last executing test programs: 11.62837805s ago: executing program 3 (id=2330): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x4, 0x4) 11.627776453s ago: executing program 4 (id=2331): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x84, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5247423381422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) 11.531344252s ago: executing program 4 (id=2333): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000012c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'fq_codel\x00'}}]}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 11.467623057s ago: executing program 3 (id=2334): syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xb9, 0x0, &(0x7f0000000040)) 11.357582782s ago: executing program 3 (id=2337): bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c8d6a340ac050a038c65000000010902240001000000000904000002039d0200090509ffe700000000090503"], 0x0) 10.456878204s ago: executing program 4 (id=2345): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000000)=0x4, 0x4) 10.249545121s ago: executing program 4 (id=2350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @link_id}, 0x20) socketpair(0xa, 0x1, 0x0, &(0x7f0000002d00)) 10.122448173s ago: executing program 4 (id=2351): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r2, 0x1}, 0x14}}, 0x0) 10.034023197s ago: executing program 0 (id=2354): syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\t\x00', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x5}, @empty}}}}}}, 0x0) 9.919497785s ago: executing program 2 (id=2356): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000012c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'fq_codel\x00'}}]}}) open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 9.869008248s ago: executing program 0 (id=2357): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r1]) r2 = landlock_create_ruleset(&(0x7f0000000100)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 9.759212033s ago: executing program 4 (id=2359): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x80000001}, 0x48) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x90) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, &(0x7f00000001c0)=""/207, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="30003300d000000008021100000108021100000050505050505000000f03720603030303030300"], 0x4c}}, 0x0) open(0x0, 0x4e142, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 9.758798633s ago: executing program 1 (id=2360): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYRESOCT=r2, @ANYRES16=r4, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="2c005080110001004abee339084eeef16f162471f400000008000700000000000500020004000000040006000a0006000802110000010000"], 0x54}}, 0x240408c0) close(r3) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @dev}, {0x2, 0x0, @multicast1}, 0x25, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='veth1_vlan\x00'}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$alg(r10, &(0x7f0000000f80)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)='D', 0x1}], 0x1}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = getpid() process_vm_readv(r11, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000480)="ec", 0x1}], 0x1}}], 0x2, 0x4004441) 9.54104199s ago: executing program 0 (id=2361): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000740)={0x150, 0x0, 0x0, [{{}, {0x0, 0x0, 0xa2, 0x0, '\x00\x00\x00\xda`\xf8<\x87\x18\x8ef\xfeVR\xee\x8f\xb6\x9dx\xf2 `\x8e\xc3\xbf\x9d\xdd\xef\xdc\x82\xaa\x14\x13\xa7\xa2\x94\\\f6I\x81%:(O\x17\xe58\x9a\x17(5\x1d\xe2\xbb\xf8@\x93[\x94\xbb\\\xf6\r#~\x17\b6\xf3\xe4\xa8j\x87\x16_zT\r `\x15\xd2\x9b\xc5\xb6\x93D\xd0(*\x03\xd9\b\x92\x9a\x81\xb7=)Vx\nb\xca\xe0Yt\xed\xef\xe5\x9a\xd0@\x1d\x0eS\x04\r\xbe\xb6\\\x8a\x04kC\xfe\x12=\x92N\xe06\xc0_i\xe0\xc7g\xa1\xc26\x1e\x84Dp\v\xabM\xec.X\xf4\xd1\xd7}4h\xb9\xbeF\x03'}}]}, 0x150) write$FUSE_OPEN(r2, &(0x7f0000000280)={0x20}, 0x20) socket(0x0, 0x0, 0x0) setitimer(0x0, &(0x7f0000000080)={{}, {0x0, 0x100}}, 0x0) getitimer(0x0, 0xffffffffffffffff) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="f801"], 0x1f8) getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000080)='./file0\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 9.262046658s ago: executing program 3 (id=2362): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xc8, 0x0, &(0x7f00000000c0)) keyctl$restrict_keyring(0x2, 0x0, 0x0, &(0x7f0000000100)='id:cb2\xf7\xc2\xc2De') socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x4a) syz_emit_vhci(&(0x7f00000009c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_EXT_ADV_ENABLE={{0x1}}}}, 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE(0xffffffffffffffff, 0x5000940c, 0x0) getresgid(0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r7, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 9.009373688s ago: executing program 2 (id=2363): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = dup(r0) pwritev2(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="aa", 0x1}], 0x1, 0x0, 0x0, 0x0) copy_file_range(r0, 0x0, r1, &(0x7f0000000640)=0xe000, 0xd8c2, 0x0) 8.894040849s ago: executing program 0 (id=2364): msgctl$IPC_INFO(0x0, 0x3, 0x0) syz_clone(0x0, &(0x7f0000000100), 0x0, &(0x7f0000001100), &(0x7f0000001140), 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001380)='/sys/kernel/kexec_crash_size', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000001ec0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) 8.483111159s ago: executing program 2 (id=2365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@dev, @random, @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5, 0x11, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 8.273355967s ago: executing program 3 (id=2366): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8948, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 8.243754224s ago: executing program 2 (id=2367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000700)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @printk={@i}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff5}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}, @TCA_TBF_BURST={0x8, 0x6, 0x20}]}}]}, 0x60}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, 0x0, 0xee01}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x442a00, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002540)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x301}, 0x14}}, 0x0) pipe(&(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = add_key$user(0x0, &(0x7f00000023c0)={'syz', 0x3}, &(0x7f0000002400)="da576108f44d9e75c2635052", 0xc, 0xfffffffffffffffa) keyctl$describe(0x6, r7, &(0x7f0000002440)=""/231, 0xe7) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xc, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x1000, &(0x7f0000000240)=""/4096}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xe, 0x0, &(0x7f0000000040)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = msgget$private(0x0, 0x1e0) msgsnd(r9, &(0x7f0000001240)=ANY=[@ANYRESDEC=r6], 0xf7, 0x0) 8.222538324s ago: executing program 1 (id=2368): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 8.139107516s ago: executing program 3 (id=2369): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f0000000040)='\x00') madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000a9f850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='netlink_extack\x00', r2}, 0xb3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x18, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x0, 0x2}}, 0x18}}, 0x0) r4 = eventfd(0x0) r5 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r4, 0x0, 0x2, r5}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x81, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3aac1373788c1231, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="1818000006000020000000000002000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000002000000fe12ff0f080000008f600400f0ffffff4306f0fff0ffffff18180000", @ANYRES32, @ANYBLOB="00000000000000008500000051000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x21, &(0x7f0000000200)=""/33, 0x41100, 0x11, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0x0, 0x8, 0x4}, 0x10, r6, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000002c0)=[{0x1, 0x1, 0xb, 0x7}, {0x2, 0x4, 0x2, 0x2}], 0x10, 0x1}, 0x90) r8 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r8, &(0x7f0000009700)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000a00)=[{0x10, 0x1}], 0x10}}], 0x1, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000c4000000c4000000030000000e00000000000009000000000b00000009000004010100000300000005000000010000800c00000001000000020000000500000000000000000000000200000002000000090002000d00000004000000000000000800000002000000000000000600000005000000008000000300000000000000030000000600000004000000ff0f000002000000000000010000000015002501010000000000000203000000000000000000000300000000020000000400000001000000000000000000000200000000009300"], &(0x7f0000000700)=""/4096, 0xdf, 0x1000, 0x0, 0xa73}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x20000000000000a9, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x4, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r7, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000001c0)={r4, 0x100000, 0x2, r5}) statfs(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)=""/235) pselect6(0x40, &(0x7f0000001700)={0x9, 0xffffffffffff2231, 0x10001, 0x8, 0x200, 0xffffffffffffffff, 0x7fffffffffffffff, 0xffffffff00000000}, &(0x7f0000001740)={0x8, 0x6, 0x7fffffff, 0x0, 0xffffffffffffffff, 0xb8, 0x1000, 0x3f}, &(0x7f0000001780)={0x4d, 0x9a2, 0xffffffff, 0x80000000, 0x1, 0x208, 0x8, 0x8}, &(0x7f00000017c0), &(0x7f0000001840)={&(0x7f0000001800)={[0x323]}, 0x8}) 8.014283953s ago: executing program 0 (id=2370): setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0xea60}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setitimer(0x1, &(0x7f0000000000), 0x0) 7.723825945s ago: executing program 2 (id=2371): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000001340)={0x2, 0x0, @empty}, 0x10, &(0x7f0000001800)=[{&(0x7f0000001380)="e4", 0x1}], 0x1}}], 0x2, 0x0) 6.8151462s ago: executing program 2 (id=2372): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0xc4030a4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f00000002c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) setgroups(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x4, 0x80000000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, 0x80, 0x8, 0x2, 0x1}}) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x4000000000080002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x7, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r5 = epoll_create1(0x0) epoll_create1(0x0) r6 = eventfd2(0x0, 0x0) r7 = dup3(r6, r5, 0x0) read$FUSE(r7, &(0x7f0000000600)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYRES32], 0xff85) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) 6.759411787s ago: executing program 0 (id=2373): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty, 0x7}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000008007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x20) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000004000000c00000000000000000000060000000000000004000000f8ff00a76424062e940000000034220b73c4896d5985ae089a038dabebca496e5eb9deb59152df47b3a31480b6524a71bfa3dc658705c4bf7056ec64c794870564325c6bf47b0a8e2a8455e5d50930f47023efe29dcb20ce5e99d7ac76c72959662f6d7e88059afd95f4476dacc8b1469fac29572e61e700eabb78538add10"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x41000, 0x10, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080046000028000000000011907800000000f543996d4404000100004e20001090780200000000000000"], 0x0) ftruncate(0xffffffffffffffff, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x77359400}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000004200)=ANY=[@ANYBLOB='fd=', @ANYRES8=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="36c0621b7c53209f9d8275476f4f739c5cc7a76befaf1d92727069d363edf798c3e7cebbae2be2b0dc2b38218810e14bd73dfa8a3428364a1597efc2510a0cacea7daf141508c6aa9a712b9d154b4f85104896d8c05ec64ddbf7ba59180143071e992d532832b298496b66e640fadf6b6eb3626c70de8fa97993a3af64e1246ace79c1a11c631fee665b432f689e8d3c5bcf98e43c4d56ea67bf5297eb514043f3ffda9ad344daf392fd7a58e2fe5360b1858d574aace04a403946eb1ec9d445ca8c6cce196336f3da0eb88972c0a077d30b5e27151f592e7694865394774d602b0b0b44c2e88acb08d14903240be6f07506223c7caede05eac51d6ef8d7e96f866ad5f5315ad3a2f477ebc07008627da044380322ebde22879ca724de4638307a8a2d8877b485a187ca95d22003ec52cfea4d19a52cea19ddeac0d6ab8f1e6a58b5fa2376aeff833e0ec07fe0990be3e445b58300a21bd9dadb66194164c9d65d3b7b552ab2333d115a3b033c20772238a490c5efb6b8d21b57f858ec3ae25b4f4f6bbc901f8f88e4048e1de8bfe2b671f91d2c075b0a83126c8ad8b63e49ec707eda0ca8c6bbb06f16c7ed9b78fd2c0e3c6d3854b1f96b4536d9dfe0e8c213d10871f21fde33e5ae7396b1df9ad4626f4f9749c4242acee460fe9a273ee06ed66de30b9ddd49b295a502f4dc99114af61f5378f18a9ad16bb4faa03286f2e7da317e76c659be36f08e384da80242bc4ece1d7909b21125ed6536b0527dd7519e42a5ad5f2d21cf6a037acca2135a9d26e4d704393ed3f2920885afbf300da78c8c95d46f890643935f525cba16d5a56bb536be410300ecdc5223430f84fa42a4476031d62142b95c5023d569b401269d05a76a054845a6ad7a2d9ef033b83b0907603ef0d16694fe54798068ce86b9994ad99fe4c769a51fd3c7df28f56ccd33200e3234ce06a5f53e099f2405c45a3406569b6b6f1496a82970e0efde801bc53b8f956b064942d7ab1d19d9bf5331c63474e2d1ae88ad795123fb920405a2db31f1b3ade3129029288f6639b47a3c3e6e511f59f4c7b172e73ded461ddd0449d1b926bccb7d2dcfe50ddd9f86e7a46d6889c922a6a3fe70377956177c470d48bb9c37dc3fa5ec33a6efa870f2f5ab5dfd69bacdb95b9764f1560f44ef7485a9312899ecc40adbc3db0caabaa52083adafc812824e8ff108b0cd4b33a4855c1041aa681914a5f463c713934c72029a86dd4a831db443ca550474021ca2e57cb0cb8d1f1e8be9cd70424c4ea2dd8688255720056bdbea447fbf2b25108738de6f946d504ee44aa8b3e052a87934d95112e8a30ed550a8e1805b574a04eddc2195af5c814e9eac25f1e32cac006701b8bf55017e4b23d8659acf040954bc1ba38032f0050261376cb2076f0bbb75bb769bf85df90fb76725fcb30046a482a0eaba187bf9e614a436c839d5d8664349eb41b6090dd7b637c263a8c5edc56299b9acde5ba8a8568c527207e858f0ebdfb75cdf04615b060d894c314016e65161cb1840080697166cf13d66e633a855396ba4fdaa192486957590bd7c3e30ad8cfbb52c258f6b40857f7f40fe764d7660d42a2dbab31a2a3a935a9a78651123c4a0dc2b8aaab03e84aecdd0d0171577400b6088cfc65df27d7cd5f6f20c7eb0841214bb2b908f711e7da3d21be53be62da493a653af534fd027fad624622c73767d98731a7930170a0432a331c0ff05137a273c1962ca93455aa01f821de0b9a20abf1f93f24fb2b8d7ba14506dd8da75b5ed5ad2d5cc6b06574079e797012843ee96aa2b92c7165d5d630653244b68dcd4f111b3e669fbab4c60381ac4b7e65e0e27d04b751421f90f6e80c29fad199360ed21c12d57300306a495027b5df58ebae84e93b1456e9636b2db9879cb618da03a696061fb5fc8ded97a542c50855a833c5e2367e5a1b3645b9e9b1bc41851f9633ef548350f3ff6b6f89616f29583a88fc76596f2c0166e394942e85806cf219d46e657630cd6e89f24df14068afce93d8922bc8b68ce4057e2a0adb19e3332c1dccdaddf1f63262e701d4f89c0423de53d0e6cc3f94434ee0e6a70d42e0efc5be2f6372e74e15f09a7a54e63e482c345b55b38edb461b69ced6d25fb6741c862e025ffce3af63896e53960f410b9e5495baa20b91714ba37922260cbdb7955d739b900e36ff7ddb9bb515711288a72844e93028515209c308de41b2bb89f1e63294e9798ed8694de738a165bc9bc1492de26c38e8e9db60e14a1bef1186b2ab34547a269ad9493eab2213cfc6b4b48b8b56346759f969018ae53ba7099719b39456cfb1d1d64170d208c617e5ed2fdd8bfe69d9ec262b1fe9f518702d24ce0889429c19d004a639f7a60293abad2e761a64d7e6ecffd144f8557886a40f5a1e6e7a2464320dd5ffed320d15a3e9ae85ee76c39ee649fe2672de66bc6ea946d6ba0f12997fe8c9ece66737b9498cfeb28e58da776b222ae30dabebbc5a3f0e24b147cb92b6b3036ac8ff9ebd57f7956838e70b571ecb8990bb2ca744722b54c8b9d0bfe708a3e0f915bf44ed4425811c9f2b3e917ed742a81ea7b505d25a2b2ae9db05d95ca6fc1bbb3abc5d4cdc35e3ef71b9e4951c440a82fe062f1d17eaa6e64b3f32f95e5dd2ff5aba3e6340702d4ded80eb8c60af79a3dd66da5d9403c5a6c9ccc4121ecf6c832720aa1cfa7986c85bb801c162cd398d0bf397a12bec01f9aec3ecea2c80647001bae7d908d342e1b466e303436fc3e38f42b8ac85a0c50c20748dd36add68ea3b2a70dc5c331000a4e88e8f78538fd99efe5eaab38fe26542fa1492d5b55dafd43d90049922435d037e4e9ae6cc6e8114fcc8263b96d310f3df0b44c9bc1d30fefc545c18c2d6b6ed10722f9ab87194d3cab8a09b23b32513c4fd4d413e609290254358a5f9b8a990acff7b4be2d1dfbccc87de23eb4f4bf2ae25df94c7ed12638df35dfe9e7670ad69e11f6810cae29d8a62c1695253e63f6ead93f8a5a25e190d573aab6c80619856c0a44501d705155777e5f8adf3b8ddebb7eb0a4c3b2eb94e895304bc58bed6f21e262bd1d84ad4d9ec340ee0bc1ba1c536da3aa0b4623e71b033626519e455d7bcc6c58d61ae8be0cc7e8ba407976beb01bc4c820