last executing test programs:
49.249035701s ago: executing program 4 (id=964):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50243}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}}, 0x0)
49.157626737s ago: executing program 4 (id=965):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
symlink(&(0x7f0000000200)='.\x00', &(0x7f0000000040)='./file0\x00')
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0xa, 0x4d032, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001240)={{{@in6=@private2, @in6=@mcast1}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000001340)=0xc5)
mount$overlay(0x0, &(0x7f0000000400)='./file1\x00', &(0x7f00000002c0), 0xe2882, &(0x7f0000000440)={[], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '[/[[)-'}}, {@audit}]})
chdir(&(0x7f00000003c0)='./bus\x00')
timer_create(0x0, &(0x7f0000000680)={0x0, 0x2f}, &(0x7f0000000000))
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='br_fdb_external_learn_add\x00', r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfecf}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000001180))
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r4, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r4, 0x5008, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x14}}, 0x0)
syz_io_uring_setup(0x2c5f, &(0x7f0000000140)={0x0, 0x445, 0x8, 0x2}, &(0x7f00000001c0), &(0x7f0000000200))
socket(0x0, 0x0, 0x0)
r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x40c01)
writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)='`', 0xf4240}], 0x2)
48.181603595s ago: executing program 4 (id=974):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_NUM_TX_QUEUES={0x8}]}, 0x28}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fchdir(0xffffffffffffffff)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000400)={@dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x6, 0x6, 0x500, 0x4, 0x41020019})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x10001)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
write$UHID_INPUT(r6, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x34, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}]}, 0x34}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x0, &(0x7f0000000000))
fcntl$lock(r7, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x5, 0x4000007fffffff})
fcntl$lock(r7, 0x25, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x6})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', <r8=>0x0})
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFDSTADDR(r9, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x0, @private}})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0, 0x0, r8})
syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
46.996068663s ago: executing program 4 (id=982):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
creat(0x0, 0x60)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r2)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}})
syz_emit_vhci(&(0x7f0000000e80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{}, 0x7}}}, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe7d95000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
dup(0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)
43.034474853s ago: executing program 4 (id=989):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x18, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0)
recvmsg(r4, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x0)
21.740508292s ago: executing program 4 (id=991):
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x218e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000))
sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x6)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0)
io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0)
io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f000000a400)={0x2020}, 0x2020)
write$FUSE_INIT(r3, 0x0, 0x0)
7.098798652s ago: executing program 1 (id=1092):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100039a00"/20, @ANYRES32=r3, @ANYBLOB="0000200000080000240012001400010062726964"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
6.775254206s ago: executing program 1 (id=1094):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{}, {0x0, 0x1}, {}, {}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x40}}, 0x0)
6.004973955s ago: executing program 2 (id=1095):
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, @alu={0x7, 0x0, 0x8, 0xf, 0x6, 0x0, 0x4}, @map_fd={0x18, 0xa}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @ldst={0x0, 0x1, 0x6, 0x8, 0xa, 0x18, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000840)=""/196, 0x40f00, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5671}, 0x62)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='mm_page_alloc\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x10001, 0x7ff, 0x4, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xf7}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040)=0x18, &(0x7f0000000140)}, 0x20)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9}, 0x48)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000c80)=@broute={'broute\x00', 0x20, 0x3, 0x90, [], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeff00000000000000000000000000000000000000000000000000000000000000000000000200"/144]}, 0x108)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x9, 0xd, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r6, @ANYRES64=r0, @ANYRES16=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffb7, 0x0, 0x0, 0x0}, 0x90)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
ppoll(&(0x7f0000000200)=[{r6, 0x4000}, {r9, 0x20}], 0x2, &(0x7f0000000240), 0xfffffffffffffffe, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r11=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r10}, @IFLA_HSR_SLAVE1={0x8, 0x1, r11}]}}}]}, 0x40}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r0)
r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r15, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r14, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r16, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0)
5.720695787s ago: executing program 3 (id=1096):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
5.580569551s ago: executing program 1 (id=1097):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
r2 = io_uring_setup(0x4d63, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
getpid()
bpf$PROG_LOAD(0x2, 0x0, 0x0)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000508000/0x4000)=nil, 0x1000})
5.252617187s ago: executing program 3 (id=1098):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xf2, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd60b085a200bc2f00ff020000000000000000000000000001fc010000000000000000000000000000000e000000000000006edb02680a2534d7b6925506e677ef428e86355cb7124ea4c6d77071c5b6d984eab8e76fe191da2f33a8da153382acf990ef99e54d62a55fd3b46e7457ca78ba847619c89a7aa776413db1e55d07be58fb29390e1dd52ab7e4ad5daef396ddc5128520b694edbbc7654508c1951b"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)
5.189330268s ago: executing program 2 (id=1100):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x10, 0x13, [{0x18, 0x1}, {0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xb, 0x1}, {0x48, 0x1}, {0x6c, 0x1}, {0x0, 0x1}, {}, {}, {}, {}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x48}}, 0x0)
5.051912604s ago: executing program 2 (id=1101):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x30, 0x3, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x30}}, 0x0)
ftruncate(r2, 0xee72)
sendfile(r1, r2, 0x0, 0x8000fffffffe)
r4 = fcntl$dupfd(r2, 0x0, r2)
r5 = dup3(r1, r4, 0x0)
r6 = inotify_init1(0x0)
inotify_add_watch(r6, &(0x7f0000000140)='.\x00', 0x40000022)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1b)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), r7)
vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000140)=']', 0x1}], 0x100000000000021f, 0x1)
sendmsg$NFC_CMD_ENABLE_SE(r8, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000280)={0x24, r9, 0x201, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}}, 0x0)
4.583032013s ago: executing program 2 (id=1102):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x8208204)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x0, 0x6, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x46)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x20)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_io_uring_setup(0x1c9a, 0x0, &(0x7f0000002000), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="03083cdbedfa8a9139d1c5aca5f8ec15a69670e0b368863fb05f3fa498edfd3d63fa6dc8a2145ace29ef56f0e8057667c4199022421e1433e45710ec6c3fff42ab478d761a371b5151f47ae0b5e624b8b7bd4fd92a223b2410ccc37bbaf2c90cfaf48646ee81e7260212a3e36409c892dd34b6861e3dde45aee93e0bf6dc757626e43f2e29b1ab6ff6c52b655d56b667ca18beaa", @ANYRESOCT, @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x2}, 0x90)
4.331205869s ago: executing program 3 (id=1103):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100039a00"/20, @ANYRES32=r3, @ANYBLOB="0000200000080000240012001400010062726964"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
4.152197984s ago: executing program 0 (id=1104):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$isdn(0x22, 0x2, 0x25)
sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x1, 0x20040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f00000003c0))
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "cdedbe27d7c9678a", "ed86a155b66f481507086fe637736e4c", "a2dc23ff", "842546172794808f"}, 0x28)
sendfile(r2, r4, &(0x7f0000000100)=0x10, 0x10001)
4.151507503s ago: executing program 3 (id=1105):
set_mempolicy(0x6, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{}]})
mkdir(0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]})
r0 = syz_socket_connect_nvme_tcp()
recvmsg$inet_nvme(r0, &(0x7f0000001700)={&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000001600)=[{&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/237, 0xed}, {&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000001580)=""/96, 0x60}], 0x5, &(0x7f0000001680)=""/78, 0x4e}, 0x140)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0xc7)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06e50c10"], 0x9)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05604, &(0x7f0000000080)={0x2, @pix_mp={0x0, 0x3, 0x32435750, 0x3, 0xc, [{0x1, 0x9}, {0xfffffffc, 0xa}, {0x4, 0x8}, {0x7, 0x8000}, {0x6, 0x3c7}, {0xfffffffb, 0x9}, {0x47, 0x5}, {0x261b}], 0x22, 0x7f, 0x7, 0x0, 0x6}})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000000))
r3 = openat$fuse(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000001740)=ANY=[], 0x2)
setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000240)=0x1, 0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
dup(r5)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06000d08"], 0x9)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x54, 0x0, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"})
socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)={0x34, r7, 0x10db0db96401d82d, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x34}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
3.860460489s ago: executing program 0 (id=1106):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x0, 0x1}, {}, {0x0, 0x1}, {}, {}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x44}}, 0x0)
3.546828417s ago: executing program 0 (id=1107):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
3.336926882s ago: executing program 0 (id=1108):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./file0\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0x8208204)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open(&(0x7f00000003c0)='./bus\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0)
socket(0x0, 0x6, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x46)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00'}, 0x20)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_io_uring_setup(0x1c9a, 0x0, &(0x7f0000002000), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_targets\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="03083cdbedfa8a9139d1c5aca5f8ec15a69670e0b368863fb05f3fa498edfd3d63fa6dc8a2145ace29ef56f0e8057667c4199022421e1433e45710ec6c3fff42ab478d761a371b5151f47ae0b5e624b8b7bd4fd92a223b2410ccc37bbaf2c90cfaf48646ee81e7260212a3e36409c892dd34b6861e3dde45aee93e0bf6dc757626e43f2e29b1ab6ff6c52b655d56b667ca18beaa", @ANYRESOCT, @ANYRES32], &(0x7f0000000080)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, 0x2}, 0x90)
3.036718911s ago: executing program 2 (id=1109):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
userfaultfd(0x0)
ioperm(0x0, 0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x657, 0xfeffffff)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_setup(0x0, &(0x7f0000000100), 0x0, 0x0)
chdir(0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002041001"], 0x101c}}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/169, 0xa9}, {&(0x7f0000000880)=""/240, 0xf0}, {0x0}, {&(0x7f0000000400)=""/65, 0x41}], 0x5}, 0xffff}, {{&(0x7f0000000a80)=@in={0x2, 0x0, @empty}, 0x80, &(0x7f0000002d80)=[{&(0x7f00000005c0)=""/22, 0x16}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/8, 0x8}, {&(0x7f0000001b40)=""/186, 0xba}, {&(0x7f0000001c00)=""/148, 0x94}, {&(0x7f0000001cc0)=""/175, 0xaf}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x7, &(0x7f0000002e00)=""/27, 0x1b}, 0x8}, {{&(0x7f0000002e40)=@alg, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ec0)=""/250, 0xfa}], 0x1, &(0x7f0000003080)=""/3, 0x3}, 0x3}, {{&(0x7f00000030c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003140)=""/94, 0x5e}, {&(0x7f00000031c0)=""/45, 0x2d}, {&(0x7f0000003200)=""/201, 0xc9}, {&(0x7f0000003300)=""/198, 0xc6}, {&(0x7f0000003400)=""/226, 0xe2}, {&(0x7f0000003500)=""/97, 0x61}, {&(0x7f0000003580)=""/96, 0x60}, {&(0x7f0000003600)=""/135, 0x87}], 0x8, &(0x7f0000003740)=""/184, 0xb8}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f0000003800)=""/73, 0x49}], 0x1}, 0xff}, {{&(0x7f0000004e40)=@ethernet, 0x80, &(0x7f0000005200)}, 0x2}], 0x6, 0x0, &(0x7f0000005540))
2.079569192s ago: executing program 0 (id=1110):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xf, 0x13, [{0x18, 0x1}, {0x1}, {0x2, 0x1}, {0xc, 0x1}, {0xb, 0x1}, {0x48, 0x1}, {0x6c, 0x1}, {}, {}, {}, {}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x48}}, 0x0)
1.7419634s ago: executing program 0 (id=1111):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x5b03, 0x0)
syz_usb_disconnect(r0)
1.681716291s ago: executing program 3 (id=1112):
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xf2, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd60b085a200bc2f00ff020000000000000000000000000001fc010000000000000000000000000000000e000000000000006edb02680a2534d7b6925506e677ef428e86355cb7124ea4c6d77071c5b6d984eab8e76fe191da2f33a8da153382acf990ef99e54d62a55fd3b46e7457ca78ba847619c89a7aa776413db1e55d07be58fb29390e1dd52ab7e4ad5daef396ddc5128520b694edbbc7654508c1951b"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa0003"], 0x1e4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0)
764.602662ms ago: executing program 3 (id=1113):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="030001007444"], 0xa)
731.430063ms ago: executing program 1 (id=1114):
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66", 0x9}], 0x1, 0x1)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100039a00"/20, @ANYRES32=r3, @ANYBLOB="0000200000080000240012001400010062726964"], 0x3}}, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
379.265955ms ago: executing program 1 (id=1115):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = socket$isdn(0x22, 0x2, 0x25)
sendmmsg$inet(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}}], 0x1, 0x20040000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x90)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, &(0x7f00000003c0))
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "cdedbe27d7c9678a", "ed86a155b66f481507086fe637736e4c", "a2dc23ff", "842546172794808f"}, 0x28)
sendfile(r2, r4, &(0x7f0000000100)=0x10, 0x10001)
33.075918ms ago: executing program 2 (id=1116):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)={0x44, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x0, 0x1}, {}, {0x0, 0x1}, {}, {}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1f9}]}, 0x44}}, 0x0)
0s ago: executing program 1 (id=1117):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
socket(0x2, 0x2, 0x1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
close_range(r0, 0xffffffffffffffff, 0x0)
kernel console output (not intermixed with test programs):
7851][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 204.305442][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 204.309763][ T46] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 204.319691][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 204.340389][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 204.354797][ T8] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 204.377717][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 204.392047][ T8] hub 4-1:1.0: bad descriptor, ignoring hub
[ 204.404226][ T8] hub 4-1:1.0: probe with driver hub failed with error -5
[ 204.417122][ T8] cdc_wdm 4-1:1.0: skipping garbage
[ 204.422545][ T8] cdc_wdm 4-1:1.0: skipping garbage
[ 204.438206][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 204.452372][ T8] cdc_wdm 4-1:1.0: Unknown control protocol
[ 204.656732][ T46] usb 3-1: Using ep0 maxpacket: 8
[ 204.663860][ T46] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 204.673827][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 204.689157][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 204.720446][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 204.761164][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 204.793274][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 204.830756][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 205.240982][ T7547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 205.337865][ T5146] usb 4-1: USB disconnect, device number 5
[ 205.380192][ T7544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.684'.
