last executing test programs: 13m42.100396117s ago: executing program 0 (id=200): syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5437, 0x0) 13m41.895940152s ago: executing program 0 (id=203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) 13m41.44509483s ago: executing program 0 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 13m40.940904042s ago: executing program 0 (id=207): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) 13m40.676883507s ago: executing program 0 (id=209): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000f0ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100"], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 13m40.592141726s ago: executing program 0 (id=210): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003803000000000000000000000000000000000300000000010000000200000001000080006100"/68], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x6020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 13m25.369514051s ago: executing program 32 (id=210): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003803000000000000000000000000000000000300000000010000000200000001000080006100"/68], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r4}, 0x18) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x40000000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x6020, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 14.431694923s ago: executing program 2 (id=3147): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x11, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) 12.182825636s ago: executing program 2 (id=3151): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB='@7\r'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000f00)=ANY=[@ANYBLOB="221528000000a559250ed56efa851bdf97de6eda609d780549b6a3c7d99884f1"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x0, 0x18, 0x5, "4cd1953d64"}, 0x0, 0x0}) 11.37603663s ago: executing program 3 (id=3155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"]) 11.106481311s ago: executing program 3 (id=3158): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}], 0x1, 0x0) 10.616447335s ago: executing program 3 (id=3162): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x1d, 0x1, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0, @ANYRESHEX=r1], &(0x7f0000000000)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="ad4300000000009c260821"], 0x14}}, 0x0) 9.329877504s ago: executing program 2 (id=3166): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000001300)="92", 0x2) read$char_usb(r1, 0x0, 0x0) 9.257977489s ago: executing program 5 (id=3167): unshare(0x2c020400) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x7440}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 8.944024616s ago: executing program 5 (id=3169): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) close(r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TCFLSH(r7, 0x400455c8, 0x8000000001) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r8, &(0x7f0000000040)="0300ffff0000", 0x6}]) 7.231905871s ago: executing program 2 (id=3177): r0 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r3, &(0x7f00000000c0)='./mnt\x00', r3, &(0x7f0000000100)='./mnt\x00', 0x271) r4 = syz_io_uring_setup(0x23d, &(0x7f0000000740)={0x0, 0xc600, 0x10100, 0x3, 0x11b, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f00000000c0)) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, 0x0, 0x5) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x4, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000c0}, 0x1) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4) sendmsg$tipc(r7, &(0x7f0000000140)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000050}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x4011, 0x0) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/52, 0x34}], 0x1) 7.00979933s ago: executing program 3 (id=3179): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) fanotify_init(0x200, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 6.825161868s ago: executing program 1 (id=3180): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, 0x0, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 5.977550177s ago: executing program 3 (id=3181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r5, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) 5.710576517s ago: executing program 1 (id=3182): socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x11, 0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) 5.708532916s ago: executing program 2 (id=3183): syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) ioctl$I2C_SMBUS(r2, 0x720, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000000c0)=@known='com.apple.system.Security\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, 0x0) 4.876454051s ago: executing program 3 (id=3184): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r2 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 4.632555896s ago: executing program 4 (id=3185): syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000780)="9f1cae6c1f481ed8497d0dee7899b842ef04eb9a2f1648c74e58e86187c5df687285256b402c9773c11b1890f25da73a9d2d99e147cc22fc3cd0b419613f0f0c760c302e047e631f499cdeeef2781d8337a4ef930bea84cdf94d0f0197ab62a912337d75bed7e2a533c2a4fc0cee49222f34f8d57aa84c5ae3d601d060145a9e4cd4fdda49da344fddf7b169e1e931a724096961879b16c44b211cf521eed1dd5fbe0855353a2b4d2781dff7967d9c06df78c12d4a09f93b731dc8a098926d2fb7ece46eb54de5d9fb901818a0199ef95cf2", 0xd2, 0xfffffffe, &(0x7f0000000380)) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000580), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800"], 0x7c}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000100)='afs_folio_dirty\x00'}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24720000020605000000000000400000000000000900020073797a3200000000040006"], 0x24}, 0x1, 0x0, 0x0, 0x20040004}, 0x80) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffb000/0x2000)=nil) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 4.078385411s ago: executing program 5 (id=3186): r0 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008005}, 0x2) 3.726455983s ago: executing program 5 (id=3187): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0xb9d, 0x0, 0x10000000001, 0x13, 0x0, 0x0, 0x0, 0x2, 0x4], 0x100000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.54669463s ago: executing program 4 (id=3188): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="8e21c044e068d58c7e0959bb", 0xc}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)}}, {{&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="8d11c02ffb99f3512da6d6f59f144c8570f53a5cc18d7c647e96ff4058cf11943af5836e451455d26ec28f5b00"/63, 0x3f}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}, {{&(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000ec0)=[@ip_ttl={{0x14}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xd3, 0x3, 0x3, [{@loopback, 0xe}, {@loopback, 0x10}, {@multicast2, 0x7f}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9b51}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010100}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x108}}], 0x6, 0x4048841) 3.276548264s ago: executing program 4 (id=3189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000e980)='kfree\x00', r0}, 0x18) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x200, 0x8c03) close_range(r1, 0xffffffffffffffff, 0x0) 3.102962515s ago: executing program 5 (id=3190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x10000, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x8, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x40, 0x0, 0x3, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0xfffffffffffffffc, 0xd, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x1, 0x7}}, 0xe4) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000200), &(0x7f0000000280)=0xc) chdir(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x5c, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 2.967955984s ago: executing program 4 (id=3191): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_ENDIAN(0x24, 0x0) sched_setaffinity(0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, 0x0) clock_adjtime(0x7, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000009}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.589922602s ago: executing program 1 (id=3192): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r4, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x3}]}}}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2.44828594s ago: executing program 2 (id=3193): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xc, 0x0, 0xb49, 0x2, 0xc, 0x53, 0x80000003}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x44b, 0x0, 0xfffffffd, {0x7a, 0x0, 0x0, 0x0, 0x500, 0x44}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x40}}, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x24040084) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000180)={0x0, 0x328000, 0x1000, 0x6, 0x2}, 0x20) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x18}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) 1.664838309s ago: executing program 1 (id=3194): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fanotify_init(0x200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x38fff, 0x0) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[], 0xfffffe3e) 1.574256766s ago: executing program 5 (id=3195): mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) r0 = syz_open_procfs(0x0, 0x0) pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 658.299368ms ago: executing program 1 (id=3196): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2, 0x5}}, './file0\x00'}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000480)={r2, 0x9}, 0xc) 341.85308ms ago: executing program 1 (id=3198): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x18c) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xd, {"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", 0x1000}}, 0x1056) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000b22000/0x2000)=nil, 0x2000, 0x19) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) 341.17972ms ago: executing program 4 (id=3199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000480)="8e21c044e068d58c7e0959bb", 0xc}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)}}, {{&(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000400)="8d11c02ffb99f3512da6d6f59f144c8570f53a5cc18d7c647e96ff4058cf11943af5836e451455d26ec28f5b00"/63, 0x3f}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @broadcast}}}], 0x20}}, {{&(0x7f0000000380)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000780), 0x0, &(0x7f0000000ec0)=[@ip_ttl={{0x14}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xd3, 0x3, 0x3, [{@loopback, 0xe}, {@loopback, 0x10}, {@multicast2, 0x7f}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010100, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9b51}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010100}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0x108}}], 0x6, 0x4048841) 0s ago: executing program 4 (id=3200): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x20, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_XOR={0x4}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x9, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0xb9d, 0x0, 0x10000000001, 0x13, 0x0, 0x0, 0x0, 0x2, 0x4], 0x100000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 1983': attribute type 27 has an invalid length. [ 604.925859][T12453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 605.411987][T12471] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 606.328228][ T5830] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 606.912073][T12491] JFS: discard option not supported on device [ 606.921618][T12491] Mount JFS Failure: -22 [ 606.926178][T12491] jfs_mount failed w/return code = -22 [ 609.925362][T12521] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 612.179587][T12542] block device autoloading is deprecated and will be removed. [ 612.190821][T12542] syz.2.2005: attempt to access beyond end of device [ 612.190821][T12542] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 612.573332][ T5914] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 612.763476][ T5914] usb 5-1: config index 0 descriptor too short (expected 46, got 36) [ 612.772265][ T5914] usb 5-1: config 0 interface 0 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.933204][ T5914] usb 5-1: config 0 interface 0 has no altsetting 0 [ 612.940002][ T5914] usb 5-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 613.013403][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.229261][ T5914] usb 5-1: config 0 descriptor?? [ 613.245315][ T5914] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 613.430650][T12569] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 614.362152][T12581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2023'. [ 614.415996][ T5831] usb 5-1: USB disconnect, device number 5 [ 614.805832][T12581] can0: slcan on ttyS3. [ 614.963616][T12581] can0 (unregistered): slcan off ttyS3. [ 619.282181][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 623.513756][ T5831] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 623.903029][ T5831] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 624.091378][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.101081][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.119229][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 624.139847][ T5831] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 624.205352][ T5831] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 624.276562][ T5831] usb 4-1: config 0 interface 0 has no altsetting 0 [ 624.367202][ T5831] usb 4-1: unable to read config index 2 descriptor/start: -71 [ 624.441286][ T5831] usb 4-1: can't read configurations, error -71 [ 624.709170][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.845485][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2058'. [ 627.667984][T12709] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 628.066806][T12722] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2066'. [ 628.228076][T12725] wg1: entered promiscuous mode [ 628.250632][T12725] wg1: entered allmulticast mode [ 628.412396][ T5886] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 628.570595][ T5886] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 628.586032][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.639850][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 628.674091][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 628.926882][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 628.952354][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.011644][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 629.049463][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.115804][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.341987][T12740] 9pnet: Could not find request transport: fd0x0000000000000003 [ 629.363923][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 629.462520][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.483628][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 629.540247][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 629.607258][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 629.902058][T11919] Bluetooth: hci5: command 0x0406 tx timeout [ 630.181796][T12750] vxcan1 speed is unknown, defaulting to 1000 [ 630.400856][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.495723][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 630.537707][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 630.608163][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.641922][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 630.690379][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 630.882138][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 630.972069][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 631.002965][ T5886] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 631.033302][ T5886] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 631.100361][T12764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2077'. [ 631.110058][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 631.155996][ T5886] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 631.173236][ T5886] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 631.202388][ T5886] usb 3-1: Product: syz [ 631.213705][ T5886] usb 3-1: Manufacturer: syz [ 631.269135][T12764] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 631.288411][ T5886] usb 3-1: SerialNumber: syz [ 631.357488][ T5886] usb 3-1: config 0 descriptor?? [ 631.382274][T12764] bridge2: entered promiscuous mode [ 631.387645][T12764] bridge2: entered allmulticast mode [ 631.439040][ T5886] usb 3-1: can't set config #0, error -71 [ 631.474245][T12767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2079'. [ 631.504121][ T5886] usb 3-1: USB disconnect, device number 15 [ 631.797416][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'. [ 631.847413][T12769] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 631.855581][T12769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.396768][T12786] JFS: discard option not supported on device [ 632.404851][T12786] Mount JFS Failure: -22 [ 632.409242][T12786] jfs_mount failed w/return code = -22 [ 632.990207][T12781] 9pnet: Could not find request transport: fd0x0000000000000003 [ 633.753881][ T5830] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 634.443256][T12819] 9pnet_fd: Insufficient options for proto=fd [ 635.271913][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 635.485965][ T9] usb 4-1: config index 0 descriptor too short (expected 46, got 36) [ 635.511860][ T9] usb 4-1: config 0 interface 0 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.527155][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 635.568965][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 635.601007][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.752262][ T9] usb 4-1: config 0 descriptor?? [ 635.772530][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 636.022961][ T9] usb 4-1: USB disconnect, device number 13 [ 636.722144][T12839] vxcan1 speed is unknown, defaulting to 1000 [ 637.221717][ T2153] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 637.381602][ T2153] usb 4-1: device descriptor read/64, error -71 [ 637.652960][ T2153] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 637.811588][ T2153] usb 4-1: device descriptor read/64, error -71 [ 637.932473][ T2153] usb usb4-port1: attempt power cycle [ 638.145687][T12861] 9pnet_fd: Insufficient options for proto=fd [ 638.301850][ T2153] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 638.361044][ T2153] usb 4-1: device descriptor read/8, error -71 [ 638.641665][ T2153] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 638.681781][ T2153] usb 4-1: device descriptor read/8, error -71 [ 638.795938][ T2153] usb usb4-port1: unable to enumerate USB device [ 639.178417][ T5830] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 639.511801][T12885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2117'. [ 639.534198][T12887] 9pnet_fd: Insufficient options for proto=fd [ 640.608421][T12897] tmpfs: Cannot change global quota limit on remount [ 641.381832][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 642.411759][T12935] 9pnet_fd: Insufficient options for proto=fd [ 643.146955][T12952] tmpfs: Cannot change global quota limit on remount [ 643.233259][T12953] JFS: discard option not supported on device [ 643.241771][T12953] Mount JFS Failure: -22 [ 643.246180][T12953] jfs_mount failed w/return code = -22 [ 644.143958][ T5830] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 644.218788][T12960] tipc: Enabled bearer , priority 10 [ 644.308156][T12960] tipc: Enabling of bearer rejected, failed to enable media [ 644.372105][T12970] 9pnet_fd: Insufficient options for proto=fd [ 645.019996][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2144'. [ 646.832012][T13006] tmpfs: Cannot change global quota limit on remount [ 646.842377][T13005] 9pnet_fd: Insufficient options for proto=fd [ 647.028060][T13011] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 647.269812][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2159'. [ 648.781282][T13044] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2168'. [ 649.074211][T13044] batadv3: entered allmulticast mode [ 652.038657][T13089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2183'. [ 652.151871][T13089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2183'. [ 652.747697][T13099] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 654.266696][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 656.445742][T13152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2200'. [ 656.558727][T13152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 656.676445][T13156] @: renamed from vlan0 (while UP) [ 658.101391][T13177] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 658.397862][T13177] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.405988][T13177] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.082996][T13177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.823261][T13177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.244352][T13177] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.268923][T13177] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.301938][T13177] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.443667][T13177] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.116838][T13241] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 664.746900][T13247] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2225'. [ 664.756466][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2225'. [ 665.180102][ T5969] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 665.350153][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 665.454960][ T5969] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 665.514396][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 665.557669][ T5969] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.652213][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 665.670008][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 665.686547][ T5969] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 665.710034][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 665.760409][ T5969] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.783081][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 665.837268][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 665.911126][ T5969] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 665.919164][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 665.944999][ T5969] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 665.991838][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 666.045572][ T5969] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 666.063169][ T5969] usb 5-1: string descriptor 0 read error: -22 [ 666.070093][ T5969] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 666.079249][ T5969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.137855][ T5969] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 666.479233][ T5969] usb 5-1: USB disconnect, device number 6 [ 668.248270][T13277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 668.796681][T13298] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 670.910694][T13321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2247'. [ 670.965160][T13321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2247'. [ 671.253703][T13326] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 671.859665][ T5914] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 672.075233][ T5914] usb 2-1: config index 0 descriptor too short (expected 46, got 36) [ 672.116446][ T5914] usb 2-1: config 0 interface 0 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 672.199888][ T5914] usb 2-1: config 0 interface 0 has no altsetting 0 [ 672.234100][ T5914] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 672.288101][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.360534][ T5914] usb 2-1: config 0 descriptor?? [ 672.397211][ T5914] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 672.600512][ T5914] usb 2-1: USB disconnect, device number 14 [ 673.268789][T13343] hub 9-0:1.0: USB hub found [ 673.302891][T13343] hub 9-0:1.0: 1 port detected [ 676.291490][T13372] input: syz1 as /devices/virtual/input/input15 [ 677.095003][T13386] vlan2: entered promiscuous mode [ 677.115736][T13386] vlan2: entered allmulticast mode [ 677.155248][T13386] hsr_slave_1: entered allmulticast mode [ 677.849305][ T5886] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 678.269281][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 678.286377][ T5886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.316020][ T5886] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 678.359249][ T5886] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 678.391268][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.411624][ T5886] usb 2-1: config 0 descriptor?? [ 678.429808][ T5886] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 678.635733][ T5886] usb 2-1: USB disconnect, device number 15 [ 679.781867][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 679.819533][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 679.846580][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 679.970868][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 679.996628][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.004799][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.013122][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.021351][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.033095][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.041628][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.050312][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.058310][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.068726][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.076943][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.085176][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.093457][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.102274][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.119379][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 680.369424][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.018875][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.027491][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.035639][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.043903][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.052732][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.060664][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.068801][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.080374][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.089599][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.097413][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.105317][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.113288][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.121674][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.139143][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.147486][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.169041][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.177265][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.199747][T13435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2284'. [ 681.210033][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.217936][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.255175][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.280001][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.315739][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.360729][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.404763][ T24] hid-generic 0000:007F:FFFFFFFE.000F: unknown main item tag 0x0 [ 681.472284][ T24] hid-generic 0000:007F:FFFFFFFE.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 681.979132][T11919] Bluetooth: hci0: command 0x1003 tx timeout [ 681.985661][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 685.631621][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2299'. [ 686.158860][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.209566][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2300'. [ 688.238822][T11919] Bluetooth: hci0: command 0x1003 tx timeout [ 688.278674][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 693.323372][ T7765] Bluetooth: Error in BCSP hdr checksum [ 693.442159][T13557] syz.5.2326: attempt to access beyond end of device [ 693.442159][T13557] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 693.455459][T13557] hpfs: hpfs_map_sector(): read error [ 693.496707][T13557] binder: 13556:13557 ioctl 400c620e 200000000000 returned -22 [ 693.519759][T13557] netlink: 'syz.5.2326': attribute type 10 has an invalid length. [ 693.584657][T13558] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 694.473000][T13561] netlink: 'syz.5.2326': attribute type 10 has an invalid length. [ 694.534872][T13561] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2326'. [ 694.547122][T11919] Bluetooth: hci0: command 0x1003 tx timeout [ 694.553569][ T5830] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 698.497386][T13608] wg1: entered promiscuous mode [ 698.571043][T13608] wg1: entered allmulticast mode [ 699.085055][T13619] ieee802154 phy0 wpan0: encryption failed: -22 [ 699.134820][T13617] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 699.298194][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 699.648108][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 699.696898][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 699.794231][ T10] usb 5-1: config 0 has no interface number 0 [ 699.884161][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 699.971125][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 700.158065][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.195630][ T10] usb 5-1: config 0 descriptor?? [ 700.264878][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 700.454077][T13631] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 700.559697][ T24] usb 5-1: USB disconnect, device number 7 [ 702.462702][T13654] overlayfs: missing 'lowerdir' [ 702.617929][T11919] Bluetooth: hci5: command 0x0406 tx timeout [ 705.559930][T13691] overlayfs: missing 'lowerdir' [ 706.419130][ T5969] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 706.567727][ T5969] usb 3-1: device descriptor read/64, error -71 [ 706.807743][ T5969] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 706.957589][ T5969] usb 3-1: device descriptor read/64, error -71 [ 707.088440][ T5969] usb usb3-port1: attempt power cycle [ 707.338660][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 707.457628][ T5969] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 708.343922][ T5969] usb 3-1: device descriptor read/8, error -71 [ 708.594545][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 708.598643][ T5969] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 708.609616][T13734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2383'. [ 708.629829][T13736] overlayfs: missing 'lowerdir' [ 708.695706][ T5969] usb 3-1: device descriptor read/8, error -71 [ 708.817968][ T5969] usb usb3-port1: unable to enumerate USB device [ 709.259144][T13751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2388'. [ 709.445733][ T30] audit: type=1326 audit(2000000053.172:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 709.494847][ T30] audit: type=1326 audit(2000000053.202:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 709.552447][T13751] capability: warning: `syz.1.2388' uses deprecated v2 capabilities in a way that may be insecure [ 709.620291][ T30] audit: type=1326 audit(2000000053.202:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 709.911674][ T30] audit: type=1326 audit(2000000053.212:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 710.337255][ T30] audit: type=1326 audit(2000000053.212:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 710.379177][ T30] audit: type=1326 audit(2000000053.282:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 710.482712][ T30] audit: type=1326 audit(2000000053.302:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 710.487711][ T5830] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 710.675882][ T30] audit: type=1326 audit(2000000053.312:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13747 comm="syz.1.2388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb85778e929 code=0x7ffc0000 [ 710.698265][ C0] vkms_vblank_simulate: vblank timer overrun [ 711.048829][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 711.337493][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 711.367608][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 711.400917][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 711.436751][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 711.467353][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.514607][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 711.539562][T13779] overlayfs: missing 'lowerdir' [ 711.544644][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.776200][ T10] usb 2-1: usb_control_msg returned -71 [ 711.787401][ T10] usbtmc 2-1:16.0: can't read capabilities [ 711.830100][ T10] usb 2-1: USB disconnect, device number 16 [ 711.945852][T13785] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 712.481401][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 713.934121][T13817] overlayfs: missing 'lowerdir' [ 714.638343][ T5830] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 714.697850][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 715.041412][ T24] usb 6-1: device descriptor read/64, error -71 [ 715.166356][T13855] overlayfs: missing 'lowerdir' [ 715.490484][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 715.643858][ T24] usb 6-1: device descriptor read/64, error -71 [ 715.658701][T13859] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 715.822735][ T24] usb usb6-port1: attempt power cycle [ 716.297068][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 716.327863][ T24] usb 6-1: device descriptor read/8, error -71 [ 716.687091][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 716.757537][ T24] usb 6-1: device descriptor read/8, error -71 [ 716.867657][ T24] usb usb6-port1: unable to enumerate USB device [ 717.287226][T13888] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 717.296131][T13888] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 717.460232][ T5830] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 718.114839][T13903] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 720.309180][T13923] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 720.332440][T13923] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 720.370119][T13926] C: renamed from team_slave_0 [ 720.384910][T13926] netlink: 'syz.5.2448': attribute type 4 has an invalid length. [ 720.403438][T13926] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2448'. [ 720.414745][T13926] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 720.816931][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 721.248206][ T10] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 721.273087][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.301128][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.331967][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.355825][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.383782][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.417329][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.442591][ T5830] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 721.471951][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.492035][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.512703][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.530442][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.547882][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.569236][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.585242][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.603968][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.638303][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.669311][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.691124][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.722292][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.747473][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.775415][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 721.792722][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 721.808919][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 721.901714][ T5914] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 721.985174][T13955] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 722.161685][ T5914] usb 4-1: config 0 has no interfaces? [ 722.252473][ T5914] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 722.342329][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.523545][ T5914] usb 4-1: Product: syz [ 722.533991][ T5914] usb 4-1: Manufacturer: syz [ 722.552628][ T5914] usb 4-1: SerialNumber: syz [ 722.570535][ T5914] usb 4-1: config 0 descriptor?? [ 722.656562][ T10] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 722.667879][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 722.679846][ T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 722.690218][ T10] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 722.706033][ T10] usb 6-1: Product: syz [ 722.710633][ T10] usb 6-1: Manufacturer: syz [ 722.715276][ T10] usb 6-1: SerialNumber: syz [ 722.724731][T13945] vxcan1 speed is unknown, defaulting to 1000 [ 722.734833][ T10] usb 6-1: config 0 descriptor?? [ 722.757039][ T10] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 722.988826][ T10] usb 6-1: USB disconnect, device number 17 [ 723.019161][ T10] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 723.373999][T13972] atomic_op ffff888034020198 conn xmit_atomic 0000000000000000 [ 723.426511][ T24] usb 4-1: USB disconnect, device number 18 [ 726.046079][T13993] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 727.846122][T14013] atomic_op ffff8880593db198 conn xmit_atomic 0000000000000000 [ 729.774474][ T24] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 729.976485][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 729.998592][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 730.056276][ T24] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 730.091297][ T5914] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 730.109448][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.148750][ T24] usb 3-1: config 0 descriptor?? [ 730.276757][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 730.294581][ T5914] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 730.314200][ T5914] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 730.354330][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 730.377404][ T24] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 730.395202][ T5914] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 730.408920][ T5914] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.444884][ T5914] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 730.766128][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.031442][ T5914] usb 6-1: GET_CAPABILITIES returned 0 [ 731.050216][ T5914] usbtmc 6-1:16.0: can't read capabilities [ 731.105452][T14057] syz_tun: entered allmulticast mode [ 731.127859][T14056] syz_tun: left allmulticast mode [ 731.235299][T14059] atomic_op ffff8880117e1198 conn xmit_atomic 0000000000000000 [ 732.521592][ T10] usb 3-1: USB disconnect, device number 20 [ 733.043384][ T10] usb 6-1: USB disconnect, device number 18 [ 733.308242][T14087] input: syz1 as /devices/virtual/input/input16 [ 734.755257][T14102] atomic_op ffff8880213cd198 conn xmit_atomic 0000000000000000 [ 735.441296][T14121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2503'. [ 735.548620][T14121] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 735.552684][T14119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.566427][T14119] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 735.590177][T14121] bridge1: entered promiscuous mode [ 735.596453][T14121] bridge1: entered allmulticast mode [ 735.651356][T14119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 735.681426][T14119] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 735.755248][T14119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 735.763711][T14119] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 735.823264][T14119] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 735.830510][T14119] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 735.881304][T14119] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 735.982388][T14119] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 737.496330][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 737.656098][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 737.762064][T14149] atomic_op ffff8880795cb998 conn xmit_atomic 0000000000000000 [ 737.816139][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 737.852020][T14151] input: syz1 as /devices/virtual/input/input17 [ 737.899986][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 737.906263][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 739.586263][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 739.735991][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 739.905828][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 739.975964][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 739.975988][T11919] Bluetooth: hci5: command 0x0406 tx timeout [ 739.996216][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 740.131413][T14179] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2518'. [ 740.160804][T14179] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 740.173674][T14179] bridge2: entered promiscuous mode [ 740.175702][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 740.188188][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 740.196134][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 740.207832][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.219926][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 740.231152][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 740.248251][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 740.276672][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 740.292229][T14179] bridge2: entered allmulticast mode [ 740.298395][T14174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 740.305311][T14174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 740.315182][T14174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 740.322971][T14174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 740.331680][T14174] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 740.348730][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.362965][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 740.379997][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 740.393900][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 740.403206][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 740.424651][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 740.453928][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 740.480731][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 740.510594][ T24] usb 2-1: string descriptor 0 read error: -22 [ 740.517841][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 740.539079][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.567734][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 740.792923][ T24] usb 2-1: USB disconnect, device number 17 [ 741.139113][T14188] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 741.319259][T14192] atomic_op ffff88805d5b9198 conn xmit_atomic 0000000000000000 [ 741.907994][T14199] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in; [ 741.907994][T14199] program syz.1.2527 not setting count and/or reply_len properly [ 742.138031][T11919] Bluetooth: hci1: command 0x0406 tx timeout [ 742.975821][T11919] Bluetooth: hci4: command 0x0406 tx timeout [ 742.982517][T11919] Bluetooth: hci3: command 0x0c1a tx timeout [ 742.989234][T11919] Bluetooth: hci2: command 0x0406 tx timeout [ 742.995877][T11919] Bluetooth: hci5: command 0x0406 tx timeout [ 743.009540][T14207] input: syz1 as /devices/virtual/input/input18 [ 743.324158][T14199] input: syz1 as /devices/virtual/input/input19 [ 743.393425][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 744.768028][T14226] syz.3.2532: attempt to access beyond end of device [ 744.768028][T14226] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 745.763796][T14235] atomic_op ffff888057d36198 conn xmit_atomic 0000000000000000 [ 745.988333][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 746.175799][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 746.206784][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 746.233727][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 746.286121][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 746.298783][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 746.315435][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 746.329850][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 746.343626][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 746.356787][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 746.381377][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 746.422759][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 746.569276][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 746.577262][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 746.588815][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 746.600918][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 746.612364][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 746.640968][ T24] usb 3-1: string descriptor 0 read error: -22 [ 746.652750][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 746.685095][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.721504][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 747.212356][ T24] usb 3-1: USB disconnect, device number 21 [ 747.581322][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.769496][T14263] siw: device registration error -23 [ 748.492027][ T30] audit: type=1326 audit(2000000014.520:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14271 comm="syz.1.2548" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb85778e929 code=0x0 [ 750.755199][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 751.145817][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 751.181740][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 751.255521][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 751.342206][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.397706][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 751.430177][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 751.487227][T14302] siw: device registration error -23 [ 751.525829][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 