ae6074f097d61013c2b4087de873c6c685e25e23407f61fd776c066ba54d0e935989fa6d44bca911bd0df2ce64abdf59f52c8545ab4c291bb85e92d4e433110c41493a8a87544b1b137e8dabc0b260ea472a975a063b6373150eb41428ff58aa5b3a1e96e924f110239f8b2ab473b67a14f094c83ecaf8ca3b7cc3a1cd84538c94917761614ccd67998167a0947fa87d5890e2fd8226c235fce3c40109412d2d9ba814ae25a66c19b3af1967d791d9950df056d7f729f741651118f5f64853e17864a02ab9d77153d1ef76f6a8f3da25ae2e3cf20e38e2fa633b4b05ec522479d02f72226c869f2c03dd5965a531e4523a2786d8ec81e095b652398d10b24a88ccc68ca540ceeb8e1e5185767626bb625e85ce1ac9d8136b805e804a9fd46a8ff8f8ed00f3e817cd8232ed2382d120a76419c37580037cc8aba94bc0712db1265a10db02d638805836fecdc2091a3050443574c552e2619cdd1bc76ae16e89ef8efad1a51fc96d647e63979c0bad3856444b1f0942222218645240d45810c9917858c99511d1ee2d9b7260ad50394b3c9de35efac51ab9ff76d6721bed30417b8c475527bf0f542da3cdeae6fbb5c9477bd8539fb7d8e29f6bf0ffed3bea78e3be0f458b6157c482db6fe00fa9b57670dd452d1d0cf88b6613fcd1d3eff571ac4ce60d72d1f71f490539d95cfb6d5fd2a2a9d59f3802acdd90f9c732a52f8c0934cafdfa83a249e6af3bbf43d160cfbada223e0a04caad261cfd0c03271be96e4ef26e644b159d9e59ef7f62ad5cf1ee3c4596b041e1f3d9889e865bc62ddc67ca4b34c6aba6541a0e0925182cc904cc0f191ca2ea9078facef4aee886d13bdeb1b9260c9c63f62450e699afdea8340ed2ed1e122480c7e4d085cf3cea1a4192df3fb964c5ec33e0255621a57f3769bebdfd9d75e23beca68c2e4744e162468c85d86ee54f1035cc7e038232cd4e1b89a524a15b632383693c57e112e6545f25819a6e3dc3a8e8053ef71ab360f2658cd353d784555922fffe9e11ad94fd410a0255a68e6ada5f24e77a9c66539772ca3c2ee49098942c1c2dc93be39e299bfb7bb757fb45a51c608da9619ec47ec499fa8aa1f5237be4aff8c730b68c2442481f7b4cf8e1761d7f1692f3b4f70241979d8ae57c9c2d0f00daa4f46cb5d1d6c21eaf680336e00ef6b7e1042c8caa80178f502421478c3c0a6d479635cb7652d0939bbe5d70d61f974c536b250e4234996480d4f0e5afce7782d030388348372c06bfed11fa3c4d4917bea8520e0ac1a5aba3b4396742b4de8a711792d2315ec4cf98ff73ad629423a559f0505f11b38ac2fa9ec0c7b0ac13e8456e63a0573ea98476c9c125d08701cdd3f4edc01faaa370a1a3b15fe6c14d587fcb72c42983dee49ce8e9564387be715e4b62e7df39dfee604f6ba924dad6fb59968a969512fe119156a49fedc2cfe918b03798677016d3ce560ed3274588508c979d893c6183a93f16034ce7febf1fd8d7da6b03951f8e4c9959f16cdc317be766e2a969ae8d7eabfdb774bc77143ab300f0d914a4796bf44ea105e3be9ef07f14a95b19b4b4e18c4ba8c49173ec462c8b68969b312df2d2a6c2271efd3b9558579241f8b0828cd2e41f05824d28660233de94753774729d702ef2ed16d5e89e196f7feb728cf0e0695fe0bc5dc3e8af89445cd6fe6dddec3aea04265d6218544276229aef6444e8063a24bed4fcf981f44c0cd4651096a289ee41ecb558879c10de0702b18ae22905699d92c6e7a479244baa2de840db8211ca2543ea13ecb9a32dc42d6cbeb75c469e7cdff158d97d8c64d8b21eb722b3edb9c82256fe27cb2a968bf78df2b0420b1ab7bc2d837f6b40f78fefc934d680c46b5d6ee7fc5e30866cd7ac0d987434db03345191c3ab184dba791c33eabb633b964ba0d8a4de76979f1a740f1f30c2f0944622434b48521ed82820b3af3f83816e23a8416bb376e2188dd8e350a83fca8738459d13ce880d4f95828f4e0d714f814c158327cc5b6ee9b06b375524daa0a70e00e4cdb7edcaa61aff0201dd1501b1ec1cc7ca0b7ee554bbaea691099b49abc023bea9b6837950b8563454e518d9ebe9f23557cd2ab9789544016cd084b3832a8f36cc162fef1fe9c9a85d2d96636dab52715058bb0cf77c08f1b8d9dbf6bf2db966906cdc09023e77b82fb8551c0d4f28f2d99e48e12cbb165ca22eec74128a4f2423d21cb9ebb5369bfd9353f36a01780985034add042112cdaed1bf6a1aafe52d595baa926d4b118cfbf8c4a084270e278d1d42a2e44f8b1b457c1208db830d70c2bc8ead2f068b8ae2ee87d1c3bc8baa93d7dfefa7158aa45cef5587ce55216860438b514d1b22f8729d4198bcf4147618fa346bb7b8430f0ef90b28c33ec329bedbcc4c48fd54e4a349737ba68acc9fd44ccc9725bfcfb3e48e28bdc6435f080df697e67cefecdc9963af5e71c9bd5f53010e16ba4969d9c126ca37df6e371a9c5a01084eeeccb9740940b2a57140651f6b2f9f6e0a5b55993d97f6432a08155900e20068cd7a76cfa413c5fae58a1c7ee4ae532b9d2edcfc17bf8f41cc2425eb5a9394ee012127f344b7dab6ff3fa8abc0e2fac1ee67c17e2799bd90fdc760ae"]) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002a00090000ab52548082e11c02"], 0x1c}, 0x1, 0x3000000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r4, &(0x7f0000000080), 0xb8fe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150000000000000000000000000000050000000a00000000"], 0x1c}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 6.666947379s ago: executing program 1 (id=2374): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0xb, &(0x7f00000010c0)=ANY=[], 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xc0085508, &(0x7f00000000c0)={{r1}, "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"}) 6.110085856s ago: executing program 1 (id=2375): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5}]}, 0x24}}, 0x0) 1.451312161s ago: executing program 1 (id=2376): msgget$private(0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01"], 0x8, 0x0) 0s ago: executing program 1 (id=2377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@dev, @random, @val, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x5, 0x11, 0x0, @remote, @multicast2}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): 207.296256][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 207.297974][ T29] audit: type=1326 audit(1720365786.779:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x7ffc0000 [ 207.315794][ T9] usb 5-1: config 0 has an invalid interface number: 61 but max is 0 [ 207.383121][ T29] audit: type=1326 audit(1720365786.779:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x7ffc0000 [ 207.391147][ T9] usb 5-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 207.474981][ T9] usb 5-1: config 0 has no interface number 0 [ 207.479927][ T29] audit: type=1326 audit(1720365786.779:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f0299175bd9 code=0x7ffc0000 [ 207.481880][ T9] usb 5-1: too many endpoints for config 0 interface 61 altsetting 173: 47, using maximum allowed: 30 [ 207.552985][ T29] audit: type=1326 audit(1720365786.779:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x7ffc0000 [ 207.704534][ T9] usb 5-1: config 0 interface 61 altsetting 173 has 0 endpoint descriptors, different from the interface descriptor's value: 47 [ 207.722922][ T9] usb 5-1: config 0 interface 61 has no altsetting 0 [ 207.731399][ T29] audit: type=1326 audit(1720365786.779:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8224 comm="syz.0.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x7ffc0000 [ 207.785670][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 207.932613][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.005151][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 208.066476][ T9] usb 5-1: config 0 descriptor?? [ 208.698838][ T6545] usb 4-1: USB disconnect, device number 5 [ 208.790101][ T8212] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 208.921614][ T9] usb 5-1: string descriptor 0 read error: -71 [ 208.948128][ T9] usb 5-1: USB disconnect, device number 5 [ 210.120489][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.135603][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.144997][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.224330][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.255450][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.275349][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.290366][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.305259][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.319517][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.346963][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.354948][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.366150][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.382741][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.390394][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.413906][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.426083][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.443962][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.474483][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.496088][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.659203][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 210.675103][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.499155][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.508211][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.515822][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.523971][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.543603][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.584033][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.620946][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.633319][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.644843][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.650999][ T8300] @ÿ: renamed from veth0_vlan (while UP) [ 211.653839][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.677357][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.720049][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.739176][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.751530][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.759864][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.772254][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.781075][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.791326][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.809063][ T58] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 211.841411][ T58] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 213.947356][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 214.866535][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 214.896405][ T8347] netlink: 'syz.0.1099': attribute type 1 has an invalid length. [ 214.923603][ T8347] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1099'. [ 215.239692][ T8363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 215.628000][ T6545] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 216.003370][ T6545] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.085339][ T6545] usb 1-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 216.115321][ T6545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.172848][ T6545] usb 1-1: config 0 descriptor?? [ 216.196639][ T6545] usb 1-1: bad CDC descriptors [ 216.444193][ T58] usb 1-1: USB disconnect, device number 13 [ 217.018157][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 217.018174][ T29] audit: type=1326 audit(1720365796.779:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8381 comm="syz.4.1113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f663a175bd9 code=0x0 [ 217.046244][ T6545] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 217.226154][ T6545] usb 4-1: Using ep0 maxpacket: 8 [ 217.261531][ T6545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 217.286437][ T6545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.327426][ T6545] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 217.360562][ T6545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.407062][ T6545] usb 4-1: config 0 descriptor?? [ 217.426600][ T6545] hso 4-1:0.0: Can't find BULK IN endpoint [ 217.489611][ T8397] netlink: 'syz.4.1120': attribute type 1 has an invalid length. [ 217.742909][ T6545] usb 4-1: USB disconnect, device number 6 [ 217.770927][ T8405] Process accounting resumed [ 219.219160][ T8418] net_ratelimit: 3 callbacks suppressed [ 219.219179][ T8418] Dead loop on virtual device ip6_vti0, fix it urgently! [ 219.343030][ T29] audit: type=1326 audit(1720365799.099:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8417 comm="syz.1.1127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed9975bd9 code=0x0 [ 220.144733][ T8435] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 220.194073][ T29] audit: type=1326 audit(1720365799.949:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8432 comm="syz.0.1132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x0 [ 220.319205][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 220.352629][ T8446] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 220.363765][ T8446] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1138'. [ 221.071497][ T8499] Process accounting resumed [ 221.607223][ T29] audit: type=1326 audit(1720365801.369:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8516 comm="syz.0.1173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x0 [ 221.642246][ T8526] Process accounting resumed [ 221.655924][ T8529] x_tables: duplicate underflow at hook 3 [ 223.830668][ T29] audit: type=1326 audit(1720365803.589:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8573 comm="syz.0.1191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x0 [ 224.761755][ T29] audit: type=1326 audit(1720365804.509:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 224.766320][ T8593] netlink: 'syz.1.1195': attribute type 1 has an invalid length. [ 224.816723][ T29] audit: type=1326 audit(1720365804.509:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 224.847706][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 224.866123][ T29] audit: type=1326 audit(1720365804.549:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 224.936153][ T29] audit: type=1326 audit(1720365804.549:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 225.047639][ T29] audit: type=1326 audit(1720365804.549:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 225.086832][ T29] audit: type=1326 audit(1720365804.549:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 225.112330][ T29] audit: type=1326 audit(1720365804.549:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 225.135759][ T29] audit: type=1326 audit(1720365804.549:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 225.169473][ T29] audit: type=1326 audit(1720365804.549:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8590 comm="syz.3.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x7ffc0000 [ 225.196672][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 225.398070][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 225.430019][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.436232][ T5131] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 225.465455][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 225.512308][ T25] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 225.534500][ T25] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 225.561828][ T25] usb 4-1: Product: syz [ 225.575111][ T25] usb 4-1: Manufacturer: syz [ 225.593910][ T25] usb 4-1: SerialNumber: syz [ 225.623508][ T25] usb 4-1: config 0 descriptor?? [ 225.641273][ T5131] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=8f.45 [ 225.668211][ T25] usb 4-1: NFC: intf ffff888070df9000 id ffffffff8ec9a0a0 [ 225.691856][ T5131] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.724703][ T5131] usb 2-1: Product: syz [ 225.733880][ T5131] usb 2-1: Manufacturer: syz [ 225.747361][ T5131] usb 2-1: SerialNumber: syz [ 225.758970][ T5131] usb 2-1: config 0 descriptor?? [ 225.775124][ T5131] disable ehci-hcd to run US-144 [ 225.913686][ T5131] usb 4-1: USB disconnect, device number 7 [ 226.147292][ T25] usb 2-1: USB disconnect, device number 7 [ 227.340800][ T8652] netlink: 'syz.4.1220': attribute type 12 has an invalid length. [ 227.482611][ T8659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.856369][ T5180] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 228.048011][ T5180] usb 2-1: Using ep0 maxpacket: 16 [ 228.065578][ T5180] usb 2-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=b4.75 [ 228.081304][ T5180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.091288][ T5180] usb 2-1: Product: syz [ 228.095618][ T5180] usb 2-1: Manufacturer: syz [ 228.104307][ T5180] usb 2-1: SerialNumber: syz [ 228.113797][ T5180] usb 2-1: config 0 descriptor?? [ 228.126336][ T5180] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 228.343544][ T5180] gspca_sn9c2028: read1 error -32 [ 228.364757][ T5180] gspca_sn9c2028: read1 error -32 [ 228.965687][ T5180] gspca_sn9c2028: read1 error -110 [ 228.993192][ T5180] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -110 [ 229.015062][ T5180] usb 2-1: Found UVC 0.00 device syz (0458:7005) [ 229.025810][ T5180] usb 2-1: No valid video chain found. [ 229.190481][ T8705] syz.2.1240: attempt to access beyond end of device [ 229.190481][ T8705] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 229.203870][ T8705] (syz.2.1240,8705,1):ocfs2_get_sector:1771 ERROR: status = -5 [ 229.211592][ T8705] (syz.2.1240,8705,1):ocfs2_sb_probe:749 ERROR: status = -5 [ 229.219062][ T8705] (syz.2.1240,8705,1):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 229.227776][ T8705] (syz.2.1240,8705,1):ocfs2_fill_super:1178 ERROR: status = -5 [ 229.853739][ T5180] usb 2-1: USB disconnect, device number 8 [ 230.574963][ T8714] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 230.807055][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 230.807073][ T29] audit: type=1326 audit(1720365810.559:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8730 comm="syz.2.1249" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2317d75bd9 code=0x0 [ 231.016483][ T5088] Bluetooth: hci4: unexpected event 0x04 length: 11 > 10 [ 231.462104][ T29] audit: type=1326 audit(1720365811.219:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8752 comm="syz.0.1257" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x0 [ 231.593931][ T8754] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1255'. [ 231.640096][ T8754] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1255'. [ 231.694926][ T8759] ipt_REJECT: TCP_RESET invalid for non-tcp [ 231.706967][ T8754] tipc: Enabling of bearer rejected, failed to enable media [ 231.719242][ T8759] syz.1.1259 (8759): attempted to duplicate a private mapping with mremap. This is not supported. [ 232.172895][ T8761] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 233.096493][ T5088] Bluetooth: hci4: command tx timeout [ 233.308672][ T8787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.437468][ T8764] syz.1.1259 (8764): drop_caches: 2 [ 233.823735][ T8803] netlink: 'syz.0.1272': attribute type 10 has an invalid length. [ 233.855647][ T8803] team0: Port device netdevsim0 added [ 234.001221][ T29] audit: type=1326 audit(1720365813.759:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8807 comm="syz.3.