] syzkaller0: entered promiscuous mode [ 441.493325][T14684] syzkaller0: entered allmulticast mode [ 441.652815][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.786998][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.899914][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.985664][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.004643][T14716] syzkaller0: entered promiscuous mode [ 442.004969][T14716] syzkaller0: entered allmulticast mode [ 442.132240][T14673] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.132367][T14673] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.132483][T14673] bridge_slave_0: entered allmulticast mode [ 442.133765][T14673] bridge_slave_0: entered promiscuous mode [ 442.142965][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.143046][T14673] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.143156][T14673] bridge_slave_1: entered allmulticast mode [ 442.144641][T14673] bridge_slave_1: entered promiscuous mode [ 442.205113][T14673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.211584][T14673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.264976][T14673] team0: Port device team_slave_0 added [ 442.266255][T14673] team0: Port device team_slave_1 added [ 442.301764][T14673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.301804][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.302083][T14673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.318089][T14673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.318098][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 442.318113][T14673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.379388][ T13] bridge_slave_1: left allmulticast mode [ 442.379451][ T13] bridge_slave_1: left promiscuous mode [ 442.384973][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.395448][ T13] bridge_slave_0: left allmulticast mode [ 442.395517][ T13] bridge_slave_0: left promiscuous mode [ 442.395727][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.535204][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.539570][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.547691][ T13] bond0 (unregistering): Released all slaves [ 442.553748][ T13] bond1 (unregistering): Released all slaves [ 442.565072][ T13] bond2 (unregistering): (slave bond3): Releasing backup interface [ 442.566045][ T13] bond2 (unregistering): Released all slaves [ 442.587096][ T13] bond3 (unregistering): Released all slaves [ 442.605796][T14673] hsr_slave_0: entered promiscuous mode [ 442.606558][T14673] hsr_slave_1: entered promiscuous mode [ 442.606977][T14673] debugfs: 'hsr0' already exists in 'hsr' [ 442.606991][T14673] Cannot create hsr debugfs directory [ 442.763126][T14734] IPv6: NLM_F_CREATE should be specified when creating new route [ 442.763491][T14734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 442.763538][T14734] IPv6: NLM_F_CREATE should be set when creating new route [ 443.039055][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 443.142244][ T66] Bluetooth: hci0: command tx timeout [ 443.241907][ T13] hsr_slave_0: left promiscuous mode [ 443.245898][ T13] hsr_slave_1: left promiscuous mode [ 443.248128][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.250801][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.253539][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.253587][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.256474][ T13] batman_adv: batadv0: Interface deactivated: veth0 [ 443.256485][ T13] batman_adv: batadv0: Removing interface: veth0 [ 443.264414][T14751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 443.264424][T14751] IPv6: NLM_F_CREATE should be set when creating new route [ 443.274942][ T13] veth1_macvtap: left promiscuous mode [ 443.275030][ T13] veth0_macvtap: left promiscuous mode [ 443.979365][T14772] syzkaller0: entered promiscuous mode [ 443.980412][T14772] syzkaller0: entered allmulticast mode [ 443.981583][T14758] tipc: Started in network mode [ 443.981598][T14758] tipc: Node identity 22ea2fbbd66b, cluster identity 4711 [ 443.981704][T14758] tipc: Enabled bearer , priority 0 [ 443.981817][T14770] syzkaller0: entered promiscuous mode [ 443.981826][T14770] syzkaller0: entered allmulticast mode [ 443.995190][T14757] tipc: Resetting bearer [ 444.014246][T14757] tipc: Disabling bearer [ 444.165248][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1914'. [ 444.805270][ T13] IPVS: stop unused estimator thread 0... [ 444.838120][T14673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.849228][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.849913][T14673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.859017][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 444.859740][T14673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.867443][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 444.867909][T14673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.874602][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.133438][T14673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.146320][T14673] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.151545][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.151620][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.213547][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.213646][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.223529][ T66] Bluetooth: hci0: command tx timeout [ 445.476065][T14817] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1919'. [ 446.439327][T14826] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1920'. [ 446.439385][T14826] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1920'. [ 446.525836][T14837] netlink: ct family unspecified [ 446.527949][T14837] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.641869][T14673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.750366][T14839] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 446.759398][T14673] veth0_vlan: entered promiscuous mode [ 446.797821][T14673] veth1_vlan: entered promiscuous mode [ 446.875834][T14673] veth0_macvtap: entered promiscuous mode [ 446.884749][T14673] veth1_macvtap: entered promiscuous mode [ 446.894106][T14853] syzkaller0: entered promiscuous mode [ 446.894245][T14853] syzkaller0: entered allmulticast mode [ 446.914098][T14673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 446.916058][T14673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.942795][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1927'. [ 446.961774][T14861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.072877][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.073195][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.073385][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.112766][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.113144][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.113174][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.163819][ T392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.166988][ T392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.302632][ T66] Bluetooth: hci0: command tx timeout [ 449.382071][ T66] Bluetooth: hci0: command tx timeout [ 449.772252][T14926] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1951'. [ 450.125846][T14956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1961'. [ 452.436365][T15006] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 453.442896][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1981'. [ 453.442948][T15025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1981'. [ 454.479012][T15038] xt_l2tp: v2 tid > 0xffff: 37482740 [ 454.607417][T15050] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1991'. [ 455.082239][T15076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 455.173622][T15080] smpboot: CPU 1 is now offline [ 455.879740][T15117] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 455.962137][ T66] Bluetooth: hci4: unexpected event for opcode 0x080f [ 457.665061][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2035'. [ 457.668377][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2035'. [ 457.730780][T15178] ubi0: attaching mtd0 [ 458.006779][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 458.096614][T15194] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2042'. [ 459.348401][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2055'. [ 460.265692][T15253] nvme_fabrics: missing parameter 'transport=%s' [ 460.994642][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2071'. [ 461.302951][T15285] configfs: Unknown parameter '(}]}))' [ 461.458294][T15289] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2078'. [ 461.490573][T15292] caif0: tun_chr_ioctl cmd 1074025676 [ 461.490624][T15292] caif0: owner set to 0 [ 461.812268][T15319] i2c i2c-0: new_device: Can't parse I2C address [ 462.002796][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2095'. [ 462.026216][T15336] syzkaller1: entered promiscuous mode [ 462.026284][T15336] syzkaller1: entered allmulticast mode [ 462.177926][T15341] syzkaller1: entered promiscuous mode [ 462.178001][T15341] syzkaller1: entered allmulticast mode [ 462.800402][T15362] netlink: 'syz.1.2106': attribute type 12 has an invalid length. [ 462.803910][T15362] netlink: 