751.534530][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 751.585229][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.610787][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 751.649714][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 751.708429][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 751.716743][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 751.751176][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 751.782116][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 751.822932][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 751.913016][ T10] usb 5-1: string descriptor 0 read error: -22 [ 751.922094][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 752.002995][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.305403][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 752.501691][ T24] usb 5-1: USB disconnect, device number 8 [ 752.686703][T14316] gfs2: path_lookup on  returned error -2 [ 755.697429][T14346] siw: device registration error -23 [ 757.173843][T14364] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 758.839938][T14381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2576'. [ 758.878217][T14381] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 758.890345][T14381] bridge3: entered promiscuous mode [ 759.302731][T14381] bridge3: entered allmulticast mode [ 759.378259][T14379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 759.386747][T14379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 759.406872][T14379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 759.420191][T14379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 759.430105][T14379] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 759.873092][T14403] siw: device registration error -23 [ 760.186228][T14405] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2586'. [ 761.787303][T14416] vivid-007: kernel_thread() failed [ 761.797446][ T5830] Bluetooth: hci3: command 0x0c1a tx timeout [ 761.803551][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 761.812809][ T5830] Bluetooth: hci5: command 0x0406 tx timeout [ 761.824624][T11919] Bluetooth: hci1: command 0x0406 tx timeout [ 761.824762][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 764.502822][T14443] siw: device registration error -23 [ 764.545887][ T5886] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 764.806286][ T5886] usb 2-1: device descriptor read/64, error -71 [ 765.134600][ T5886] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 765.374433][ T5886] usb 2-1: device descriptor read/64, error -71 [ 765.653625][T14456] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 765.669058][T14456] trusted_key: encrypted_key: insufficient parameters specified [ 766.288676][ T5886] usb usb2-port1: attempt power cycle [ 766.447754][T14455] tipc: Started in network mode [ 766.453058][T14455] tipc: Node identity 7f000001, cluster identity 4711 [ 766.470751][T14455] tipc: Enabled bearer , priority 10 [ 766.674205][ T5886] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 766.747175][ T5886] usb 2-1: device descriptor read/8, error -71 [ 766.769347][T14455] tipc: Enabling of bearer rejected, failed to enable media [ 767.640470][ T5831] tipc: Node number set to 2130706433 [ 767.720160][ T5886] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 767.816807][ T5886] usb 2-1: device descriptor read/8, error -71 [ 768.034467][ T5886] usb usb2-port1: unable to enumerate USB device [ 769.286658][T14487] siw: device registration error -23 [ 770.356733][T14498] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 770.367699][T14498] trusted_key: encrypted_key: insufficient parameters specified [ 772.873104][T14529] siw: device registration error -23 [ 774.557952][T14563] delete_channel: no stack [ 775.000067][T14566] siw: device registration error -23 [ 775.250236][T14571] fuse: Unknown parameter 'group_d' [ 777.728311][T14606] siw: device registration error -23 [ 778.081106][T14619] syzkaller1: entered promiscuous mode [ 778.086897][T14619] syzkaller1: entered allmulticast mode [ 780.939386][T14685] fuse: Bad value for 'fd' [ 783.093744][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 784.092857][T14733] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 784.117493][T14733] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.399808][T14733] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 784.469725][T14733] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.758233][T14733] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 784.797360][T14733] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 784.945631][T14733] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 784.982958][T14733] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 785.181222][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 785.205676][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 785.215271][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 785.246802][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 785.259882][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 785.266353][T14733] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 785.291936][T14733] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 785.326139][T14733] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 785.336862][T14733] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 785.358730][T14733] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 785.369718][T14733] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 785.391103][T14733] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 785.399547][T14733] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 786.002729][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 786.105006][T14754] vxcan1 speed is unknown, defaulting to 1000 [ 786.356744][T14789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2715'. [ 786.397240][T14789] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2715'. [ 786.684460][T14801] loop6: detected capacity change from 0 to 524287999 [ 787.212703][T14807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2717'. [ 787.413168][ T51] Bluetooth: hci0: command tx timeout [ 788.349850][T14754] chnl_net:caif_netlink_parms(): no params data found [ 788.538489][T14798] vxcan1 speed is unknown, defaulting to 1000 [ 789.110959][T14754] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.119157][T14754] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.126620][T14754] bridge_slave_0: entered allmulticast mode [ 789.135164][T14754] bridge_slave_0: entered promiscuous mode [ 789.146029][T14754] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.153662][T14754] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.161178][T14754] bridge_slave_1: entered allmulticast mode [ 789.170573][T14754] bridge_slave_1: entered promiscuous mode [ 789.357356][T14754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.417933][T14754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.492986][ T51] Bluetooth: hci0: command tx timeout [ 789.514010][ T51] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 789.693818][T14754] team0: Port device team_slave_0 added [ 789.728912][T14754] team0: Port device team_slave_1 added [ 789.864575][T14754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.879965][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.924150][T14754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.982514][T14754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.998378][T14754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.026265][T14754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.527707][T14754] hsr_slave_0: entered promiscuous mode [ 790.549090][T14754] hsr_slave_1: entered promiscuous mode [ 790.565871][T14754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.657883][T14754] Cannot create hsr debugfs directory [ 791.208671][T14847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2731'. [ 791.573385][ T51] Bluetooth: hci0: command tx timeout [ 792.094761][T14859] JFS: discard option not supported on device [ 792.101611][T14859] Mount JFS Failure: -22 [ 792.106106][T14859] jfs_mount failed w/return code = -22 [ 792.731103][ T51] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 793.641886][T14754] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 793.652948][ T51] Bluetooth: hci0: command tx timeout [ 793.818133][T14877] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 793.945028][T14754] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 794.173060][T14754] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 794.234292][T14754] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 794.422940][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 794.583168][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 794.596146][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 794.644401][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 794.678742][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.738702][T14754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.793542][T14754] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.845413][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.853096][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.894415][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.901645][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.735521][T14754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.763454][T14913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2747'. [ 796.856427][T14915] 9pnet: Unknown protocol version 9p20\++} [ 796.914806][T14754] veth0_vlan: entered promiscuous mode [ 796.956706][T14754] veth1_vlan: entered promiscuous mode [ 797.664313][T14754] veth0_macvtap: entered promiscuous mode [ 797.708657][T14754] veth1_macvtap: entered promiscuous mode [ 797.826925][T14754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.900654][ T5886] usb 5-1: USB disconnect, device number 9 [ 797.918032][T14754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.965878][T14754] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.012537][T14754] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.052964][T14754] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.085029][T14754] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.424019][ T6582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.439089][ T6582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.621487][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.644579][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.802380][ T2153] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 799.996862][ T2153] usb 2-1: config index 0 descriptor too short (expected 46, got 36) [ 800.085004][ T2153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.267475][ T2153] usb 2-1: config 0 interface 0 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 800.552372][ T2153] usb 2-1: config 0 interface 0 has no altsetting 0 [ 800.592892][ T2153] usb 2-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 800.652314][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.766865][ T2153] usb 2-1: config 0 descriptor?? [ 800.799075][ T2153] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 800.817029][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2759'. [ 802.097383][T14943] kvm: pic: single mode not supported [ 802.097411][T14943] kvm: pic: level sensitive irq not supported [ 802.305794][ T5969] usb 2-1: USB disconnect, device number 22 [ 802.542229][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 802.712260][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 802.735430][ T9] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 802.746964][T14976] max out of range [ 802.762823][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 802.807352][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 802.844229][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.889184][ T9] usbtmc 3-1:16.0: bulk endpoints not found [ 803.122298][ T5969] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 804.082555][ T5969] usb 5-1: Using ep0 maxpacket: 8 [ 804.104647][ T5969] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 804.149024][ T5969] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 804.250829][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.286435][T14997] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 804.968745][T15011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2777'. [ 805.201413][T15013] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2777'. [ 805.281799][ T9] usb 3-1: USB disconnect, device number 22 [ 805.382097][ T2153] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 805.552414][ T2153] usb 6-1: Using ep0 maxpacket: 8 [ 805.578095][ T2153] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 805.600330][ T2153] usb 6-1: config 0 has no interface number 0 [ 805.611065][ T2153] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 805.633184][ T2153] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 805.645697][ T2153] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.657936][ T2153] usb 6-1: config 0 descriptor?? [ 805.698863][ T2153] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 805.903518][ T5914] usb 6-1: USB disconnect, device number 19 [ 806.094215][ T9] usb 5-1: USB disconnect, device number 10 [ 808.781353][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 809.623660][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.801796][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 809.810301][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 809.827636][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 809.861850][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 809.892482][T15065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2794'. [ 809.901848][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 809.952034][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 809.996448][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 810.014886][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 810.049829][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 810.104233][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 810.152180][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 810.177097][T15067] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2794'. [ 810.193613][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 810.216907][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 810.270298][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 810.311356][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 810.347776][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 810.378771][T15069] input: syz1 as /devices/virtual/input/input20 [ 810.390395][ T9] usb 3-1: string descriptor 0 read error: -71 [ 810.409342][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 810.441062][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.470371][ T9] usb 3-1: can't set config #168, error -71 [ 810.483822][ T9] usb 3-1: USB disconnect, device number 23 [ 810.922045][ T5914] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 811.081899][ T5914] usb 6-1: Using ep0 maxpacket: 8 [ 811.109032][ T5914] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 811.138961][ T5914] usb 6-1: config 0 has no interface number 0 [ 811.170052][ T5914] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 811.217376][ T5914] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 811.286690][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.337843][ T5914] usb 6-1: config 0 descriptor?? [ 812.315599][ T5914] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 812.373534][ T5914] usb 6-1: USB disconnect, device number 20 [ 813.806262][T15092] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 813.812634][T15092] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 813.840026][T15092] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 813.851794][T15092] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 813.863320][T15092] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 813.883254][T15092] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 813.925092][T15104] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 813.957708][T15092] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 813.974377][T15106] binder: 15105:15106 ioctl c0046209 0 returned -22 [ 814.034321][T15104] bridge_slave_0: left allmulticast mode [ 814.063608][T15104] bridge_slave_0: left promiscuous mode [ 814.069705][T15104] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.360083][T15104] bridge_slave_1: left allmulticast mode [ 814.379252][T15104] bridge_slave_1: left promiscuous mode [ 814.391953][T15104] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.421173][T15104] bond0: (slave bond_slave_0): Releasing backup interface [ 814.443081][T15104] bond0: (slave bond_slave_1): Releasing backup interface [ 814.455907][T15104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.466228][T15104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.477913][T15104] bond2: (slave bond3): Releasing backup interface [ 815.091961][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 815.607322][T15128] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 815.641568][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 815.654610][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 815.681047][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 815.705026][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 815.718057][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 815.729667][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 815.753843][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 815.777090][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 815.806997][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 815.831746][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 815.862950][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 815.891569][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 815.892488][T14423] Bluetooth: hci5: command 0x0406 tx timeout [ 815.897775][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 815.903830][T14423] Bluetooth: hci3: command 0x0c1a tx timeout [ 815.904506][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 815.984215][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 816.011634][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 816.051822][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 816.101446][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 816.154841][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 816.225655][ T24] usb 6-1: string descriptor 0 read error: -22 [ 816.253421][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 816.305960][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.384411][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 816.634978][ T9] usb 6-1: USB disconnect, device number 21 [ 817.658361][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 817.901336][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 817.910263][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 817.928761][ T9] usb 5-1: config 0 has no interface number 0 [ 817.944571][ T9] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 817.974458][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 817.984043][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 817.991455][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.002855][ T9] usb 5-1: config 0 descriptor?? [ 818.012199][ T9] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 818.235781][ T24] usb 5-1: USB disconnect, device number 11 [ 818.929013][T15165] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 820.051338][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 822.868771][T15210] syzkaller0: entered promiscuous mode [ 822.886344][T15210] syzkaller0: entered allmulticast mode [ 824.773260][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 824.949743][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 824.980276][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 824.990254][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 825.018949][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.039062][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.065028][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.089637][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 825.110128][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 825.123775][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.147444][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.160739][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.192450][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 825.221288][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 825.270540][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 825.293450][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 825.319946][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 825.350397][ T24] usb 3-1: string descriptor 0 read error: -22 [ 825.370736][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 825.390451][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.460402][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 825.571267][T15238] fuse: Bad value for 'group_id' [ 825.576296][T15238] fuse: Bad value for 'group_id' [ 825.685580][ T24] usb 3-1: USB disconnect, device number 24 [ 828.601255][T15271] fuse: Bad value for 'group_id' [ 828.630207][T15271] fuse: Bad value for 'group_id' [ 829.599075][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 829.924431][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 829.941039][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 829.949188][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 829.975516][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.028444][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 830.080628][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 830.133184][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 830.150747][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.190642][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.243264][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 830.290720][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 830.354829][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 830.380823][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.430758][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 830.636344][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 830.739814][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 830.845513][ T9] usb 2-1: string descriptor 0 read error: -22 [ 830.852505][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 830.918327][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.948296][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 831.154144][T15295] syzkaller1: entered promiscuous mode [ 831.165879][ T9] usb 2-1: USB disconnect, device number 24 [ 831.183812][T15295] syzkaller1: entered allmulticast mode [ 833.167596][T15327] bridge_slave_0: default FDB implementation only supports local addresses [ 834.518338][T15347] syzkaller1: entered promiscuous mode [ 834.524533][T15347] syzkaller1: entered allmulticast mode [ 835.563271][T15357] netlink: 'syz.4.2879': attribute type 10 has an invalid length. [ 835.576095][T15357] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 835.602123][T15357] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 835.719748][T15359] netlink: 'syz.2.2880': attribute type 1 has an invalid length. [ 835.915605][T15359] netlink: 'syz.2.2880': attribute type 4 has an invalid length. [ 835.930439][T15359] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.2880'. [ 837.230364][T15370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.298148][T15370] bond0: (slave rose0): Enslaving as an active interface with an up link [ 838.325749][T15381] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 838.636405][T15377] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 840.062170][T15409] overlayfs: failed to get inode (-116) [ 840.087200][T15409] overlayfs: failed to look up (bus) for ino (-116) [ 841.085114][T15427] netlink: 'syz.5.2895': attribute type 10 has an invalid length. [ 841.286872][T15427] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 842.498193][T15423] vxcan1 speed is unknown, defaulting to 1000 [ 844.624404][T15465] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 844.664938][T15463] overlayfs: failed to get inode (-116) [ 844.695071][T15463] overlayfs: failed to look up (bus) for ino (-116) [ 844.890679][T15470] netlink: 'syz.2.2906': attribute type 10 has an invalid length. [ 845.438230][T15482] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 848.104952][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 848.114716][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 848.139688][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 848.159731][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 848.176431][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.095070][T15505] vxcan1 speed is unknown, defaulting to 1000 [ 849.323300][T15523] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 849.667173][T15528] netlink: 'syz.2.2918': attribute type 10 has an invalid length. [ 849.814479][T15532] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.822028][T15532] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.889817][ T5886] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 850.061341][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 850.082755][ T5886] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 850.116706][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 850.160781][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 850.198149][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 850.211808][ T51] Bluetooth: hci2: command tx timeout [ 850.220307][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 850.230854][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.248647][ T5886] usbtmc 2-1:16.0: bulk endpoints not found [ 850.355125][T15532] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.434690][T15532] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.808032][T15532] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 850.817012][T15532] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 850.827145][T15532] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 850.838152][T15532] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 850.888822][T15532] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 850.907130][T15532] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 850.922672][T15532] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 850.934356][T15532] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 851.030507][T15533] : entered promiscuous mode [ 851.336666][T15558] binder: 15557:15558 ioctl c0046209 0 returned -22 [ 851.414186][T15505] chnl_net:caif_netlink_parms(): no params data found [ 851.469756][T15549] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 851.641689][T15549] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 852.341573][ T51] Bluetooth: hci2: command tx timeout [ 852.408730][T15505] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.427808][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.439634][T15505] bridge_slave_0: entered allmulticast mode [ 852.458645][T15505] bridge_slave_0: entered promiscuous mode [ 852.478587][T15549] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 852.497980][T15549] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 852.507871][T15549] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 852.508106][T15505] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.517837][T15549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.559975][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.573824][T15505] bridge_slave_1: entered allmulticast mode [ 852.594216][T15505] bridge_slave_1: entered promiscuous mode [ 852.706440][T15549] usb 2-1: USB disconnect, device number 25 [ 852.779459][ T5886] usb 4-1: USB disconnect, device number 19 [ 852.873826][T15505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.677948][T15505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.988201][T15505] team0: Port device team_slave_0 added [ 853.996958][T15505] team0: Port device team_slave_1 added [ 854.026730][T15505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.033996][T15505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.062626][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.073317][T15505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.087828][T15505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.095413][T15505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 854.132302][T15505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.309330][ T24] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 854.328895][T15505] hsr_slave_0: entered promiscuous mode [ 854.349880][T15505] hsr_slave_1: entered promiscuous mode [ 854.369429][ T51] Bluetooth: hci2: command tx timeout [ 854.388731][T15505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 854.424265][T15505] Cannot create hsr debugfs directory [ 854.489935][ T24] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 854.523736][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 854.551248][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.599478][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 854.611830][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 854.629518][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.644498][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 854.654445][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 854.701515][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.774377][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 854.812810][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 854.832548][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.847953][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 854.859620][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 854.906032][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 854.960633][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 854.996121][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.040375][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.089818][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 855.123648][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.158179][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.178266][T15590] atomic_op ffff8880596ad198 conn xmit_atomic 0000000000000000 [ 855.197846][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 855.212025][ T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 855.353517][T15594] binder: 15593:15594 ioctl c0046209 0 returned -22 [ 855.449202][ T24] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 855.462666][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 855.472369][ T24] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 855.489171][ T24] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 855.497770][ T24] usb 6-1: Product: syz [ 855.514780][ T24] usb 6-1: Manufacturer: syz [ 855.524896][ T24] usb 6-1: SerialNumber: syz [ 855.540427][ T24] usb 6-1: config 0 descriptor?? [ 855.566958][ T24] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 855.770690][ T24] usb 6-1: USB disconnect, device number 22 [ 855.797788][ T24] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 856.778249][ T51] Bluetooth: hci2: command tx timeout [ 857.114873][T15505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 857.121908][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 857.165152][T15505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 857.963964][T15505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 857.997854][T15505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 858.009216][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 858.025752][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 858.068701][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 858.085775][ T9] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 858.117926][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 858.144932][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 858.180989][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.189621][T15547] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 858.227483][ T9] usbtmc 2-1:16.0: bulk endpoints not found [ 858.362624][T15547] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 858.381922][T15505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.396701][T15547] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 858.466617][T15547] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 858.502698][T15505] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.515312][T15547] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 858.560217][T15547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.580150][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.587379][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.649433][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.656676][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 858.834950][T15549] usb 6-1: USB disconnect, device number 23 [ 859.224704][T15505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.084286][T15651] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 860.169265][ T5942] usb 2-1: USB disconnect, device number 26 [ 860.364404][T15656] atomic_op ffff88805bf67198 conn xmit_atomic 0000000000000000 [ 860.428769][T15505] veth0_vlan: entered promiscuous mode [ 860.505411][T15505] veth1_vlan: entered promiscuous mode [ 860.724403][T15663] syzkaller0: entered promiscuous mode [ 860.738772][T15663] syzkaller0: entered allmulticast mode [ 860.875852][T15673] binder: 15670:15673 ioctl c0046209 0 returned -22 [ 865.439172][ T5914] vxcan1 speed is unknown, defaulting to 1000 [ 865.447387][T15505] veth0_macvtap: entered promiscuous mode [ 865.531886][T15505] veth1_macvtap: entered promiscuous mode [ 865.587070][T15505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.617039][T15505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.654651][T15505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.674430][T15505] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.684094][T15505] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.693089][T15505] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.758762][T15547] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 865.921639][ T5886] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 865.937658][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.953458][T15547] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 865.968937][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.987640][T15547] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 866.011780][T15699] atomic_op ffff8880595cf998 conn xmit_atomic 0000000000000000 [ 866.024393][T15547] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 866.048849][T15547] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 866.056838][ T7765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 866.058202][T15547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.090106][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 866.099120][ T7765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 866.101308][ T5886] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 866.132121][ T5886] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 866.142726][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 866.155242][ T5886] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 866.201888][ T5886] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 866.213930][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.236154][ T5886] usbtmc 2-1:16.0: bulk endpoints not found [ 866.509137][T15688] misc userio: The device must be registered before sending interrupts [ 866.520983][T15127] usb 6-1: USB disconnect, device number 24 [ 866.551121][T15705] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 868.752290][ T5942] usb 2-1: USB disconnect, device number 27 [ 868.884649][T15719] netlink: 'syz.1.2965': attribute type 3 has an invalid length. [ 869.010990][T15723] binder: 15722:15723 ioctl c0046209 0 returned -22 [ 869.066745][T15725] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 869.144926][T15725] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 870.453972][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.606804][T15736] atomic_op ffff888079149198 conn xmit_atomic 0000000000000000 [ 871.738349][T15127] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 871.920868][T15127] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 871.959487][T15127] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 872.007751][T15127] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 872.039953][T15127] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 872.068144][T15127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.348357][T15747] misc userio: The device must be registered before sending interrupts [ 873.211038][T15547] usb 4-1: USB disconnect, device number 20 [ 873.516501][T15752] vxcan1 speed is unknown, defaulting to 1000 [ 875.269750][T15773] binder: 15772:15773 ioctl c0046209 0 returned -22 [ 875.278257][ T2153] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 875.559086][ T2153] usb 2-1: Using ep0 maxpacket: 8 [ 875.576271][ T2153] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 875.667396][ T2153] usb 2-1: config 0 has no interface number 0 [ 875.707598][ T2153] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 875.816043][ T2153] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 875.917685][ T2153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.210682][ T2153] usb 2-1: config 0 descriptor?? [ 876.349232][ T2153] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 876.553719][T15779] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 876.568963][ T2153] usb 2-1: USB disconnect, device number 28 [ 876.704979][T15783] netlink: 'syz.3.2982': attribute type 10 has an invalid length. [ 876.723911][T15779] bridge_slave_0: left allmulticast mode [ 876.743978][T15779] bridge_slave_0: left promiscuous mode [ 876.767034][T15779] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.887154][T15779] bridge_slave_1: left allmulticast mode [ 876.923226][T15779] bridge_slave_1: left promiscuous mode [ 876.957868][T15779] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.019916][T15779] bond0: (slave bond_slave_0): Releasing backup interface [ 877.085924][T15779] bond0: (slave bond_slave_1): Releasing backup interface [ 877.247614][T15779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 877.305105][T15779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.354812][T15779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 877.418248][T15779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.557338][T15783] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 877.622583][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 877.633157][ T5830] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 877.642740][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 877.653885][ T5830] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 877.661705][ T5830] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 877.756124][T15783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.792262][ T5830] Bluetooth: hci0: unexpected event for opcode 0x040e [ 877.819063][T15783] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 877.932419][ T5886] syz0: Port: 1 Link DOWN [ 879.443143][T15807] binder: 15806:15807 ioctl c0046209 0 returned -22 [ 879.605421][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 879.728441][ T5830] Bluetooth: hci3: command tx timeout [ 880.168186][ T24] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 880.555291][T15789] vxcan1 speed is unknown, defaulting to 1000 [ 880.562942][ T24] usb 6-1: device descriptor read/64, error -71 [ 880.606603][ T5886] usb 5-1: Using ep0 maxpacket: 8 [ 880.619704][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 880.635002][ T5886] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 880.644798][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.661625][ T5886] usb 5-1: config 0 descriptor?? [ 880.818339][ T36] bridge_slave_1: left allmulticast mode [ 880.829078][ T24] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 880.838111][ T36] bridge_slave_1: left promiscuous mode [ 880.849751][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.883980][ T5886] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 880.897933][T15127] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 880.898117][ T36] bridge_slave_0: left allmulticast mode [ 880.961956][ T36] bridge_slave_0: left promiscuous mode [ 880.993086][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.009183][ T24] usb 6-1: device descriptor read/64, error -71 [ 881.067768][T15127] usb 4-1: Using ep0 maxpacket: 8 [ 881.085778][T15127] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 881.102300][ T5886] usb 5-1: USB disconnect, device number 12 [ 881.131956][T15127] usb 4-1: config 0 has no interface number 0 [ 881.140469][ T24] usb usb6-port1: attempt power cycle [ 881.164172][T15127] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 881.189623][T15127] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 881.223718][T15127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.254253][T15127] usb 4-1: config 0 descriptor?? [ 881.279663][T15127] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 881.476824][ T2153] usb 4-1: USB disconnect, device number 21 [ 881.527992][ T24] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 881.580510][ T24] usb 6-1: device descriptor read/8, error -71 [ 881.812957][ T5830] Bluetooth: hci3: command tx timeout [ 881.876382][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 881.929030][ T24] usb 6-1: device descriptor read/8, error -71 [ 881.976372][T15829] netlink: 'syz.4.2997': attribute type 10 has an invalid length. [ 882.056283][ T24] usb usb6-port1: unable to enumerate USB device [ 883.357136][T15822] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 883.455213][T15826] bridge_slave_0: left allmulticast mode [ 883.477770][T15826] bridge_slave_0: left promiscuous mode [ 883.483732][T15826] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.522734][T15826] bridge_slave_1: left allmulticast mode [ 883.539632][T15826] bridge_slave_1: left promiscuous mode [ 883.545565][T15826] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.569931][T15826] bond0: (slave bond_slave_0): Releasing backup interface [ 883.589953][T15826] bond0: (slave bond_slave_1): Releasing backup interface [ 883.631786][T15826] team0: Port device team_slave_0 removed [ 883.651644][T15826] team0: Port device team_slave_1 removed [ 883.663939][T15826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.673766][T15826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.684798][T15826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.693502][T15826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.720090][T15829] mac80211_hwsim hwsim19 wlan1: left allmulticast mode [ 883.737438][T15829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.763012][T15829] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 883.860704][ T36] tipc: Disabling bearer [ 883.876704][ T36] tipc: Left network mode [ 883.890872][ T51] Bluetooth: hci3: command tx timeout [ 883.979038][T15844] syzkaller0: entered promiscuous mode [ 884.023629][T15844] syzkaller0: entered allmulticast mode [ 884.448919][T15861] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 884.459693][T15861] trusted_key: encrypted_key: keylen parameter is missing [ 885.168401][ T2153] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 885.512794][ T2153] usb 4-1: config 0 has no interfaces? [ 885.543693][ T2153] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 885.553859][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.562807][ T2153] usb 4-1: Product: syz [ 885.568327][ T2153] usb 4-1: Manufacturer: syz [ 885.573057][ T2153] usb 4-1: SerialNumber: syz [ 885.618936][ T2153] usb 4-1: config 0 descriptor?? [ 885.747645][ T9] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 885.951045][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.983465][ T5830] Bluetooth: hci3: command tx timeout [ 885.997675][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 886.038925][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 886.087474][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 886.186314][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 886.207845][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 886.226406][ T9] usb 5-1: Manufacturer: syz [ 886.243474][ T9] usb 5-1: config 0 descriptor?? [ 886.487234][ T5886] hid-generic 00A0:0008:0003.0010: unknown main item tag 0x0 [ 886.527598][ T5886] hid-generic 00A0:0008:0003.0010: unknown main item tag 0x0 [ 886.549144][ T5886] hid-generic 00A0:0008:0003.0010: unknown main item tag 0x0 [ 886.567298][ T5886] hid-generic 00A0:0008:0003.0010: unknown main item tag 0x0 [ 886.585573][ T5886] hid-generic 00A0:0008:0003.0010: item fetching failed at offset 6/15 [ 886.609591][ T5886] hid-generic 00A0:0008:0003.0010: probe with driver hid-generic failed with error -22 [ 887.976399][T15549] usb 4-1: USB disconnect, device number 22 [ 891.377734][ T9] rc_core: IR keymap rc-hauppauge not found [ 891.417384][ T9] Registered IR keymap rc-empty [ 891.422587][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.468156][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.520152][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 891.552656][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input25 [ 891.580301][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.627281][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.671226][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.737949][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.769300][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.808450][T15909] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 891.819209][T15909] trusted_key: encrypted_key: keylen parameter is missing [ 891.840831][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.887393][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.938603][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 891.987390][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 892.037612][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 892.090157][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 892.259950][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 892.324657][ T9] usb 5-1: USB disconnect, device number 13 [ 893.729897][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3025'. [ 893.757411][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3025'. [ 894.497621][ T5886] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 894.562953][T15935] syzkaller0: entered promiscuous mode [ 894.569114][T15935] syzkaller0: entered allmulticast mode [ 894.701462][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.743234][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 894.775707][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 894.796700][ T5886] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 894.829575][ T5886] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 894.868356][ T5886] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 894.886859][ T5886] usb 4-1: Manufacturer: syz [ 894.901259][ T5886] usb 4-1: config 0 descriptor?? [ 895.114341][ T5914] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 895.154776][ T5914] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 895.185349][ T5914] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 895.207292][ T5914] hid-generic 00A0:0008:0003.0011: unknown main item tag 0x0 [ 895.250043][ T5914] hid-generic 00A0:0008:0003.0011: item fetching failed at offset 6/15 [ 895.298186][ T5914] hid-generic 00A0:0008:0003.0011: probe with driver hid-generic failed with error -22 [ 895.302630][T15950] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 895.940357][ T5886] rc_core: IR keymap rc-hauppauge not found [ 895.946382][ T5886] Registered IR keymap rc-empty [ 895.952271][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 895.977067][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.016379][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 896.056126][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input26 [ 896.107151][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.127019][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.146979][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.171778][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.207292][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.244375][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.277164][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.327148][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.357019][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.416232][ T5886] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 896.453212][ T5886] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 896.487163][ T5886] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 896.557665][ T5886] usb 4-1: USB disconnect, device number 23 [ 896.901016][T15965] trusted_key: encrypted_key: master key parameter 'cœYõÙ?(<ÁÐ`Ͼ3QÃ#¡Pèðd' is invalid [ 896.911844][T15965] trusted_key: encrypted_key: keylen parameter is missing [ 897.666688][T15973] ip6t_srh: unknown srh match flags B153 [ 898.520894][T15975] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3033'. [ 898.836783][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 899.026740][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 899.034425][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 899.042636][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 899.063093][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 899.107518][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 899.126817][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 899.141154][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 899.149265][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 899.215074][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 899.232942][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 899.244930][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 899.259061][ T24] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 899.267981][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 899.287994][ T24] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 899.301887][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 899.316964][ T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 899.334414][ T24] usb 2-1: string descriptor 0 read error: -22 [ 899.346960][ T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 899.367281][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.433446][ T24] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 899.637516][ T24] usb 2-1: USB disconnect, device number 29 [ 902.778753][T15789] chnl_net:caif_netlink_parms(): no params data found [ 902.811316][ T36] hsr_slave_0: left promiscuous mode [ 902.821075][ T36] hsr_slave_1: left promiscuous mode [ 902.827706][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.837719][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.247362][T15546] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 903.432536][T15546] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.457138][T15546] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 903.486197][T15546] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 903.496729][T15546] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 903.549679][T15546] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 903.566603][T15546] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 903.585993][T15546] usb 6-1: Manufacturer: syz [ 903.594537][T15546] usb 6-1: config 0 descriptor?? [ 903.832378][ T5886] hid-generic 00A0:0008:0003.0012: unknown main item tag 0x0 [ 903.840093][ T5886] hid-generic 00A0:0008:0003.0012: unknown main item tag 0x0 [ 903.860094][ T5886] hid-generic 00A0:0008:0003.0012: unknown main item tag 0x0 [ 903.876925][ T5886] hid-generic 00A0:0008:0003.0012: unknown main item tag 0x0 [ 903.885276][ T5886] hid-generic 00A0:0008:0003.0012: item fetching failed at offset 6/15 [ 903.895351][ T5886] hid-generic 00A0:0008:0003.0012: probe with driver hid-generic failed with error -22 [ 904.618227][T15546] rc_core: IR keymap rc-hauppauge not found [ 904.624222][T15546] Registered IR keymap rc-empty [ 904.630395][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.657718][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.678865][T15546] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 904.694177][T15546] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input27 [ 904.725235][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.746528][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.786591][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.807636][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.846928][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.883952][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.915440][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.956729][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 904.986656][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 905.016091][T15546] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 905.038913][T15546] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 905.067577][T15546] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 905.092891][T15546] usb 6-1: USB disconnect, device number 29 [ 905.681074][T15959] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.691388][T15959] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.701488][T15959] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.711264][T15959] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.037022][T16016] netlink: 'syz.4.3044': attribute type 1 has an invalid length. [ 906.055802][T16016] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3044'. [ 906.422307][T16024] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 906.711113][T15789] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.761761][T15789] bridge0: port 1(bridge_slave_0) entered disabled state [ 906.791979][T15789] bridge_slave_0: entered allmulticast mode [ 906.824922][T15789] bridge_slave_0: entered promiscuous mode [ 906.835515][T15789] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.855998][T15789] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.865532][T15789] bridge_slave_1: entered allmulticast mode [ 906.879196][T15789] bridge_slave_1: entered promiscuous mode [ 906.967748][ T36] IPVS: stop unused estimator thread 0... [ 907.022616][T15789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.055670][T15789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.240060][T15789] team0: Port device team_slave_0 added [ 907.256731][T15789] team0: Port device team_slave_1 added [ 907.388889][T15789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.396600][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.484691][T15789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.501616][T15789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.521624][T15789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 907.561856][T15789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.778329][T15789] hsr_slave_0: entered promiscuous mode [ 907.822352][T15789] hsr_slave_1: entered promiscuous mode [ 909.093276][T16041] syzkaller0: entered promiscuous mode [ 909.226442][T16041] syzkaller0: entered allmulticast mode [ 914.206356][T16055] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.214300][T16055] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.561249][T16055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.598301][T16055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.936143][T16055] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.945606][T16055] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.966136][T16055] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.976250][T16055] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.099547][T15789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 919.190930][T15789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 919.215352][T15789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 919.255315][T15789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 919.710225][T15789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.768649][T15789] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.798720][T16079] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.806407][T16079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.835045][T16079] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.842509][T16079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 921.821714][T15789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.071665][T16194] JFS: discard option not supported on device [ 922.078301][T16194] Mount JFS Failure: -22 [ 922.082596][T16194] jfs_mount failed w/return code = -22 [ 922.087653][T15789] veth0_vlan: entered promiscuous mode [ 922.105137][T15789] veth1_vlan: entered promiscuous mode [ 922.303788][T15789] veth0_macvtap: entered promiscuous mode [ 922.373896][T15789] veth1_macvtap: entered promiscuous mode [ 922.438086][T15789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 922.500302][T15789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 922.581630][T15789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.669463][T15789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 922.700338][T15789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.611986][T15789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 924.447706][T16079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.447940][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.464672][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.529601][T16208] sctp: [Deprecated]: syz.5.3087 (pid 16208) Use of int in maxseg socket option. [ 924.529601][T16208] Use struct sctp_assoc_value instead [ 924.545914][T16079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.318832][T16082] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 925.834852][T16082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 925.956632][T16082] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.991028][T16082] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 926.021125][T16082] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.106837][T16082] usb 2-1: config 0 descriptor?? [ 926.602902][T16082] logitech-djreceiver 0003:046D:C52F.0013: hidraw0: USB HID v0.00 Device [HID 046d:c52f] on usb-dummy_hcd.1-1/input0 [ 926.617907][T16245] /dev/nullb0: Can't open blockdev [ 926.962537][T16082] usb 2-1: USB disconnect, device number 30 [ 927.057522][T16252] loop6: detected capacity change from 0 to 63 [ 928.857095][T16277] JFS: discard option not supported on device [ 928.863653][T16277] Mount JFS Failure: -22 [ 928.868154][T16277] jfs_mount failed w/return code = -22 [ 930.345416][T16087] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 930.525889][T16087] usb 2-1: Using ep0 maxpacket: 8 [ 930.560420][T16087] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 930.585011][T16087] usb 2-1: config 0 has no interface number 0 [ 930.617721][T16087] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 930.659714][T16087] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 930.690084][T16087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.718209][T16087] usb 2-1: config 0 descriptor?? [ 930.748699][T16087] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 930.943838][T16087] usb 2-1: USB disconnect, device number 31 [ 931.245522][T16081] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 931.659686][T16081] usb 3-1: Using ep0 maxpacket: 32 [ 931.678764][T16081] usb 3-1: config 0 interface 0 has no altsetting 0 [ 931.698642][T16081] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 931.734463][T16081] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.739461][T16330] tipc: Enabling of bearer rejected, already enabled [ 931.839257][T16081] usb 3-1: Product: syz [ 931.862303][T16081] usb 3-1: Manufacturer: syz [ 931.891047][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.903621][T16081] usb 3-1: SerialNumber: syz [ 931.938134][T16081] usb 3-1: config 0 descriptor?? [ 931.975440][T16336] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 932.115441][T16338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.134608][T16336] bond0: (slave wlan1): Releasing backup interface [ 932.417481][T16081] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 932.869590][T16081] usb 3-1: USB disconnect, device number 25 [ 934.664890][T16087] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 934.884825][T16087] usb 6-1: Using ep0 maxpacket: 8 [ 934.893825][T16087] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 934.919105][T16087] usb 6-1: config 0 has no interface number 0 [ 934.945137][T16087] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 934.987831][T16087] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 935.212396][T16087] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.306596][T16087] usb 6-1: config 0 descriptor?? [ 935.360915][T16087] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 935.391438][T16361] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.399721][T16361] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.556055][T16087] usb 6-1: USB disconnect, device number 30 [ 935.741352][T16361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 935.773007][T16361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 935.944888][T16094] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 935.991785][T16361] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.011317][T16361] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.024292][T16361] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.045023][T16361] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.117261][T16094] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 936.130096][T16094] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.143756][T16094] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 936.176732][T16094] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.193574][T16094] usb 2-1: Product: syz [ 936.205091][T16094] usb 2-1: Manufacturer: syz [ 936.209762][T16094] usb 2-1: SerialNumber: syz [ 936.240326][T16094] usb 2-1: config 0 descriptor?? [ 936.253470][T16094] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 936.261970][T16094] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 936.337626][ T5914] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 936.593202][T16087] usb 2-1: USB disconnect, device number 32 [ 936.733291][T16385] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 936.742313][ T5914] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 936.763092][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 936.841780][ T5914] usb 5-1: Product: syz [ 936.846397][ T5914] usb 5-1: Manufacturer: syz [ 936.851051][ T5914] usb 5-1: SerialNumber: syz [ 936.865840][ T5914] usb 5-1: config 0 descriptor?? [ 937.791924][T16087] usb 5-1: USB disconnect, device number 14 [ 939.034664][T16087] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 939.224751][T16087] usb 5-1: Using ep0 maxpacket: 8 [ 939.255017][T16087] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 939.293659][T16087] usb 5-1: config 0 has no interface number 0 [ 939.324088][T16087] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.367266][T16087] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 939.414306][T16087] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.462725][T16087] usb 5-1: config 0 descriptor?? [ 939.519246][T16087] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 939.734617][T15546] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 939.794076][T16087] usb 5-1: USB disconnect, device number 15 [ 940.084667][T15546] usb 3-1: Using ep0 maxpacket: 32 [ 940.092517][T15546] usb 3-1: config 0 interface 0 has no altsetting 0 [ 940.107052][T15546] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 940.181837][T15546] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.221100][T15546] usb 3-1: Product: syz [ 940.231453][T15546] usb 3-1: Manufacturer: syz [ 940.241327][T15546] usb 3-1: SerialNumber: syz [ 940.259730][T15546] usb 3-1: config 0 descriptor?? [ 940.737088][T15546] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 940.782506][T16429] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 941.353001][T15546] usb 3-1: USB disconnect, device number 26 [ 942.385134][T16451] 9pnet: Could not find request transport: xen [ 942.834395][T15546] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 943.136760][T15546] usb 3-1: Using ep0 maxpacket: 8 [ 943.175204][T15546] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 943.183444][T15546] usb 3-1: config 0 has no interface number 0 [ 943.220519][T15546] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 943.313606][T15546] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 943.350050][T15546] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.373440][T15546] usb 3-1: config 0 descriptor?? [ 943.413112][T15546] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 943.614076][T15546] usb 3-1: USB disconnect, device number 27 [ 944.138010][T16471] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 945.396323][T16488] 9pnet: Could not find request transport: xen [ 947.455082][T16513] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 951.842897][T10611] ================================================================== [ 951.851117][T10611] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x92/0x190 [ 951.860270][T10611] Read of size 8 at addr ffff88803068c558 by task syz.3.1403/10611 [ 951.868162][T10611] [ 951.870503][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.3.1403 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 951.870520][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 951.870527][T10611] Call Trace: [ 951.870533][T10611] [ 951.870540][T10611] dump_stack_lvl+0x189/0x250 [ 951.870560][T10611] ? __virt_addr_valid+0x1c8/0x5c0 [ 951.870572][T10611] ? rcu_is_watching+0x15/0xb0 [ 951.870588][T10611] ? __kasan_check_byte+0x12/0x40 [ 951.870603][T10611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 951.870620][T10611] ? rcu_is_watching+0x15/0xb0 [ 951.870636][T10611] ? lock_release+0x4b/0x3e0 [ 951.870652][T10611] ? __virt_addr_valid+0x1c8/0x5c0 [ 951.870662][T10611] ? __virt_addr_valid+0x4a5/0x5c0 [ 951.870673][T10611] print_report+0xd2/0x2b0 [ 951.870687][T10611] ? __list_del_entry_valid_or_report+0x92/0x190 [ 951.870700][T10611] kasan_report+0x118/0x150 [ 951.870715][T10611] ? __list_del_entry_valid_or_report+0x92/0x190 [ 951.870741][T10611] __list_del_entry_valid_or_report+0x92/0x190 [ 951.870755][T10611] bt_accept_unlink+0x39/0x240 [ 951.870769][T10611] l2cap_sock_teardown_cb+0x17e/0x460 [ 951.870787][T10611] l2cap_chan_del+0xb5/0x5e0 [ 951.870804][T10611] l2cap_conn_del+0x388/0x680 [ 951.870819][T10611] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 951.870834][T10611] hci_conn_hash_flush+0x10a/0x230 [ 951.870850][T10611] hci_dev_close_sync+0xaef/0x1330 [ 951.870866][T10611] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 951.870878][T10611] ? up_write+0x1c4/0x420 [ 951.870891][T10611] hci_unregister_dev+0x206/0x500 [ 951.870902][T10611] vhci_release+0x80/0xd0 [ 951.870919][T10611] ? __pfx_vhci_release+0x10/0x10 [ 951.870935][T10611] __fput+0x449/0xa70 [ 951.870956][T10611] task_work_run+0x1d1/0x260 [ 951.870970][T10611] ? __pfx_task_work_run+0x10/0x10 [ 951.870984][T10611] ? kmem_cache_free+0x18f/0x400 [ 951.870999][T10611] do_exit+0x6ad/0x22e0 [ 951.871013][T10611] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 951.871026][T10611] ? do_raw_spin_lock+0x121/0x290 [ 951.871038][T10611] ? __pfx_do_exit+0x10/0x10 [ 951.871053][T10611] do_group_exit+0x21c/0x2d0 [ 951.871065][T10611] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.871084][T10611] get_signal+0x125e/0x1310 [ 951.871105][T10611] arch_do_signal_or_restart+0x9a/0x750 [ 951.871120][T10611] ? __pfx_get_timespec64+0x10/0x10 [ 951.871136][T10611] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 951.871154][T10611] ? exit_to_user_mode_loop+0x40/0x110 [ 951.871170][T10611] exit_to_user_mode_loop+0x75/0x110 [ 951.871185][T10611] do_syscall_64+0x2bd/0x3b0 [ 951.871195][T10611] ? lockdep_hardirqs_on+0x9c/0x150 [ 951.871212][T10611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.871223][T10611] ? clear_bhb_loop+0x60/0xb0 [ 951.871236][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.871248][T10611] RIP: 0033:0x7ff60e3c11e5 [ 951.871258][T10611] Code: Unable to access opcode bytes at 0x7ff60e3c11bb. [ 951.871264][T10611] RSP: 002b:00007ff60f276f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 951.871278][T10611] RAX: fffffffffffffdfc RBX: 00007ff60e5b5fa0 RCX: 00007ff60e3c11e5 [ 951.871287][T10611] RDX: 00007ff60f276fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.871295][T10611] RBP: 00007ff60e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 951.871302][T10611] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 951.871309][T10611] R13: 0000000000000001 R14: 00007ff60e5b5fa0 R15: 00007ffe761ac788 [ 951.871321][T10611] [ 951.871326][T10611] [ 952.207206][T10611] Allocated by task 16089: [ 952.211866][T10611] kasan_save_track+0x3e/0x80 [ 952.216752][T10611] __kasan_kmalloc+0x93/0xb0 [ 952.221352][T10611] __kmalloc_noprof+0x27a/0x4f0 [ 952.226481][T10611] sk_prot_alloc+0xe7/0x220 [ 952.231007][T10611] sk_alloc+0x3a/0x370 [ 952.235075][T10611] __netlink_create+0x65/0x260 [ 952.239942][T10611] netlink_create+0x3ca/0x590 [ 952.244812][T10611] __sock_create+0x4b3/0x9f0 [ 952.249407][T10611] __sys_socket+0xd7/0x1b0 [ 952.253835][T10611] __x64_sys_socket+0x7a/0x90 [ 952.258527][T10611] do_syscall_64+0xfa/0x3b0 [ 952.263035][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.268941][T10611] [ 952.271362][T10611] Freed by task 16097: [ 952.275472][T10611] kasan_save_track+0x3e/0x80 [ 952.280158][T10611] kasan_save_free_info+0x46/0x50 [ 952.285195][T10611] __kasan_slab_free+0x62/0x70 [ 952.289965][T10611] kfree+0x18e/0x440 [ 952.293947][T10611] __sk_destruct+0x4e1/0x660 [ 952.298653][T10611] rcu_core+0xca8/0x1710 [ 952.303107][T10611] handle_softirqs+0x286/0x870 [ 952.308061][T10611] __irq_exit_rcu+0xca/0x1f0 [ 952.312768][T10611] irq_exit_rcu+0x9/0x30 [ 952.317130][T10611] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 952.322789][T10611] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 952.328788][T10611] [ 952.331198][T10611] Last potentially related work creation: [ 952.337081][T10611] kasan_save_stack+0x3e/0x60 [ 952.341755][T10611] kasan_record_aux_stack+0xbd/0xd0 [ 952.347128][T10611] call_rcu+0x142/0x990 [ 952.351460][T10611] netlink_release+0x171a/0x1b10 [ 952.356417][T10611] sock_close+0xc0/0x240 [ 952.360717][T10611] __fput+0x449/0xa70 [ 952.364820][T10611] fput_close_sync+0x119/0x200 [ 952.369611][T10611] __x64_sys_close+0x7f/0x110 [ 952.374320][T10611] do_syscall_64+0xfa/0x3b0 [ 952.378818][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.384806][T10611] [ 952.387257][T10611] The buggy address belongs to the object at ffff88803068c000 [ 952.387257][T10611] which belongs to the cache kmalloc-2k of size 2048 [ 952.401331][T10611] The buggy address is located 1368 bytes inside of [ 952.401331][T10611] freed 2048-byte region [ffff88803068c000, ffff88803068c800) [ 952.415320][T10611] [ 952.417691][T10611] The buggy address belongs to the physical page: [ 952.424225][T10611] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30688 [ 952.433281][T10611] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 952.441782][T10611] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 952.449609][T10611] page_type: f5(slab) [ 952.453698][T10611] raw: 00fff00000000040 ffff88801a442000 ffffea0001f5a400 dead000000000002 [ 952.462608][T10611] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 952.471466][T10611] head: 00fff00000000040 ffff88801a442000 ffffea0001f5a400 dead000000000002 [ 952.480331][T10611] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 952.490355][T10611] head: 00fff00000000003 ffffea0000c1a201 00000000ffffffff 00000000ffffffff [ 952.499227][T10611] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 952.507994][T10611] page dumped because: kasan: bad access detected [ 952.514502][T10611] page_owner tracks the page as allocated [ 952.520313][T10611] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14759, tgid 14758 (syz.3.2702), ts 785335703353, free_ts 784887511411 [ 952.541972][T10611] post_alloc_hook+0x240/0x2a0 [ 952.546848][T10611] get_page_from_freelist+0x21d5/0x22b0 [ 952.552420][T10611] __alloc_frozen_pages_noprof+0x181/0x370 [ 952.558246][T10611] alloc_pages_mpol+0x232/0x4a0 [ 952.563091][T10611] allocate_slab+0x8a/0x3b0 [ 952.567599][T10611] ___slab_alloc+0xbfc/0x1480 [ 952.572378][T10611] __kmalloc_cache_noprof+0x296/0x3d0 [ 952.577953][T10611] do_check_common+0x1e2/0x20b0 [ 952.582909][T10611] bpf_check+0x13664/0x19c60 [ 952.587509][T10611] bpf_prog_load+0x1318/0x1930 [ 952.592273][T10611] __sys_bpf+0x5f1/0x860 [ 952.596528][T10611] __x64_sys_bpf+0x7c/0x90 [ 952.601050][T10611] do_syscall_64+0xfa/0x3b0 [ 952.605827][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.611827][T10611] page last free pid 14748 tgid 14748 stack trace: [ 952.618532][T10611] __free_frozen_pages+0xc65/0xe60 [ 952.623747][T10611] __slab_free+0x326/0x400 [ 952.628465][T10611] qlist_free_all+0x97/0x140 [ 952.633074][T10611] kasan_quarantine_reduce+0x148/0x160 [ 952.638638][T10611] __kasan_slab_alloc+0x22/0x80 [ 952.643929][T10611] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 952.649439][T10611] __pmd_alloc+0xc6/0x3b0 [ 952.653803][T10611] __handle_mm_fault+0xa63/0x5620 [ 952.658917][T10611] handle_mm_fault+0x2d5/0x7f0 [ 952.663702][T10611] do_user_addr_fault+0xa81/0x1390 [ 952.669269][T10611] exc_page_fault+0x76/0xf0 [ 952.673955][T10611] asm_exc_page_fault+0x26/0x30 [ 952.678985][T10611] [ 952.681310][T10611] Memory state around the buggy address: [ 952.687047][T10611] ffff88803068c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 952.695111][T10611] ffff88803068c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 952.703621][T10611] >ffff88803068c500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 952.711712][T10611] ^ [ 952.718785][T10611] ffff88803068c580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 952.727125][T10611] ffff88803068c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 952.735395][T10611] ================================================================== [ 953.064912][T10611] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 953.072498][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.3.1403 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 953.084946][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 953.095045][T10611] Call Trace: [ 953.098624][T10611] [ 953.101680][T10611] dump_stack_lvl+0x99/0x250 [ 953.106312][T10611] ? __asan_memcpy+0x40/0x70 [ 953.110942][T10611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 953.116200][T10611] ? __pfx__printk+0x10/0x10 [ 953.121004][T10611] panic+0x2db/0x790 [ 953.124954][T10611] ? __pfx_panic+0x10/0x10 [ 953.129424][T10611] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 953.135491][T10611] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 953.142711][T10611] ? print_memory_metadata+0x314/0x400 [ 953.148403][T10611] ? __list_del_entry_valid_or_report+0x92/0x190 [ 953.154869][T10611] check_panic_on_warn+0x89/0xb0 [ 953.160051][T10611] ? __list_del_entry_valid_or_report+0x92/0x190 [ 953.166589][T10611] end_report+0x78/0x160 [ 953.170872][T10611] kasan_report+0x129/0x150 [ 953.175427][T10611] ? __list_del_entry_valid_or_report+0x92/0x190 [ 953.181951][T10611] __list_del_entry_valid_or_report+0x92/0x190 [ 953.188297][T10611] bt_accept_unlink+0x39/0x240 [ 953.193264][T10611] l2cap_sock_teardown_cb+0x17e/0x460 [ 953.198921][T10611] l2cap_chan_del+0xb5/0x5e0 [ 953.203530][T10611] l2cap_conn_del+0x388/0x680 [ 953.208223][T10611] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 953.214474][T10611] hci_conn_hash_flush+0x10a/0x230 [ 953.219689][T10611] hci_dev_close_sync+0xaef/0x1330 [ 953.224845][T10611] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 953.230409][T10611] ? up_write+0x1c4/0x420 [ 953.235117][T10611] hci_unregister_dev+0x206/0x500 [ 953.240470][T10611] vhci_release+0x80/0xd0 [ 953.244907][T10611] ? __pfx_vhci_release+0x10/0x10 [ 953.249948][T10611] __fput+0x449/0xa70 [ 953.254762][T10611] task_work_run+0x1d1/0x260 [ 953.259633][T10611] ? __pfx_task_work_run+0x10/0x10 [ 953.264757][T10611] ? kmem_cache_free+0x18f/0x400 [ 953.269888][T10611] do_exit+0x6ad/0x22e0 [ 953.274054][T10611] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 953.279480][T10611] ? do_raw_spin_lock+0x121/0x290 [ 953.284689][T10611] ? __pfx_do_exit+0x10/0x10 [ 953.289311][T10611] do_group_exit+0x21c/0x2d0 [ 953.293999][T10611] ? lockdep_hardirqs_on+0x9c/0x150 [ 953.299215][T10611] get_signal+0x125e/0x1310 [ 953.303848][T10611] arch_do_signal_or_restart+0x9a/0x750 [ 953.309841][T10611] ? __pfx_get_timespec64+0x10/0x10 [ 953.315509][T10611] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 953.322207][T10611] ? exit_to_user_mode_loop+0x40/0x110 [ 953.327794][T10611] exit_to_user_mode_loop+0x75/0x110 [ 953.333283][T10611] do_syscall_64+0x2bd/0x3b0 [ 953.337971][T10611] ? lockdep_hardirqs_on+0x9c/0x150 [ 953.343288][T10611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.350450][T10611] ? clear_bhb_loop+0x60/0xb0 [ 953.356396][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.362412][T10611] RIP: 0033:0x7ff60e3c11e5 [ 953.367043][T10611] Code: Unable to access opcode bytes at 0x7ff60e3c11bb. [ 953.374166][T10611] RSP: 002b:00007ff60f276f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 953.382945][T10611] RAX: fffffffffffffdfc RBX: 00007ff60e5b5fa0 RCX: 00007ff60e3c11e5 [ 953.391038][T10611] RDX: 00007ff60f276fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 953.399051][T10611] RBP: 00007ff60e410b39 R08: 0000000000000000 R09: 0000000000000000 [ 953.408124][T10611] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 953.416493][T10611] R13: 0000000000000001 R14: 00007ff60e5b5fa0 R15: 00007ffe761ac788 [ 953.424920][T10611] [ 953.428143][T10611] Kernel Offset: disabled [ 953.432491][T10611] Rebooting in 86400 seconds..