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x0 [ 234.268611][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 234.479246][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 234.486379][ T8819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1277'. [ 234.509287][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.527038][ T9] usb 1-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 234.545473][ T8819] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1277'. [ 234.612072][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 234.613824][ T8819] tipc: Enabling of bearer rejected, failed to enable media [ 234.643053][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.656553][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 234.666327][ T9] usb 1-1: SerialNumber: syz [ 234.683671][ T9] cdc_ether 1-1:1.0: skipping garbage [ 234.689741][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 235.091375][ T5132] usb 1-1: USB disconnect, device number 14 [ 235.476127][ T5180] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 235.668361][ T5180] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 235.686185][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.698968][ T5180] usb 4-1: config 0 descriptor?? [ 237.260551][ T6545] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 237.388174][ T5180] pegasus 4-1:0.0: setup Pegasus II specific registers [ 237.472441][ T6545] usb 2-1: Using ep0 maxpacket: 32 [ 237.535932][ T5180] pegasus 4-1:0.0: can't locate MII phy, using default [ 237.577148][ T4478] Bluetooth: hci1: command 0x0406 tx timeout [ 237.606575][ T5180] pegasus 4-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 6e:39:d2:52:3c:ee [ 237.616987][ T5180] usb 4-1: USB disconnect, device number 8 [ 237.693920][ T8870] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 237.710266][ T8870] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1298'. [ 237.722986][ T8870] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 238.522213][ T5180] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 238.751791][ T5180] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.775172][ T5180] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.791428][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 238.805022][ T5180] usb 4-1: SerialNumber: syz [ 238.847209][ T5180] usb 4-1: bad CDC descriptors [ 238.941182][ T6545] usb 2-1: unable to get BOS descriptor or descriptor too short [ 238.969714][ T6545] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 239.000057][ T6545] usb 2-1: can't read configurations, error -71 [ 239.091617][ T5180] usb 4-1: USB disconnect, device number 9 [ 239.602605][ T8911] netlink: 'syz.0.1315': attribute type 21 has an invalid length. [ 239.610641][ T8911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1315'. [ 239.624451][ T8911] netlink: 'syz.0.1315': attribute type 3 has an invalid length. [ 239.716104][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 239.932472][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.950236][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.964548][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 239.984194][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.999309][ T9] usb 5-1: config 0 descriptor?? [ 240.177343][ T8936] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1323'. [ 240.189004][ T8936] unsupported nlmsg_type 40 [ 240.441631][ T9] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 240.455449][ T8941] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [FSRP] [ 240.470970][ T9] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 240.507910][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0008/input/input10 [ 240.592475][ T9] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 240.666152][ T9] usb 5-1: USB disconnect, device number 6 [ 240.997823][ T25] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 241.209583][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.227999][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.248861][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.268672][ T25] usb 3-1: SerialNumber: syz [ 241.301769][ T25] usb 3-1: bad CDC descriptors [ 241.328662][ T5088] Bluetooth: hci2: adv larger than maximum supported [ 241.328724][ T5088] Bluetooth: hci2: Unknown advertising packet type: 0x30 [ 241.335755][ T5088] Bluetooth: hci2: Malformed LE Event: 0x0d [ 241.417886][ T5088] Bluetooth: hci0: unexpected event 0x04 length: 11 > 10 [ 241.525251][ T25] usb 3-1: USB disconnect, device number 11 [ 242.332822][ T8985] netlink: 'syz.2.1342': attribute type 10 has an invalid length. [ 242.363603][ T8985] team0: Port device netdevsim0 added [ 242.478824][ T6545] kernel write not supported for file /input/event0 (pid: 6545 comm: kworker/0:6) [ 242.501502][ T5088] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 242.513093][ T29] audit: type=1326 audit(1720365822.279:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8987 comm="syz.0.1343" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x0 [ 242.806163][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 242.813884][ T5088] Bluetooth: hci1: unexpected event 0x04 length: 11 > 10 [ 243.015536][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 243.029306][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 243.036629][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.054950][ T9] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 243.076936][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 243.101106][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.115946][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 243.132339][ T9] usb 3-1: SerialNumber: syz [ 243.161286][ T9] cdc_ether 3-1:1.0: skipping garbage [ 243.181189][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 243.219385][ T8989] ceph: No mds server is up or the cluster is laggy [ 243.526530][ T9] usb 3-1: USB disconnect, device number 12 [ 243.783562][ T9042] futex_wake_op: syz.0.1366 tries to shift op by -1; fix this program [ 243.912664][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 243.920016][ T1083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.089399][ T1083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.217799][ T6545] libceph: connect (1)[c::]:6789 error -101 [ 244.229584][ T6545] libceph: mon0 (1)[c::]:6789 connect error [ 244.240982][ T1083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.330079][ T5088] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 244.340437][ T29] audit: type=1326 audit(1720365824.099:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9054 comm="syz.3.1373" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff094375bd9 code=0x0 [ 244.361300][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.431952][ T1083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.460407][ T4478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.470656][ T4478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.481231][ T4478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.503325][ T4478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.504359][ T6545] libceph: connect (1)[c::]:6789 error -101 [ 244.523082][ T4478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.530518][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 244.539399][ T6545] libceph: mon0 (1)[c::]:6789 connect error [ 244.554378][ T4478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.726131][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 244.760043][ T1083] bridge_slave_1: left allmulticast mode [ 244.773132][ T1083] bridge_slave_1: left promiscuous mode [ 244.780912][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.793818][ T1083] bridge_slave_0: left allmulticast mode [ 244.806398][ T1083] bridge_slave_0: left promiscuous mode [ 244.815831][ T9080] futex_wake_op: syz.0.1380 tries to shift op by -1; fix this program [ 244.818942][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.856269][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 245.045397][ T9055] ceph: No mds server is up or the cluster is laggy [ 245.067560][ T9] libceph: connect (1)[c::]:6789 error -101 [ 245.079082][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 245.795696][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.826501][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.839799][ T1083] bond0 (unregistering): Released all slaves [ 245.945272][ T5088] Bluetooth: hci3: unexpected event for opcode 0x0c46 [ 245.948319][ T29] audit: type=1326 audit(1720365825.709:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9110 comm="syz.2.1392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2317d75bd9 code=0x0 [ 246.149824][ T9071] chnl_net:caif_netlink_parms(): no params data found [ 246.220454][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 246.233653][ T25] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 246.251417][ T25] usb 2-1: can't read configurations, error -71 [ 246.280527][ T1083] hsr_slave_0: left promiscuous mode [ 246.290152][ T1083] hsr_slave_1: left promiscuous mode [ 246.302068][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.309879][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.320457][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.328299][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.364893][ T1083] veth1_macvtap: left promiscuous mode [ 246.386158][ T1083] veth0_macvtap: left promiscuous mode [ 246.394142][ T1083] veth1_vlan: left promiscuous mode [ 246.400162][ T1083] @ÿ: left promiscuous mode [ 246.544089][ T5132] kernel write not supported for file /input/event0 (pid: 5132 comm: kworker/1:7) [ 246.616374][ T5088] Bluetooth: hci4: command tx timeout [ 246.665922][ T9111] ceph: No mds server is up or the cluster is laggy [ 246.743289][ T4478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 246.753813][ T4478] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 246.792432][ T4478] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 246.803829][ T4478] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 246.831658][ T4478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 246.842795][ T4478] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 247.430837][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 247.501882][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 247.606314][ T5131] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 247.800022][ T5131] usb 1-1: Using ep0 maxpacket: 32 [ 247.810078][ T5131] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 247.820862][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.831962][ T5131] usb 1-1: config 0 descriptor?? [ 247.840267][ T5131] gspca_main: sunplus-2.14.0 probing 041e:400b [ 248.170087][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.185402][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.193089][ T9071] bridge_slave_0: entered allmulticast mode [ 248.202993][ T9071] bridge_slave_0: entered promiscuous mode [ 248.229650][ T9071] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.237502][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.244771][ T9071] bridge_slave_1: entered allmulticast mode [ 248.254603][ T9071] bridge_slave_1: entered promiscuous mode [ 248.290813][ T5082] syz-executor (5082) used greatest stack depth: 19408 bytes left [ 248.328731][ T9071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.365034][ T9071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.494023][ T9071] team0: Port device team_slave_0 added [ 248.512838][ T9071] team0: Port device team_slave_1 added [ 248.586768][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.594340][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.655890][ T9071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.700333][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.707560][ T5088] Bluetooth: hci4: command tx timeout [ 248.733768][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.759747][ C1] vkms_vblank_simulate: vblank timer overrun [ 248.796170][ T9071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.867006][ T4478] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 248.882126][ T4478] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 248.890843][ T4478] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 248.907269][ T4478] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 248.929128][ T4478] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 248.936543][ T4478] Bluetooth: hci2: command tx timeout [ 248.946563][ T4478] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 249.197576][ T1083] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.257382][ T9071] hsr_slave_0: entered promiscuous mode [ 249.289232][ T9071] hsr_slave_1: entered promiscuous mode [ 249.303154][ T9071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.322809][ T9071] Cannot create hsr debugfs directory [ 249.441002][ T1083] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.467947][ T5131] gspca_sunplus: reg_w_riv err -71 [ 249.480081][ T5131] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 249.500707][ T5131] usb 1-1: USB disconnect, device number 15 [ 249.534690][ T9126] chnl_net:caif_netlink_parms(): no params data found [ 249.567763][ T1083] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.712494][ T1083] team0: Port device netdevsim0 removed [ 249.719703][ T1083] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.915952][ T9126] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.925862][ T9126] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.934119][ T9126] bridge_slave_0: entered allmulticast mode [ 249.943060][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1412'. [ 249.943758][ T9126] bridge_slave_0: entered promiscuous mode [ 249.963772][ T9126] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.970938][ T9126] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.980703][ T9126] bridge_slave_1: entered allmulticast mode [ 249.988093][ T9126] bridge_slave_1: entered promiscuous mode [ 250.118364][ T9126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.181156][ T9126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.285528][ T9126] team0: Port device team_slave_0 added [ 250.301160][ T9179] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1413'. [ 250.319113][ T1083] bridge_slave_1: left allmulticast mode [ 250.338703][ T1083] bridge_slave_1: left promiscuous mode [ 250.359172][ T9180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 250.366301][ T1083] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.400771][ T1083] bridge_slave_0: left allmulticast mode [ 250.409522][ T1083] bridge_slave_0: left promiscuous mode [ 250.418460][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.687294][ T5132] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 