[ 205.514703][ T46] usb 3-1: GET_CAPABILITIES returned 0
[ 205.522992][ T46] usbtmc 3-1:16.0: can't read capabilities
[ 205.602316][ T7544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 205.634169][ T7544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 206.776929][ T5109] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 206.786474][ T5109] Bluetooth: hci1: Injecting HCI hardware error event
[ 206.795334][ T5093] Bluetooth: hci1: hardware error 0x00
[ 206.919435][ T29] audit: type=1326 audit(1721359612.029:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7553 comm="syz.1.689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d00d75b59 code=0x0
[ 207.192657][ T5109] Bluetooth: hci1: unexpected event for opcode 0x100c
[ 207.249039][ T5109] Bluetooth: hci1: unexpected event for opcode 0x080d
[ 207.672090][ T29] audit: type=1326 audit(1721359612.759:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7561 comm="syz.4.691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc93dd75b59 code=0x0
[ 208.318668][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 208.338136][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.699'.
[ 208.415743][ T7585] netlink: 'syz.3.698': attribute type 1 has an invalid length.
[ 208.443301][ T7586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 208.465310][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 208.866817][ T5093] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 209.285981][ T7589] netlink: 'syz.1.700': attribute type 1 has an invalid length.
[ 209.295470][ T7589] netlink: 224 bytes leftover after parsing attributes in process `syz.1.700'.
[ 209.304618][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'.
[ 209.422710][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'.
[ 209.636428][ T29] audit: type=1326 audit(1721359614.739:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.0.703" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2037b75b59 code=0x0
[ 209.947455][ T7610] syz.3.707 uses obsolete (PF_INET,SOCK_PACKET)
[ 209.964956][ T7610] syzkaller1: entered promiscuous mode
[ 209.975263][ T7610] syzkaller1: entered allmulticast mode
[ 209.994211][ T7610] veth1_macvtap: left promiscuous mode
[ 210.778760][ T7525] usbtmc 3-1:16.0: usb_control_msg returned -110
[ 210.812181][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 210.819959][ T5146] usb 3-1: USB disconnect, device number 10
[ 210.831779][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.3.712'.
[ 210.946193][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 210.974358][ T7622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 211.476903][ T8] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 211.543670][ T7628] netlink: 'syz.0.715': attribute type 1 has an invalid length.
[ 211.620426][ T7628] 8021q: adding VLAN 0 to HW filter on device bond1
[ 211.641489][ T7630] netlink: 48 bytes leftover after parsing attributes in process `syz.0.715'.
[ 211.686745][ T8] usb 3-1: Using ep0 maxpacket: 8
[ 211.718006][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 211.757482][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 211.794191][ T7635] netlink: 'syz.3.716': attribute type 4 has an invalid length.
[ 211.812724][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 211.859665][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 211.883408][ T8] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 211.895667][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 211.903686][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.718'.
[ 211.925487][ T8] hub 3-1:1.0: bad descriptor, ignoring hub
[ 211.938916][ T8] hub 3-1:1.0: probe with driver hub failed with error -5
[ 211.950937][ T8] cdc_wdm 3-1:1.0: skipping garbage
[ 211.956318][ T8] cdc_wdm 3-1:1.0: skipping garbage
[ 211.965681][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 211.975533][ T8] cdc_wdm 3-1:1.0: Unknown control protocol
[ 212.529252][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'.
[ 212.539506][ T7652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'.
[ 212.558215][ T1725] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 212.658303][ T7626] usb 3-1: reset high-speed USB device number 11 using dummy_hcd
[ 212.680075][ T29] audit: type=1804 audit(1721359617.789:48): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.724" name="/newroot/63/file0/bus" dev="ramfs" ino=17837 res=1 errno=0
[ 212.756853][ T1725] usb 1-1: Using ep0 maxpacket: 8
[ 212.816890][ T1725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 212.837492][ T29] audit: type=1804 audit(1721359617.949:49): pid=7660 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.724" name="/newroot/63/file0/bus" dev="ramfs" ino=17837 res=1 errno=0
[ 212.837498][ T1725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 212.837545][ T1725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 212.906344][ T29] audit: type=1800 audit(1721359618.009:50): pid=7655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.724" name="bus" dev="ramfs" ino=17837 res=0 errno=0
[ 212.947637][ T1725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 212.979400][ T1725] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 213.011161][ T1725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 213.059399][ T1725] hub 1-1:1.0: bad descriptor, ignoring hub
[ 213.087348][ T1725] hub 1-1:1.0: probe with driver hub failed with error -5
[ 213.113531][ T1725] cdc_wdm 1-1:1.0: skipping garbage
[ 213.137426][ T1725] cdc_wdm 1-1:1.0: skipping garbage
[ 213.169846][ T1725] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[ 213.194705][ T1725] cdc_wdm 1-1:1.0: Unknown control protocol
[ 213.666056][ T5146] usb 1-1: USB disconnect, device number 8
[ 213.988047][ T5146] usb 3-1: USB disconnect, device number 11
[ 214.037166][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 214.066125][ T7669] netlink: 20 bytes leftover after parsing attributes in process `syz.3.726'.
[ 214.141330][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 214.166757][ T7669] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 214.277362][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 214.467206][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 214.477485][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 214.491642][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 214.520350][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 214.553704][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 214.597415][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 214.622832][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 214.660359][ T9] hub 1-1:1.0: bad descriptor, ignoring hub
[ 214.676576][ T9] hub 1-1:1.0: probe with driver hub failed with error -5
[ 214.692113][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 214.705164][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 214.728282][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 214.744486][ T9] cdc_wdm 1-1:1.0: Unknown control protocol
[ 215.467057][ T9] usb 1-1: USB disconnect, device number 9
[ 215.602549][ T7683] netlink: zone id is out of range
[ 215.610265][ T7683] netlink: zone id is out of range
[ 215.625185][ T7683] netlink: set zone limit has 4 unknown bytes
[ 216.007339][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.730'.
[ 216.324775][ T7688] netlink: 32 bytes leftover after parsing attributes in process `syz.1.731'.
[ 216.786805][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 216.924665][ T29] audit: type=1804 audit(1721359622.019:51): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.736" name="/newroot/171/file0/bus" dev="ramfs" ino=18605 res=1 errno=0
[ 217.001955][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 217.025115][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 217.055990][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 217.077162][ T29] audit: type=1804 audit(1721359622.169:52): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.736" name="/newroot/171/file0/bus" dev="ramfs" ino=18605 res=1 errno=0
[ 217.105540][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 217.128513][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 217.137968][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 217.145942][ T9] usb 4-1: Product: syz
[ 217.151282][ T9] usb 4-1: Manufacturer: syz
[ 217.177894][ T9] cdc_wdm 4-1:1.0: skipping garbage
[ 217.196838][ T9] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 217.271887][ T29] audit: type=1800 audit(1721359622.169:53): pid=7702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.736" name="bus" dev="ramfs" ino=18605 res=0 errno=0
[ 217.991994][ T7714] netlink: zone id is out of range
[ 218.077741][ T7714] netlink: set zone limit has 4 unknown bytes
[ 218.101711][ T1725] usb 4-1: USB disconnect, device number 6
[ 218.456047][ T7726] netlink: 'syz.2.741': attribute type 4 has an invalid length.
[ 218.506826][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 218.716713][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 218.733967][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 218.752347][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 218.767191][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 218.783661][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 218.796854][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 218.806273][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 218.861126][ T9] hub 1-1:1.0: bad descriptor, ignoring hub
[ 218.869191][ T9] hub 1-1:1.0: probe with driver hub failed with error -5
[ 218.889396][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 218.905750][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 218.920021][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 218.930580][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.4.744'.
[ 218.939778][ T9] cdc_wdm 1-1:1.0: Unknown control protocol
[ 219.007343][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.1.743'.
[ 219.427254][ T29] audit: type=1804 audit(1721359624.509:54): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.749" name="/newroot/159/file0/bus" dev="ramfs" ino=17962 res=1 errno=0
[ 219.531607][ T29] audit: type=1804 audit(1721359624.639:55): pid=7756 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.749" name="/newroot/159/file0/bus" dev="ramfs" ino=17962 res=1 errno=0
[ 219.580821][ T29] audit: type=1800 audit(1721359624.689:56): pid=7751 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.749" name="bus" dev="ramfs" ino=17962 res=0 errno=0
[ 219.619438][ T7723] usb 1-1: reset high-speed USB device number 10 using dummy_hcd
[ 219.646813][ T5146] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 219.876757][ T5146] usb 2-1: Using ep0 maxpacket: 8
[ 219.905838][ T5146] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 219.929233][ T5146] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 219.985082][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 220.043645][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 220.066079][ T5146] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 220.105900][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 220.149631][ T5146] hub 2-1:1.0: bad descriptor, ignoring hub
[ 220.185992][ T5146] hub 2-1:1.0: probe with driver hub failed with error -5
[ 220.227939][ T5146] cdc_wdm 2-1:1.0: skipping garbage
[ 220.241480][ T5146] cdc_wdm 2-1:1.0: skipping garbage
[ 220.261979][ T5146] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device
[ 220.279761][ T5146] cdc_wdm 2-1:1.0: Unknown control protocol
[ 220.626953][ T7765] syzkaller1: entered promiscuous mode
[ 220.636000][ T7765] syzkaller1: entered allmulticast mode
[ 220.680025][ T7765] veth1_macvtap: left promiscuous mode
[ 221.211524][ T25] usb 1-1: USB disconnect, device number 10
[ 221.308447][ T46] usb 2-1: reset high-speed USB device number 9 using dummy_hcd
[ 221.483728][ T7773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.755'.
[ 222.004899][ T7785] netlink: 'syz.2.759': attribute type 4 has an invalid length.
[ 222.350569][ T29] audit: type=1804 audit(1721359627.449:57): pid=7792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.761" name="/newroot/91/file0/bus" dev="ramfs" ino=18012 res=1 errno=0
[ 222.484781][ T29] audit: type=1804 audit(1721359627.589:58): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.761" name="/newroot/91/file0/bus" dev="ramfs" ino=18012 res=1 errno=0
[ 222.563136][ T29] audit: type=1800 audit(1721359627.629:59): pid=7792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.761" name="bus" dev="ramfs" ino=18012 res=0 errno=0
[ 223.270938][ T7812] netlink: 32 bytes leftover after parsing attributes in process `syz.4.767'.
[ 224.587045][ T5148] usb 2-1: USB disconnect, device number 9
[ 224.803386][ T7838] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[ 224.834007][ T7838] mac80211_hwsim hwsim2 wlan0: left promiscuous mode
[ 224.892024][ T7843] netlink: 'syz.0.776': attribute type 1 has an invalid length.
[ 224.920479][ T29] audit: type=1804 audit(1721359630.029:60): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.777" name="/newroot/25/file0/bus" dev="ramfs" ino=18863 res=1 errno=0
[ 224.922337][ T7845] netlink: 32 bytes leftover after parsing attributes in process `syz.2.779'.
[ 224.994761][ T7843] netlink: 224 bytes leftover after parsing attributes in process `syz.0.776'.
[ 225.013749][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.776'.
[ 225.113806][ T29] audit: type=1804 audit(1721359630.219:61): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.777" name="/newroot/25/file0/bus" dev="ramfs" ino=18863 res=1 errno=0
[ 225.212256][ T29] audit: type=1800 audit(1721359630.219:62): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.777" name="bus" dev="ramfs" ino=18863 res=0 errno=0
[ 225.744279][ T7870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.786'.
[ 226.019698][ T7879] netlink: 32 bytes leftover after parsing attributes in process `syz.4.790'.
[ 226.107579][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 226.216791][ T5148] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 226.306806][ T25] usb 2-1: Using ep0 maxpacket: 8
[ 226.329494][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 226.344931][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 226.374340][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 226.401730][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 226.431161][ T25] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 226.432929][ T5148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 226.462988][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 226.475921][ T5148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 226.495722][ T25] hub 2-1:1.0: bad descriptor, ignoring hub
[ 226.498472][ T5148] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[ 226.528246][ T5148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 226.542856][ T25] hub 2-1:1.0: probe with driver hub failed with error -5
[ 226.549970][ T5148] usb 1-1: config 0 descriptor??
[ 226.566106][ T7882] netlink: 'syz.4.791': attribute type 1 has an invalid length.
[ 226.593909][ T7882] netlink: 224 bytes leftover after parsing attributes in process `syz.4.791'.
[ 226.603752][ T25] cdc_wdm 2-1:1.0: skipping garbage
[ 226.610673][ T25] cdc_wdm 2-1:1.0: skipping garbage
[ 226.616171][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.791'.
[ 226.647858][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 226.654269][ T7883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.791'.
[ 226.663595][ T25] cdc_wdm 2-1:1.0: Unknown control protocol
[ 226.727553][ T25] usb 2-1: USB disconnect, device number 10
[ 226.970862][ T7876] ptrace attach of "./syz-executor exec"[5090] was attempted by "./syz-executor exec"[7876]
[ 227.041687][ T5148] belkin 0003:1020:0006.0007: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.0-1/input0
[ 227.138128][ T5093] Bluetooth: hci6: unexpected event 0x06 length: 23 > 3
[ 227.291177][ T7889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.793'.