'syz.1.2106': attribute type 29 has an invalid length. [ 462.804990][T15362] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2106'. [ 462.805004][T15362] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 462.805011][T15362] netlink: 'syz.1.2106': attribute type 2 has an invalid length. [ 462.805018][T15362] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2106'. [ 462.806326][T15362] netlink: 'syz.1.2106': attribute type 12 has an invalid length. [ 462.806335][T15362] netlink: 'syz.1.2106': attribute type 29 has an invalid length. [ 462.806341][T15362] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2106'. [ 462.806349][T15362] netlink: 'syz.1.2106': attribute type 1 has an invalid length. [ 462.806355][T15362] netlink: 'syz.1.2106': attribute type 2 has an invalid length. [ 462.806361][T15362] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2106'. [ 462.957885][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2110'. [ 463.384563][T15404] nbd: must specify a device to reconfigure [ 463.452029][ T5838] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 463.452072][ T5838] netdevsim netdevsim10 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 464.370447][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2143'. [ 464.826440][T15471] can0: slcan on pty24. [ 464.923592][T15470] can0 (unregistered): slcan off pty24. [ 465.500751][ T66] Bluetooth: hci1: unexpected event for opcode 0x041c [ 465.697357][T15500] syzkaller0: entered promiscuous mode [ 465.697430][T15500] syzkaller0: entered allmulticast mode [ 465.818385][T15502] X25: received unknown 00 with LCI 000 [ 466.169340][ T58] hid_parser_main: 22 callbacks suppressed [ 466.169556][ T58] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 466.174997][ T58] hid-generic 0000:0000:0000.002E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 466.420297][T15540] binder: 15539:15540 unknown command 0 [ 466.420347][T15540] binder: 15539:15540 ioctl c0306201 80000080 returned -22 [ 466.777569][T15564] syzkaller0: entered promiscuous mode [ 466.777640][T15564] syzkaller0: entered allmulticast mode [ 466.989393][T15526] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 467.017392][T15577] Bluetooth: (null): Too short H5 packet [ 467.119617][T15581] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 467.125691][T15581] bond2 (unregistering): Released all slaves [ 467.426699][T15594] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 467.895550][T15608] retu-mfd 0-0001: could not read Retu revision: -6 [ 467.912393][T15608] i2c i2c-0: new_device: Instantiated device retu at 0x01 [ 467.933745][T15609] retu-mfd 0-0002: could not read Tahvo revision: -6 [ 467.937844][T15609] i2c i2c-0: new_device: Instantiated device tahvo at 0x02 [ 467.998611][T15609] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 468.014588][T15614] syzkaller0: entered promiscuous mode [ 468.015460][T15614] syzkaller0: entered allmulticast mode [ 468.022185][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 468.174452][T15624] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2211'. [ 468.182224][ T66] Bluetooth: hci0: command 0x0401 tx timeout [ 468.277879][T15630] syzkaller0: entered promiscuous mode [ 468.277927][T15630] syzkaller0: entered allmulticast mode [ 468.325885][T15632] team0: Mode changed to "broadcast" [ 469.428926][T15686] FAULT_INJECTION: forcing a failure. [ 469.428926][T15686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.434610][T15686] CPU: 0 UID: 0 PID: 15686 Comm: syz.4.2238 Tainted: G L syzkaller #0 PREEMPT(full) [ 469.434641][T15686] Tainted: [L]=SOFTLOCKUP [ 469.434647][T15686] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 469.434654][T15686] Call Trace: [ 469.434658][T15686] [ 469.434664][T15686] dump_stack_lvl+0x100/0x190 [ 469.434688][T15686] should_fail_ex.cold+0x5/0xa [ 469.434703][T15686] _copy_from_user+0x2e/0xd0 [ 469.434722][T15686] io_uring_setup+0xc0/0x160 [ 469.434741][T15686] ? find_held_lock+0x2b/0x80 [ 469.434753][T15686] ? ksys_write+0x190/0x250 [ 469.434769][T15686] ? ksys_write+0x190/0x250 [ 469.434785][T15686] ? __pfx_io_uring_setup+0x10/0x10 [ 469.434801][T15686] ? do_futex+0x190/0x440 [ 469.434812][T15686] ? __pfx_do_futex+0x10/0x10 [ 469.434827][T15686] ? xfd_validate_state+0x129/0x190 [ 469.434848][T15686] __ia32_sys_io_uring_setup+0xc2/0x170 [ 469.434866][T15686] __do_fast_syscall_32+0x13a/0x8b0 [ 469.434882][T15686] do_fast_syscall_32+0x32/0x70 [ 469.434894][T15686] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 469.434910][T15686] RIP: 0023:0xf7f48fec [ 469.434923][T15686] Code: Unable to access opcode bytes at 0xf7f48fc2. [ 469.434929][T15686] RSP: 002b:00000000f54064bc EFLAGS: 00000282 ORIG_RAX: 00000000000001a9 [ 469.434941][T15686] RAX: ffffffffffffffda RBX: 00000000000019d5 RCX: 0000000080000040 [ 469.434949][T15686] RDX: 00000000f7170f17 RSI: 0000000000000001 RDI: 00000000f540653c [ 469.434956][T15686] RBP: 00000000800000c0 R08: 0000000000000000 R09: 0000000000000000 [ 469.434963][T15686] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 469.434971][T15686] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 469.434990][T15686] [ 469.454807][ T58] asus 0018:0B05:0101.002F: hidraw1: I2C HID vffffff.fe Device [syz0] on syz1 [ 469.458957][ T58] asus 0018:0B05:0101.002F: Asus handshake 5d failed to send: -5 [ 469.458979][ T58] asus 0018:0B05:0101.002F: Failed to initialize 0x5d: -5. [ 469.544115][ T66] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 469.544215][ T66] Bluetooth: hci1: Injecting HCI hardware error event [ 469.546196][ T66] Bluetooth: hci1: hardware error 0x00 [ 469.665324][T15692] fido_id[15692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 469.805531][T15713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2249'. [ 469.868942][T15717] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 469.868983][T15717] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 470.877698][T15754] tipc: Enabled bearer , priority 10 [ 471.281363][T15777] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 471.284387][T15777] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 471.623823][ T66] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 471.994763][ T5706] tipc: Node number set to 4102107067 [ 472.108389][T15795] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2280'. [ 472.806564][T15814] syzkaller0: entered promiscuous mode [ 472.806617][T15814] syzkaller0: entered allmulticast mode [ 473.635700][T15822] tipc: Started in network mode [ 473.635776][T15822] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 473.635902][T15822] tipc: Enabled bearer , priority 10 [ 474.762083][ T58] tipc: Node number set to 8432298 [ 475.603506][T15867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2307'. [ 475.607952][T15869] FAULT_INJECTION: forcing a failure. [ 475.607952][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 475.608032][T15869] CPU: 3 UID: 0 PID: 15869 Comm: syz.0.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.608071][T15869] Tainted: [L]=SOFTLOCKUP [ 475.608078][T15869] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 475.608089][T15869] Call Trace: [ 475.608096][T15869] [ 475.608103][T15869] dump_stack_lvl+0x100/0x190 [ 475.608157][T15869] should_fail_ex.cold+0x5/0xa [ 475.608183][T15869] should_failslab+0xc2/0x120 [ 475.608208][T15869] kmem_cache_alloc_noprof+0x92/0x6a0 [ 475.608227][T15869] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 475.608253][T15869] ? __khugepaged_enter+0x92/0x3a0 [ 475.608280][T15869] __khugepaged_enter+0x92/0x3a0 [ 475.608301][T15869] khugepaged_enter_vma+0x13a/0x2c0 [ 475.608328][T15869] hugepage_madvise+0xa8/0xd0 [ 475.608484][T15869] madvise_vma_behavior+0x1020/0x2240 [ 475.608513][T15869] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 475.608546][T15869] ? find_vma_prev+0xd8/0x150 [ 475.608569][T15869] ? __pfx_find_vma_prev+0x10/0x10 [ 475.608605][T15869] madvise_walk_vmas+0x30e/0xc50 [ 475.608635][T15869] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 475.608663][T15869] ? __pfx_futex_wake_mark+0x10/0x10 [ 475.608697][T15869] madvise_do_behavior+0x1ea/0x510 [ 475.608723][T15869] ? __pfx___might_resched+0x10/0x10 [ 475.608748][T15869] ? __pfx_madvise_do_behavior+0x10/0x10 [ 475.608783][T15869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 475.608810][T15869] do_madvise+0x238/0x290 [ 475.608832][T15869] ? __pfx_do_madvise+0x10/0x10 [ 475.608855][T15869] ? do_futex+0x190/0x440 [ 475.608875][T15869] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 475.608922][T15869] __ia32_sys_madvise+0xa7/0x110 [ 475.608947][T15869] ? lockdep_hardirqs_on+0x7d/0x110 [ 475.608974][T15869] __do_fast_syscall_32+0x13a/0x8b0 [ 475.608995][T15869] do_fast_syscall_32+0x32/0x70 [ 475.609014][T15869] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 475.609037][T15869] RIP: 0023:0xf708efec [ 475.609058][T15869] Code: Unable to access opcode bytes at 0xf708efc2. [ 475.609066][T15869] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 00000000000000db [ 475.609084][T15869] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000 [ 475.609097][T15869] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000000 [ 475.609108][T15869] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.609119][T15869] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 