250.786348][ T4478] Bluetooth: hci4: command tx timeout [ 250.895490][ T9184] netlink: 'syz.1.1414': attribute type 4 has an invalid length. [ 250.904646][ T9184] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1414'. [ 250.923368][ T5132] usb 1-1: descriptor type invalid, skip [ 250.936520][ T5132] usb 1-1: descriptor type invalid, skip [ 250.942193][ T5132] usb 1-1: descriptor type invalid, skip [ 250.972491][ T5132] usb 1-1: not running at top speed; connect to a high speed hub [ 250.983689][ T5132] usb 1-1: config 1 interface 0 altsetting 194 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.006581][ T5132] usb 1-1: config 1 interface 0 has no altsetting 0 [ 251.019825][ T5088] Bluetooth: hci2: command tx timeout [ 251.026111][ T4478] Bluetooth: hci3: command tx timeout [ 251.029514][ T5132] usb 1-1: New USB device found, idVendor=04e7, idProduct=0050, bcdDevice= 0.40 [ 251.051517][ T5132] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.063907][ T5132] usb 1-1: Product: syz [ 251.069788][ T5132] usb 1-1: Manufacturer: syz [ 251.074549][ T5132] usb 1-1: SerialNumber: syz [ 251.091787][ T9180] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 251.145591][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.169396][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.185264][ T1083] bond0 (unregistering): Released all slaves [ 251.207655][ T9160] chnl_net:caif_netlink_parms(): no params data found [ 251.248613][ T9126] team0: Port device team_slave_1 added [ 251.454289][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.478924][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.513416][ T9126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.566607][ T9126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.591048][ T9126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.617130][ C1] vkms_vblank_simulate: vblank timer overrun [ 251.634995][ T9126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.896431][ T9160] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.905109][ T9160] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.914442][ T9160] bridge_slave_0: entered allmulticast mode [ 251.921936][ T9160] bridge_slave_0: entered promiscuous mode [ 252.065867][ T9160] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.084278][ T9160] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.096299][ T9160] bridge_slave_1: entered allmulticast mode [ 252.104068][ T9160] bridge_slave_1: entered promiscuous mode [ 252.124013][ T9126] hsr_slave_0: entered promiscuous mode [ 252.135296][ T9126] hsr_slave_1: entered promiscuous mode [ 252.152706][ T9126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.165910][ T9126] Cannot create hsr debugfs directory [ 252.352560][ T9071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.404997][ T9160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.433635][ T9071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.468477][ T9071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.541707][ T9160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.610875][ T9071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.772632][ T1083] hsr_slave_0: left promiscuous mode [ 252.794740][ T1083] hsr_slave_1: left promiscuous mode [ 252.810452][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.818140][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.829334][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.838184][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.852517][ T1083] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 252.860322][ T4478] Bluetooth: hci4: command tx timeout [ 252.867349][ T1083] batman_adv: batadv0: Removing interface: ipvlan2 [ 252.914979][ T1083] veth0_macvtap: left promiscuous mode [ 252.921538][ T1083] veth1_vlan: left promiscuous mode [ 252.928243][ T1083] veth0_vlan: left promiscuous mode [ 253.096829][ T4478] Bluetooth: hci3: command tx timeout [ 253.102274][ T5088] Bluetooth: hci2: command tx timeout [ 253.265276][ T5132] usbhid 1-1:1.0: can't add hid device: -71 [ 253.271914][ T5132] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 253.301899][ T5132] usb 1-1: USB disconnect, device number 16 [ 254.461799][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 254.503790][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 254.869344][ T9160] team0: Port device team_slave_0 added [ 254.951829][ T9160] team0: Port device team_slave_1 added [ 255.111913][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.126769][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.165611][ T9160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.182085][ T9160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.193054][ T4478] Bluetooth: hci3: command tx timeout [ 255.198637][ T4478] Bluetooth: hci2: command tx timeout [ 255.215416][ T9160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.242768][ T9160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.468606][ T9160] hsr_slave_0: entered promiscuous mode [ 255.497383][ T9160] hsr_slave_1: entered promiscuous mode [ 255.680614][ T9126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.933297][ T9126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.003800][ T9235] openvswitch: netlink: Missing key (keys=40, expected=80) [ 256.058604][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.065174][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.777549][ T9126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.831840][ T9071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.878057][ T9126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.903532][ T9071] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.928000][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.935178][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.948008][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.955165][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.996380][ T5180] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 257.210526][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.219650][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.222299][ T5180] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.241597][ T5180] usb 2-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.00 [ 257.251383][ T5180] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.266729][ T5088] Bluetooth: hci3: command tx timeout [ 257.275127][ T5180] usb 2-1: config 0 descriptor?? [ 257.291604][ T5180] usbhid 2-1:0.0: can't add hid device: -22 [ 257.310603][ T5180] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 257.386461][ T25] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 257.440647][ T9126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 257.482878][ T9126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 257.500309][ T9126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 257.533841][ T9126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 257.542882][ T5180] usb 2-1: USB disconnect, device number 13 [ 257.570058][ T9160] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 257.581043][ T9160] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 257.604052][ T9160] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 257.613295][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 257.615939][ T9160] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 257.632951][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 257.645124][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 257.663785][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 257.677939][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.690465][ T25] usb 1-1: config 0 descriptor?? [ 257.700951][ T9255] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 257.766672][ T9071] veth0_vlan: entered promiscuous mode [ 257.800051][ T9071] veth1_vlan: entered promiscuous mode [ 257.919992][ T9071] veth0_macvtap: entered promiscuous mode [ 257.930502][ T9071] veth1_macvtap: entered promiscuous mode [ 257.948558][ T9126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.992181][ T9160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.004553][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.015301][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.028134][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.042959][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.053423][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.064276][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.076577][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.090526][ T9126] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.111440][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.118649][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.132328][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.139526][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.152844][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 258.170912][ T25] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 258.198106][ T25] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 258.251047][ T9160] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.307138][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.328141][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.345735][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.365496][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.383802][ T9071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.394945][ T9071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.425048][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.436041][ T5131] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.443153][ T5131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.452138][ T5131] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.459370][ T5131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.234439][ T5127] usb 1-1: USB disconnect, device number 17 [ 259.309839][ T9071] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.323811][ T9071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.336391][ T9071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.345174][ T9071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.409109][ T9126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 259.446369][ T9126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.631442][ T9273] openvswitch: netlink: Missing key (keys=40, expected=80) [ 260.378030][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.401362][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.490748][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.526613][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.575200][ T9126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.712427][ T9160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.780944][ T9126] veth0_vlan: entered promiscuous mode [ 260.827070][ T35] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 260.859775][ T9126] veth1_vlan: entered promiscuous mode [ 261.013829][ T9160] veth0_vlan: entered promiscuous mode [ 261.059631][ T9160] veth1_vlan: entered promiscuous mode [ 261.132877][ T9126] veth0_macvtap: entered promiscuous mode [ 261.187212][ T9126] veth1_macvtap: entered promiscuous mode [ 261.263641][ T9160] veth0_macvtap: entered promiscuous mode [ 261.327910][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.378717][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.402441][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.413219][ T5130] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 261.447156][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.470998][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.509828][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.524994][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.549079][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.587679][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.618419][ T9160] veth1_macvtap: entered promiscuous mode [ 261.640058][ T5130] usb 2-1: Using ep0 maxpacket: 16 [ 261.675316][ T5130] usb 2-1: descriptor type invalid, skip [ 261.696100][ T5130] usb 2-1: descriptor type invalid, skip [ 261.710020][ T5130] usb 2-1: descriptor type invalid, skip [ 261.733239][ T5130] usb 2-1: config 0 has no interfaces? [ 261.734450][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.765249][ T5130] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 261.782726][ T5130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.793602][ T5130] usb 2-1: Product: syz [ 261.796257][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.801470][ T5130] usb 2-1: Manufacturer: syz [ 261.822926][ T5130] usb 2-1: SerialNumber: syz [ 261.832411][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.839086][ T5130] usb 2-1: config 0 descriptor?? [ 261.876122][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.905380][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.923088][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.933773][ T9126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.946893][ T9126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.967826][ T9126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.998088][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.017592][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.038568][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.055616][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.068887][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.079572][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.089557][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.111647][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.121721][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.141484][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.155679][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.178941][ T9126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.188190][ T5131] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 262.199330][ T9126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.211425][ T9126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.221947][ T9126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.257438][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.274964][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.286751][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.297719][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.313803][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.332704][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.344282][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.352081][ T9313] netlink: 'syz.4.1456': attribute type 20 has an invalid length. [ 262.355769][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.372972][ T9313] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1456'. [ 262.382656][ T9160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.393493][ T9160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.405134][ T9160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.408567][ T5131] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 262.458140][ T5131] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 262.459367][ T9160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.479177][ T9160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.488951][ T9160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.500394][ T5131] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.512044][ T9160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.515092][ T5131] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.538119][ T5131] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.589477][ T5131] usb 1-1: config 0 descriptor?? [ 262.606523][ T9309] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 262.735438][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.744783][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.754812][ T51] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 262.789648][ T5127] usb 2-1: USB disconnect, device number 14 [ 262.858444][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.892068][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.895509][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.911784][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.025051][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.053373][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.088433][ T5131] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 263.122638][ T5131] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 263.154841][ T5131] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 263.171879][ T9326] futex_wake_op: syz.1.1460 tries to shift op by -1; fix this program [ 263.410166][ T5127] usb 1-1: USB disconnect, device number 18 [ 263.558392][ T29] audit: type=1326 audit(1720365843.319:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9340 comm="syz.1.1463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed9975bd9 code=0x0 [ 263.578837][ T9343] netlink: 'syz.2.1465': attribute type 20 has an invalid length. [ 263.602096][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1465'. [ 263.816684][ T5180] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 264.007084][ T5180] usb 4-1: Using ep0 maxpacket: 8 [ 264.031752][ T5180] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=bd.3b [ 264.048182][ T5180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.063552][ T5180] usb 4-1: config 0 descriptor?? [ 264.147619][ T5088] Bluetooth: hci4: adv larger than maximum supported [ 264.147703][ T5088] Bluetooth: hci4: Unknown advertising packet type: 0x30 [ 264.156662][ T5088] Bluetooth: hci4: Malformed LE Event: 0x0d [ 264.924228][ T25] usb 4-1: USB disconnect, device number 10 [ 265.406541][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 265.526974][ T9390] vhci_hcd: invalid port number 0 [ 265.822336][ T9397] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 266.679861][ T9395] macvlan0: entered promiscuous mode [ 266.727854][ T9395] macvlan0: left promiscuous mode [ 266.783822][ T9403] binder: 9402:9403 ioctl 4018620d 0 returned -22 [ 266.942338][ T9412] netlink: 'syz.2.1493': attribute type 21 has an invalid length. [ 266.988472][ T9413] Context (ID=0x4da) not attached to queue pair (handle=0x0:0x0) [ 267.009792][ T9412] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1493'. [ 267.043689][ T9412] netlink: 'syz.2.1493': attribute type 5 has an invalid length. [ 267.086645][ T9412] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1493'. [ 267.136312][ T5088] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 267.530482][ T9433] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 268.437167][ T9439] macvlan0: entered promiscuous mode [ 268.458766][ T9439] macvlan0: left promiscuous mode [ 268.698529][ T9449] Context (ID=0x4d8) not attached to queue pair (handle=0x0:0x0) [ 269.336338][ T9466] openvswitch: netlink: Missing key (keys=40, expected=80) [ 269.790057][ T5088] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 271.377724][ T9518] netlink: 'syz.0.1536': attribute type 21 has an invalid length. [ 271.393939][ T9518] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1536'. [ 271.405087][ T9518] netlink: 'syz.0.1536': attribute type 5 has an invalid length. [ 271.415520][ T9518] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1536'. [ 271.659196][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1538'. [ 271.685808][ T9532] netlink: 'syz.4.1538': attribute type 18 has an invalid length. [ 271.730532][ T9532] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.740446][ T9532] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.749265][ T9532] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.758180][ T9532] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.802988][ T9532] vxlan0: entered promiscuous mode [ 272.154118][ T9548] netlink: 'syz.1.1547': attribute type 4 has an invalid length. [ 273.316420][ T9557] netlink: 'syz.4.1550': attribute type 21 has an invalid length. [ 273.346118][ T9557] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1550'. [ 273.377043][ T9557] netlink: 'syz.4.1550': attribute type 5 has an invalid length. [ 273.406142][ T9557] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1550'. [ 274.158174][ T9586] sctp: [Deprecated]: syz.4.1563 (pid 9586) Use of int in max_burst socket option deprecated. [ 274.158174][ T9586] Use struct sctp_assoc_value instead [ 274.623356][ T5088] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 274.645948][ T5088] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 274.713087][ T9609] program syz.4.1574 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 274.994589][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1577'. [ 275.013429][ T9623] netlink: 'syz.4.1577': attribute type 18 has an invalid length. [ 275.166464][ T9636] program syz.1.1587 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.199996][ T9634] wireguard: wg0: Could not create IPv6 socket [ 276.057438][ T9673] program syz.4.1600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.590432][ T9690] delete_channel: no stack [ 276.742059][ T29] audit: type=1326 audit(1720365856.499:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9697 comm="syz.1.1609" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed9975bd9 code=0x0 [ 278.972235][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 279.007260][ T9765] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1632'. [ 279.016750][ T9763] netlink: 'syz.0.1631': attribute type 18 has an invalid length. [ 279.035810][ T9765] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1632'. [ 279.057963][ T9763] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.066994][ T9763] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.075716][ T9763] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.084725][ T9763] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.102542][ T9763] vxlan0: entered promiscuous mode [ 279.134848][ T9764] netlink: 'syz.4.1634': attribute type 4 has an invalid length. [ 279.424730][ T9776] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 281.171547][ T9772] sched: RT throttling activated [ 281.972594][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.203494][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.458558][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.557618][ T9802] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.669517][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.671054][ T9807] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1647'. [ 282.726060][ T9807] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1647'. [ 282.787728][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.559055][ T9845] program syz.1.1663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.873347][ T29] audit: type=1400 audit(1720365863.629:97): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9855 comm="syz.2.1666" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 284.015633][ T6545] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 284.032221][ T6545] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.454498][ T5127] IPVS: starting estimator thread 0... [ 284.576153][ T9882] IPVS: using max 19 ests per chain, 45600 per kthread [ 284.746905][ T9890] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 285.138581][ T9901] vlan2: entered promiscuous mode [ 285.155107][ T9901] bond0: entered promiscuous mode [ 285.175274][ T9901] bond_slave_0: entered promiscuous mode [ 285.182540][ T6545] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 285.202806][ T9901] bond_slave_1: entered promiscuous mode [ 285.214952][ T6545] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 285.231581][ T9901] bond0: left promiscuous mode [ 285.240664][ T9901] bond_slave_0: left promiscuous mode [ 285.251129][ T9901] bond_slave_1: left promiscuous mode [ 285.794510][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1688'. [ 286.019471][ T784] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 286.033017][ T784] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 286.176752][ T29] audit: type=1400 audit(1720365865.929:98): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9934 comm="syz.4.1697" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0 [ 286.911364][ T29] audit: type=1326 audit(1720365866.669:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9949 comm="syz.4.1703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65fff75bd9 code=0x0 [ 287.249915][ T29] audit: type=1400 audit(1720365867.009:100): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=9965 comm="syz.2.1710" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 287.609959][ T9977] vlan2: entered promiscuous mode [ 287.631073][ T9977] bond0: entered promiscuous mode [ 287.643811][ T9977] bond_slave_0: entered promiscuous mode [ 287.653897][ T9977] bond_slave_1: entered promiscuous mode [ 287.688810][ T9977] bond0: left promiscuous mode [ 287.704585][ T9977] bond_slave_0: left promiscuous mode [ 287.721006][ T9977] bond_slave_1: left promiscuous mode [ 288.206265][ T5180] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 288.298389][ T29] audit: type=1800 audit(1720365868.059:101): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1728" name="bus" dev="overlay" ino=2002 res=0 errno=0 [ 288.302740][T10009] evm: overlay not supported [ 288.421865][T10013] input: syz0 as /devices/virtual/input/input13 [ 288.431983][ T5180] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.461597][ T5180] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a04, bcdDevice=a3.91 [ 288.486533][ T5180] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.503097][ T5180] usb 3-1: Product: syz [ 288.510547][ T5180] usb 3-1: Manufacturer: syz [ 288.515250][ T5180] usb 3-1: SerialNumber: syz [ 288.529317][ T5180] usb 3-1: config 0 descriptor?? [ 288.631904][T10020] vlan2: entered promiscuous mode [ 288.648067][T10020] bond0: entered promiscuous mode [ 288.654369][T10020] bond_slave_0: entered promiscuous mode [ 288.668937][T10020] bond_slave_1: entered promiscuous mode [ 288.685131][T10020] bond0: left promiscuous mode [ 288.693107][T10020] bond_slave_0: left promiscuous mode [ 288.702811][T10020] bond_slave_1: left promiscuous mode [ 288.784031][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 289.926576][T10046] input: syz0 as /devices/virtual/input/input14 [ 290.074925][T10051] macvlan0: entered promiscuous mode [ 290.093520][T10051] ipvlan0: entered promiscuous mode [ 290.108271][T10056] 9pnet: Unknown protocol version 9p20 [ 290.142585][T10051] ipvlan0: left promiscuous mode [ 290.161749][T10051] macvlan0: left promiscuous mode [ 290.190974][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 290.656261][ T5127] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 290.805506][T10074] veth1_macvtap: left promiscuous mode [ 290.812273][T10074] macsec0: entered allmulticast mode [ 290.824084][T10074] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 291.368109][ T5131] libceph: connect (1)[c::]:6789 error -101 [ 291.502899][T10076] ceph: No mds server is up or the cluster is laggy [ 291.515508][ T5127] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.525841][ T5127] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 767 [ 291.537113][ T5127] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.550228][ T5131] libceph: mon0 (1)[c::]:6789 connect error [ 291.556906][ T5131] usb 3-1: USB disconnect, device number 13 [ 291.600944][ T5127] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.636076][ T5127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.654552][ T5127] usb 5-1: Product: syz [ 291.659099][ T5127] usb 5-1: Manufacturer: syz [ 291.663845][ T5127] usb 5-1: SerialNumber: syz [ 291.697053][T10065] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 291.715383][T10075] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.721754][T10075] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 291.814685][T10075] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.822852][T10075] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 291.897544][T10088] 9pnet: Unknown protocol version 9p20 [ 291.925188][T10075] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.931192][T10075] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 291.956189][T10075] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.962133][T10075] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 291.988259][T10075] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.994208][T10075] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 292.203920][T10098] ieee802154 phy0 wpan0: encryption failed: -90 [ 292.841166][T10124] 9pnet: Unknown protocol version 9p20 [ 292.885791][T10125] tipc: Started in network mode [ 292.895309][T10125] tipc: Node identity , cluster identity 4711 [ 292.924521][T10125] tipc: Failed to set node id, please configure manually [ 292.938944][T10126] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 292.943268][T10125] tipc: Enabling of bearer rejected, failed to enable media [ 292.972212][T10126] vhci_hcd: invalid port number 9 [ 292.986102][T10130] ieee802154 phy0 wpan0: encryption failed: -90 [ 293.015220][T10126] vhci_hcd: invalid port number 9 [ 293.632490][ T5127] cdc_ncm 5-1:1.0: bind() failure [ 293.650271][ T5127] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 293.669666][ T5127] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 293.691013][ T5127] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 293.728336][ T5127] usb 5-1: USB disconnect, device number 7 [ 293.825697][ T29] audit: type=1326 audit(1720365873.579:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10152 comm="syz.0.1786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0299175bd9 code=0x0 [ 293.852120][T10153] 9pnet: Unknown protocol version 9p20 [ 297.888237][T10232] netlink: 'syz.3.1812': attribute type 2 has an invalid length. [ 297.935647][T10232] netlink: 'syz.3.1812': attribute type 4 has an invalid length. [ 298.342510][T10252] overlay: Unknown parameter 'obj_role' [ 299.774613][T10300] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1839'. [ 300.724977][T10312] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 300.777506][ T5180] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 300.968009][ T5180] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 300.990990][ T5180] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.016459][ T5180] usb 3-1: config 0 descriptor?? [ 302.660194][ T5180] pegasus 3-1:0.0: probe with driver pegasus failed with error -32 [ 302.919711][ T6545] usb 3-1: USB disconnect, device number 14 [ 303.305097][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.318379][ T5127] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 303.435241][T10360] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.529614][ T5127] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 303.547490][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.561463][ T5127] usb 5-1: config 0 descriptor?? [ 303.820315][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.982552][ T5127] [drm:udl_init] *ERROR* Selecting channel failed [ 304.019601][ T5127] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 304.031447][ T5127] [drm] Initialized udl on minor 2 [ 304.052512][ T5127] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.086664][ T5127] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 304.111931][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 304.123653][ T5127] usb 5-1: USB disconnect, device number 8 [ 304.137650][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 305.776437][ T5180] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 307.457254][ T5180] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 307.478378][ T5180] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.500342][ T5180] usb 5-1: config 0 descriptor?? [ 308.120727][ T5180] [drm:udl_init] *ERROR* Selecting channel failed [ 308.195317][ T5180] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 308.245566][ T5180] [drm] Initialized udl on minor 2 [ 308.263959][ T5180] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 308.460162][T10485] TCP: TCP_TX_DELAY enabled [ 309.138714][ T5180] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 309.151254][ T5127] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 309.160583][ T5180] usb 5-1: USB disconnect, device number 9 [ 309.167255][ T5127] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 309.644972][T10504] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 310.213079][T10537] program syz.3.1937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.939897][T10567] ebt_limit: overflow, try lower: 0/0 [ 312.035612][T10577] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 312.157053][T10581] nullb0: AHDI p1 p2 [ 312.162202][T10581] nullb0: p1 