[ 227.326901][ T25] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 227.353827][ T1725] usb 1-1: USB disconnect, device number 11
[ 227.544017][ T25] usb 2-1: Using ep0 maxpacket: 8
[ 227.579058][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 227.595981][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 227.605081][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 227.631507][ T7894] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[ 227.633641][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 227.660367][ T25] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 227.673169][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 227.696350][ T25] hub 2-1:1.0: bad descriptor, ignoring hub
[ 227.716847][ T25] hub 2-1:1.0: probe with driver hub failed with error -5
[ 227.724655][ T25] cdc_wdm 2-1:1.0: skipping garbage
[ 227.730209][ T25] cdc_wdm 2-1:1.0: skipping garbage
[ 227.733303][ T7894] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[ 227.743348][ T25] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 227.749452][ T25] cdc_wdm 2-1:1.0: Unknown control protocol
[ 227.798447][ T7898] netlink: 'syz.2.795': attribute type 1 has an invalid length.
[ 227.842079][ T7898] netlink: 224 bytes leftover after parsing attributes in process `syz.2.795'.
[ 227.888994][ T7898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.795'.
[ 228.157275][ T29] audit: type=1326 audit(1721359633.269:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7896 comm="syz.4.796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc93dd75b59 code=0x0
[ 228.239007][ T29] audit: type=1804 audit(1721359633.309:64): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.797" name="/newroot/177/file0/bus" dev="ramfs" ino=18981 res=1 errno=0
[ 228.396573][ T29] audit: type=1804 audit(1721359633.499:65): pid=7909 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.797" name="/newroot/177/file0/bus" dev="ramfs" ino=18981 res=1 errno=0
[ 228.488245][ T29] audit: type=1800 audit(1721359633.559:66): pid=7902 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.797" name="bus" dev="ramfs" ino=18981 res=0 errno=0
[ 229.316990][ T7922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.801'.
[ 229.399582][ T25] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 229.519419][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.806'.
[ 229.549467][ T7930] netlink: 16 bytes leftover after parsing attributes in process `syz.3.806'.
[ 229.597587][ T25] usb 3-1: Using ep0 maxpacket: 8
[ 229.615655][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 229.634640][ T25] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 229.654691][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 229.681074][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 229.699714][ T25] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 229.711824][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 229.757912][ T25] hub 3-1:1.0: bad descriptor, ignoring hub
[ 229.764190][ T25] hub 3-1:1.0: probe with driver hub failed with error -5
[ 229.789453][ T25] cdc_wdm 3-1:1.0: skipping garbage
[ 229.805905][ T25] cdc_wdm 3-1:1.0: skipping garbage
[ 229.828046][ T25] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[ 229.845224][ T25] cdc_wdm 3-1:1.0: Unknown control protocol
[ 230.016861][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 230.227182][ T5096] usb 3-1: USB disconnect, device number 12
[ 230.249330][ T9] usb 4-1: Using ep0 maxpacket: 8
[ 230.265095][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 230.281910][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 230.319871][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 230.350847][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 230.394273][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 230.428518][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 230.440021][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 230.568544][ T29] audit: type=1804 audit(1721359635.679:67): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.810" name="/newroot/192/file0/bus" dev="ramfs" ino=19060 res=1 errno=0
[ 230.656758][ T1725] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 230.697545][ T9] usb 4-1: usb_control_msg returned -32
[ 230.703141][ T9] usbtmc 4-1:16.0: can't read capabilities
[ 230.794263][ T29] audit: type=1804 audit(1721359635.899:68): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.810" name="/newroot/192/file0/bus" dev="ramfs" ino=19060 res=1 errno=0
[ 230.857205][ T5148] usb 2-1: USB disconnect, device number 11
[ 230.881938][ T29] audit: type=1800 audit(1721359635.929:69): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.810" name="bus" dev="ramfs" ino=19060 res=0 errno=0
[ 230.912852][ T1725] usb 3-1: Using ep0 maxpacket: 8
[ 230.939637][ T1725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 230.981574][ T1725] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 231.005089][ T1725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 231.048810][ T1725] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 231.061766][ T1725] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 231.080411][ T1725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 231.105250][ T1725] hub 3-1:1.0: bad descriptor, ignoring hub
[ 231.111612][ T1725] hub 3-1:1.0: probe with driver hub failed with error -5
[ 231.120090][ T1725] cdc_wdm 3-1:1.0: skipping garbage
[ 231.128932][ T1725] cdc_wdm 3-1:1.0: skipping garbage
[ 231.141733][ T1725] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 231.156938][ T29] audit: type=1804 audit(1721359636.259:70): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.812" name="/newroot/27/file0/bus" dev="ramfs" ino=18320 res=1 errno=0
[ 231.178113][ T1725] cdc_wdm 3-1:1.0: Unknown control protocol
[ 231.302439][ T29] audit: type=1804 audit(1721359636.389:71): pid=7958 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.812" name="/newroot/27/file0/bus" dev="ramfs" ino=18320 res=1 errno=0
[ 231.386574][ T29] audit: type=1800 audit(1721359636.389:72): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.812" name="bus" dev="ramfs" ino=18320 res=0 errno=0
[ 231.496596][ T29] audit: type=1326 audit(1721359636.599:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7949 comm="syz.4.811" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc93dd75b59 code=0x0
[ 232.158010][ T25] usb 3-1: USB disconnect, device number 13
[ 232.363474][ T7973] netlink: zone id is out of range
[ 232.405576][ T7973] netlink: zone id is out of range
[ 232.522727][ T7973] netlink: set zone limit has 4 unknown bytes
[ 232.698484][ T5148] usb 4-1: USB disconnect, device number 7
[ 232.893479][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'.
[ 232.915350][ T7981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.817'.
[ 233.606827][ T5148] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 233.705823][ T29] audit: type=1804 audit(1721359638.799:74): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.823" name="/newroot/194/file0/bus" dev="ramfs" ino=18420 res=1 errno=0
[ 233.763005][ T8001] netlink: 'syz.1.824': attribute type 1 has an invalid length.
[ 233.812170][ T8001] netlink: 224 bytes leftover after parsing attributes in process `syz.1.824'.
[ 233.856732][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'.
[ 233.869130][ T5148] usb 4-1: Using ep0 maxpacket: 8
[ 233.900541][ T5148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 233.936033][ T5148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 233.945315][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'.
[ 233.977119][ T29] audit: type=1804 audit(1721359639.039:75): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.823" name="/newroot/194/file0/bus" dev="ramfs" ino=18420 res=1 errno=0
[ 233.990620][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 234.013382][ T8008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 234.020091][ T8008] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 234.047091][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 234.057503][ T29] audit: type=1800 audit(1721359639.059:76): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.823" name="bus" dev="ramfs" ino=18420 res=0 errno=0
[ 234.098202][ T8008] vhci_hcd vhci_hcd.0: Device attached
[ 234.155097][ T5148] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 234.177411][ T8008] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 234.187613][ T8012] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9)
[ 234.194149][ T8012] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 234.202322][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 234.260343][ T8012] vhci_hcd vhci_hcd.0: Device attached
[ 234.283996][ T5148] hub 4-1:1.0: bad descriptor, ignoring hub
[ 234.296834][ T5148] hub 4-1:1.0: probe with driver hub failed with error -5
[ 234.299010][ T5093] Bluetooth: hci6: SCO packet for unknown connection handle 0
[ 234.309426][ T5096] vhci_hcd: vhci_device speed not set
[ 234.334560][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 234.343071][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 234.381428][ T5148] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 234.415259][ T5148] cdc_wdm 4-1:1.0: Unknown control protocol
[ 234.428777][ T5096] usb 17-1: new full-speed USB device number 2 using vhci_hcd
[ 234.503694][ T5148] usb 4-1: USB disconnect, device number 8
[ 235.103475][ T8027] netlink: zone id is out of range
[ 235.127922][ T5148] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 235.326727][ T5148] usb 4-1: Using ep0 maxpacket: 8
[ 235.349961][ T5148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 235.362249][ T8027] netlink: set zone limit has 4 unknown bytes
[ 235.366844][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 235.381492][ T5148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 235.405699][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 235.436817][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 235.496704][ T5148] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 235.528916][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 235.553183][ T8014] vhci_hcd: connection closed
[ 235.555337][ T83] vhci_hcd: stop threads
[ 235.568789][ T8009] vhci_hcd: connection reset by peer
[ 235.584509][ T83] vhci_hcd: release socket
[ 235.592962][ T83] vhci_hcd: disconnect device
[ 235.599867][ T5148] hub 4-1:1.0: bad descriptor, ignoring hub
[ 235.605895][ T83] vhci_hcd: stop threads
[ 235.610704][ T25] usb 1-1: Using ep0 maxpacket: 8
[ 235.621569][ T83] vhci_hcd: release socket
[ 235.626584][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 235.626948][ T5148] hub 4-1:1.0: probe with driver hub failed with error -5
[ 235.646837][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 235.662477][ T83] vhci_hcd: disconnect device
[ 235.668890][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 235.674894][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 235.694088][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 235.711958][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 235.723073][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 235.731431][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 235.753293][ T5148] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 235.758929][ T25] hub 1-1:1.0: bad descriptor, ignoring hub
[ 235.765260][ T5148] cdc_wdm 4-1:1.0: Unknown control protocol
[ 235.765857][ T25] hub 1-1:1.0: probe with driver hub failed with error -5
[ 235.842361][ T25] cdc_wdm 1-1:1.0: skipping garbage
[ 235.852460][ T25] cdc_wdm 1-1:1.0: skipping garbage
[ 235.883242][ T25] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[ 235.908090][ T25] cdc_wdm 1-1:1.0: Unknown control protocol
[ 236.197312][ T5148] usb 1-1: USB disconnect, device number 12
[ 236.297459][ T5093] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[ 236.306137][ T5093] Bluetooth: hci6: Injecting HCI hardware error event
[ 236.314764][ T5109] Bluetooth: hci6: hardware error 0x00
[ 236.734042][ T29] audit: type=1804 audit(1721359641.829:77): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.839" name="/newroot/111/file0/bus" dev="ramfs" ino=19496 res=1 errno=0
[ 236.806835][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 236.925660][ T29] audit: type=1804 audit(1721359642.029:78): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.839" name="/newroot/111/file0/bus" dev="ramfs" ino=19496 res=1 errno=0
[ 236.982479][ T29] audit: type=1800 audit(1721359642.029:79): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.839" name="bus" dev="ramfs" ino=19496 res=0 errno=0
[ 237.009453][ T25] usb 1-1: Using ep0 maxpacket: 8
[ 237.017006][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 237.035615][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 237.066871][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 237.094951][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 237.125166][ T25] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 237.134953][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 237.155468][ T25] hub 1-1:1.0: bad descriptor, ignoring hub
[ 237.165850][ T25] hub 1-1:1.0: probe with driver hub failed with error -5
[ 237.175106][ T25] cdc_wdm 1-1:1.0: skipping garbage
[ 237.181338][ T25] cdc_wdm 1-1:1.0: skipping garbage
[ 237.192979][ T25] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[ 237.200189][ T25] cdc_wdm 1-1:1.0: Unknown control protocol
[ 237.272231][ T1725] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 237.476912][ T1725] usb 2-1: Using ep0 maxpacket: 8
[ 237.485458][ T1725] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 237.512553][ T1725] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 237.545501][ T1725] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 237.567833][ T1725] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 237.592825][ T1725] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 237.611650][ T1725] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 237.898463][ T1725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 238.161940][ T1725] usb 2-1: usb_control_msg returned -32
[ 238.170617][ T1725] usbtmc 2-1:16.0: can't read capabilities
[ 238.197092][ T5103] usb 1-1: USB disconnect, device number 13
[ 238.377018][ T5109] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[ 238.501516][ T5148] usb 4-1: USB disconnect, device number 9
[ 238.739370][ T29] audit: type=1804 audit(1721359643.849:80): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.846" name="/newroot/188/file0/bus" dev="ramfs" ino=19313 res=1 errno=0
[ 238.877467][ T29] audit: type=1804 audit(1721359643.979:81): pid=8089 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.846" name="/newroot/188/file0/bus" dev="ramfs" ino=19313 res=1 errno=0
[ 238.992555][ T29] audit: type=1800 audit(1721359644.019:82): pid=8084 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.846" name="bus" dev="ramfs" ino=19313 res=0 errno=0
[ 239.586828][ T5096] vhci_hcd: vhci_device speed not set
[ 239.725318][ T5093] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 239.735725][ T5093] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 239.745774][ T5093] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 239.754596][ T5093] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 239.762559][ T5093] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 239.772296][ T5093] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 240.156895][ T8098] netlink: zone id is out of range
[ 240.251239][ T8098] netlink: set zone limit has 4 unknown bytes
[ 240.260119][ T58] usb 2-1: USB disconnect, device number 12
[ 240.541647][ T83] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 240.587404][ T8103] nbd: must specify a size in bytes for the device
[ 240.714290][ T83] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 240.919479][ T58] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 240.947490][ T83] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 240.972857][ T8094] chnl_net:caif_netlink_parms(): no params data found
[ 241.100862][ T83] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 241.156751][ T58] usb 2-1: Using ep0 maxpacket: 8
[ 241.166173][ T58] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 241.190330][ T58] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 241.203954][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 241.225628][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 241.249767][ T58] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 241.261212][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 241.280829][ T58] hub 2-1:1.0: bad descriptor, ignoring hub
[ 241.296602][ T58] hub 2-1:1.0: probe with driver hub failed with error -5
[ 241.320635][ T58] cdc_wdm 2-1:1.0: skipping garbage
[ 241.326402][ T58] cdc_wdm 2-1:1.0: skipping garbage
[ 241.339643][ T58] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 241.348408][ T58] cdc_wdm 2-1:1.0: Unknown control protocol
[ 241.453334][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state
[ 241.472565][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state