475.609130][T15869] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 475.609155][T15869] [ 475.760236][T15873] syzkaller0: entered promiscuous mode [ 475.760296][T15873] syzkaller0: entered allmulticast mode [ 476.182452][T15895] FAULT_INJECTION: forcing a failure. [ 476.182452][T15895] name failslab, interval 1, probability 0, space 0, times 0 [ 476.192760][T15895] CPU: 0 UID: 0 PID: 15895 Comm: syz.2.2318 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.192814][T15895] Tainted: [L]=SOFTLOCKUP [ 476.192823][T15895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 476.192835][T15895] Call Trace: [ 476.192843][T15895] [ 476.192850][T15895] dump_stack_lvl+0x100/0x190 [ 476.192896][T15895] should_fail_ex.cold+0x5/0xa [ 476.192923][T15895] should_failslab+0xc2/0x120 [ 476.192951][T15895] kmem_cache_alloc_noprof+0x92/0x6a0 [ 476.192975][T15895] ? vm_area_dup+0x27/0x8e0 [ 476.193008][T15895] vm_area_dup+0x27/0x8e0 [ 476.193035][T15895] __split_vma+0x19b/0x1800 [ 476.193067][T15895] ? __pfx___split_vma+0x10/0x10 [ 476.193111][T15895] vma_modify+0x12ad/0x25c0 [ 476.193150][T15895] ? __pfx_vma_modify+0x10/0x10 [ 476.193176][T15895] ? rcu_is_watching+0x13/0xc0 [ 476.193195][T15895] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 476.193227][T15895] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 476.193267][T15895] vma_modify_flags+0x254/0x3c0 [ 476.193297][T15895] ? __pfx_vma_modify_flags+0x10/0x10 [ 476.193342][T15895] ? __pfx_ima_file_mprotect+0x10/0x10 [ 476.193378][T15895] mprotect_fixup+0x27a/0xe00 [ 476.193417][T15895] ? __pfx_mprotect_fixup+0x10/0x10 [ 476.193465][T15895] ? __pfx_mas_prev+0x10/0x10 [ 476.193497][T15895] do_mprotect_pkey+0xa51/0xdd0 [ 476.193535][T15895] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 476.193564][T15895] ? ksys_write+0x190/0x250 [ 476.193633][T15895] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 476.193692][T15895] __ia32_sys_mprotect+0x75/0xb0 [ 476.193722][T15895] ? lockdep_hardirqs_on+0x7d/0x110 [ 476.193753][T15895] __do_fast_syscall_32+0x13a/0x8b0 [ 476.193777][T15895] do_fast_syscall_32+0x32/0x70 [ 476.193797][T15895] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 476.193823][T15895] RIP: 0023:0xf7f45fec [ 476.193848][T15895] Code: Unable to access opcode bytes at 0xf7f45fc2. [ 476.193857][T15895] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 000000000000007d [ 476.193886][T15895] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 476.193900][T15895] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 476.193912][T15895] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 476.193923][T15895] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 476.193936][T15895] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 476.193965][T15895] [ 477.613952][T15947] FAULT_INJECTION: forcing a failure. [ 477.613952][T15947] name failslab, interval 1, probability 0, space 0, times 0 [ 477.614013][T15947] CPU: 3 UID: 0 PID: 15947 Comm: syz.0.2337 Tainted: G L syzkaller #0 PREEMPT(full) [ 477.614030][T15947] Tainted: [L]=SOFTLOCKUP [ 477.614035][T15947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 477.614041][T15947] Call Trace: [ 477.614046][T15947] [ 477.614051][T15947] dump_stack_lvl+0x100/0x190 [ 477.614070][T15947] should_fail_ex.cold+0x5/0xa [ 477.614084][T15947] should_failslab+0xc2/0x120 [ 477.614099][T15947] kmem_cache_alloc_noprof+0x92/0x6a0 [ 477.614112][T15947] ? vm_area_dup+0x27/0x8e0 [ 477.614130][T15947] vm_area_dup+0x27/0x8e0 [ 477.614145][T15947] __split_vma+0x19b/0x1800 [ 477.614170][T15947] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 477.614191][T15947] ? __pfx___split_vma+0x10/0x10 [ 477.614215][T15947] vma_modify+0x12ad/0x25c0 [ 477.614235][T15947] ? lock_acquire+0x150/0x370 [ 477.614251][T15947] ? __pfx_vma_modify+0x10/0x10 [ 477.614268][T15947] ? rcu_is_watching+0x13/0xc0 [ 477.614281][T15947] ? finish_task_switch.isra.0+0x2c2/0x10d0 [ 477.614306][T15947] ? finish_task_switch.isra.0+0x3b3/0x10d0 [ 477.614339][T15947] vma_modify_flags+0x254/0x3c0 [ 477.614367][T15947] ? __pfx_vma_modify_flags+0x10/0x10 [ 477.614405][T15947] ? __pfx_ima_file_mprotect+0x10/0x10 [ 477.614437][T15947] mprotect_fixup+0x27a/0xe00 [ 477.614469][T15947] ? __pfx_mprotect_fixup+0x10/0x10 [ 477.614508][T15947] ? __pfx_mas_prev+0x10/0x10 [ 477.614534][T15947] do_mprotect_pkey+0xa51/0xdd0 [ 477.614567][T15947] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 477.614590][T15947] ? ksys_write+0x190/0x250 [ 477.614616][T15947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 477.614640][T15947] ? __pfx_ksys_write+0x10/0x10 [ 477.614658][T15947] __ia32_sys_mprotect+0x75/0xb0 [ 477.614675][T15947] ? lockdep_hardirqs_on+0x7d/0x110 [ 477.614691][T15947] __do_fast_syscall_32+0x13a/0x8b0 [ 477.614703][T15947] do_fast_syscall_32+0x32/0x70 [ 477.614714][T15947] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 477.614727][T15947] RIP: 0023:0xf708efec [ 477.614750][T15947] Code: Unable to access opcode bytes at 0xf708efc2. [ 477.614756][T15947] RSP: 002b:00000000f547d50c EFLAGS: 00000292 ORIG_RAX: 000000000000007d [ 477.614769][T15947] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000003000 [ 477.614777][T15947] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.614785][T15947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 477.614792][T15947] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 477.614798][T15947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 477.614813][T15947] [ 478.156275][T15971] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 478.156314][T15971] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 478.678331][T15993] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 478.678388][T15993] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 478.734191][T15997] IPv6: NLM_F_CREATE should be specified when creating new route [ 478.804719][T16008] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 478.804772][T16008] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 478.884763][T16012] syzkaller0: entered promiscuous mode [ 478.884830][T16012] syzkaller0: entered allmulticast mode [ 479.069848][T16029] IPv6: NLM_F_CREATE should be specified when creating new route [ 479.072417][T16029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 479.072451][T16029] IPv6: NLM_F_CREATE should be set when creating new route [ 479.467342][T16055] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 479.467384][T16055] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 479.504417][T16064] syzkaller0: entered promiscuous mode [ 479.504479][T16064] syzkaller0: entered allmulticast mode [ 479.742610][T14629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 479.747585][T14629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 479.750704][T14629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 479.755361][T14629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 479.760865][T14629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 480.079169][T16080] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 480.079212][T16080] IPv6: NLM_F_CREATE should be set when creating new route [ 480.902454][T16072] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.905331][T16072] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.905441][T16072] bridge_slave_0: entered allmulticast mode [ 480.906155][T16072] bridge_slave_0: entered promiscuous mode [ 480.907357][T16072] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.907396][T16072] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.907448][T16072] bridge_slave_1: entered allmulticast mode [ 480.908128][T16072] bridge_slave_1: entered promiscuous mode [ 480.936243][T16072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.938739][T16072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.959414][T16072] team0: Port device team_slave_0 added [ 480.961739][T16072] team0: Port device team_slave_1 added [ 480.984607][T16072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.984670][T16072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.984735][T16072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.986184][T16072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.986195][T16072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.986215][T16072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.021698][T16072] hsr_slave_0: entered promiscuous mode [ 481.022878][T16072] hsr_slave_1: entered promiscuous mode [ 481.023366][T16072] debugfs: 'hsr0' already exists in 'hsr' [ 481.023384][T16072] Cannot create hsr debugfs directory [ 481.196233][ T5838] dvmrp0: left allmulticast mode [ 481.328319][ T5838] bond0 (unregistering): Released all slaves [ 481.332307][ T5838] bond1 (unregistering): Released all slaves [ 481.650045][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 481.694781][ T5838] hsr_slave_0: left promiscuous mode [ 481.697389][ T5838] hsr_slave_1: left promiscuous mode [ 481.864362][ T66] Bluetooth: hci3: command tx timeout [ 482.176797][T16072] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 482.194083][T16072] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.197516][T16072] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 