start 1888931089 is beyond EOD, truncated [ 312.575029][T10599] bridge0: port 3(veth1_vlan) entered blocking state [ 312.588628][T10599] bridge0: port 3(veth1_vlan) entered disabled state [ 312.596735][T10599] veth1_vlan: entered allmulticast mode [ 312.612255][T10599] veth1_vlan: left allmulticast mode [ 312.839502][T10611] nullb0: AHDI p1 p2 [ 312.846421][T10611] nullb0: p1 start 1888931089 is beyond EOD, truncated [ 313.270377][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.304090][T10624] bridge_slave_1: left promiscuous mode [ 313.319616][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.371438][T10624] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 313.373917][T10633] input: syz1 as /devices/virtual/input/input15 [ 314.286216][T10650] program syz.0.1982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.687741][T10666] input: syz1 as /devices/virtual/input/input16 [ 315.485360][T10668] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 316.851376][ T5127] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 316.870308][T10695] program syz.2.1997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.098924][T10701] sp0: Synchronizing with TNC [ 317.132873][ T5127] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 317.144948][T10707] nullb0: AHDI p1 p2 [ 317.151246][ T5127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.156988][T10707] nullb0: p1 start 1888931089 is beyond EOD, truncated [ 317.164418][ T5127] usb 5-1: config 0 descriptor?? [ 317.182069][ T5127] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 317.264848][T10713] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 317.380393][ T5127] gp8psk: usb in 128 operation failed. [ 317.389347][ T5127] gp8psk: usb in 137 operation failed. [ 317.395218][ T5127] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.414432][ T5127] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 317.429216][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.435912][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.457328][ T5127] usb 5-1: media controller created [ 317.502764][ T5127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.544025][ T5127] gp8psk_fe: Frontend attached [ 317.552602][ T5127] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 317.570008][ T5127] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 317.651019][ T5127] gp8psk: usb in 138 operation failed. [ 317.657465][ T5127] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 317.667666][ T5127] gp8psk: found Genpix USB device pID = 203 (hex) [ 317.706144][ T5127] usb 5-1: USB disconnect, device number 10 [ 317.881560][ T5127] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 318.290842][ T784] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 318.506164][ T784] usb 4-1: Using ep0 maxpacket: 32 [ 318.527503][ T784] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.561247][ T784] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.590982][ T784] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 318.610981][ T784] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 318.641086][ T784] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 318.677869][ T784] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.687666][ T784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.696969][ T784] usb 4-1: Product: syz [ 318.707456][ T784] usb 4-1: Manufacturer: syz [ 318.725955][ T784] usb 4-1: SerialNumber: syz [ 318.954280][ T784] cdc_ncm 4-1:1.0: bind() failure [ 318.999060][ T784] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 319.008921][ T784] cdc_ncm 4-1:1.1: bind() failure [ 319.020752][ T784] usb 4-1: USB disconnect, device number 11 [ 319.397067][T10766] overlayfs: missing 'lowerdir' [ 319.940489][ T5180] libceph: connect (1)[c::]:6789 error -101 [ 320.059371][ T5180] libceph: mon0 (1)[c::]:6789 connect error [ 320.381276][T10775] ceph: No mds server is up or the cluster is laggy [ 320.950819][T10801] syz.1.2039 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 321.886496][ T5180] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 322.097101][ T5180] usb 1-1: Using ep0 maxpacket: 32 [ 322.108678][ T5180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.140220][ T5180] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.166137][ T5180] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.194595][ T5180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 322.214640][ T5180] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 322.232361][ T5180] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.251320][ T5180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.259764][ T5180] usb 1-1: Product: syz [ 322.264010][ T5180] usb 1-1: Manufacturer: syz [ 322.268743][ T5180] usb 1-1: SerialNumber: syz [ 322.495540][ T5180] cdc_ncm 1-1:1.0: bind() failure [ 322.517885][ T5180] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 322.531397][ T5180] cdc_ncm 1-1:1.1: bind() failure [ 322.594982][ T5180] usb 1-1: USB disconnect, device number 19 [ 323.356027][T10844] mmap: syz.4.2058 (10844) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 326.747316][ T5131] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 326.956076][ T5131] usb 2-1: Using ep0 maxpacket: 16 [ 327.028481][ T5131] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.074732][ T5131] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.100591][ T1083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.127331][ T5131] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 327.159121][ T1083] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.167773][ T5131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.224775][ T5131] usb 2-1: config 0 descriptor?? [ 327.331013][ T1083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.356470][ T1083] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.552806][ T1083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.602504][ T1083] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.787973][ T1083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.836496][ T1083] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.062483][ T4478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.074607][ T4478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.091573][ T4478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.100385][ T4478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.108326][ T1083] bridge_slave_0: left allmulticast mode [ 328.114132][ T1083] bridge_slave_0: left promiscuous mode [ 328.122420][ T4478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.131129][ T4478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.148247][ T6545] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 328.160066][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 328.167804][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 328.175260][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 328.184700][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 328.193278][ T1083] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.203430][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 328.214721][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 328.327487][T10965] autofs: Bad value for 'fd' [ 328.436855][ T6545] usb 3-1: Using ep0 maxpacket: 16 [ 328.466663][ T6545] usb 3-1: no configurations [ 328.471349][ T6545] usb 3-1: can't read configurations, error -22 [ 328.589712][ T5131] usbhid 2-1:0.0: can't add hid device: -71 [ 328.595752][ T5131] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 328.625525][ T5131] usb 2-1: USB disconnect, device number 15 [ 328.686943][ T6545] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 328.701708][T10976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2115'. [ 328.896484][ T6545] usb 3-1: Using ep0 maxpacket: 16 [ 328.908240][ T6545] usb 3-1: no configurations [ 328.914889][ T6545] usb 3-1: can't read configurations, error -22 [ 328.942730][ T6545] usb usb3-port1: attempt power cycle [ 328.953609][ T1083] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.979134][ T1083] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.998543][ T1083] bond0 (unregistering): Released all slaves [ 329.335848][T10989] autofs: Bad value for 'fd' [ 329.379557][ T6545] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 329.403707][ T1083] hsr_slave_0: left promiscuous mode [ 329.427178][ T6545] usb 3-1: Using ep0 maxpacket: 16 [ 329.439319][ T1083] hsr_slave_1: left promiscuous mode [ 329.441069][ T6545] usb 3-1: no configurations [ 329.449820][ T6545] usb 3-1: can't read configurations, error -22 [ 329.457685][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.480236][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.512728][ T1083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.544785][ T1083] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.610055][ T6545] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 329.621364][ T1083] veth1_macvtap: left promiscuous mode [ 329.639568][ T1083] veth0_macvtap: left promiscuous mode [ 329.656767][ T1083] veth1_vlan: left promiscuous mode [ 329.674062][ T1083] veth0_vlan: left promiscuous mode [ 329.698673][ T6545] usb 3-1: Using ep0 maxpacket: 16 [ 329.708758][ T6545] usb 3-1: no configurations [ 329.723813][ T6545] usb 3-1: can't read configurations, error -22 [ 329.754089][ T6545] usb usb3-port1: unable to enumerate USB device [ 329.976412][ T5127] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 330.261975][ T5127] usb 1-1: Using ep0 maxpacket: 16 [ 330.298053][ T4478] Bluetooth: hci4: command tx timeout [ 331.007530][ T5127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.037002][ T5127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 331.057728][ T5127] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 331.076088][ T5127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.130404][ T5127] usb 1-1: config 0 descriptor?? [ 331.704383][T11016] autofs: Bad value for 'fd' [ 331.968643][ T1083] team0 (unregistering): Port device team_slave_1 removed [ 332.079246][ T1083] team0 (unregistering): Port device team_slave_0 removed [ 332.376222][ T4478] Bluetooth: hci4: command tx timeout [ 332.541828][ T5127] usbhid 1-1:0.0: can't add hid device: -71 [ 332.564672][ T5127] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 332.597306][ T5127] usb 1-1: USB disconnect, device number 20 [ 333.138616][T11041] netlink: 'syz.1.2141': attribute type 29 has an invalid length. [ 333.201398][T11042] autofs: Bad value for 'fd' [ 333.214322][T11041] netlink: 'syz.1.2141': attribute type 29 has an invalid length. [ 333.265389][T11044] netlink: 'syz.1.2141': attribute type 29 has an invalid length. [ 333.339188][T10958] chnl_net:caif_netlink_parms(): no params data found [ 333.756584][T10958] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.778821][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.786440][T10958] bridge_slave_0: entered allmulticast mode [ 333.793784][T10958] bridge_slave_0: entered promiscuous mode [ 333.824728][T10958] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.834869][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.863781][T10958] bridge_slave_1: entered allmulticast mode [ 333.883482][T10958] bridge_slave_1: entered promiscuous mode [ 334.022872][T10958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.059381][T10958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.250432][T10958] team0: Port device team_slave_0 added [ 334.296997][T11076] netlink: 'syz.0.2155': attribute type 29 has an invalid length. [ 334.299756][T10958] team0: Port device team_slave_1 added [ 334.410627][T11076] netlink: 'syz.0.2155': attribute type 29 has an invalid length. [ 334.419947][T11079] netlink: 'syz.0.2155': attribute type 29 has an invalid length. [ 334.456201][ T4478] Bluetooth: hci4: command tx timeout [ 334.488167][T10958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.524467][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.603741][T10958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.632116][T10958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.639403][T10958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.665512][T10958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.831268][T10958] hsr_slave_0: entered promiscuous mode [ 334.854961][T10958] hsr_slave_1: entered promiscuous mode [ 334.873843][T10958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.886436][T10958] Cannot create hsr debugfs directory [ 335.178670][T11106] netlink: 'syz.2.2167': attribute type 29 has an invalid length. [ 335.233866][T11106] netlink: 'syz.2.2167': attribute type 29 has an invalid length. [ 335.254408][T11107] netlink: 'syz.2.2167': attribute type 29 has an invalid length. [ 336.146393][T11108] 9pnet_fd: Insufficient options for proto=fd [ 336.540304][ T4478] Bluetooth: hci4: command tx timeout [ 337.503795][T10958] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.533570][T10958] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.544166][T10958] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.567788][T10958] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.785024][T10958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.829150][T10958] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.861128][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.868406][ T5087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.908985][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.916224][ T5087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.053076][T10958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.844934][T11151] 9pnet_fd: Insufficient options for proto=fd [ 339.288399][T11166] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 339.294979][T11166] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 339.312750][T11166] vhci_hcd vhci_hcd.0: Device attached [ 339.373931][T11166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.496857][T11166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.527674][ T6545] vhci_hcd: vhci_device speed not set [ 339.557115][T11166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.622359][T11166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.651502][ T6545] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 339.667647][T11166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.679381][T11166] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.735584][T11166] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 339.742225][T11166] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.073055][T10958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.080865][T11166] vhci_hcd vhci_hcd.0: Device attached [ 340.451271][T11168] vhci_hcd: connection reset by peer [ 340.460995][T11179] vhci_hcd: connection closed [ 340.488142][ T991] vhci_hcd: stop threads [ 340.526977][ T991] vhci_hcd: release socket [ 340.538699][ T991] vhci_hcd: disconnect device [ 340.553453][ T991] vhci_hcd: stop threads [ 340.576473][ T991] vhci_hcd: release socket [ 340.582928][ T991] vhci_hcd: disconnect device [ 340.767960][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 341.055409][T10958] veth0_vlan: entered promiscuous mode [ 341.162582][T10958] veth1_vlan: entered promiscuous mode [ 341.271380][T10958] veth0_macvtap: entered promiscuous mode [ 341.286821][T10958] veth1_macvtap: entered promiscuous mode [ 341.307509][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.319333][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.347758][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.359525][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.370306][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.484429][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.569711][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.596388][ T5127] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 341.678474][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.776253][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.835830][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.859213][ T5127] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.974235][T10958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 341.983145][ T5127] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.000909][ T5127] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 342.035544][ T5127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 342.055296][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.088870][ T5127] usb 4-1: SerialNumber: syz [ 342.093357][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.103419][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.114325][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.124195][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.145261][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.155234][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.181903][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.191814][T10958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.212595][T10958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.227741][T10958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.257520][T10958] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.274600][T10958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.283533][T10958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.300646][T10958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.423294][ T5127] usb 4-1: 0:2 : does not exist [ 342.451352][ T5127] usb 4-1: unit 5 not found! [ 342.631768][ T5127] usb 4-1: USB disconnect, device number 12 [ 343.033565][ T1083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.103400][ T1083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.322978][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.331292][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.167830][T11240] 9pnet_fd: Insufficient options for proto=fd [ 344.610039][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2220'. [ 344.648243][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 344.655209][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.663268][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 344.671341][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 344.786820][ T5130] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 344.807072][ T6545] vhci_hcd: vhci_device speed not set [ 344.956126][T11272] ALSA: mixer_oss: invalid OSS volume '' [ 344.976265][ T5130] usb 1-1: Using ep0 maxpacket: 32 [ 344.988664][ T5130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.009450][ T5130] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.029389][ T5130] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.047824][ T5130] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 345.063839][ T5130] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 345.076106][ T5130] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.085179][ T5130] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.093261][ T5130] usb 1-1: Product: syz [ 345.097453][ T5130] usb 1-1: Manufacturer: syz [ 345.102056][ T5130] usb 1-1: SerialNumber: syz [ 345.327285][ T5130] cdc_ncm 1-1:1.0: bind() failure [ 345.353826][ T5130] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 345.373954][ T5130] cdc_ncm 1-1:1.1: bind() failure [ 345.383161][ T5130] usb 1-1: USB disconnect, device number 21 [ 345.876298][ T5144] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 346.631765][T11287] 9pnet_fd: Insufficient options for proto=fd [ 346.816199][ T5144] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.831701][ T5144] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.847020][ T5144] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.863152][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.871233][ T5144] usb 2-1: SerialNumber: syz [ 347.163302][ T5144] usb 2-1: 0:2 : does not exist [ 347.177252][ T5144] usb 2-1: unit 5 not found! [ 347.204969][ T5144] usb 2-1: USB disconnect, device number 16 [ 347.871997][ T9160] syz-executor (9160) used greatest stack depth: 18992 bytes left [ 347.932081][ T1104] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.141394][ T1104] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.320470][ T1104] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.462368][ T1104] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.507783][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.517957][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.534571][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.546375][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.554883][ T5088] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.562528][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 349.881643][T11329] 9pnet_fd: Insufficient options for proto=fd [ 349.953088][ T1104] bridge_slave_1: left allmulticast mode [ 349.985853][ T1104] bridge_slave_1: left promiscuous mode [ 350.121152][ T1104] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.134686][ T1104] bridge_slave_0: left allmulticast mode [ 350.146125][ T1104] bridge_slave_0: left promiscuous mode [ 350.155267][ T1104] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.219218][T11336] 9pnet: p9_errstr2errno: server reported unknown error 01777 [ 350.443669][T11340] ALSA: mixer_oss: invalid OSS volume '' [ 350.618068][ T4478] Bluetooth: hci3: command tx timeout [ 351.078848][ T1104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.095516][ T1104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.113286][ T1104] bond0 (unregistering): Released all slaves [ 351.525316][T11321] chnl_net:caif_netlink_parms(): no params data found [ 351.556062][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 351.620287][ T1104] hsr_slave_0: left promiscuous mode [ 351.630406][ T1104] hsr_slave_1: left promiscuous mode [ 351.641099][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.654141][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.665362][ T1104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.673333][ T1104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.715834][ T1104] veth1_macvtap: left promiscuous mode [ 351.722741][ T1104] veth0_macvtap: left promiscuous mode [ 351.730291][ T1104] veth1_vlan: left promiscuous mode [ 351.735645][ T1104] veth0_vlan: left promiscuous mode [ 351.760257][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.786382][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.787801][ T8] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 351.787829][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 351.787850][ T8] usb 2-1: SerialNumber: syz [ 352.030348][ T8] usb 2-1: 0:2 : does not exist [ 352.035278][ T8] usb 2-1: unit 5 not found! [ 352.058253][ T8] usb 2-1: USB disconnect, device number 17 [ 352.418144][ T1104] team0 (unregistering): Port device team_slave_1 removed [ 352.498334][ T1104] team0 (unregistering): Port device team_slave_0 removed [ 352.697342][ T4478] Bluetooth: hci3: command tx timeout [ 352.830539][ T29] audit: type=1326 audit(2000000054.660:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11364 comm="syz.1.2258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed9975bd9 code=0x0 [ 353.067267][T11321] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.083488][T11321] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.099460][T11321] bridge_slave_0: entered allmulticast mode [ 353.125389][T11321] bridge_slave_0: entered promiscuous mode [ 353.138575][T11321] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.146542][T11321] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.155421][T11321] bridge_slave_1: entered allmulticast mode [ 353.203613][T11321] bridge_slave_1: entered promiscuous mode [ 353.355650][T11321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.412521][T11321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.579602][T11321] team0: Port device team_slave_0 added [ 353.604875][T11321] team0: Port device team_slave_1 added [ 353.718183][T11321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.762047][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.803433][T11321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.823070][T11321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.831197][T11321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.866284][T11321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.041603][T11321] hsr_slave_0: entered promiscuous mode [ 354.056519][ T5127] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 354.059063][T11321] hsr_slave_1: entered promiscuous mode [ 354.246266][ T5127] usb 2-1: Using ep0 maxpacket: 32 [ 354.254459][ T5127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.279539][ T5127] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.310450][ T5127] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 354.338775][ T5127] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 354.365077][ T5127] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 354.396650][ T5127] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.406618][ T5127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.414848][ T5127] usb 2-1: Product: syz [ 354.419415][ T5127] usb 2-1: Manufacturer: syz [ 354.424133][ T5127] usb 2-1: SerialNumber: syz [ 354.674514][ T5127] cdc_ncm 2-1:1.0: bind() failure [ 354.703669][ T5127] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 354.719328][ T5127] cdc_ncm 2-1:1.1: bind() failure [ 354.748237][ T5127] usb 2-1: USB disconnect, device number 18 [ 354.786227][ T4478] Bluetooth: hci3: command tx timeout [ 354.993583][T11321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.009308][T11321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.023130][T11321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.034038][T11321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.125019][T11321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.149101][T11321] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.163939][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.171194][ T5127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.213640][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.220880][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.308182][T11321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 355.389441][T11321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 355.465251][ T29] audit: type=1326 audit(2000000057.290:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11413 comm="syz.1.2276" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed9975bd9 code=0x0 [ 356.489586][T11321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.553746][T11321] veth0_vlan: entered promiscuous mode [ 357.278413][T11429] 9pnet_fd: Insufficient options for proto=fd [ 357.286424][ T4478] Bluetooth: hci3: command tx timeout [ 357.372068][T11321] veth1_vlan: entered promiscuous mode [ 357.381684][T11433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2280'. [ 357.472318][T11433] IPv6: sit1: Disabled Multicast RS [ 357.520326][T11433] sit1: entered allmulticast mode [ 357.713324][T11321] veth0_macvtap: entered promiscuous mode [ 357.743996][T11321] veth1_macvtap: entered promiscuous mode [ 357.766521][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.777501][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.788119][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.810930][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.836279][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.866420][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.907953][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.943541][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.954443][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.965791][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.984282][T11321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.173690][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.309209][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.433573][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.569254][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.604636][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.615573][T11447] program syz.3.2285 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 358.638885][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.672900][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.705622][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.715534][T11321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.726117][T11321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.737616][T11321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.756172][ T5130] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 358.834049][ T991] bridge_slave_1: left allmulticast mode [ 358.841602][ T991] bridge_slave_1: left promiscuous mode [ 358.848474][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.865799][ T991] bridge_slave_0: left allmulticast mode [ 358.873653][ T991] bridge_slave_0: left promiscuous mode [ 358.891546][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.969939][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 358.997222][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 359.620470][ T5130] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 359.633691][ T5130] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 359.759795][ T5130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.772329][ T5130] usb 5-1: config 0 descriptor?? [ 359.778474][T11437] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 359.793069][ T5130] appletouch 5-1:0.0: Could not find int-in endpoint [ 359.811126][ T5130] appletouch 5-1:0.0: probe with driver appletouch failed with error -5 [ 359.820353][ T5130] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 360.003730][ T5130] usb 5-1: USB disconnect, device number 11 [ 360.172844][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.185502][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.209682][ T991] bond0 (unregistering): Released all slaves [ 360.263660][T11321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.286345][T11321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.295092][T11321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.332004][T11321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.602348][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.626897][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.691614][ T991] hsr_slave_0: left promiscuous mode [ 360.729392][ T991] hsr_slave_1: left promiscuous mode [ 360.744905][ T29] audit: type=1326 audit(2000000062.570:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11490 comm="syz.1.2303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5ed9975bd9 code=0x0 [ 360.804567][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.815822][ T991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.827728][ T991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.842264][ T991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.947813][ T991] veth1_macvtap: left promiscuous mode [ 360.957018][ T991] veth0_macvtap: left promiscuous mode [ 360.963370][ T991] veth1_vlan: left promiscuous mode [ 360.968856][ T991] veth0_vlan: left promiscuous mode [ 361.932154][T11505] program syz.1.2307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.480992][ T5087] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 362.518699][ T991] team0 (unregistering): Port device team_slave_1 removed [ 362.562160][ T991] team0 (unregistering): Port device team_slave_0 removed [ 362.688229][ T5087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 362.699637][ T5087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 362.711079][ T5087] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 362.722470][ T5087] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 362.731674][ T5087] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.742132][ T5087] usb 2-1: config 0 descriptor?? [ 362.748272][T11514] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 362.765248][ T5087] appletouch 2-1:0.0: Could not find int-in endpoint [ 362.772083][ T5087] appletouch 2-1:0.0: probe with driver appletouch failed with error -5 [ 362.792439][ T5087] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 362.999717][ T5087] usb 2-1: USB disconnect, device number 19 [ 363.050813][T11520] netlink: 'syz.0.2313': attribute type 9 has an invalid length. [ 363.068295][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.107673][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.890989][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 363.926385][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2329'. [ 364.129970][T11578] openvswitch: netlink: EtherType 535 is less than min 600 [ 364.438408][ T5131] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 364.996540][ T5131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 