[ 241.520995][ T8094] bridge_slave_0: entered allmulticast mode
[ 241.540476][ T8094] bridge_slave_0: entered promiscuous mode
[ 241.593369][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state
[ 241.660974][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state
[ 241.686997][ T8094] bridge_slave_1: entered allmulticast mode
[ 241.699912][ T8094] bridge_slave_1: entered promiscuous mode
[ 241.817029][ T5109] Bluetooth: hci2: command tx timeout
[ 241.844981][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 241.854552][ T83] bridge_slave_1: left allmulticast mode
[ 241.863125][ T83] bridge_slave_1: left promiscuous mode
[ 241.871299][ T83] bridge0: port 2(bridge_slave_1) entered disabled state
[ 241.895080][ T83] bridge_slave_0: left allmulticast mode
[ 241.901059][ T83] bridge_slave_0: left promiscuous mode
[ 241.908991][ T83] bridge0: port 1(bridge_slave_0) entered disabled state
[ 242.141983][ T8101] usb 2-1: reset high-speed USB device number 13 using dummy_hcd
[ 242.377603][ T5148] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 242.537033][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 242.596958][ T5148] usb 4-1: Using ep0 maxpacket: 8
[ 242.609262][ T5148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 242.636804][ T5148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 242.655949][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 242.683827][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 242.715543][ T5148] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 242.748905][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 242.751030][ T46] usb 3-1: Using ep0 maxpacket: 8
[ 242.806793][ T46] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 242.813456][ T5148] hub 4-1:1.0: bad descriptor, ignoring hub
[ 242.835330][ T46] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 242.845487][ T5148] hub 4-1:1.0: probe with driver hub failed with error -5
[ 242.845915][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 242.896702][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 242.906769][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 242.924028][ T5148] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 242.947062][ T5148] cdc_wdm 4-1:1.0: Unknown control protocol
[ 242.952036][ T46] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 242.993426][ T46] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 243.036753][ T46] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 243.066199][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 243.113374][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 243.197429][ T25] usb 4-1: USB disconnect, device number 10
[ 243.562460][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 243.603363][ T83] bond0 (unregistering): Released all slaves
[ 243.627425][ T5148] usb 2-1: USB disconnect, device number 13
[ 243.665106][ T46] usb 3-1: usb_control_msg returned -32
[ 243.720676][ T46] usbtmc 3-1:16.0: can't read capabilities
[ 243.898081][ T5109] Bluetooth: hci2: command tx timeout
[ 243.949579][ T83] bond1 (unregistering): Released all slaves
[ 243.978608][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 244.116784][ T5146] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 244.131773][ T8138] usbtmc 3-1:16.0: usb_control_msg returned -71
[ 244.143740][ T58] usb 3-1: USB disconnect, device number 14
[ 244.336767][ T5146] usb 4-1: Using ep0 maxpacket: 8
[ 244.354257][ T5146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 244.357620][ T8094] team0: Port device team_slave_0 added
[ 244.395194][ T5146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 244.421880][ T8094] team0: Port device team_slave_1 added
[ 244.425706][ T5146] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 244.466936][ T5146] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 244.528237][ T5146] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 244.555348][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 244.586982][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 244.593955][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 244.600747][ T5146] hub 4-1:1.0: bad descriptor, ignoring hub
[ 244.645938][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 244.720304][ T5146] hub 4-1:1.0: probe with driver hub failed with error -5
[ 244.753335][ T5146] cdc_wdm 4-1:1.0: skipping garbage
[ 244.786542][ T5146] cdc_wdm 4-1:1.0: skipping garbage
[ 244.830948][ T5146] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 244.854407][ T5146] cdc_wdm 4-1:1.0: Unknown control protocol
[ 244.857453][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 244.891168][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 245.005976][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 245.093021][ T83] hsr_slave_0: left promiscuous mode
[ 245.106003][ T83] hsr_slave_1: left promiscuous mode
[ 245.124667][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 245.149176][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 245.167363][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 245.179214][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 245.305610][ T83] veth1_macvtap: left promiscuous mode
[ 245.325938][ T83] veth0_macvtap: left promiscuous mode
[ 245.347476][ T83] veth1_vlan: left promiscuous mode
[ 245.358581][ T83] veth0_vlan: left promiscuous mode
[ 245.406796][ T8] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 245.634647][ T8] usb 3-1: Using ep0 maxpacket: 8
[ 245.678362][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 245.709470][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 245.728393][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 245.783447][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 245.839241][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 245.866872][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 245.899301][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 245.976806][ T5109] Bluetooth: hci2: command tx timeout
[ 246.175549][ T8] usb 3-1: usb_control_msg returned -32
[ 246.188966][ T8] usbtmc 3-1:16.0: can't read capabilities
[ 246.513958][ T83] team0 (unregistering): Port device team_slave_1 removed
[ 246.546683][ T83] team0 (unregistering): Port device team_slave_0 removed
[ 246.898751][ T8160] syzkaller1: entered promiscuous mode
[ 246.904375][ T8160] syzkaller1: entered allmulticast mode
[ 247.003799][ T8094] hsr_slave_0: entered promiscuous mode
[ 247.010462][ T8094] hsr_slave_1: entered promiscuous mode
[ 247.159683][ T8173] nbd: must specify a size in bytes for the device
[ 247.291243][ T5146] usb 4-1: USB disconnect, device number 11
[ 247.366022][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.865'.
[ 247.664453][ T29] audit: type=1804 audit(1721359652.769:83): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.868" name="/newroot/116/file0/bus" dev="ramfs" ino=20726 res=1 errno=0
[ 247.836815][ T5148] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 247.927473][ T29] audit: type=1804 audit(1721359653.029:84): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.868" name="/newroot/116/file0/bus" dev="ramfs" ino=20726 res=1 errno=0
[ 247.981485][ T29] audit: type=1800 audit(1721359653.059:85): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.868" name="bus" dev="ramfs" ino=20726 res=0 errno=0
[ 248.057646][ T5109] Bluetooth: hci2: command tx timeout
[ 248.077603][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 248.144875][ T8] usb 3-1: USB disconnect, device number 15
[ 248.155761][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 248.177205][ T5148] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[ 248.219865][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 248.268789][ T5148] usb 2-1: config 0 descriptor??
[ 248.686180][ T29] audit: type=1804 audit(1721359653.759:86): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.870" name="/newroot/193/file0/bus" dev="ramfs" ino=19660 res=1 errno=0
[ 248.713499][ T8184] ptrace attach of "./syz-executor exec"[7194] was attempted by "./syz-executor exec"[8184]
[ 248.803285][ T8094] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 248.822541][ T5148] belkin 0003:1020:0006.0008: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.1-1/input0
[ 248.872077][ T8094] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 249.038693][ T8094] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 249.083311][ T8094] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 249.131380][ T29] audit: type=1804 audit(1721359654.239:87): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.870" name="/newroot/193/file0/bus" dev="ramfs" ino=19660 res=1 errno=0
[ 249.163897][ T5146] usb 2-1: USB disconnect, device number 14
[ 249.179152][ T8214] netlink: 'syz.4.871': attribute type 29 has an invalid length.
[ 249.223004][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'.
[ 249.241274][ T29] audit: type=1800 audit(1721359654.349:88): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.870" name="bus" dev="ramfs" ino=19660 res=0 errno=0
[ 249.503310][ T8220] nbd: must specify a size in bytes for the device
[ 249.684712][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0
[ 249.867356][ T8094] 8021q: adding VLAN 0 to HW filter on device team0
[ 249.926138][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 249.933314][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 249.999877][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 250.007022][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 250.267380][ T5146] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 250.431067][ T8242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.877'.
[ 250.497072][ T5146] usb 2-1: Using ep0 maxpacket: 8
[ 250.512439][ T29] audit: type=1804 audit(1721359655.619:89): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.878" name="/newroot/86/file0/bus" dev="ramfs" ino=19764 res=1 errno=0
[ 250.553828][ T5146] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 250.611371][ T5146] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 250.661748][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 250.670420][ T29] audit: type=1804 audit(1721359655.769:90): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.878" name="/newroot/86/file0/bus" dev="ramfs" ino=19764 res=1 errno=0
[ 250.724912][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 250.775729][ T5146] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 250.776044][ T29] audit: type=1800 audit(1721359655.809:91): pid=8248 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.878" name="bus" dev="ramfs" ino=19764 res=0 errno=0
[ 250.834578][ T8257] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[ 250.841132][ T8257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 250.867167][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 250.932584][ T8257] vhci_hcd vhci_hcd.0: Device attached
[ 250.954846][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 250.974616][ T8261] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9)
[ 250.981158][ T8261] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 251.039791][ T8270] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 251.046315][ T8270] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 251.054547][ T8268] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 251.068227][ T5146] hub 2-1:1.0: bad descriptor, ignoring hub
[ 251.082297][ T5146] hub 2-1:1.0: probe with driver hub failed with error -5
[ 251.085653][ T8278] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 251.098618][ T8261] vhci_hcd vhci_hcd.0: Device attached
[ 251.101476][ T5146] cdc_wdm 2-1:1.0: skipping garbage
[ 251.119544][ T8270] vhci_hcd vhci_hcd.0: Device attached
[ 251.132931][ T5146] cdc_wdm 2-1:1.0: skipping garbage
[ 251.138704][ T46] vhci_hcd: vhci_device speed not set
[ 251.162909][ T5146] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 251.185241][ T5146] cdc_wdm 2-1:1.0: Unknown control protocol
[ 251.188190][ T8094] veth0_vlan: entered promiscuous mode
[ 251.203913][ T8275] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9)
[ 251.210563][ T8275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 251.221873][ T46] usb 17-1: new full-speed USB device number 3 using vhci_hcd
[ 251.240835][ T8094] veth1_vlan: entered promiscuous mode
[ 251.278186][ T5146] usb 2-1: USB disconnect, device number 15
[ 251.337124][ T25] vhci_hcd: vhci_device speed not set
[ 251.350934][ T8275] vhci_hcd vhci_hcd.0: Device attached
[ 251.426914][ T8094] veth0_macvtap: entered promiscuous mode
[ 251.440907][ T25] usb 13-1: new full-speed USB device number 2 using vhci_hcd
[ 251.460846][ T8094] veth1_macvtap: entered promiscuous mode
[ 251.551102][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 251.576519][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 251.613866][ T8289] nbd: must specify a size in bytes for the device
[ 251.626003][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 251.655147][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 251.683041][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 251.707919][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 251.734849][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 251.766924][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 251.798914][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 251.817502][ T8258] vhci_hcd: connection reset by peer
[ 251.817909][ T8262] vhci_hcd: connection closed
[ 251.824573][ T2935] vhci_hcd: stop threads
[ 251.848223][ T2935] vhci_hcd: release socket
[ 251.858856][ T5146] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 251.864291][ T2935] vhci_hcd: disconnect device
[ 251.875082][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 251.897029][ T2935] vhci_hcd: stop threads
[ 251.901311][ T2935] vhci_hcd: release socket
[ 251.934386][ T2935] vhci_hcd: disconnect device
[ 251.941751][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 251.971982][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 251.994243][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 252.026076][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 252.079073][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 252.086768][ T5146] usb 2-1: Using ep0 maxpacket: 8
[ 252.100466][ T5146] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 252.121542][ T8094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 252.136924][ T5146] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 252.151961][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 252.167058][ T8094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 252.184852][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 252.192730][ T5146] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 252.237221][ T5146] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 252.259617][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 252.272240][ T8274] vhci_hcd: connection reset by peer
[ 252.275585][ T8277] vhci_hcd: connection closed
[ 252.282998][ T8094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 252.301628][ T83] vhci_hcd: stop threads
[ 252.305883][ T83] vhci_hcd: release socket
[ 252.326830][ T5146] hub 2-1:1.0: bad descriptor, ignoring hub
[ 252.341939][ T83] vhci_hcd: disconnect device
[ 252.347416][ T5146] hub 2-1:1.0: probe with driver hub failed with error -5
[ 252.350152][ T8094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 252.355067][ T5146] cdc_wdm 2-1:1.0: skipping garbage
[ 252.371193][ T83] vhci_hcd: stop threads
[ 252.375573][ T83] vhci_hcd: release socket
[ 252.381005][ T83] vhci_hcd: disconnect device
[ 252.394420][ T5146] cdc_wdm 2-1:1.0: skipping garbage
[ 252.399959][ T8094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 252.415219][ T5146] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 252.422375][ T8094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 252.448571][ T5146] cdc_wdm 2-1:1.0: Unknown control protocol
[ 252.683107][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 252.714772][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 252.796474][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 252.830269][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 253.094910][ T8316] netlink: 'syz.4.886': attribute type 1 has an invalid length.
[ 253.108278][ T8316] netlink: 224 bytes leftover after parsing attributes in process `syz.4.886'.
[ 253.120762][ T8315] netlink: 'syz.0.850': attribute type 4 has an invalid length.
[ 253.131269][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.886'.
[ 253.162445][ T8311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'.
[ 253.216772][ T1725] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 253.317897][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.2.888'.
[ 253.419177][ T1725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 253.446936][ T1725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 253.487727][ T1725] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[ 253.526731][ T1725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 253.548333][ T1725] usb 4-1: config 0 descriptor??
[ 253.715316][ T8342] nbd: must specify a size in bytes for the device
[ 253.961050][ T8310] ptrace attach of "./syz-executor exec"[6396] was attempted by "./syz-executor exec"[8310]
[ 254.039083][ T1725] belkin 0003:1020:0006.0009: hidraw0: USB HID v0.00 Device [HID 1020:0006] on usb-dummy_hcd.3-1/input0
[ 254.042852][ T8347] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[ 254.079721][ T8347] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[ 254.187620][ T8354] netlink: 'syz.2.894': attribute type 1 has an invalid length.
[ 254.224115][ T8354] netlink: 224 bytes leftover after parsing attributes in process `syz.2.894'.
[ 254.246759][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'.
[ 254.290939][ T8347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.894'.
[ 254.354990][ T5148] usb 4-1: USB disconnect, device number 12
[ 254.489909][ T8358] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6)
[ 254.496466][ T8358] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 254.535974][ T8358] vhci_hcd vhci_hcd.0: Device attached
[ 254.598377][ T8363] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(8)
[ 254.604929][ T8363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 254.628157][ T8358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 254.673852][ T5109] Bluetooth: hci2: SCO packet for unknown connection handle 0
[ 254.716316][ T8363] vhci_hcd vhci_hcd.0: Device attached
[ 254.729608][ T8] vhci_hcd: vhci_device speed not set
[ 254.822562][ T8] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[ 255.138360][ T5148] usb 2-1: USB disconnect, device number 16
[ 255.201503][ T8382] netlink: 'syz.4.899': attribute type 4 has an invalid length.
[ 255.389132][ T8385] netlink: 'syz.3.900': attribute type 1 has an invalid length.
[ 255.433653][ T8385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.900'.
[ 255.483693][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.900'.
[ 255.644609][ T8395] nbd: must specify a size in bytes for the device
[ 256.156784][ T1240] ieee802154 phy0 wpan0: encryption failed: -22
[ 256.827612][ T8409] netlink: 'syz.4.907': attribute type 1 has an invalid length.
[ 256.836816][ T46] vhci_hcd: vhci_device speed not set
[ 256.846776][ T25] vhci_hcd: vhci_device speed not set
[ 256.855338][ T8409] netlink: 224 bytes leftover after parsing attributes in process `syz.4.907'.
[ 257.114283][ T8364] vhci_hcd: connection closed
[ 257.115561][ T8359] vhci_hcd: connection reset by peer
[ 257.128241][ T2935] vhci_hcd: stop threads
[ 257.132486][ T2935] vhci_hcd: release socket
[ 257.165219][ T2935] vhci_hcd: disconnect device
[ 257.201761][ T2935] vhci_hcd: stop threads
[ 257.224276][ T2935] vhci_hcd: release socket
[ 257.254978][ T2935] vhci_hcd: disconnect device
[ 257.395220][ T8419] netlink: 'syz.4.910': attribute type 1 has an invalid length.
[ 257.466758][ T5103] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 257.656742][ T5103] usb 2-1: Using ep0 maxpacket: 8
[ 257.678620][ T5103] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 257.720235][ T5103] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 257.755359][ T5103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 257.810497][ T5103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 257.851313][ T5103] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 257.873844][ T5103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 257.970737][ T5103] hub 2-1:1.0: bad descriptor, ignoring hub
[ 258.001282][ T8421] netlink: 'syz.2.912': attribute type 4 has an invalid length.
[ 258.017656][ T5103] hub 2-1:1.0: probe with driver hub failed with error -5
[ 258.054627][ T5103] cdc_wdm 2-1:1.0: skipping garbage
[ 258.102529][ T5103] cdc_wdm 2-1:1.0: skipping garbage
[ 258.131624][ T5103] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 258.151800][ T5103] cdc_wdm 2-1:1.0: Unknown control protocol
[ 258.198953][ T5103] usb 2-1: USB disconnect, device number 17
[ 258.717117][ T8433] netlink: 'syz.3.916': attribute type 1 has an invalid length.
[ 258.739008][ T8433] __nla_validate_parse: 2 callbacks suppressed
[ 258.739094][ T8433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.916'.
[ 258.811500][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'.
[ 258.833447][ T5103] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 258.870471][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'.
[ 259.031577][ T8439] nbd: must specify a size in bytes for the device
[ 259.040168][ T5103] usb 2-1: Using ep0 maxpacket: 8
[ 259.082996][ T5103] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 259.106805][ T5103] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 259.117336][ T5103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 259.129387][ T5103] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 259.258355][ T5103] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 259.275150][ T5103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 259.319744][ T5103] hub 2-1:1.0: bad descriptor, ignoring hub
[ 259.335662][ T5103] hub 2-1:1.0: probe with driver hub failed with error -5
[ 259.377213][ T5103] cdc_wdm 2-1:1.0: skipping garbage
[ 259.398351][ T5103] cdc_wdm 2-1:1.0: skipping garbage
[ 259.404715][ T8449] netlink: 'syz.4.920': attribute type 1 has an invalid length.
[ 259.419621][ T8449] netlink: 224 bytes leftover after parsing attributes in process `syz.4.920'.
[ 259.421311][ T5103] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 259.461342][ T8449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.920'.
[ 259.467692][ T5103] cdc_wdm 2-1:1.0: Unknown control protocol
[ 259.479986][ T8443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'.
[ 259.756920][ T5148] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 259.957740][ T5148] usb 4-1: Using ep0 maxpacket: 8
[ 259.980665][ T5148] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 259.995936][ T8] vhci_hcd: vhci_device speed not set
[ 260.014097][ T5148] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 260.036739][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 260.071263][ T5148] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 260.100313][ T5148] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 260.121598][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 260.157526][ T5148] hub 4-1:1.0: bad descriptor, ignoring hub
[ 260.176162][ T5148] hub 4-1:1.0: probe with driver hub failed with error -5
[ 260.242050][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 260.256830][ T5148] cdc_wdm 4-1:1.0: skipping garbage
[ 260.293459][ T5148] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 260.404932][ T5148] cdc_wdm 4-1:1.0: Unknown control protocol
[ 260.520364][ T5148] usb 4-1: USB disconnect, device number 13
[ 260.674490][ T8470] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[ 260.724845][ T8472] nbd: must specify a size in bytes for the device
[ 260.746395][ T8470] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[ 260.850480][ T8473] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[ 260.871830][ T8473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.929'.
[ 260.895243][ T8473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'.
[ 260.936326][ T8470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.929'.
[ 261.846758][ T1725] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 262.076815][ T1725] usb 4-1: Using ep0 maxpacket: 8
[ 262.086193][ T1725] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 262.124477][ T1725] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 262.165430][ T1725] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 262.202563][ T1725] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 262.234447][ T1725] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 262.265825][ T1725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 262.307184][ T1725] hub 4-1:1.0: bad descriptor, ignoring hub
[ 262.313147][ T1725] hub 4-1:1.0: probe with driver hub failed with error -5
[ 262.316985][ T8489] netlink: 'syz.4.934': attribute type 1 has an invalid length.
[ 262.347337][ T1725] cdc_wdm 4-1:1.0: skipping garbage
[ 262.353228][ T1725] cdc_wdm 4-1:1.0: skipping garbage
[ 262.377909][ T1725] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 262.395595][ T8489] netlink: 224 bytes leftover after parsing attributes in process `syz.4.934'.
[ 262.412167][ T1725] cdc_wdm 4-1:1.0: Unknown control protocol
[ 262.869137][ T8507] nbd: must specify a size in bytes for the device
[ 262.987691][ T8506] netlink: 'syz.1.942': attribute type 1 has an invalid length.
[ 264.083333][ T5148] usb 2-1: USB disconnect, device number 18
[ 264.247286][ T25] usb 4-1: USB disconnect, device number 14
[ 264.252545][ T8521] __nla_validate_parse: 5 callbacks suppressed
[ 264.252563][ T8521] netlink: 830 bytes leftover after parsing attributes in process `syz.3.947'.
[ 264.411802][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.946'.
[ 264.595142][ T8532] netlink: 'syz.0.949': attribute type 1 has an invalid length.
[ 264.637159][ T8532] netlink: 224 bytes leftover after parsing attributes in process `syz.0.949'.
[ 264.686258][ T8532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.949'.
[ 265.013842][ T8543] nbd: must specify a size in bytes for the device
[ 265.045124][ T8544] netlink: 'syz.4.954': attribute type 1 has an invalid length.
[ 265.056356][ T8544] netlink: 224 bytes leftover after parsing attributes in process `syz.4.954'.
[ 265.086214][ T8544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'.
[ 265.135045][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.4.954'.
[ 265.257142][ T8] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 265.458634][ T8] usb 3-1: Using ep0 maxpacket: 8
[ 265.479984][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 265.636811][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 265.645745][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 265.657469][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 265.668672][ T8] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 265.678861][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 265.709425][ T8] hub 3-1:1.0: bad descriptor, ignoring hub
[ 265.715419][ T8] hub 3-1:1.0: probe with driver hub failed with error -5
[ 265.723232][ T8] cdc_wdm 3-1:1.0: skipping garbage
[ 265.728698][ T8] cdc_wdm 3-1:1.0: skipping garbage
[ 265.735261][ T8] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 265.746110][ T8] cdc_wdm 3-1:1.0: Unknown control protocol
[ 266.037150][ T8] usb 3-1: USB disconnect, device number 16
[ 266.456808][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[ 266.557743][ T8] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 266.676702][ T9] usb 3-1: Using ep0 maxpacket: 8
[ 266.692208][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 266.713376][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 266.743098][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 266.756878][ T8] usb 1-1: Using ep0 maxpacket: 8
[ 266.764680][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 266.777633][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 266.787478][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 266.797269][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 266.810889][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 266.821404][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 266.834608][ T9] hub 3-1:1.0: bad descriptor, ignoring hub
[ 266.840599][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 266.852652][ T9] hub 3-1:1.0: probe with driver hub failed with error -5
[ 266.860389][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 266.866841][ T8] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 266.876016][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 266.889030][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 266.898415][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 266.905334][ T9] cdc_wdm 3-1:1.0: Unknown control protocol
[ 266.930610][ T8] hub 1-1:1.0: bad descriptor, ignoring hub
[ 266.964057][ T8] hub 1-1:1.0: probe with driver hub failed with error -5
[ 266.981685][ T8] cdc_wdm 1-1:1.0: skipping garbage
[ 266.993714][ T8] cdc_wdm 1-1:1.0: skipping garbage
[ 267.013814][ T8] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[ 267.061551][ T8] cdc_wdm 1-1:1.0: Unknown control protocol
[ 267.347065][ T9] usb 1-1: USB disconnect, device number 14
[ 267.767310][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 267.966734][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 267.984316][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 268.041770][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 268.081307][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 268.120328][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 268.136965][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 268.147401][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 268.172044][ T9] hub 1-1:1.0: bad descriptor, ignoring hub
[ 268.178222][ T9] hub 1-1:1.0: probe with driver hub failed with error -5
[ 268.187088][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 268.195565][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 268.206021][ T9] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[ 268.268776][ T9] cdc_wdm 1-1:1.0: Unknown control protocol
[ 269.155933][ T9] usb 1-1: USB disconnect, device number 15
[ 271.022969][ T25] usb 3-1: USB disconnect, device number 17
[ 271.301326][ T8579] netlink: 830 bytes leftover after parsing attributes in process `syz.4.965'.
[ 271.317375][ T8581] nbd: must specify a size in bytes for the device
[ 271.396851][ T8583] netlink: 'syz.3.967': attribute type 1 has an invalid length.
[ 271.427352][ T8583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.967'.
[ 271.436338][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'.
[ 271.532836][ T8582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'.
[ 272.536875][ T5109] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 272.547141][ T5109] Bluetooth: hci2: Injecting HCI hardware error event
[ 272.557349][ T5109] Bluetooth: hci2: hardware error 0x00
[ 272.732076][ T8614] nbd: must specify a size in bytes for the device
[ 272.747971][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 272.963464][ T8617] netlink: zone id is out of range
[ 273.016764][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 273.033153][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 273.050056][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 273.070379][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 273.080980][ T8617] netlink: set zone limit has 4 unknown bytes
[ 273.172991][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 273.216965][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 273.322965][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 273.363270][ T9] hub 1-1:1.0: bad descriptor, ignoring hub
[ 273.370277][ T8623] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[ 273.389448][ T9] hub 1-1:1.0: probe with driver hub failed with error -5
[ 273.425683][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 273.432322][ T8623] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[ 273.439908][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 273.451551][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 273.482399][ T9] cdc_wdm 1-1:1.0: Unknown control protocol
[ 273.493153][ T8627] netlink: 'syz.2.980': attribute type 1 has an invalid length.
[ 273.507538][ T8627] netlink: 224 bytes leftover after parsing attributes in process `syz.2.980'.
[ 273.523600][ T8627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'.
[ 273.567953][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'.
[ 273.617457][ T9] usb 1-1: USB disconnect, device number 16
[ 273.789736][ T5103] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 273.986788][ T5103] usb 5-1: Using ep0 maxpacket: 8
[ 273.999020][ T8634] netlink: 'syz.2.983': attribute type 5 has an invalid length.
[ 274.020191][ T5103] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 274.082207][ T5103] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 274.131028][ T5103] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 274.146829][ T5103] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 274.158423][ T5103] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 274.172461][ T5103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 274.199138][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 274.202689][ T5103] hub 5-1:1.0: bad descriptor, ignoring hub
[ 274.230498][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 274.236573][ T5103] hub 5-1:1.0: probe with driver hub failed with error -5
[ 274.260562][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 274.275508][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 274.295738][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 274.309243][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 274.323326][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 274.346522][ T5103] cdc_wdm 5-1:1.0: skipping garbage
[ 274.374150][ T5103] cdc_wdm 5-1:1.0: skipping garbage
[ 274.437171][ T9] usb 1-1: Using ep0 maxpacket: 8
[ 274.454771][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 274.466197][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 274.480479][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 274.487345][ T5103] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 274.492865][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 274.512584][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 274.522233][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 274.589927][ T5103] cdc_wdm 5-1:1.0: Unknown control protocol
[ 274.592320][ T9] hub 1-1:1.0: bad descriptor, ignoring hub
[ 274.606748][ T9] hub 1-1:1.0: probe with driver hub failed with error -5
[ 274.615026][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 274.619442][ T5109] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 274.634991][ T9] cdc_wdm 1-1:1.0: skipping garbage
[ 274.648681][ T9] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device
[ 274.656925][ T9] cdc_wdm 1-1:1.0: Unknown control protocol
[ 274.856528][ T8637] chnl_net:caif_netlink_parms(): no params data found
[ 274.908960][ T5103] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[ 275.065044][ T8644] netlink: 830 bytes leftover after parsing attributes in process `syz.2.984'.
[ 275.438848][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state
[ 275.465185][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state
[ 275.508572][ T8637] bridge_slave_0: entered allmulticast mode
[ 275.538302][ T8637] bridge_slave_0: entered promiscuous mode
[ 275.798585][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state
[ 275.816944][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state
[ 276.377772][ T5109] Bluetooth: hci0: command tx timeout
[ 276.408805][ T1725] usb 5-1: USB disconnect, device number 3
[ 276.416063][ T8637] bridge_slave_1: entered allmulticast mode
[ 276.470248][ T8637] bridge_slave_1: entered promiscuous mode
[ 276.991309][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 277.041674][ T46] usb 1-1: USB disconnect, device number 17
[ 277.049723][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 277.183682][ T8637] team0: Port device team_slave_0 added
[ 277.325381][ T8665] nbd: must specify a size in bytes for the device
[ 277.385901][ T8637] team0: Port device team_slave_1 added
[ 277.522720][ T29] audit: type=1804 audit(1721359682.629:92): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.990" name="/newroot/107/file0/bus" dev="ramfs" ino=22055 res=1 errno=0
[ 277.629687][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 277.640820][ T29] audit: type=1804 audit(1721359682.749:93): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.990" name="/newroot/107/file0/bus" dev="ramfs" ino=22055 res=1 errno=0
[ 277.676879][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 277.736741][ T29] audit: type=1800 audit(1721359682.769:94): pid=8672 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.990" name="bus" dev="ramfs" ino=22055 res=0 errno=0
[ 277.827031][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 277.850808][ T8675] netlink: 'syz.0.992': attribute type 1 has an invalid length.
[ 277.900018][ T8675] netlink: 224 bytes leftover after parsing attributes in process `syz.0.992'.
[ 278.003055][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 278.012072][ T8675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[ 278.045978][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 278.085183][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.992'.
[ 278.094322][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.993'.
[ 278.114483][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 278.327644][ T2914] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 278.419520][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 278.435582][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 278.444060][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 278.455255][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 278.459034][ T54] Bluetooth: hci0: command tx timeout
[ 278.469571][ T5093] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 278.477989][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 278.567500][ T8683] netlink: zone id is out of range
[ 278.603955][ T8683] netlink: set zone limit has 4 unknown bytes
[ 278.637194][ T8637] hsr_slave_0: entered promiscuous mode
[ 278.715463][ T8637] hsr_slave_1: entered promiscuous mode
[ 278.748310][ T8637] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 278.759856][ T8637] Cannot create hsr debugfs directory
[ 278.877615][ T2914] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 278.919778][ T8688] netlink: 830 bytes leftover after parsing attributes in process `syz.3.996'.
[ 279.066930][ T5103] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 279.111390][ T2914] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 279.288206][ T5103] usb 1-1: Using ep0 maxpacket: 8
[ 279.319453][ T5103] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 279.336346][ T5103] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 279.361577][ T5103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 279.377821][ T2914] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 279.387571][ T5103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 279.426064][ T5103] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 279.464035][ T5103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 279.513131][ T5103] hub 1-1:1.0: bad descriptor, ignoring hub
[ 279.536824][ T5103] hub 1-1:1.0: probe with driver hub failed with error -5
[ 279.615584][ T5103] cdc_wdm 1-1:1.0: skipping garbage
[ 279.663514][ T5103] cdc_wdm 1-1:1.0: skipping garbage
[ 279.698494][ T5103] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 279.730028][ T5103] cdc_wdm 1-1:1.0: Unknown control protocol
[ 279.817773][ T5103] usb 1-1: USB disconnect, device number 18
[ 279.997407][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'.
[ 280.035187][ T2914] bridge_slave_1: left allmulticast mode
[ 280.053431][ T2914] bridge_slave_1: left promiscuous mode
[ 280.075814][ T2914] bridge0: port 2(bridge_slave_1) entered disabled state
[ 280.091387][ T2914] bridge_slave_0: left allmulticast mode
[ 280.109179][ T2914] bridge_slave_0: left promiscuous mode
[ 280.126580][ T2914] bridge0: port 1(bridge_slave_0) entered disabled state
[ 280.336733][ T5103] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 280.552995][ T5103] usb 1-1: Using ep0 maxpacket: 8
[ 280.559135][ T5109] Bluetooth: hci0: command tx timeout
[ 280.560801][ T8720] netlink: 'syz.3.1003': attribute type 1 has an invalid length.
[ 280.687048][ T5109] Bluetooth: hci4: command tx timeout
[ 281.377850][ T8720] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1003'.
[ 281.408249][ T5103] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 281.426789][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'.
[ 281.446076][ T5103] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 281.472180][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1003'.
[ 281.481317][ T5103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 281.531052][ T5103] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 281.564013][ T5103] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 281.575643][ T5103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 281.604392][ T5103] hub 1-1:1.0: bad descriptor, ignoring hub
[ 281.662478][ T5103] hub 1-1:1.0: probe with driver hub failed with error -5
[ 281.689145][ T5103] cdc_wdm 1-1:1.0: skipping garbage
[ 281.694487][ T5103] cdc_wdm 1-1:1.0: skipping garbage
[ 281.707313][ T5103] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 281.713284][ T5103] cdc_wdm 1-1:1.0: Unknown control protocol
[ 281.886966][ T9] usb 1-1: USB disconnect, device number 19
[ 281.927062][ T8727] netlink: zone id is out of range
[ 281.983924][ T2914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 282.005298][ T2914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 282.030328][ T2914] bond0 (unregistering): Released all slaves
[ 282.102462][ T8727] netlink: set zone limit has 4 unknown bytes
[ 282.141635][ T8637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 282.451121][ T8637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 282.626721][ T5109] Bluetooth: hci0: command tx timeout
[ 282.809100][ T8739] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1008'.
[ 282.866728][ T5109] Bluetooth: hci4: command tx timeout
[ 283.065889][ T8637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 283.296871][ T2914] hsr_slave_0: left promiscuous mode
[ 283.319311][ T2914] hsr_slave_1: left promiscuous mode
[ 283.366869][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 283.426775][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 283.468168][ T2914] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 283.521674][ T2914] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 283.645300][ T2914] veth1_macvtap: left promiscuous mode
[ 283.673622][ T2914] veth0_macvtap: left promiscuous mode
[ 283.690030][ T2914] veth1_vlan: left promiscuous mode
[ 283.726447][ T8764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1011'.
[ 283.778195][ T2914] veth0_vlan: left promiscuous mode
[ 284.019919][ T8769] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1012'.
[ 284.792144][ T2914] team0 (unregistering): Port device team_slave_1 removed
[ 284.897662][ T2914] team0 (unregistering): Port device team_slave_0 removed
[ 284.937253][ T5109] Bluetooth: hci4: command tx timeout
[ 285.167029][ T1725] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 285.362523][ T1725] usb 1-1: Using ep0 maxpacket: 8
[ 285.399505][ T1725] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 285.454824][ T1725] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 285.508655][ T1725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 285.545291][ T1725] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 285.591339][ T1725] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 285.613815][ T1725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 285.649312][ T1725] hub 1-1:1.0: bad descriptor, ignoring hub
[ 285.670448][ T1725] hub 1-1:1.0: probe with driver hub failed with error -5
[ 285.707150][ T1725] cdc_wdm 1-1:1.0: skipping garbage
[ 285.727097][ T1725] cdc_wdm 1-1:1.0: skipping garbage
[ 285.748336][ T1725] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 285.764331][ T1725] cdc_wdm 1-1:1.0: Unknown control protocol
[ 285.857933][ T8637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 286.171427][ T8684] chnl_net:caif_netlink_parms(): no params data found
[ 286.287411][ T8772] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[ 286.306898][ T8783] netlink: 'syz.3.1016': attribute type 1 has an invalid length.
[ 286.314669][ T8783] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1016'.
[ 286.418071][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1016'.
[ 286.493707][ T8786] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1017'.
[ 286.503721][ T8778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'.
[ 286.568878][ T8637] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 286.630468][ T8637] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 286.678035][ T8637] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 286.777378][ T8637] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 287.020335][ T5109] Bluetooth: hci4: command tx timeout
[ 287.230640][ T8684] bridge0: port 1(bridge_slave_0) entered blocking state
[ 287.257187][ T8684] bridge0: port 1(bridge_slave_0) entered disabled state
[ 287.278778][ T8684] bridge_slave_0: entered allmulticast mode
[ 287.293224][ T8684] bridge_slave_0: entered promiscuous mode
[ 287.314751][ T8684] bridge0: port 2(bridge_slave_1) entered blocking state
[ 287.349031][ T8684] bridge0: port 2(bridge_slave_1) entered disabled state
[ 287.360738][ T8684] bridge_slave_1: entered allmulticast mode
[ 287.370579][ T8684] bridge_slave_1: entered promiscuous mode
[ 287.514877][ T8684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 287.536556][ T8817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1021'.
[ 287.552092][ T8684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 287.813825][ T8827] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1022'.
[ 287.844849][ T8684] team0: Port device team_slave_0 added
[ 287.923199][ T8684] team0: Port device team_slave_1 added
[ 288.147566][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 288.154547][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 288.180571][ C0] vkms_vblank_simulate: vblank timer overrun
[ 288.345750][ T8684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 288.379461][ T8684] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 288.390621][ T8684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 288.452951][ T8684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 288.546053][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0
[ 288.656816][ T8637] 8021q: adding VLAN 0 to HW filter on device team0
[ 288.700780][ T8684] hsr_slave_0: entered promiscuous mode
[ 288.730935][ T8684] hsr_slave_1: entered promiscuous mode
[ 288.746297][ T8684] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 288.779814][ T8684] Cannot create hsr debugfs directory
[ 288.834437][ T1725] bridge0: port 1(bridge_slave_0) entered blocking state
[ 288.842052][ T1725] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 288.977917][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state
[ 288.985067][ T1725] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 289.017414][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 289.227140][ T8848] netlink: 'syz.3.1027': attribute type 1 has an invalid length.
[ 289.266785][ T9] usb 3-1: Using ep0 maxpacket: 8
[ 289.276781][ T8848] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1027'.
[ 289.285837][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1027'.
[ 289.295116][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 289.346572][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 289.355640][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 289.396884][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 289.440703][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 289.480554][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 289.487061][ T8297] usb 1-1: USB disconnect, device number 20
[ 289.550755][ T9] hub 3-1:1.0: bad descriptor, ignoring hub
[ 289.562654][ T9] hub 3-1:1.0: probe with driver hub failed with error -5
[ 289.601719][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 289.619556][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 289.631481][ T8852] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1028'.
[ 289.668798][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 289.712014][ T9] cdc_wdm 3-1:1.0: Unknown control protocol
[ 289.802962][ T9] usb 3-1: USB disconnect, device number 18
[ 290.208656][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 290.257099][ T58] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 290.307460][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 290.462866][ T58] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 290.490214][ T58] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 290.508622][ T9] usb 3-1: Using ep0 maxpacket: 8
[ 290.517552][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 290.517570][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 290.517594][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 290.517615][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 290.517639][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 290.517654][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 290.523068][ T9] hub 3-1:1.0: bad descriptor, ignoring hub
[ 290.523086][ T9] hub 3-1:1.0: probe with driver hub failed with error -5
[ 290.523330][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 290.523340][ T9] cdc_wdm 3-1:1.0: skipping garbage
[ 290.527829][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 290.527849][ T9] cdc_wdm 3-1:1.0: Unknown control protocol
[ 290.556580][ T58] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 290.557359][ T58] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 290.562201][ T58] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 290.562230][ T58] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 290.562252][ T58] usb 1-1: Product: syz
[ 290.562267][ T58] usb 1-1: Manufacturer: syz
[ 290.602662][ T58] cdc_wdm 1-1:1.0: skipping garbage
[ 290.907489][ T58] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[ 290.928451][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1026'.
[ 291.317302][ T8875] warning: `syz.3.1030' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[ 291.685481][ T8637] veth0_vlan: entered promiscuous mode
[ 291.768403][ T8637] veth1_vlan: entered promiscuous mode
[ 291.836289][ T8884] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1031'.
[ 291.947321][ T8684] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 292.010366][ T8637] veth0_macvtap: entered promiscuous mode
[ 292.041065][ T8684] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 292.083096][ T8637] veth1_macvtap: entered promiscuous mode
[ 292.136252][ T8684] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 292.182672][ T8894] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1033'.
[ 292.241067][ T8684] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 292.304391][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 292.352815][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.364699][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 292.376461][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.391962][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 292.407335][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.421607][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 292.432889][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.465611][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 292.563050][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 292.589292][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.619355][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 292.649566][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.676560][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 292.705811][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.740530][ T8637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 292.763213][ T8637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 292.816400][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 292.909254][ T8637] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 292.949478][ T8637] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 292.987674][ T8637] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 293.018419][ T8637] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 293.336216][ T8297] usb 1-1: USB disconnect, device number 21
[ 293.374746][ T8684] 8021q: adding VLAN 0 to HW filter on device bond0
[ 293.577593][ T8684] 8021q: adding VLAN 0 to HW filter on device team0
[ 293.691760][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 293.698982][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 293.843338][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 293.907449][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 293.915117][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 293.923052][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 293.994728][ T8903] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[ 294.040232][ T8903] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[ 294.157247][ T8905] netlink: 'syz.2.1036': attribute type 1 has an invalid length.
[ 294.175280][ T8905] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1036'.
[ 294.203520][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'.
[ 294.210951][ T2914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 294.220823][ T2914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 294.842235][ T29] audit: type=1804 audit(1721359699.949:95): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.981" name="/newroot/0/file0/bus" dev="ramfs" ino=23240 res=1 errno=0
[ 294.889647][ T8684] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 295.011555][ T29] audit: type=1804 audit(1721359700.109:96): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.981" name="/newroot/0/file0/bus" dev="ramfs" ino=23240 res=1 errno=0
[ 295.075803][ T29] audit: type=1800 audit(1721359700.109:97): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.981" name="bus" dev="ramfs" ino=23240 res=0 errno=0
[ 295.238755][ T8863] usb 3-1: reset high-speed USB device number 19 using dummy_hcd
[ 295.689026][ T8684] veth0_vlan: entered promiscuous mode
[ 295.768288][ T8684] veth1_vlan: entered promiscuous mode
[ 295.898186][ T8684] veth0_macvtap: entered promiscuous mode
[ 295.912914][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1041'.
[ 295.941041][ T8684] veth1_macvtap: entered promiscuous mode
[ 296.035075][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 296.062745][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.108449][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 296.117394][ T8933] usb 3-1: reset high-speed USB device number 19 using dummy_hcd
[ 296.128169][ T8957] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1042'.
[ 296.134523][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.167229][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 296.344259][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.428863][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 296.473730][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.488208][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 296.510705][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.540067][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 296.576315][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 296.595106][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.622887][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 296.641070][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.791077][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 296.804259][ T8933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'.
[ 296.817944][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.849084][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 296.889724][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 296.938024][ T8684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 296.977105][ T5103] usb 3-1: USB disconnect, device number 19
[ 297.016773][ T8684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 297.075680][ T8684] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 297.140468][ T8684] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 297.157009][ T8684] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 297.176395][ T8684] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 297.219103][ T8684] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 297.621835][ T8992] netlink: 'syz.3.1046': attribute type 1 has an invalid length.
[ 297.648214][ T8992] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1046'.
[ 297.697056][ T8992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'.
[ 297.770343][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'.
[ 298.114194][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 298.150615][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 298.179780][ T8995] netlink: zone id is out of range
[ 298.221894][ T8995] netlink: zone id is out of range
[ 298.258560][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 298.270195][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 298.289321][ T29] audit: type=1804 audit(1721359703.389:98): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1050" name="/newroot/127/file0/bus" dev="ramfs" ino=23393 res=1 errno=0
[ 298.410494][ T8995] netlink: set zone limit has 4 unknown bytes
[ 298.463711][ T29] audit: type=1804 audit(1721359703.569:99): pid=9016 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.1050" name="/newroot/127/file0/bus" dev="ramfs" ino=23393 res=1 errno=0
[ 298.609687][ T9019] netlink: zone id is out of range
[ 298.616146][ T29] audit: type=1800 audit(1721359703.589:100): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1050" name="bus" dev="ramfs" ino=23393 res=0 errno=0
[ 299.170219][ T9019] netlink: set zone limit has 4 unknown bytes
[ 299.881610][ T9056] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1053'.
[ 299.897704][ T9049] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1052'.
[ 301.320367][ T9070] delete_channel: no stack
[ 301.826925][ T8] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 302.086736][ T8] usb 4-1: Using ep0 maxpacket: 8
[ 302.111514][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 302.139528][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 302.186781][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 302.237102][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 302.308130][ T8] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 302.343146][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 302.392663][ T8] hub 4-1:1.0: bad descriptor, ignoring hub
[ 302.416069][ T9093] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1060'.
[ 302.445545][ T8] hub 4-1:1.0: probe with driver hub failed with error -5
[ 302.483575][ T8] cdc_wdm 4-1:1.0: skipping garbage
[ 302.515924][ T8] cdc_wdm 4-1:1.0: skipping garbage
[ 302.557187][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 302.586980][ T8] cdc_wdm 4-1:1.0: Unknown control protocol
[ 302.658464][ T8] usb 4-1: USB disconnect, device number 15
[ 303.206846][ T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 303.426742][ T8] usb 4-1: Using ep0 maxpacket: 8
[ 303.466789][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 303.497532][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 303.527156][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 303.586792][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 303.636875][ T8] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 303.668327][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 303.701139][ T8] hub 4-1:1.0: bad descriptor, ignoring hub
[ 303.717778][ T8] hub 4-1:1.0: probe with driver hub failed with error -5
[ 303.745733][ T8] cdc_wdm 4-1:1.0: skipping garbage
[ 303.755290][ T8] cdc_wdm 4-1:1.0: skipping garbage
[ 303.775787][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 303.812421][ T8] cdc_wdm 4-1:1.0: Unknown control protocol
[ 304.270407][ T8] usb 4-1: USB disconnect, device number 16
[ 304.738383][ T5109] Bluetooth: hci0: unexpected event 0x06 length: 23 > 3
[ 304.849910][ T9107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1064'.
[ 304.909000][ T9110] netlink: 'syz.3.1065': attribute type 4 has an invalid length.
[ 306.195107][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 306.211563][ T9118] delete_channel: no stack
[ 306.348431][ T9124] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1069'.
[ 306.628102][ T9121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 306.645970][ T9130] netlink: zone id is out of range
[ 307.001346][ T9130] netlink: set zone limit has 4 unknown bytes
[ 307.252663][ T9142] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1073'.
[ 308.262018][ T8] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 308.506961][ T8] usb 2-1: Using ep0 maxpacket: 8
[ 308.544244][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 308.706550][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 308.716510][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 308.747774][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 308.803234][ T8] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 308.845915][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 308.903730][ T8] hub 2-1:1.0: bad descriptor, ignoring hub
[ 308.940569][ T8] hub 2-1:1.0: probe with driver hub failed with error -5
[ 309.049796][ T8] cdc_wdm 2-1:1.0: skipping garbage
[ 309.055128][ T8] cdc_wdm 2-1:1.0: skipping garbage
[ 309.203633][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 309.368763][ T8] cdc_wdm 2-1:1.0: Unknown control protocol
[ 310.269065][ T9167] delete_channel: no stack
[ 310.596343][ T9148] usb 2-1: reset high-speed USB device number 19 using dummy_hcd
[ 310.643638][ T5093] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 310.653466][ T5093] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 310.665122][ T5093] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 310.675958][ T5093] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 310.686809][ T5093] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[ 310.694046][ T5093] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 310.940215][ T9177] nbd: must specify a size in bytes for the device
[ 311.258370][ T9182] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1086'.
[ 311.406284][ T9174] chnl_net:caif_netlink_parms(): no params data found
[ 311.707090][ T8] usb 2-1: USB disconnect, device number 19
[ 311.858955][ T29] audit: type=1804 audit(1721359716.969:101): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1088" name="/newroot/262/file0/bus" dev="ramfs" ino=25603 res=1 errno=0
[ 311.986406][ T29] audit: type=1804 audit(1721359717.069:102): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1088" name="/newroot/262/file0/bus" dev="ramfs" ino=25603 res=1 errno=0
[ 312.122230][ T29] audit: type=1800 audit(1721359717.069:103): pid=9194 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1088" name="bus" dev="ramfs" ino=25603 res=0 errno=0
[ 312.328713][ T9174] bridge0: port 1(bridge_slave_0) entered blocking state
[ 312.706845][ T9174] bridge0: port 1(bridge_slave_0) entered disabled state
[ 312.776820][ T5109] Bluetooth: hci6: command tx timeout
[ 312.828399][ T9174] bridge_slave_0: entered allmulticast mode
[ 312.838225][ T9174] bridge_slave_0: entered promiscuous mode
[ 312.850629][ T9174] bridge0: port 2(bridge_slave_1) entered blocking state
[ 312.862233][ T9174] bridge0: port 2(bridge_slave_1) entered disabled state
[ 312.874352][ T9174] bridge_slave_1: entered allmulticast mode
[ 312.891204][ T9174] bridge_slave_1: entered promiscuous mode
[ 312.989759][ T9204] netlink: zone id is out of range
[ 313.238683][ T9204] netlink: set zone limit has 4 unknown bytes
[ 313.291571][ T9174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 313.387334][ T9174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 313.723860][ T9218] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[ 313.798562][ T9225] netlink: 'syz.2.1093': attribute type 1 has an invalid length.
[ 313.837015][ T9218] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[ 313.854181][ T9225] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1093'.
[ 313.929165][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'.
[ 313.961833][ T9225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1093'.
[ 314.129485][ T9174] team0: Port device team_slave_0 added
[ 314.337221][ T9174] team0: Port device team_slave_1 added
[ 314.547927][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 314.594898][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 314.696313][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1095'.
[ 314.716091][ T9174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 314.819923][ T9229] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[ 314.857117][ T5109] Bluetooth: hci6: command tx timeout
[ 314.872310][ T9229] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[ 314.924173][ T9174] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 314.963608][ T9174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 315.121580][ T9174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 315.168907][ T9243] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1098'.
[ 315.496934][ T5109] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 315.505705][ T5109] Bluetooth: hci0: Injecting HCI hardware error event
[ 315.515534][ T5109] Bluetooth: hci0: hardware error 0x00
[ 315.549729][ T9174] hsr_slave_0: entered promiscuous mode
[ 315.605162][ T9174] hsr_slave_1: entered promiscuous mode
[ 315.686783][ T9174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 315.700195][ T9174] Cannot create hsr debugfs directory
[ 315.945803][ T29] audit: type=1804 audit(1721359721.049:104): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1102" name="/newroot/267/file0/bus" dev="ramfs" ino=25691 res=1 errno=0
[ 316.227230][ T29] audit: type=1804 audit(1721359721.309:105): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1102" name="/newroot/267/file0/bus" dev="ramfs" ino=25691 res=1 errno=0
[ 316.330006][ T9258] delete_channel: no stack
[ 316.357831][ T29] audit: type=1800 audit(1721359721.309:106): pid=9252 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1102" name="bus" dev="ramfs" ino=25691 res=0 errno=0
[ 316.438287][ T9174] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 316.705799][ T9174] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 316.894916][ T9174] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 316.939372][ T5093] Bluetooth: hci6: command tx timeout
[ 317.047010][ T29] audit: type=1326 audit(1721359722.149:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9260 comm="syz.3.1105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb21ab75b59 code=0x0
[ 317.068933][ T9174] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 317.156742][ T29] audit: type=1804 audit(1721359722.259:108): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1108" name="/newroot/44/file0/bus" dev="ramfs" ino=24695 res=1 errno=0
[ 317.470619][ T29] audit: type=1804 audit(1721359722.579:109): pid=9271 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1108" name="/newroot/44/file0/bus" dev="ramfs" ino=24695 res=1 errno=0
[ 317.558509][ T9275] netlink: zone id is out of range
[ 317.563723][ T29] audit: type=1800 audit(1721359722.579:110): pid=9269 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1108" name="bus" dev="ramfs" ino=24695 res=0 errno=0
[ 317.590971][ T9174] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 317.598171][ T1240] ieee802154 phy0 wpan0: encryption failed: -22
[ 317.627926][ T5109] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 317.682534][ T9174] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 317.734378][ T9174] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 317.877804][ T9174] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 318.175385][ T9174] 8021q: adding VLAN 0 to HW filter on device bond0
[ 318.201533][ T9275] netlink: set zone limit has 4 unknown bytes
[ 318.236324][ T9174] 8021q: adding VLAN 0 to HW filter on device team0
[ 318.287590][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 318.294772][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 318.429075][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 318.436170][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 318.977461][ T5148] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 319.017609][ T5109] Bluetooth: hci6: command tx timeout
[ 319.178800][ T5148] usb 1-1: Using ep0 maxpacket: 8
[ 319.205106][ T5148] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[ 319.234112][ T5148] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 319.275338][ T5148] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 319.287166][ T9174] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 319.386268][ T5148] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 319.426735][ T5148] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 319.480817][ T5148] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 319.554366][ T5148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 319.874180][ T5148] usb 1-1: usb_control_msg returned -32
[ 319.945457][ T5148] usbtmc 1-1:16.0: can't read capabilities
[ 320.249790][ T9307] delete_channel: no stack
[ 320.282111][ T9310] usbtmc 1-1:16.0: usb_control_msg returned -32
[ 320.320259][ T9312] ------------[ cut here ]------------
[ 320.326028][ T9312] WARNING: CPU: 1 PID: 9312 at include/net/mac80211.h:6993 minstrel_ht_update_caps+0x44a/0x17e0
[ 320.336495][ T9312] Modules linked in:
[ 320.340417][ T9312] CPU: 1 PID: 9312 Comm: syz.2.1116 Not tainted 6.10.0-syzkaller-08280-g68b59730459e #0
[ 320.350169][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 320.360253][ T9312] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0
[ 320.366578][ T9312] Code: da e8 aa 2f ca f9 e9 24 ff ff ff e8 70 b7 7e f6 eb 17 e8 69 b7 7e f6 eb 14 e8 62 b7 7e f6 49 c1 fd 38 eb 0c e8 57 b7 7e f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b
[ 320.386223][ T9312] RSP: 0018:ffffc90002fcef80 EFLAGS: 00010283
[ 320.392305][ T9312] RAX: ffffffff8b17aca9 RBX: 000000000000000c RCX: 0000000000040000
[ 320.400311][ T9312] RDX: ffffc90009af9000 RSI: 0000000000000e15 RDI: 0000000000000e16
[ 320.408286][ T9312] RBP: 0000000000000000 R08: ffffffff8b17abc5 R09: 0000000000000000
[ 320.416239][ T9312] R10: ffff8880590c8008 R11: ffffed100b219549 R12: 1ffff1100c0c361c
[ 320.424221][ T9312] R13: 0b00000000000000 R14: ffff88806061b0e0 R15: 0100000000000000
[ 320.432197][ T9312] FS: 00007feffc4306c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[ 320.441130][ T9312] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 320.447719][ T9312] CR2: 0000000020001080 CR3: 000000002345c000 CR4: 00000000003506f0
[ 320.455690][ T9312] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 320.463690][ T9312] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 320.471666][ T9312] Call Trace:
[ 320.474929][ T9312] <TASK>
[ 320.477868][ T9312] ? __warn+0x163/0x4e0
[ 320.482012][ T9312] ? minstrel_ht_update_caps+0x44a/0x17e0
[ 320.487744][ T9312] ? report_bug+0x2b3/0x500
[ 320.492231][ T9312] ? minstrel_ht_update_caps+0x44a/0x17e0
[ 320.497957][ T9312] ? handle_bug+0x3e/0x70
[ 320.502271][ T9312] ? exc_invalid_op+0x1a/0x50
[ 320.506974][ T9312] ? asm_exc_invalid_op+0x1a/0x20
[ 320.511997][ T9312] ? minstrel_ht_update_caps+0x365/0x17e0
[ 320.517735][ T9312] ? minstrel_ht_update_caps+0x449/0x17e0
[ 320.523454][ T9312] ? minstrel_ht_update_caps+0x44a/0x17e0
[ 320.529197][ T9312] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 320.534560][ T9312] ? __pfx_minstrel_ht_rate_init+0x10/0x10
[ 320.540434][ T9312] rate_control_rate_init+0x3cf/0x5f0
[ 320.545802][ T9312] ? rate_control_rate_init+0xe3/0x5f0
[ 320.551275][ T9312] sta_apply_auth_flags+0x1b6/0x410
[ 320.556497][ T9312] sta_apply_parameters+0xe23/0x1550
[ 320.561806][ T9312] ieee80211_add_station+0x3da/0x630
[ 320.567107][ T9312] rdev_add_station+0x11b/0x2b0
[ 320.571941][ T9312] nl80211_new_station+0x1d53/0x2550
[ 320.577238][ T9312] ? __pfx_nl80211_new_station+0x10/0x10
[ 320.582853][ T9312] ? netdev_run_todo+0xf88/0x1000
[ 320.587901][ T9312] genl_rcv_msg+0xb14/0xec0
[ 320.592386][ T9312] ? mark_lock+0x9a/0x350
[ 320.596745][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10
[ 320.601771][ T9312] ? __pfx_lock_acquire+0x10/0x10
[ 320.606801][ T9312] ? __pfx_nl80211_pre_doit+0x10/0x10
[ 320.612160][ T9312] ? __pfx_nl80211_new_station+0x10/0x10
[ 320.617793][ T9312] ? __pfx_nl80211_post_doit+0x10/0x10
[ 320.623235][ T9312] ? __pfx___might_resched+0x10/0x10
[ 320.628541][ T9312] netlink_rcv_skb+0x1e3/0x430
[ 320.633293][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10
[ 320.638323][ T9312] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 320.643607][ T9312] ? __netlink_deliver_tap+0x77e/0x7c0
[ 320.649088][ T9312] genl_rcv+0x28/0x40
[ 320.653054][ T9312] netlink_unicast+0x7f0/0x990
[ 320.657828][ T9312] ? __pfx_netlink_unicast+0x10/0x10
[ 320.663103][ T9312] ? __virt_addr_valid+0x183/0x530
[ 320.668235][ T9312] ? __check_object_size+0x49c/0x900
[ 320.673506][ T9312] ? bpf_lsm_netlink_send+0x9/0x10
[ 320.678621][ T9312] netlink_sendmsg+0x8e4/0xcb0
[ 320.683380][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10
[ 320.688669][ T9312] ? __import_iovec+0x536/0x820
[ 320.693506][ T9312] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 320.698797][ T9312] ? security_socket_sendmsg+0x87/0xb0
[ 320.704246][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10
[ 320.709536][ T9312] __sock_sendmsg+0x221/0x270
[ 320.714202][ T9312] ____sys_sendmsg+0x525/0x7d0
[ 320.718976][ T9312] ? __pfx_____sys_sendmsg+0x10/0x10
[ 320.724256][ T9312] __sys_sendmsg+0x2b0/0x3a0
[ 320.728852][ T9312] ? __pfx___sys_sendmsg+0x10/0x10
[ 320.733977][ T9312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 320.740311][ T9312] ? do_syscall_64+0x100/0x230
[ 320.745064][ T9312] ? do_syscall_64+0xb6/0x230
[ 320.749749][ T9312] do_syscall_64+0xf3/0x230
[ 320.754242][ T9312] ? clear_bhb_loop+0x35/0x90
[ 320.758929][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 320.764904][ T9312] RIP: 0033:0x7feffb575b59
[ 320.769340][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 320.789142][ T9312] RSP: 002b:00007feffc430048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 320.797564][ T9312] RAX: ffffffffffffffda RBX: 00007feffb705f60 RCX: 00007feffb575b59
[ 320.805517][ T9312] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000004
[ 320.813504][ T9312] RBP: 00007feffb5e4e5d R08: 0000000000000000 R09: 0000000000000000
[ 320.821478][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 320.829455][ T9312] R13: 000000000000004d R14: 00007feffb705f60 R15: 00007ffd49de9ad8
[ 320.837450][ T9312] </TASK>
[ 320.840456][ T9312] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 320.847712][ T9312] CPU: 1 PID: 9312 Comm: syz.2.1116 Not tainted 6.10.0-syzkaller-08280-g68b59730459e #0
[ 320.857403][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[ 320.867446][ T9312] Call Trace:
[ 320.870707][ T9312] <TASK>
[ 320.873619][ T9312] dump_stack_lvl+0x241/0x360
[ 320.878288][ T9312] ? __pfx_dump_stack_lvl+0x10/0x10
[ 320.883472][ T9312] ? __pfx__printk+0x10/0x10
[ 320.888048][ T9312] ? vscnprintf+0x5d/0x90
[ 320.892358][ T9312] panic+0x349/0x860
[ 320.896237][ T9312] ? __warn+0x172/0x4e0
[ 320.900377][ T9312] ? __pfx_panic+0x10/0x10
[ 320.904785][ T9312] __warn+0x346/0x4e0
[ 320.908751][ T9312] ? minstrel_ht_update_caps+0x44a/0x17e0
[ 320.914452][ T9312] report_bug+0x2b3/0x500
[ 320.918762][ T9312] ? minstrel_ht_update_caps+0x44a/0x17e0
[ 320.924467][ T9312] handle_bug+0x3e/0x70
[ 320.928605][ T9312] exc_invalid_op+0x1a/0x50
[ 320.933092][ T9312] asm_exc_invalid_op+0x1a/0x20
[ 320.937928][ T9312] RIP: 0010:minstrel_ht_update_caps+0x44a/0x17e0
[ 320.944237][ T9312] Code: da e8 aa 2f ca f9 e9 24 ff ff ff e8 70 b7 7e f6 eb 17 e8 69 b7 7e f6 eb 14 e8 62 b7 7e f6 49 c1 fd 38 eb 0c e8 57 b7 7e f6 90 <0f> 0b 90 45 31 ed 49 bf 00 00 00 00 00 fc ff df 48 8b 3c 24 4c 8b
[ 320.963824][ T9312] RSP: 0018:ffffc90002fcef80 EFLAGS: 00010283
[ 320.969878][ T9312] RAX: ffffffff8b17aca9 RBX: 000000000000000c RCX: 0000000000040000
[ 320.977832][ T9312] RDX: ffffc90009af9000 RSI: 0000000000000e15 RDI: 0000000000000e16
[ 320.985788][ T9312] RBP: 0000000000000000 R08: ffffffff8b17abc5 R09: 0000000000000000
[ 320.993737][ T9312] R10: ffff8880590c8008 R11: ffffed100b219549 R12: 1ffff1100c0c361c
[ 321.001688][ T9312] R13: 0b00000000000000 R14: ffff88806061b0e0 R15: 0100000000000000
[ 321.009648][ T9312] ? minstrel_ht_update_caps+0x365/0x17e0
[ 321.015351][ T9312] ? minstrel_ht_update_caps+0x449/0x17e0
[ 321.021064][ T9312] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 321.026430][ T9312] ? __pfx_minstrel_ht_rate_init+0x10/0x10
[ 321.032219][ T9312] rate_control_rate_init+0x3cf/0x5f0
[ 321.037576][ T9312] ? rate_control_rate_init+0xe3/0x5f0
[ 321.043030][ T9312] sta_apply_auth_flags+0x1b6/0x410
[ 321.048212][ T9312] sta_apply_parameters+0xe23/0x1550
[ 321.053486][ T9312] ieee80211_add_station+0x3da/0x630
[ 321.058757][ T9312] rdev_add_station+0x11b/0x2b0
[ 321.063590][ T9312] nl80211_new_station+0x1d53/0x2550
[ 321.068876][ T9312] ? __pfx_nl80211_new_station+0x10/0x10
[ 321.074497][ T9312] ? netdev_run_todo+0xf88/0x1000
[ 321.079530][ T9312] genl_rcv_msg+0xb14/0xec0
[ 321.084014][ T9312] ? mark_lock+0x9a/0x350
[ 321.088339][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10
[ 321.093359][ T9312] ? __pfx_lock_acquire+0x10/0x10
[ 321.098392][ T9312] ? __pfx_nl80211_pre_doit+0x10/0x10
[ 321.103749][ T9312] ? __pfx_nl80211_new_station+0x10/0x10
[ 321.109361][ T9312] ? __pfx_nl80211_post_doit+0x10/0x10
[ 321.114799][ T9312] ? __pfx___might_resched+0x10/0x10
[ 321.120079][ T9312] netlink_rcv_skb+0x1e3/0x430
[ 321.124827][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10
[ 321.129833][ T9312] ? __pfx_netlink_rcv_skb+0x10/0x10
[ 321.135108][ T9312] ? __netlink_deliver_tap+0x77e/0x7c0
[ 321.140564][ T9312] genl_rcv+0x28/0x40
[ 321.144528][ T9312] netlink_unicast+0x7f0/0x990
[ 321.149282][ T9312] ? __pfx_netlink_unicast+0x10/0x10
[ 321.154548][ T9312] ? __virt_addr_valid+0x183/0x530
[ 321.159647][ T9312] ? __check_object_size+0x49c/0x900
[ 321.164917][ T9312] ? bpf_lsm_netlink_send+0x9/0x10
[ 321.170010][ T9312] netlink_sendmsg+0x8e4/0xcb0
[ 321.174773][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10
[ 321.180047][ T9312] ? __import_iovec+0x536/0x820
[ 321.184878][ T9312] ? bpf_lsm_socket_sendmsg+0x9/0x10
[ 321.190145][ T9312] ? security_socket_sendmsg+0x87/0xb0
[ 321.195588][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10
[ 321.200861][ T9312] __sock_sendmsg+0x221/0x270
[ 321.205524][ T9312] ____sys_sendmsg+0x525/0x7d0
[ 321.210273][ T9312] ? __pfx_____sys_sendmsg+0x10/0x10
[ 321.215549][ T9312] __sys_sendmsg+0x2b0/0x3a0
[ 321.220208][ T9312] ? __pfx___sys_sendmsg+0x10/0x10
[ 321.225326][ T9312] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 321.231636][ T9312] ? do_syscall_64+0x100/0x230
[ 321.236385][ T9312] ? do_syscall_64+0xb6/0x230
[ 321.241061][ T9312] do_syscall_64+0xf3/0x230
[ 321.245546][ T9312] ? clear_bhb_loop+0x35/0x90
[ 321.250202][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 321.256078][ T9312] RIP: 0033:0x7feffb575b59
[ 321.260476][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 321.280075][ T9312] RSP: 002b:00007feffc430048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 321.288478][ T9312] RAX: ffffffffffffffda RBX: 00007feffb705f60 RCX: 00007feffb575b59
[ 321.296448][ T9312] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000000000004
[ 321.304410][ T9312] RBP: 00007feffb5e4e5d R08: 0000000000000000 R09: 0000000000000000
[ 321.312375][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 321.320344][ T9312] R13: 000000000000004d R14: 00007feffb705f60 R15: 00007ffd49de9ad8
[ 321.328334][ T9312] </TASK>
[ 321.331573][ T9312] Kernel Offset: disabled
[ 321.336016][ T9312] Rebooting in 86400 seconds..