482.206740][T16072] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.220622][T16072] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 482.252608][T16072] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 482.257442][T16072] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.270105][T16072] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.274442][ T5838] IPVS: stop unused estimator thread 0... [ 482.349106][T16072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.356577][T16072] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.359832][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.359941][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.391028][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.391108][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.684597][T16072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.711561][T16072] veth0_vlan: entered promiscuous mode [ 482.714954][T16072] veth1_vlan: entered promiscuous mode [ 482.736899][T16072] veth0_macvtap: entered promiscuous mode [ 482.745238][T16072] veth1_macvtap: entered promiscuous mode [ 482.751533][T16072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.764706][T16072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.768829][ T5838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.768970][ T5838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.769037][ T5838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.769063][ T5838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.861293][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.861342][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.880832][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.880894][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.058310][T16165] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2418'. [ 483.370942][T16174] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 483.377723][T16174] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 483.409842][T16173] syzkaller0: entered promiscuous mode [ 483.409917][T16173] syzkaller0: entered allmulticast mode [ 483.428119][T16173] tipc: Enabled bearer , priority 0 [ 483.434018][T16172] tipc: Resetting bearer [ 483.457204][T16172] tipc: Disabling bearer [ 483.750101][T16195] syzkaller0: entered promiscuous mode [ 483.750159][T16195] syzkaller0: entered allmulticast mode [ 483.754975][T16195] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2419'. [ 483.754989][T16195] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2419'. [ 483.769510][T16195] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.942843][ T66] Bluetooth: hci3: command tx timeout [ 484.097787][T16223] syzkaller0: entered promiscuous mode [ 484.100138][T16223] syzkaller0: entered allmulticast mode [ 484.266300][T16230] syzkaller0: entered promiscuous mode [ 484.268553][T16230] syzkaller0: entered allmulticast mode [ 484.619525][T16250] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2442'. [ 484.623104][T16250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2442'. [ 484.637899][T16250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.950340][T16266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2448'. [ 485.321550][T16280] syzkaller0: entered promiscuous mode [ 485.321610][T16280] syzkaller0: entered allmulticast mode [ 485.821584][T16316] syzkaller0: entered promiscuous mode [ 485.821638][T16316] syzkaller0: entered allmulticast mode [ 486.015910][T16334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2479'. [ 486.022172][ T66] Bluetooth: hci3: command tx timeout [ 486.096736][T16340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2483'. [ 486.236793][T16346] syzkaller0: entered promiscuous mode [ 486.236928][T16346] syzkaller0: entered allmulticast mode [ 488.120438][ T66] Bluetooth: hci3: command tx timeout [ 488.789132][T16370] syzkaller0: entered promiscuous mode [ 488.789189][T16370] syzkaller0: entered allmulticast mode [ 488.790626][T16370] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2496'. [ 488.790638][T16370] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2496'. [ 488.997287][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2508'. [ 489.000190][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2508'. [ 489.653378][T16387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2498'. [ 489.868510][T16411] syzkaller0: entered promiscuous mode [ 489.868566][T16411] syzkaller0: entered allmulticast mode [ 489.870479][T16411] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2515'. [ 489.870491][T16411] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2515'. [ 489.897138][T14210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.958865][T16417] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2518'. [ 490.236098][T16435] syzkaller0: entered promiscuous mode [ 490.236182][T16435] syzkaller0: entered allmulticast mode [ 490.994659][T16478] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input26 [ 491.063035][T16472] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2541'. [ 491.063082][T16472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2541'. [ 494.379402][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 494.443791][T16539] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 494.443869][T16539] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 494.683074][T16566] netlink: 'syz.2.2576': attribute type 12 has an invalid length. [ 494.686260][T16566] netlink: 'syz.2.2576': attribute type 29 has an invalid length. [ 494.689927][T16566] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2576'. [ 494.694377][T16566] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 494.697104][T16566] netlink: 'syz.2.2576': attribute type 2 has an invalid length. [ 494.701646][T16566] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2576'. [ 494.705747][T16566] netlink: 'syz.2.2576': attribute type 12 has an invalid length. [ 494.705797][T16566] netlink: 'syz.2.2576': attribute type 29 has an invalid length. [ 494.707060][T16566] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2576'. [ 494.707076][T16566] netlink: 'syz.2.2576': attribute type 1 has an invalid length. [ 494.707084][T16566] netlink: 'syz.2.2576': attribute type 2 has an invalid length. [ 494.707091][T16566] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2576'. [ 495.653235][T16631] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 495.653310][T16631] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 496.776157][T16690] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2637'. [ 496.956164][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2645'. [ 497.043119][T16715] Bluetooth: (null): Too short H5 packet [ 497.068678][T16719] xt_l2tp: v2 tid > 0xffff: 37482740 [ 497.141399][ T58] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 497.152411][ T58] hid-generic 0000:0000:0000.0030: hidraw1: HID v0.00 Device [syz1] on syz0 [ 497.258115][T16739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2658'. [ 497.802919][T16777] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 498.435239][T16841] syzkaller0: entered promiscuous mode [ 498.437089][T16841] syzkaller0: entered allmulticast mode [ 498.704761][T16868] i2c i2c-0: Failed to register i2c client retu at 0x01 (-16) [ 498.705099][T16868] i2c i2c-0: Failed to register i2c client tahvo at 0x02 (-16) [ 498.758836][T16877] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 499.104091][T16902] ubi0: attaching mtd0 [ 499.108876][T16902] ubi0: scanning is finished [ 499.112867][T16902] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 499.359686][T16902] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 499.663483][T14629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.668331][T14629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.675319][T14629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.676527][T14629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.677188][T14629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 499.689774][T16932] ubi0: attaching mtd0 [ 499.713891][T16932] ubi0: scanning is finished [ 499.713955][T16932] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 499.921019][T16932] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 500.048405][ T5838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.048465][ T5838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.235207][ T5838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.235275][ T5838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.384714][ T5838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.384812][ T5838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.570961][ T5838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.575492][ T5838] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 500.659966][T16928] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.660044][T16928] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.660144][T16928] bridge_slave_0: entered allmulticast mode [ 500.660908][T16928] bridge_slave_0: entered promiscuous mode [ 500.674307][T16928] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.676669][T16928] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.676776][T16928] bridge_slave_1: entered allmulticast mode [ 500.677497][T16928] bridge_slave_1: entered promiscuous mode [ 500.867919][T16981] ubi0: attaching mtd0 [ 500.877506][T16981] ubi0: scanning is finished [ 500.877549][T16981] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 501.057423][T16981] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 501.082579][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.082710][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.796596][ T66] Bluetooth: hci1: command tx timeout [ 503.210992][T16928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.212942][T16928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.261789][T16928] team0: Port device team_slave_0 added [ 503.280123][T16928] team0: Port device team_slave_1 added [ 503.336687][T16928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.336748][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.336784][T16928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.337759][T16928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.337768][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.337782][T16928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.411682][T16928] hsr_slave_0: entered promiscuous mode [ 503.412949][T16928] hsr_slave_1: entered promiscuous mode [ 503.486998][ T5838] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 503.487061][ T5838] netdevsim netdevsim10 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 503.741037][T17039] syzkaller0: entered promiscuous mode [ 503.741095][T17039] syzkaller0: entered allmulticast mode [ 503.781693][T17039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.801573][ T5449] 8021q: adding VLAN 0 to HW filter on device eth7 [ 503.852442][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2787'. [ 503.872131][ T66] Bluetooth: hci1: command tx timeout [ 503.885724][T17042] syzkaller0: entered promiscuous mode [ 503.887839][T17042] syzkaller0: entered allmulticast mode [ 504.038323][T17054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2791'. [ 504.170824][ T5838] bridge_slave_1: left allmulticast mode [ 504.170882][ T5838] bridge_slave_1: left promiscuous mode [ 504.171057][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.188699][ T5838] bridge_slave_0: left allmulticast mode [ 504.189390][T17064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2795'. [ 504.204046][ T5838] bridge_slave_0: left promiscuous mode [ 504.204370][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.291377][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2799'. [ 504.474950][ T5838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.481976][ T5838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.487225][ T5838] bond0 (unregistering): Released all slaves [ 504.491060][ T5838] bond1 (unregistering): Released all slaves [ 504.503190][ T5838] bond2 (unregistering): Released all slaves [ 504.660101][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2807'. [ 504.692404][ T5838] tipc: Disabling bearer [ 504.695824][T17100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2808'. [ 504.710924][ T5838] tipc: Left network mode [ 504.727192][T17084] syzkaller0: entered promiscuous mode [ 504.727247][T17084] syzkaller0: entered allmulticast mode [ 504.745300][ T5838] IPVS: stopping master sync thread 13294 ... [ 504.980773][T17116] netlink: 'syz.0.2815': attribute type 12 has an invalid length. [ 504.984660][T17116] netlink: 'syz.0.2815': attribute type 29 has an invalid length. [ 504.987433][T17116] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2815'. [ 504.990543][T17116] netlink: 'syz.0.2815': attribute type 1 has an invalid length. [ 504.993605][T17116] netlink: 'syz.0.2815': attribute type 2 has an invalid length. [ 505.003107][T17116] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2815'. [ 505.009629][T17118] netlink: 'syz.0.2815': attribute type 12 has an invalid length. [ 505.009724][T17118] netlink: 'syz.0.2815': attribute type 29 has an invalid length. [ 505.009769][T17118] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2815'. [ 505.009802][T17118] netlink: 'syz.0.2815': attribute type 1 has an invalid length. [ 505.009818][T17118] netlink: 'syz.0.2815': attribute type 2 has an invalid length. [ 505.009828][T17118] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2815'. [ 505.353920][ T5838] hsr_slave_0: left promiscuous mode [ 505.354890][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.354912][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.358369][ T5838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.358388][ T5838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.380032][ T5838] veth1_macvtap: left promiscuous mode [ 505.380133][ T5838] veth0_macvtap: left promiscuous mode [ 505.381500][ T5838] veth1_vlan: left promiscuous mode [ 505.381563][ T5838] veth0_vlan: left promiscuous mode [ 505.440481][T17143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input27 [ 505.610046][ T5838] team0 (unregistering): Port device team_slave_1 removed [ 505.615469][ T5838] team0 (unregistering): Port device team_slave_0 removed [ 505.756106][T17158] syzkaller0: entered promiscuous mode [ 505.756176][T17158] syzkaller0: entered allmulticast mode [ 505.761427][T16928] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.766910][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 505.767386][T16928] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.792153][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 505.942417][ T66] Bluetooth: hci1: command tx timeout [ 507.638878][T16928] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.669734][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.670325][T16928] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 507.674934][T16928] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.781208][T16928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.799578][T16928] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.814534][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.814633][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.818261][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.818306][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.855072][ T5838] IPVS: stop unused estimator thread 0... [ 507.900364][ T5449] 8021q: adding VLAN 0 to HW filter on device eth8 [ 508.022510][ T66] Bluetooth: hci1: command tx timeout [ 508.209299][T16928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.269433][T16928] veth0_vlan: entered promiscuous mode [ 508.288062][T16928] veth1_vlan: entered promiscuous mode [ 508.329016][T16928] veth0_macvtap: entered promiscuous mode [ 508.338901][T16928] veth1_macvtap: entered promiscuous mode [ 508.364928][T17266] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 508.365024][T17266] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 508.370615][T16928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.378988][T16928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.422209][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.472122][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.472475][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.472515][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.553001][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.553047][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.576673][ T1178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.576724][ T1178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.600553][T17283] syzkaller0: entered promiscuous mode [ 508.600605][T17283] syzkaller0: entered allmulticast mode [ 509.093546][T17306] ubi0: attaching mtd0 [ 509.101357][T17306] ubi0: scanning is finished [ 509.101444][T17306] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 509.186491][T17306] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 509.800397][ T66] Bluetooth: hci4: command 0x0c1a tx timeout [ 510.632086][T17324] __nla_validate_parse: 1 callbacks suppressed [ 510.632139][T17324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2875'. [ 510.643626][T17326] netlink: 'syz.1.2876': attribute type 12 has an invalid length. [ 510.643693][T17326] netlink: 'syz.1.2876': attribute type 29 has an invalid length. [ 510.643749][T17326] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2876'. [ 510.643766][T17326] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2876'. [ 510.644600][T17326] netlink: 'syz.1.2876': attribute type 12 has an invalid length. [ 510.644615][T17326] netlink: 'syz.1.2876': attribute type 29 has an invalid length. [ 510.644625][T17326] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2876'. [ 510.644639][T17326] netlink: 59 bytes leftover after parsing attributes in process `syz.1.2876'. [ 510.697453][T17332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2879'. [ 510.811173][T17342] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 510.811268][T17342] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 512.789483][T17380] ubi0: attaching mtd0 [ 512.823501][ T66] Bluetooth: hci0: command 0x0401 tx timeout [ 513.192485][T17431] syzkaller0: entered promiscuous mode [ 513.194839][T17431] syzkaller0: entered allmulticast mode [ 513.422617][T17464] fuse: Bad value for 'fd' [ 513.489526][T17478] netlink: 'syz.2.2938': attribute type 12 has an invalid length. [ 513.489560][T17478] netlink: 'syz.2.2938': attribute type 29 has an invalid length. [ 513.489621][T17478] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2938'. [ 513.489655][T17478] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 513.489683][T17478] netlink: 'syz.2.2938': attribute type 2 has an invalid length. [ 513.489717][T17478] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2938'. [ 513.649903][T17503] netlink: 'syz.0.2951': attribute type 12 has an invalid length. [ 513.652560][T17503] netlink: 'syz.0.2951': attribute type 29 has an invalid length. [ 513.655038][T17503] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2951'. [ 513.658121][T17503] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2951'. [ 514.617186][T17629] No control pipe specified [ 515.007703][T17659] syzkaller0: entered promiscuous mode [ 515.007790][T17659] syzkaller0: entered allmulticast mode [ 515.036324][T17661] syzkaller0: entered promiscuous mode [ 515.036381][T17661] syzkaller0: entered allmulticast mode [ 515.124394][T17669] fuse: Bad value for 'fd' [ 515.171698][T17672] No control pipe specified [ 515.354496][T17691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.359898][T17691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.414472][T17698] autofs: Bad value for 'fd' [ 515.517470][T17712] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 515.517547][T17712] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 515.627615][T17726] autofs: Bad value for 'fd' [ 516.244587][T17816] autofs: Unknown parameter '0x0000000000000000' [ 516.441310][T17839] autofs: Unknown parameter '0x0000000000000000' [ 516.645668][T17858] validate_nla: 26 callbacks suppressed [ 516.645737][T17858] netlink: 'syz.2.3101': attribute type 12 has an invalid length. [ 516.645760][T17858] netlink: 'syz.2.3101': attribute type 29 has an invalid length. [ 516.645781][T17858] __nla_validate_parse: 18 callbacks suppressed [ 516.645789][T17858] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3101'. [ 516.645799][T17858] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3101'. [ 516.662818][T17858] netlink: 'syz.2.3101': attribute type 12 has an invalid length. [ 516.662871][T17858] netlink: 'syz.2.3101': attribute type 29 has an invalid length. [ 516.662883][T17858] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3101'. [ 516.662895][T17858] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3101'. [ 516.739716][T17867] autofs: Unknown parameter '0x0000000000000000' [ 516.854193][T17876] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 516.854252][T17876] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 516.880238][T17880] netlink: 'syz.2.3112': attribute type 12 has an invalid length. [ 516.882870][T17880] netlink: 'syz.2.3112': attribute type 29 has an invalid length. [ 516.885376][T17880] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3112'. [ 516.888251][T17880] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3112'. [ 516.891659][T17880] netlink: 'syz.2.3112': attribute type 12 has an invalid length. [ 516.894397][T17880] netlink: 'syz.2.3112': attribute type 29 has an invalid length. [ 516.896903][T17880] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3112'. [ 516.899784][T17880] netlink: 59 bytes leftover after parsing attributes in process `syz.2.3112'. [ 517.241087][T17911] netlink: 'syz.0.3125': attribute type 12 has an invalid length. [ 517.241124][T17911] netlink: 'syz.0.3125': attribute type 29 has an invalid length. [ 517.241326][T17911] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3125'. [ 517.241433][T17911] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3125'. [ 517.459949][T17924] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 517.460022][T17924] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 518.472010][T17997] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 518.472091][T17997] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 518.472169][T17997] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 518.499969][T17997] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 518.507259][T17997] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 518.554797][T18003] autofs: Unknown parameter 'fd0x0000000000000000' [ 519.029742][T18042] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 519.032100][T18042] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 519.298537][ C3] Unknown status report in ack skb [ 519.817658][T18150] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 520.022228][ T6157] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 520.192039][ T6157] usb 7-1: Using ep0 maxpacket: 16 [ 520.194241][ T6157] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 520.199254][ T6157] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 520.204821][ T6157] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.207386][ T6157] usb 7-1: Product: syz [ 520.208671][ T6157] usb 7-1: Manufacturer: syz [ 520.210019][ T6157] usb 7-1: SerialNumber: syz [ 520.213069][ T6157] usb 7-1: config 0 descriptor?? [ 520.217118][ T6157] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 520.219936][ T6157] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 520.704359][T14629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 520.708927][T14629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 520.713018][T14629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 520.718713][T14629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 520.724162][T14629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.827294][ T6157] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 520.830722][ T9142] bond0: (slave syz_tun): Releasing backup interface [ 521.028366][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.028430][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.037571][T18215] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 521.037625][T18215] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 521.126327][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.126404][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.245884][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.254877][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.266387][ T6157] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 521.266794][ T6157] em28xx 7-1:0.0: board has no eeprom [ 521.385632][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.388935][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.437721][T18196] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.440146][T18196] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.442334][T18196] bridge_slave_0: entered allmulticast mode [ 521.443093][T18196] bridge_slave_0: entered promiscuous mode [ 521.444561][T18196] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.444690][T18196] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.444754][T18196] bridge_slave_1: entered allmulticast mode [ 521.445480][T18196] bridge_slave_1: entered promiscuous mode [ 521.475623][T18196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.477231][T18196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.499436][T18196] team0: Port device team_slave_0 added [ 521.501066][T18196] team0: Port device team_slave_1 added [ 521.535254][T18196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.536947][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.537000][T18196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.537993][T18196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.538002][T18196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.538016][T18196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.583628][T18196] hsr_slave_0: entered promiscuous mode [ 521.584345][T18196] hsr_slave_1: entered promiscuous mode [ 521.584836][T18196] debugfs: 'hsr0' already exists in 'hsr' [ 521.584853][T18196] Cannot create hsr debugfs directory [ 521.838049][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 521.842361][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 521.847883][ T13] bond0 (unregistering): Released all slaves [ 521.861183][ T13] bond1 (unregistering): Released all slaves [ 521.878604][T18260] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 521.928983][ T13] tipc: Disabling bearer [ 521.952133][ T13] tipc: Left network mode [ 522.231869][ T5449] 8021q: adding VLAN 0 to HW filter on device eth6 [ 522.385056][T18146] em28xx 7-1:0.0: reading from i2c device at 0xfff8 failed (error=-5) [ 522.443664][ T6157] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 522.443859][ T6157] em28xx 7-1:0.0: dvb set to bulk mode. [ 522.451596][ T6157] usb 7-1: USB disconnect, device number 47 [ 522.454568][ T6157] em28xx 7-1:0.0: Disconnecting em28xx [ 522.456891][ T6158] em28xx 7-1:0.0: Binding DVB extension [ 522.458427][ T13] hsr_slave_0: left promiscuous mode [ 522.473591][ T13] hsr_slave_1: left promiscuous mode [ 522.474586][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.474665][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.490970][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.491043][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 522.506825][ T13] veth1_macvtap: left promiscuous mode [ 522.508902][ T13] veth0_macvtap: left promiscuous mode [ 522.509022][ T13] veth1_vlan: left promiscuous mode [ 522.510501][ T13] veth0_vlan: left promiscuous mode [ 522.535965][ T6158] em28xx 7-1:0.0: Registering input extension [ 522.539153][ T6157] em28xx 7-1:0.0: Closing input extension [ 522.593924][ T6157] em28xx: Freeing device [ 522.804737][T18307] tmpfs: Unknown parameter 'grpquota_block_hardl' [ 522.822732][ T66] Bluetooth: hci2: command tx timeout [ 522.883305][ T13] team0 (unregistering): Port device team_slave_1 removed [ 522.888861][ T13] team0 (unregistering): Port device team_slave_0 removed [ 523.148733][T18317] No control pipe specified [ 523.223130][T18320] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 523.310886][T18196] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 523.340078][T18196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.340825][T18196] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 523.370016][T18196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.374175][T18196] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 523.405039][T18196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.412158][T18196] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 523.416976][T18196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.423053][ T13] IPVS: stop unused estimator thread 0... [ 523.475659][T18348] __nla_validate_parse: 19 callbacks suppressed [ 523.475844][T18348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3256'. [ 523.537665][T18196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.563605][T18196] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.569509][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.569653][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.580196][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.580405][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.580669][T18357] No control pipe specified [ 523.625923][T18359] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 524.303617][T18196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.329696][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3268'. [ 524.575908][T18196] veth0_vlan: entered promiscuous mode [ 524.583518][T18196] veth1_vlan: entered promiscuous mode [ 524.608756][T18196] veth0_macvtap: entered promiscuous mode [ 524.611447][T18196] veth1_macvtap: entered promiscuous mode [ 524.620975][T18196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.625062][T18196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.682797][ T5816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.684078][ T5816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.684446][ T5816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.684729][ T5816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.783558][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.783665][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.799564][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.801287][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.912370][ T66] Bluetooth: hci2: command tx timeout [ 525.126883][T18428] 9pnet: p9_errstr2errno: server reported unknown error ô‡] [ 525.206591][T18435] syzkaller0: entered promiscuous mode [ 525.209040][T18435] syzkaller0: entered allmulticast mode [ 525.402373][ T58] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 525.552089][ T58] usb 9-1: Using ep0 maxpacket: 32 [ 525.557218][ T58] usb 9-1: unable to get BOS descriptor or descriptor too short [ 525.557302][ T58] usb 9-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 525.557987][ T58] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 525.558004][ T58] usb 9-1: can't read configurations, error -71 [ 525.573387][T18441] Invalid ELF header magic: != ELF [ 526.326945][T18444] tmpfs: Unknown parameter 'grpquota_block_hardl' [ 526.984099][ T66] Bluetooth: hci2: command tx timeout [ 527.773388][T18472] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 527.773454][T18472] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 527.834466][T18480] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3300'. [ 528.791127][T18518] validate_nla: 18 callbacks suppressed [ 528.793159][T18518] netlink: 'syz.0.3314': attribute type 12 has an invalid length. [ 528.796002][T18518] netlink: 'syz.0.3314': attribute type 29 has an invalid length. [ 528.798796][T18518] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3314'. [ 528.803609][T18518] netlink: 'syz.0.3314': attribute type 1 has an invalid length. [ 528.806635][T18518] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3314'. [ 528.810501][T18518] netlink: 'syz.0.3314': attribute type 12 has an invalid length. [ 528.813499][T18518] netlink: 'syz.0.3314': attribute type 29 has an invalid length. [ 528.816199][T18518] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3314'. [ 528.819339][T18518] netlink: 'syz.0.3314': attribute type 1 has an invalid length. [ 528.822496][T18518] netlink: 47 bytes leftover after parsing attributes in process `syz.0.3314'. [ 529.046302][T18537] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 529.072122][ T66] Bluetooth: hci2: command tx timeout [ 529.201252][T18544] netlink: 'syz.2.3324': attribute type 12 has an invalid length. [ 529.201318][T18544] netlink: 'syz.2.3324': attribute type 29 has an invalid length. [ 529.201380][T18544] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3324'. [ 529.201400][T18544] netlink: 'syz.2.3324': attribute type 1 has an invalid length. [ 529.201412][T18544] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3324'. [ 529.207142][T18544] netlink: 'syz.2.3324': attribute type 12 has an invalid length. [ 529.207160][T18544] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3324'. [ 529.207170][T18544] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3324'. [ 529.277406][T18546] Invalid ELF header type: 3 != 1 [ 530.048351][T18568] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 530.139231][T18572] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3333'. [ 530.143217][T18572] netlink: 47 bytes leftover after parsing attributes in process `syz.1.3333'. [ 531.322024][T14210] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 531.397608][T18611] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode [ 531.397695][T18611] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode [ 531.398196][T18611] batadv0: entered promiscuous mode [ 531.398869][T18611] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 531.472035][T14210] usb 6-1: Using ep0 maxpacket: 32 [ 531.474894][T14210] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 531.478859][T14210] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.483808][T14210] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.483865][T14210] usb 6-1: Product: syz [ 531.483889][T14210] usb 6-1: Manufacturer: syz [ 531.483914][T14210] usb 6-1: SerialNumber: syz [ 531.493217][T14210] usb 6-1: config 0 descriptor?? [ 531.499006][T14210] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 531.704227][T14210] usb 6-1: qt2_attach - failed to power on unit: -71 [ 531.704315][T14210] quatech2 6-1:0.0: probe with driver quatech2 failed with error -71 [ 531.710296][T14210] usb 6-1: USB disconnect, device number 57 [ 532.005304][T18619] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 533.337330][T18688] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 533.912325][ T5706] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 534.062077][ T5706] usb 7-1: Using ep0 maxpacket: 16 [ 534.062680][ T5706] usb 7-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 534.063689][ T5706] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 38762, setting to 1024 [ 534.063708][ T5706] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 534.065532][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.065545][ T5706] usb 7-1: Product: syz [ 534.065553][ T5706] usb 7-1: Manufacturer: syz [ 534.065560][ T5706] usb 7-1: SerialNumber: syz [ 534.067041][ T5706] usb 7-1: config 0 descriptor?? [ 534.069283][T18702] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 534.104174][ T5706] mcba_usb 7-1:0.0: Microchip CAN BUS Analyzer connected [ 534.183144][T13802] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 534.274021][ C2] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 534.274067][ C2] mcba_usb 7-1:0.0 can0: Tx URB aborted (-71) [ 534.274324][ T5706] usb 7-1: USB disconnect, device number 48 [ 534.275247][ T5706] mcba_usb 7-1:0.0 can0: device disconnected [ 534.352040][T13802] usb 9-1: Using ep0 maxpacket: 8 [ 534.353361][T13802] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 534.355113][T13802] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 534.355130][T13802] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 534.355148][T13802] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.360443][T13802] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected [ 534.366699][T13802] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 534.629690][T14210] usb 9-1: USB disconnect, device number 37 [ 534.636674][T14210] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 534.642566][T14210] kobil_sct 9-1:1.0: device disconnected [ 534.749793][T18735] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 534.754007][T18735] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 535.815942][T18817] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 535.819614][T18817] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 535.822992][T18817] udc dummy_udc.0: failed to start g1: -22 [ 535.830005][T18817] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 535.830550][T18817] UDC core: g1: couldn't find an available UDC or it's busy [ 535.932036][T15857] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 536.092253][T15857] usb 6-1: Using ep0 maxpacket: 8 [ 536.096336][T15857] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 536.101745][T15857] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 536.105907][T15857] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 536.109377][T15857] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.117464][T15857] kobil_sct 6-1:1.0: KOBIL USB smart card terminal converter detected [ 536.126108][T15857] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 536.418526][T15857] usb 6-1: USB disconnect, device number 58 [ 536.426047][T15857] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 536.427610][T15857] kobil_sct 6-1:1.0: device disconnected [ 536.615502][T18852] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 536.875354][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875399][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875414][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875426][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875438][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875450][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875462][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875474][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875486][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.875498][T14210] hid-generic 0005:10CF:0005.0031: unknown main item tag 0x0 [ 536.889595][T14210] hid-generic 0005:10CF:0005.0031: hidraw1: BLUETOOTH HID v0.05 Device [syz0] on aa:aa:aa:aa:aa:aa [ 537.549475][T18901] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 537.937724][T18930] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 537.999774][T18934] __nla_validate_parse: 10 callbacks suppressed [ 537.999861][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 537.999917][T18934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 538.299063][T18945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3457'. [ 538.725349][T18966] dummy_hcd dummy_hcd.0: remove, state 4 [ 538.730887][T18966] usb usb5: USB disconnect, device number 1 [ 538.764620][T18966] dummy_hcd dummy_hcd.0: stopped [ 538.766330][T18966] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 538.830462][T18976] UDC core: g1: couldn't find an available UDC or it's busy [ 539.154749][T18992] input: syz0 as /devices/virtual/input/input29 [ 539.485496][T19005] UDC core: g1: couldn't find an available UDC or it's busy [ 539.574388][T19002] nvme_fabrics: missing parameter 'transport=%s' [ 539.574439][T19002] nvme_fabrics: missing parameter 'nqn=%s' [ 540.102375][ T5706] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 540.253055][ T5706] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 540.254215][ T5706] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 540.254243][ T5706] usb 9-1: config 0 interface 0 altsetting 15 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 540.254419][ T5706] usb 9-1: config 0 interface 0 has no altsetting 0 [ 540.254448][ T5706] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.258329][ T5706] usb 9-1: config 0 descriptor?? [ 540.259084][T19018] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 540.259249][T19018] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 540.673688][ T5706] hid-thrustmaster 0003:044F:B65D.0032: hidraw1: USB HID v0.0c Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0 [ 540.679311][ T5706] hid-thrustmaster 0003:044F:B65D.0032: setup data couldn't be sent [ 540.867067][ C2] hid-thrustmaster 0003:044F:B65D.0032: URB to get model id failed with error -71 [ 540.870579][ T5706] usb 9-1: USB disconnect, device number 38 [ 540.909943][T19046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 541.080761][T18936] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 541.085664][T18936] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 541.089525][T18936] CPU: 3 UID: 0 PID: 18936 Comm: syz.0.3453 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.093365][T18936] Tainted: [L]=SOFTLOCKUP [ 541.095137][T18936] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 541.099476][T18936] RIP: 0010:dummy_udc_stop+0x8f/0x180 [ 541.102076][T18936] Code: c1 ea 03 80 3c 02 00 0f 85 f9 00 00 00 48 8b 9b 90 06 00 00 e8 32 6c 30 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c5 00 00 00 48 8b 1b 48 89 df e8 ac 01 f3 03 48 [ 541.110477][T18936] RSP: 0000:ffffc90002f2f8c8 EFLAGS: 00010246 [ 541.113181][T18936] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 541.116413][T18936] RDX: 0000000000000000 RSI: ffffffff87dab41e RDI: ffff888025219290 [ 541.120190][T18936] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 541.124433][T18936] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806e4fe050 [ 541.127968][T18936] R13: ffff88802531f540 R14: ffff888025218c00 R15: ffffffff8cd9e680 [ 541.131148][T18936] FS: 0000000000000000(0000) GS:ffff888096c76000(0000) knlGS:0000000000000000 [ 541.134131][T18936] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 541.136208][T18936] CR2: 000000000c3f021d CR3: 000000006dfb9000 CR4: 0000000000352ef0 [ 541.138675][T18936] Call Trace: [ 541.139737][T18936] [ 541.140698][T18936] gadget_unbind_driver+0x2ca/0x4f0 [ 541.142337][T18936] ? __pfx_dummy_udc_async_callbacks+0x10/0x10 [ 541.144290][T18936] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 541.146071][T18936] device_remove+0xcb/0x180 [ 541.147506][T18936] device_release_driver_internal+0x44e/0x620 [ 541.149405][T18936] driver_detach+0xd8/0x1b0 [ 541.150844][T18936] bus_remove_driver+0x13b/0x2e0 [ 541.152427][T18936] driver_unregister+0x76/0xb0 [ 541.153939][T18936] usb_gadget_unregister_driver+0x49/0x70 [ 541.155694][T18936] raw_release+0x19b/0x260 [ 541.157122][T18936] ? __pfx_raw_release+0x10/0x10 [ 541.158690][T18936] __fput+0x3ff/0xb50 [ 541.159962][T18936] task_work_run+0x150/0x240 [ 541.161412][T18936] ? __pfx_task_work_run+0x10/0x10 [ 541.163025][T18936] ? do_raw_spin_unlock+0x145/0x1e0 [ 541.164664][T18936] do_exit+0x951/0x2ae0 [ 541.165970][T18936] ? schedule+0xe7/0x2c0 [ 541.167304][T18936] ? __pfx_do_exit+0x10/0x10 [ 541.168763][T18936] ? do_raw_spin_lock+0x128/0x260 [ 541.170338][T18936] ? find_held_lock+0x2b/0x80 [ 541.171821][T18936] ? get_signal+0x7e0/0x21e0 [ 541.173269][T18936] do_group_exit+0xd5/0x2a0 [ 541.174690][T18936] get_signal+0x1ec7/0x21e0 [ 541.176118][T18936] ? rcu_is_watching+0x13/0xc0 [ 541.177615][T18936] ? __pfx_get_signal+0x10/0x10 [ 541.179139][T18936] ? rcu_is_watching+0x13/0xc0 [ 541.180656][T18936] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 541.182505][T18936] arch_do_signal_or_restart+0x91/0x7a0 [ 541.184240][T18936] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 541.186168][T18936] ? __pfx_raw_ioctl+0x10/0x10 [ 541.187675][T18936] exit_to_user_mode_loop+0x139/0x700 [ 541.189359][T18936] ? rcu_is_watching+0x13/0xc0 [ 541.190855][T18936] __do_fast_syscall_32+0x59f/0x8b0 [ 541.192494][T18936] do_fast_syscall_32+0x32/0x70 [ 541.193968][T18936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.195965][T18936] RIP: 0023:0xf708efec [ 541.197259][T18936] Code: Unable to access opcode bytes at 0xf708efc2. [ 541.199421][T18936] RSP: 002b:00000000f547b424 EFLAGS: 00000292 ORIG_RAX: 0000000000000036 [ 541.202286][T18936] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 0000000080085502 [ 541.205440][T18936] RDX: 00000000f547c4c0 RSI: 00000000f7457ff4 RDI: 00000000f547c4c0 [ 541.207950][T18936] RBP: 00000000f7457ff4 R08: 0000000000000000 R09: 0000000000000000 [ 541.210550][T18936] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 541.213105][T18936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.215592][T18936] [ 541.216601][T18936] Modules linked in: [ 541.218738][T18936] ---[ end trace 0000000000000000 ]--- [ 541.221829][T18936] RIP: 0010:dummy_udc_stop+0x8f/0x180 [ 541.223931][T18936] Code: c1 ea 03 80 3c 02 00 0f 85 f9 00 00 00 48 8b 9b 90 06 00 00 e8 32 6c 30 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 c5 00 00 00 48 8b 1b 48 89 df e8 ac 01 f3 03 48 [ 541.230470][T18936] RSP: 0000:ffffc90002f2f8c8 EFLAGS: 00010246 [ 541.233628][T18936] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 541.233643][T18936] RDX: 0000000000000000 RSI: ffffffff87dab41e RDI: ffff888025219290 [ 541.233651][T18936] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000005 [ 541.233659][T18936] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88806e4fe050 [ 541.233667][T18936] R13: ffff88802531f540 R14: ffff888025218c00 R15: ffffffff8cd9e680 [ 541.233681][T18936] FS: 0000000000000000(0000) GS:ffff888096c76000(0000) knlGS:0000000000000000 [ 541.233714][T18936] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 541.233726][T18936] CR2: 000000000c3f021d CR3: 0000000029357000 CR4: 0000000000352ef0 SYZFAIL: failed to recv rpc [ 541.233736][T18936] Kernel panic - not syncing: Fatal exception [ 541.257547][T18936] Kernel Offset: disabled [ 541.259067][T18936] Rebooting in 86400 seconds..