365.027917][ T5131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 365.088170][ T5131] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 59391, setting to 1024 [ 365.120502][ T5131] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice=65.8c [ 365.165341][ T5131] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.207629][ T5131] usb 4-1: config 0 descriptor?? [ 365.213388][T11579] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 365.237826][ T5131] appletouch 4-1:0.0: Could not find int-in endpoint [ 365.263592][ T5131] appletouch 4-1:0.0: probe with driver appletouch failed with error -5 [ 365.282402][ T5131] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 365.412072][T11609] Cannot find set identified by id 0 to match [ 365.462554][ T5131] usb 4-1: USB disconnect, device number 13 [ 365.747337][ T991] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.017584][ T991] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.298027][ T991] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.505541][ T991] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.865514][ T4478] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 366.882579][ T4478] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 366.914523][ T4478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 366.924477][ T4478] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 366.936570][ T4478] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 366.944128][ T4478] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 367.294886][T11645] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 367.338484][ C0] hrtimer: interrupt took 6585663 ns [ 367.438799][T11645] 9pnet_fd: Insufficient options for proto=fd [ 367.817334][T11655] ieee802154 phy0 wpan0: encryption failed: -22 [ 368.640554][ T991] bridge_slave_1: left allmulticast mode [ 368.653781][ T991] bridge_slave_1: left promiscuous mode [ 368.659897][ T991] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.763622][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'. [ 370.630130][ T4478] Bluetooth: hci4: command tx timeout [ 370.685786][ T991] bridge_slave_0: left allmulticast mode [ 370.705267][ T991] bridge_slave_0: left promiscuous mode [ 370.712417][ T991] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.981207][ T5088] Bluetooth: hci4: command tx timeout [ 378.546769][ T5088] Bluetooth: hci4: command tx timeout [ 385.624675][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.631185][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.679864][ T5088] Bluetooth: hci4: command tx timeout [ 396.236400][ T5081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.286178][ T5081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.317971][ T5081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.327130][ T5081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.334899][ T5081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 396.342417][ T5081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.843151][ T4478] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 396.853636][ T4478] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 396.863284][ T4478] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 396.871959][ T4478] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 396.880598][ T4478] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 396.888966][ T4478] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 396.896416][ T4478] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 396.909627][ T5081] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 396.918128][ T5081] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 396.926776][ T5081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.934458][ T5081] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 396.942058][ T5081] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 397.040884][ T5088] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 397.050812][ T5088] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 397.058901][ T5088] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 397.067562][ T5088] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 397.076753][ T5088] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 397.084095][ T5088] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 398.376203][ T5088] Bluetooth: hci5: command tx timeout [ 399.016293][ T5081] Bluetooth: hci7: command tx timeout [ 399.022974][ T5088] Bluetooth: hci6: command tx timeout [ 399.176242][ T5088] Bluetooth: hci8: command tx timeout [ 400.456231][ T5088] Bluetooth: hci5: command tx timeout [ 401.096323][ T5081] Bluetooth: hci7: command tx timeout [ 401.101834][ T5088] Bluetooth: hci6: command tx timeout [ 401.256862][ T5088] Bluetooth: hci8: command tx timeout [ 402.536779][ T5088] Bluetooth: hci5: command tx timeout [ 403.176515][ T5081] Bluetooth: hci7: command tx timeout [ 403.182012][ T5088] Bluetooth: hci6: command tx timeout [ 403.336128][ T5088] Bluetooth: hci8: command tx timeout [ 404.616141][ T5088] Bluetooth: hci5: command tx timeout [ 405.256224][ T5088] Bluetooth: hci6: command tx timeout [ 405.261677][ T5088] Bluetooth: hci7: command tx timeout [ 405.416122][ T5088] Bluetooth: hci8: command tx timeout [ 445.899497][ T5081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 445.910064][ T5081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 445.918453][ T5081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 445.926542][ T5081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 445.935160][ T5081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 445.942754][ T5081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 447.976390][ T5081] Bluetooth: hci1: command tx timeout [ 450.056121][ T5088] Bluetooth: hci1: command tx timeout [ 452.136231][ T5088] Bluetooth: hci1: command tx timeout [ 454.216187][ T5088] Bluetooth: hci1: command tx timeout [ 457.303693][ T5081] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 457.313843][ T5081] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 457.322611][ T5081] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 457.330701][ T5081] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 457.339416][ T5081] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 457.346838][ T5081] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 457.401363][ T4478] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 457.411677][ T4478] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 457.419787][ T4478] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 457.428035][ T4478] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 457.435779][ T4478] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 457.443388][ T4478] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 457.469415][ T4478] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 457.479524][ T4478] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 457.488205][ T4478] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 457.496517][ T4478] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 457.504413][ T4478] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 457.511992][ T4478] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 458.648625][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.656262][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.733859][ T5088] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 458.742257][ T5088] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 458.752946][ T5088] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 458.762829][ T5088] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 458.771366][ T5088] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 458.778972][ T5088] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 459.416156][ T5088] Bluetooth: hci9: command tx timeout [ 459.496236][ T5088] Bluetooth: hci11: command tx timeout [ 459.576165][ T5088] Bluetooth: hci10: command tx timeout [ 460.856193][ T5088] Bluetooth: hci12: command tx timeout [ 461.496142][ T5088] Bluetooth: hci9: command tx timeout [ 461.576134][ T5088] Bluetooth: hci11: command tx timeout [ 461.656117][ T5088] Bluetooth: hci10: command tx timeout [ 462.936142][ T5088] Bluetooth: hci12: command tx timeout [ 463.576104][ T5088] Bluetooth: hci9: command tx timeout [ 463.656113][ T5088] Bluetooth: hci11: command tx timeout [ 463.736111][ T5088] Bluetooth: hci10: command tx timeout [ 465.016125][ T5088] Bluetooth: hci12: command tx timeout [ 465.656164][ T5088] Bluetooth: hci9: command tx timeout [ 465.736124][ T5088] Bluetooth: hci11: command tx timeout [ 465.816139][ T5088] Bluetooth: hci10: command tx timeout [ 473.179958][ T5088] Bluetooth: hci12: command tx timeout [ 479.805773][ T5081] Bluetooth: hci3: command 0x0406 tx timeout [ 483.962469][ T991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.974054][ T991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.985007][ T991] bond0 (unregistering): Released all slaves [ 484.009201][T11662] netlink: 'syz.2.2372': attribute type 4 has an invalid length. [ 484.036811][T11666] netlink: 'syz.2.2372': attribute type 4 has an invalid length. [ 488.170405][T11667] netlink: 'syz.0.2373': attribute type 4 has an invalid length. [ 502.160214][ T4478] Bluetooth: hci4: command 0x0406 tx timeout [ 527.986418][ T5088] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 528.011665][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 528.018022][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 528.235137][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 528.244816][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 528.253456][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 528.265510][T11711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 528.278907][ T4478] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 528.286378][T11711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 528.294886][T11711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 528.318615][T11711] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 528.327879][T11711] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 528.336071][T11714] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 528.343784][T11714] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 528.351223][T11714] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 607.107770][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 607.114124][ T1252] ieee802154 phy1 wpan1: encryption failed: -22 [ 648.556861][ T30] INFO: task syz.2.2372:11659 blocked for more than 160 seconds. [ 648.564639][ T30] Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 648.596322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.605032][ T30] task:syz.2.2372 state:D stack:26512 pid:11659 tgid:11656 ppid:11321 flags:0x00004006 [ 648.630480][ T30] Call Trace: [ 648.633803][ T30] [ 648.636876][ T30] __schedule+0x1796/0x49d0 [ 648.641424][ T30] ? __pfx___schedule+0x10/0x10 [ 648.646399][ T30] ? __pfx_lock_release+0x10/0x10 [ 648.651446][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 648.657256][ T30] ? schedule+0x90/0x320 [ 648.661509][ T30] schedule+0x14b/0x320 [ 648.665671][ T30] schedule_preempt_disabled+0x13/0x30 [ 648.671189][ T30] __mutex_lock+0x6a4/0xd70 [ 648.675704][ T30] ? __mutex_lock+0x527/0xd70 [ 648.680520][ T30] ? ppp_release+0x8a/0x1f0 [ 648.685032][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 648.690151][ T30] ppp_release+0x8a/0x1f0 [ 648.694489][ T30] ? __pfx_ppp_release+0x10/0x10 [ 648.699518][ T30] __fput+0x24a/0x8a0 [ 648.703527][ T30] task_work_run+0x24f/0x310 [ 648.708166][ T30] ? __pfx_task_work_run+0x10/0x10 [ 648.713298][ T30] get_signal+0x15e6/0x1740 [ 648.717883][ T30] ? __pfx_get_signal+0x10/0x10 [ 648.722756][ T30] arch_do_signal_or_restart+0x96/0x860 [ 648.728427][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 648.734592][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.740643][ T30] ? syscall_exit_to_user_mode+0xa3/0x360 [ 648.746408][ T30] syscall_exit_to_user_mode+0xc9/0x360 [ 648.751974][ T30] do_syscall_64+0x100/0x230 [ 648.756626][ T30] ? clear_bhb_loop+0x35/0x90 [ 648.761319][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.767259][ T30] RIP: 0033:0x7f6242f75bd9 [ 648.771679][ T30] RSP: 002b:00007f6243dd4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 648.780174][ T30] RAX: 0000000000000000 RBX: 00007f6243104110 RCX: 00007f6242f75bd9 [ 648.788192][ T30] RDX: 00000000200002c0 RSI: 0000000040047451 RDI: 0000000000000003 [ 648.796234][ T30] RBP: 00007f6242fe4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 648.804209][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.812236][ T30] R13: 000000000000006e R14: 00007f6243104110 R15: 00007ffc2d58dc68 [ 648.820289][ T30] [ 648.823322][ T30] INFO: task syz-executor:11705 blocked for more than 182 seconds. [ 648.831249][ T30] Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 648.846050][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.854726][ T30] task:syz-executor state:D stack:24992 pid:11705 tgid:11705 ppid:1 flags:0x00000004 [ 648.886016][ T30] Call Trace: [ 648.889408][ T30] [ 648.892350][ T30] __schedule+0x1796/0x49d0 [ 648.904264][ T30] ? __pfx___schedule+0x10/0x10 [ 648.916055][ T30] ? __pfx_lock_release+0x10/0x10 [ 648.921095][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 648.936062][ T30] ? schedule+0x90/0x320 [ 648.940316][ T30] schedule+0x14b/0x320 [ 648.944478][ T30] schedule_preempt_disabled+0x13/0x30 [ 648.966087][ T30] __mutex_lock+0x6a4/0xd70 [ 648.970613][ T30] ? __mutex_lock+0x527/0xd70 [ 648.975302][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 648.996034][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 649.001098][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 649.016067][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 649.021287][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.036032][ T30] ? is_bpf_text_address+0x285/0x2a0 [ 649.041337][ T30] ? __pfx_validate_chain+0x10/0x10 [ 649.056097][ T30] ? __pfx_validate_chain+0x10/0x10 [ 649.061315][ T30] ? arch_stack_walk+0x16d/0x1b0 [ 649.076046][ T30] ? mark_lock+0x9a/0x350 [ 649.080387][ T30] ? __pfx_validate_chain+0x10/0x10 [ 649.085611][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 649.106081][ T30] ? mark_lock+0x9a/0x350 [ 649.110458][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 649.115513][ T30] netlink_rcv_skb+0x1e3/0x430 [ 649.136056][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.141556][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.156126][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.161384][ T30] netlink_unicast+0x7ea/0x980 [ 649.176078][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 649.181392][ T30] ? __virt_addr_valid+0x183/0x520 [ 649.206043][ T30] ? __check_object_size+0x49c/0x900 [ 649.211361][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 649.226046][ T30] netlink_sendmsg+0x8db/0xcb0 [ 649.230846][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.246061][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 649.251363][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 649.266037][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.271341][ T30] __sock_sendmsg+0x221/0x270 [ 649.286064][ T30] __sys_sendto+0x3a4/0x4f0 [ 649.290626][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 649.295695][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.316056][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.322412][ T30] ? exc_page_fault+0x590/0x8c0 [ 649.336062][ T30] __x64_sys_sendto+0xde/0x100 [ 649.340857][ T30] do_syscall_64+0xf3/0x230 [ 649.345378][ T30] ? clear_bhb_loop+0x35/0x90 [ 649.366023][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.371937][ T30] RIP: 0033:0x7f6678d7796c [ 649.386083][ T30] RSP: 002b:00007ffccb06fad0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 649.394519][ T30] RAX: ffffffffffffffda RBX: 00007f6679a34620 RCX: 00007f6678d7796c [ 649.416030][ T30] RDX: 0000000000000028 RSI: 00007f6679a34670 RDI: 0000000000000003 [ 649.424015][ T30] RBP: 0000000000000000 R08: 00007ffccb06fb24 R09: 000000000000000c [ 649.456030][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 649.464019][ T30] R13: 0000000000000000 R14: 00007f6679a34670 R15: 0000000000000000 [ 649.486055][ T30] [ 649.489096][ T30] [ 649.489096][ T30] Showing all locks held in the system: [ 649.506087][ T30] 3 locks held by kworker/0:0/8: [ 649.511056][ T30] 1 lock held by khungtaskd/30: