last executing test programs: 10m40.913273251s ago: executing program 1 (id=401): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{0x0}], 0x1}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x52) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000340)=ANY=[@ANYBLOB="66516c746572000000000000000000000000000000000000000000000000000002"], 0x48) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x24044814) mount$pvfs2(&(0x7f0000000140), &(0x7f0000000240)='./cgroup\x00', &(0x7f00000001c0), 0x4a, &(0x7f0000000200)={[], [{@subj_user={'subj_user', 0x3d, '=relative'}}, {@seclabel}]}) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) accept4(r7, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r7, 0x400448e6, 0x0) ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2000, 0x0) close(0xffffffffffffffff) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, 0x0) write$sndseq(r2, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 10m39.940606724s ago: executing program 1 (id=405): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008a}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102400, 0x19000) socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getpgid(0x0) fcntl$setownex(r2, 0xf, &(0x7f00000001c0)={0x0, r3}) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000340)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x8}}}}}}, 0x0) 10m37.916069852s ago: executing program 1 (id=409): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00\v\x00\x00\x00\b\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000f700000000"], 0x48) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004810) socket(0x28, 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000001640), 0x1000, r0}, 0x38) 10m37.176278311s ago: executing program 1 (id=415): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[], 0x6) 10m37.105964482s ago: executing program 1 (id=416): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(r0, 0xc, &(0x7f0000000140)={0x40000000000004, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240), 0x10000, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/proc/sys/net/ipv4/vs/ignore_tunneled\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '$]*^.}'}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, r2}, 0x18) mlockall(0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) inotify_init() r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, 0x0) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x113100, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000300)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m34.856837242s ago: executing program 1 (id=422): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000008000100000000000400020000000000100002000000000020"], 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000540)}, {0x0}, {0x0}], 0x4}, 0x40000) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x3, 0x4, 0x1000009) semctl$GETALL(0x0, 0x0, 0xd, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x0) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000200)=""/73) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, 0x0) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r2, 0x0, 0x12041) 10m19.833016464s ago: executing program 32 (id=422): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000008000100000000000400020000000000100002000000000020"], 0x24, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008ffffffd503010017740040950000000000000069163a0000000000bf67100000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000540)}, {0x0}, {0x0}], 0x4}, 0x40000) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioperm(0x3, 0x4, 0x1000009) semctl$GETALL(0x0, 0x0, 0xd, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x0) semctl$SEM_INFO(0x0, 0x2, 0x13, &(0x7f0000000200)=""/73) r5 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, 0x0) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r2, 0x0, 0x12041) 8.493352288s ago: executing program 2 (id=2940): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 8.36349393s ago: executing program 2 (id=2942): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x20000494}, 0x40000) 8.099497183s ago: executing program 2 (id=2944): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x40800) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000002c0)=0x400, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) 7.692547388s ago: executing program 2 (id=2948): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r5}, 0x18) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) ioctl$TCSETS(r1, 0x40045431, 0x0) syz_open_pts(r1, 0x121500) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r6, 0x0, r0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 6.507001194s ago: executing program 2 (id=2954): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x0, 0x0, 0x4007) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7b, 0x0, &(0x7f0000000680)="444d8000002950e2c60fba1f6c002080d9ffe930b3601d7dbee5986229172ada48f30e5ab1eecbce740b361a5e59cd1b565040dc08f788a410ac84cae96993b0e46e382603e21144794178356e4d2676841dc9cb36af0e5ffae1b8d74d05657cd58c1e8cc4274bf4a5b190777b373395610446f6ddaa179d24061d", 0x0, 0xb20c, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="dd", 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xfc}}, 0x0) 4.899008126s ago: executing program 2 (id=2966): socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20) socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 3.77946805s ago: executing program 3 (id=2973): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r0], 0x3c}}, 0x0) 3.518036643s ago: executing program 3 (id=2975): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x0, 0x0, 0x4007) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7b, 0x0, &(0x7f0000000680)="444d8000002950e2c60fba1f6c002080d9ffe930b3601d7dbee5986229172ada48f30e5ab1eecbce740b361a5e59cd1b565040dc08f788a410ac84cae96993b0e46e382603e21144794178356e4d2676841dc9cb36af0e5ffae1b8d74d05657cd58c1e8cc4274bf4a5b190777b373395610446f6ddaa179d24061d", 0x0, 0xb20c, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="dd", 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xfc}}, 0x0) 2.145251292s ago: executing program 4 (id=2984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r2, r3, 0x0, 0x0, 0x0}, 0x30) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="2e000400010002", 0x7) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_MTU={0x8, 0x4, 0xffe1}]}, 0x50}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) setsockopt$sock_int(r5, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xad}, @exit], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.927242755s ago: executing program 5 (id=2986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x20, r1, 0x1, 0x0, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) 1.676330408s ago: executing program 0 (id=2987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x24, r2, 0x926fdb2c68a18847, 0x70bd29, 0x0, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x40040) 1.631422648s ago: executing program 5 (id=2988): socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20) socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.340013032s ago: executing program 0 (id=2989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0xa, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000"], 0x18}, 0x20048814) 1.335722292s ago: executing program 3 (id=2990): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) 1.308187043s ago: executing program 5 (id=2991): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008086}, 0x0) 1.182679044s ago: executing program 0 (id=2992): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 1.152612495s ago: executing program 4 (id=2993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac020000060a0b040000000000000000020000003c020480380201800a0001006d6174636800000028020280080002400000000114020300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772b8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbad362baa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37cd51f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f494f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c8d5ddcf27132985442e9b8df16f96c82e72e3e2491856d07756b9f08000100627066"], 0x2d4}}, 0x4048010) 1.095209106s ago: executing program 5 (id=2994): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 897.069238ms ago: executing program 5 (id=2995): setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) shutdown(r0, 0x1) unshare(0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x8}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 896.887818ms ago: executing program 0 (id=2996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 896.396448ms ago: executing program 4 (id=2997): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x34, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 779.29063ms ago: executing program 3 (id=2998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000001c0)={0x24, r2, 0x926fdb2c68a18847, 0x70bd29, 0x0, {0x6}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}}, 0x40040) 758.01705ms ago: executing program 5 (id=2999): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$uid(0x0, 0x0, 0x4007) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7b, 0x0, &(0x7f0000000680)="444d8000002950e2c60fba1f6c002080d9ffe930b3601d7dbee5986229172ada48f30e5ab1eecbce740b361a5e59cd1b565040dc08f788a410ac84cae96993b0e46e382603e21144794178356e4d2676841dc9cb36af0e5ffae1b8d74d05657cd58c1e8cc4274bf4a5b190777b373395610446f6ddaa179d24061d", 0x0, 0xb20c, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="dd", 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xfc}}, 0x0) 718.060431ms ago: executing program 0 (id=3000): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000380)='cpuacct.stat\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="2501000000000000000009000000040003800400018050000380060007004e22000008000300040000001400020077673000000000000000000000000000080001000000000008000100020000000600040005"], 0x6c}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r4, @ANYBLOB="20002dbd7000fddbdf250f0000000c000280060002004e24000008000600060000000800050004000000140002800800040007000000060002004e240000200001800c0007002e000000000000000800050001000000060002002c000000080005009000000008100400080000005000038008000500e00000021200010001000000050008004300000008000500ac1414bb080005000000000014000600ff010000000000000000000000000001080005007f000001080001000100000004000180"], 0xc8}, 0x1, 0x0, 0x0, 0x4000084}, 0x40080) 612.776972ms ago: executing program 3 (id=3001): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"/135], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0xa, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="140000"], 0x18}, 0x20048814) 582.036712ms ago: executing program 4 (id=3002): r0 = socket$unix(0x1, 0x2, 0x0) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000000)='9', 0x514025a2b6c2eea5}], 0x1) 383.377455ms ago: executing program 4 (id=3003): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x8000400) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010100}, 0x10) getsockopt$inet_tcp_int(r0, 0x6, 0x14, 0x0, &(0x7f0000000300)=0xfd3d) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x40800) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) 374.468705ms ago: executing program 3 (id=3004): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x976e2df3e7542dc7}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}}, 0x8000) 179.753688ms ago: executing program 0 (id=3005): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f0000000200)=0x4) 0s ago: executing program 4 (id=3006): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x23c}}, 0x0) kernel console output (not intermixed with test programs): ig 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.058761][ T4299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 425.069285][ T4299] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 425.123361][ T4299] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 425.133255][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.164459][ T4299] usb 5-1: config 0 descriptor?? [ 425.491013][ T8192] dlm: no local IP address has been set [ 425.496649][ T8192] dlm: cannot start dlm midcomms -107 [ 426.026345][ T8191] orangefs_mount: mount request failed with -4 [ 426.084764][ T4299] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 426.162972][ T4299] usb 5-1: USB disconnect, device number 9 [ 426.205783][ T4299] usblp0: removed [ 430.260321][ T8236] dlm: no local IP address has been set [ 430.266123][ T8236] dlm: cannot start dlm midcomms -107 [ 430.990636][ T8235] orangefs_mount: mount request failed with -4 [ 431.920893][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 432.170906][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 432.354159][ T14] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 432.393224][ T14] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 432.416446][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 432.539295][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 432.588507][ T14] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 432.634366][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 432.669124][ T14] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 432.690616][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.728615][ T26] audit: type=1326 audit(1746076986.085:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 432.750851][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.779510][ T14] usb 3-1: config 0 descriptor?? [ 432.840256][ T26] audit: type=1326 audit(1746076986.125:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 432.862996][ T26] audit: type=1326 audit(1746076986.125:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 432.886023][ T26] audit: type=1326 audit(1746076986.135:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 432.924757][ T26] audit: type=1326 audit(1746076986.135:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 432.967146][ T8249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.978117][ T26] audit: type=1326 audit(1746076986.135:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 433.002204][ T26] audit: type=1326 audit(1746076986.135:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 433.012551][ T14] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 433.024963][ T26] audit: type=1326 audit(1746076986.135:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 433.089681][ T14] usb 3-1: USB disconnect, device number 11 [ 433.115389][ T14] usblp0: removed [ 433.165469][ T26] audit: type=1326 audit(1746076986.155:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 433.289295][ T26] audit: type=1326 audit(1746076986.155:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8240 comm="syz.4.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 434.545239][ T8281] dlm: no local IP address has been set [ 434.550960][ T8281] dlm: cannot start dlm midcomms -107 [ 435.649158][ T8280] orangefs_mount: mount request failed with -4 [ 435.957591][ T8285] tmpfs: Unknown parameter 'usrquota' [ 437.733016][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 437.733028][ T26] audit: type=1326 audit(1746076991.095:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 437.933518][ T26] audit: type=1326 audit(1746076991.095:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 437.989556][ T26] audit: type=1326 audit(1746076991.095:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.369189][ T26] audit: type=1326 audit(1746076991.095:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.390821][ T14] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 438.392725][ T26] audit: type=1326 audit(1746076991.095:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.466611][ T26] audit: type=1326 audit(1746076991.095:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.531596][ T26] audit: type=1326 audit(1746076991.095:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.592856][ T26] audit: type=1326 audit(1746076991.095:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.615196][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.650888][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 438.657897][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.680957][ T26] audit: type=1326 audit(1746076991.095:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.708247][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 438.729386][ T26] audit: type=1326 audit(1746076991.095:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8289 comm="syz.5.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 438.740844][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.814523][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.859435][ T14] usb 1-1: config 0 descriptor?? [ 438.895810][ T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 439.030963][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 439.330954][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 439.490999][ T7] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 439.507395][ T7] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 439.526168][ T7] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 439.555752][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 439.622205][ T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 439.632280][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 439.646376][ T7] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 439.655842][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.672305][ T7] usb 5-1: config 0 descriptor?? [ 439.811200][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.817581][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.886205][ T7] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 439.915444][ T7] usb 5-1: USB disconnect, device number 10 [ 439.950186][ T7] usblp0: removed [ 441.274042][ T4327] usb 1-1: USB disconnect, device number 12 [ 442.986335][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 442.986349][ T26] audit: type=1326 audit(1746076996.345:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.065714][ T26] audit: type=1326 audit(1746076996.345:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.088497][ T26] audit: type=1326 audit(1746076996.345:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.119485][ T26] audit: type=1326 audit(1746076996.345:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.161610][ T26] audit: type=1326 audit(1746076996.345:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.281700][ T26] audit: type=1326 audit(1746076996.345:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.394082][ T26] audit: type=1326 audit(1746076996.345:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.615043][ T26] audit: type=1326 audit(1746076996.345:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 443.990054][ T26] audit: type=1326 audit(1746076996.345:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 444.030908][ T26] audit: type=1326 audit(1746076996.345:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8350 comm="syz.2.1050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 444.631100][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 445.332867][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 445.339767][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.419773][ T7] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 445.582189][ T7] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 445.649778][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.704094][ T7] usb 5-1: config 0 descriptor?? [ 445.764701][ T7] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 446.740536][ T8411] dlm: no local IP address has been set [ 446.746294][ T8411] dlm: cannot start dlm midcomms -107 [ 447.858316][ T8409] orangefs_mount: mount request failed with -4 [ 447.968487][ T4327] usb 5-1: USB disconnect, device number 11 [ 448.493304][ T8423] Cannot find add_set index 0 as target [ 451.786644][ T8454] ptrace attach of "./syz-executor exec"[4245] was attempted by "./syz-executor exec"[8454] [ 453.360904][ T4299] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 453.601134][ T4299] usb 3-1: Using ep0 maxpacket: 16 [ 453.626490][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.681205][ T4299] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 453.694646][ T4299] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.703818][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.783744][ T4299] usb 3-1: config 0 descriptor?? [ 453.791814][ T4299] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 454.047794][ T8475] dlm: no local IP address has been set [ 454.053558][ T8475] dlm: cannot start dlm midcomms -107 [ 455.193080][ T8474] orangefs_mount: mount request failed with -4 [ 455.826173][ T4299] usb 3-1: USB disconnect, device number 12 [ 456.459050][ T8493] ptrace attach of "./syz-executor exec"[4250] was attempted by "./syz-executor exec"[8493] [ 457.577545][ T8508] dlm: no local IP address has been set [ 457.583250][ T8508] dlm: cannot start dlm midcomms -107 [ 458.280095][ T8507] orangefs_mount: mount request failed with -4 [ 462.081336][ T8554] dlm: no local IP address has been set [ 462.087039][ T8554] dlm: cannot start dlm midcomms -107 [ 462.827109][ T8553] orangefs_mount: mount request failed with -4 [ 463.240795][ T4289] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 463.317544][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'. [ 463.326720][ T8566] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1113'. [ 463.384922][ T8566] device geneve3 entered promiscuous mode [ 464.014108][ T4289] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 464.049281][ T4289] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 464.084320][ T4289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.123070][ T4289] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 465.598556][ T4289] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 465.649377][ T4289] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 465.664335][ T4289] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 465.886834][ T4289] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 465.896687][ T4289] usb 1-1: USB disconnect, device number 13 [ 468.833422][ T8628] tmpfs: Unknown parameter 'usrquota' [ 471.200794][ T4327] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 471.480880][ T4327] usb 3-1: Using ep0 maxpacket: 16 [ 471.501616][ T4327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.550452][ T4327] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 471.597247][ T8660] lo speed is unknown, defaulting to 1000 [ 471.641541][ T4327] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 471.680977][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.743423][ T4327] usb 3-1: config 0 descriptor?? [ 471.755683][ T4327] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 472.378050][ T8674] Cannot find add_set index 0 as target [ 472.491163][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 472.495515][ T26] audit: type=1326 audit(1746077025.845:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8648 comm="syz.5.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 474.223136][ T8693] ERROR: device name not specified. [ 474.248362][ T8693] dlm: no local IP address has been set [ 474.254093][ T8693] dlm: cannot start dlm midcomms -107 [ 475.049909][ T4325] usb 3-1: USB disconnect, device number 13 [ 475.585032][ T8696] device vlan2 entered promiscuous mode [ 475.634114][ T8696] device bridge0 entered promiscuous mode [ 475.780001][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 475.804452][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 475.841110][ T8702] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 478.930879][ T4325] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 479.130839][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 479.137904][ T4325] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.197937][ T4325] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 479.348809][ T4325] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 479.671458][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.766662][ T4325] usb 3-1: config 0 descriptor?? [ 479.954701][ T4325] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 480.610011][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 480.619285][ T8766] netlink: 'syz.0.1167': attribute type 5 has an invalid length. [ 480.627329][ T8766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1167'. [ 480.640229][ T8766] device geneve3 entered promiscuous mode [ 481.356253][ T4299] usb 3-1: USB disconnect, device number 14 [ 486.630901][ T5304] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 486.830849][ T5304] usb 6-1: Using ep0 maxpacket: 16 [ 486.837708][ T5304] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.854992][ T5304] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 486.887718][ T5304] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 486.900902][ T5304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.987408][ T5304] usb 6-1: config 0 descriptor?? [ 487.015095][ T5304] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 490.608791][ T5304] usb 6-1: USB disconnect, device number 5 [ 491.534031][ T8885] Cannot find add_set index 0 as target [ 494.091076][ T5304] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 494.263096][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1216'. [ 494.290797][ T5304] usb 5-1: Using ep0 maxpacket: 16 [ 494.390798][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1216'. [ 494.402201][ T5304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.416144][ T8916] device bond0 entered promiscuous mode [ 494.421832][ T5304] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 494.435542][ T5304] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 494.435738][ T8916] device bridge0 entered promiscuous mode [ 494.444976][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.466575][ T8916] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 494.514342][ T8916] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 494.961567][ T5304] usb 5-1: config 0 descriptor?? [ 494.969204][ T8919] Cannot find add_set index 0 as target [ 494.998281][ T5304] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 495.512906][ T8927] netlink: 'syz.3.1219': attribute type 4 has an invalid length. [ 497.364031][ T8963] Cannot find add_set index 0 as target [ 498.046113][ T4327] usb 5-1: USB disconnect, device number 12 [ 498.802930][ T8978] lo speed is unknown, defaulting to 1000 [ 500.229566][ T26] audit: type=1326 audit(1746077053.585:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8955 comm="syz.3.1228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169bf8e969 code=0x7fc00000 [ 501.223363][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.230957][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.321004][ T4289] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 501.480941][ T4289] usb 1-1: device descriptor read/64, error -71 [ 501.948834][ T4289] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 502.111004][ T4289] usb 1-1: device descriptor read/64, error -71 [ 502.360738][ T4325] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 502.558964][ T4289] usb usb1-port1: attempt power cycle [ 502.780566][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1249'. [ 502.796779][ T9028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1249'. [ 502.810807][ T4325] usb 6-1: Using ep0 maxpacket: 16 [ 503.595260][ T4325] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.640933][ T4289] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 503.663092][ T4325] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 503.676482][ T4325] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 503.686315][ T4325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.838690][ T4325] usb 6-1: config 0 descriptor?? [ 503.865285][ T4325] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 504.052560][ T4289] usb 1-1: device not accepting address 16, error -71 [ 505.017246][ T9066] lo speed is unknown, defaulting to 1000 [ 505.262760][ T26] audit: type=1326 audit(1746077058.625:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9054 comm="syz.2.1257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 506.041700][ T5304] usb 6-1: USB disconnect, device number 6 [ 506.133130][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 506.860805][ T4289] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 507.030914][ T4289] usb 6-1: device descriptor read/64, error -71 [ 507.334006][ T4289] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 507.490883][ T4289] usb 6-1: device descriptor read/64, error -71 [ 507.622739][ T4289] usb usb6-port1: attempt power cycle [ 507.747384][ T9099] bridge0: port 1(netdevsim1) entered blocking state [ 507.760750][ T9099] bridge0: port 1(netdevsim1) entered disabled state [ 507.769733][ T9099] device netdevsim1 entered promiscuous mode [ 507.783804][ T9099] bridge0: port 1(netdevsim1) entered blocking state [ 507.790628][ T9099] bridge0: port 1(netdevsim1) entered forwarding state [ 508.126425][ T4289] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 508.889592][ T4289] usb 6-1: device descriptor read/8, error -71 [ 509.010832][ T9114] ERROR: device name not specified. [ 509.023589][ T9114] dlm: no local IP address has been set [ 509.029214][ T9114] dlm: cannot start dlm midcomms -107 [ 509.160903][ T4289] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 510.357843][ T4289] usb 6-1: device descriptor read/8, error -71 [ 510.491680][ T4289] usb usb6-port1: unable to enumerate USB device [ 510.901166][ T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 511.371071][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 511.378655][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.479745][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 511.962763][ T14] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 511.983538][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.053007][ T14] usb 3-1: config 0 descriptor?? [ 512.089426][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 512.237151][ T14] usb 3-1: USB disconnect, device number 15 [ 512.678574][ T9152] dlm: no local IP address has been set [ 512.684402][ T9152] dlm: cannot start dlm midcomms -107 [ 513.769772][ T9151] orangefs_mount: mount request failed with -4 [ 514.411178][ T9168] ERROR: device name not specified. [ 514.425876][ T9168] dlm: no local IP address has been set [ 514.431582][ T9168] dlm: cannot start dlm midcomms -107 [ 517.190944][ T5304] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 517.751363][ T5304] usb 3-1: Using ep0 maxpacket: 16 [ 517.764035][ T5304] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.844646][ T9199] dlm: no local IP address has been set [ 517.850320][ T9199] dlm: cannot start dlm midcomms -107 [ 518.958439][ T5304] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 519.038642][ T5304] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 519.104087][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.222741][ T5304] usb 3-1: config 0 descriptor?? [ 519.304361][ T9198] orangefs_mount: mount request failed with -4 [ 519.327768][ T5304] usb 3-1: can't set config #0, error -71 [ 519.397614][ T5304] usb 3-1: USB disconnect, device number 16 [ 519.412007][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1301'. [ 520.030776][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 520.508568][ T9216] device hsr_slave_0 left promiscuous mode [ 520.518276][ T9216] device hsr_slave_1 left promiscuous mode [ 521.241141][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 521.520945][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 521.543033][ T7] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 521.581059][ T7] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 521.626883][ T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 521.688209][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 521.736951][ T7] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 521.793194][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 521.860002][ T7] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 521.913895][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.951233][ T7] usb 3-1: config 0 descriptor?? [ 522.164220][ T7] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 522.247636][ T7] usb 3-1: USB disconnect, device number 17 [ 522.326730][ T7] usblp0: removed [ 523.488105][ T9245] dlm: no local IP address has been set [ 523.493801][ T9245] dlm: cannot start dlm midcomms -107 [ 524.192834][ T9244] orangefs_mount: mount request failed with -4 [ 524.920832][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 525.130874][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 525.138823][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.182475][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 525.243330][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 525.282243][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.362232][ T7] usb 1-1: config 0 descriptor?? [ 525.428084][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 526.450149][ T9268] lo speed is unknown, defaulting to 1000 [ 526.865606][ T26] audit: type=1326 audit(1746077080.225:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.3.1318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169bf8e969 code=0x7fc00000 [ 527.121362][ T4325] usb 1-1: USB disconnect, device number 18 [ 528.061240][ T14] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 528.270845][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 528.279884][ T14] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 528.420948][ T14] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 528.429667][ T14] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 529.573938][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 530.320286][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 530.411088][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 530.440243][ T14] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 530.455724][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.478411][ T14] usb 4-1: config 0 descriptor?? [ 530.722779][ T14] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 530.759593][ T14] usb 4-1: USB disconnect, device number 11 [ 530.788315][ T14] usblp0: removed [ 533.790737][ T14] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 534.030781][ T14] usb 6-1: Using ep0 maxpacket: 16 [ 534.069090][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.995753][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 535.186408][ T14] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 535.416802][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.531229][ T14] usb 6-1: config 0 descriptor?? [ 535.600596][ T14] usb 6-1: can't set config #0, error -71 [ 535.733440][ T14] usb 6-1: USB disconnect, device number 11 [ 538.300758][ T7] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 538.661040][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 538.667860][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.708656][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 538.732053][ T7] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 538.752261][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.785719][ T7] usb 1-1: config 0 descriptor?? [ 538.809479][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 540.678142][ T9428] netlink: 'syz.5.1362': attribute type 7 has an invalid length. [ 540.691269][ T9428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1362'. [ 541.266127][ T4327] usb 1-1: USB disconnect, device number 19 [ 541.851155][ T9453] xt_NFQUEUE: number of total queues is 0 [ 544.903530][ T9487] dlm: no local IP address has been set [ 544.909224][ T9487] dlm: cannot start dlm midcomms -107 [ 545.010853][ T4236] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 545.220923][ T4236] usb 5-1: Using ep0 maxpacket: 16 [ 545.229268][ T4236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 545.372235][ T4236] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 545.527685][ T4236] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 545.633689][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.775559][ T4236] usb 5-1: config 0 descriptor?? [ 545.810466][ T4236] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 546.032597][ T9497] dlm: no local IP address has been set [ 546.038300][ T9497] dlm: cannot start dlm midcomms -107 [ 546.741698][ T9496] orangefs_mount: mount request failed with -4 [ 547.280322][ T9510] device bond0 entered promiscuous mode [ 548.388421][ T4325] usb 5-1: USB disconnect, device number 13 [ 551.400737][ T5304] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 551.752505][ T9578] fuse: Bad value for 'fd' [ 553.071613][ T5304] usb 1-1: Using ep0 maxpacket: 32 [ 553.097019][ T5304] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 553.120907][ T5304] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 553.129553][ T5304] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 553.138875][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 553.169404][ T5304] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 553.190722][ T5304] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 553.210733][ T5304] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 553.247773][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.279260][ T5304] usb 1-1: config 0 descriptor?? [ 554.181793][ T5304] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 554.204971][ T5304] usb 1-1: USB disconnect, device number 20 [ 554.228263][ T5304] usblp0: removed [ 555.124719][ T9618] netlink: 'syz.3.1423': attribute type 2 has an invalid length. [ 555.239353][ T9618] syz.3.1423[9618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.239454][ T9618] syz.3.1423[9618] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 557.240972][ T9633] fuse: Bad value for 'fd' [ 561.702522][ T9676] fuse: Bad value for 'fd' [ 562.663032][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.671217][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.606225][ T9711] lo speed is unknown, defaulting to 1000 [ 566.906896][ T9713] syz.0.1452 uses obsolete (PF_INET,SOCK_PACKET) [ 569.286888][ T9747] netlink: 'syz.2.1464': attribute type 6 has an invalid length. [ 577.621094][ T4327] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 577.840722][ T4327] usb 4-1: Using ep0 maxpacket: 16 [ 577.853877][ T4327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.941115][ T4327] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 577.960554][ T4327] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 578.083204][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.123961][ T4327] usb 4-1: config 0 descriptor?? [ 579.955357][ T14] usb 4-1: USB disconnect, device number 12 [ 583.725389][ T9891] lo speed is unknown, defaulting to 1000 [ 587.298015][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1515'. [ 591.379971][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 592.358773][ T9983] dlm: no local IP address has been set [ 592.364490][ T9983] dlm: cannot start dlm midcomms -107 [ 593.492270][ T9982] orangefs_mount: mount request failed with -4 [ 594.236482][ T9995] lo speed is unknown, defaulting to 1000 [ 596.297120][T10014] lo speed is unknown, defaulting to 1000 [ 596.988209][ T26] audit: type=1326 audit(1746077150.345:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10007 comm="syz.2.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 598.198220][T10039] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1552'. [ 601.115450][T10066] lo speed is unknown, defaulting to 1000 [ 601.620756][ T26] audit: type=1326 audit(1746077154.975:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10060 comm="syz.4.1557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 602.018099][T10082] bridge0: port 1(macsec0) entered blocking state [ 602.031054][T10082] bridge0: port 1(macsec0) entered disabled state [ 602.050261][T10082] device macsec0 entered promiscuous mode [ 602.076329][T10082] bridge0: port 1(macsec0) entered blocking state [ 602.084015][T10082] bridge0: port 1(macsec0) entered forwarding state [ 602.157139][ T4311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 602.451887][T10088] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1565'. [ 606.416168][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1574'. [ 610.544206][T10167] device macsec1 entered promiscuous mode [ 612.693766][T10201] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1593'. [ 618.166398][T10254] dlm: no local IP address has been set [ 618.172066][T10254] dlm: cannot start dlm midcomms -107 [ 619.563086][T10252] orangefs_mount: mount request failed with -4 [ 619.737930][T10261] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1613'. [ 621.408571][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'. [ 622.869627][T10307] dlm: no local IP address has been set [ 622.875404][T10307] dlm: cannot start dlm midcomms -107 [ 623.226087][T10309] lo speed is unknown, defaulting to 1000 [ 623.639516][T10304] orangefs_mount: mount request failed with -4 [ 624.102785][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.110367][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.794205][ C1] hrtimer: interrupt took 44520 ns [ 625.684466][T10340] netlink: 'syz.4.1638': attribute type 2 has an invalid length. [ 625.727981][T10340] netlink: 'syz.4.1638': attribute type 8 has an invalid length. [ 625.748629][T10340] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1638'. [ 633.765395][ T5304] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 633.823074][T10440] Bluetooth: MGMT ver 1.22 [ 634.150719][ T5304] usb 5-1: Using ep0 maxpacket: 16 [ 634.215882][ T5304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 634.231731][ T5304] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 634.242946][ T5304] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 634.263413][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.290197][ T5304] usb 5-1: config 0 descriptor?? [ 634.418120][ T4327] usb 5-1: USB disconnect, device number 14 [ 635.880691][ T4261] Bluetooth: hci0: command 0x0c20 tx timeout [ 639.338030][T10512] orangefs_mount: mount request failed with -4 [ 639.372530][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1696'. [ 639.458834][T10515] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 639.549019][T10515] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 639.667237][T10526] bridge0: port 2(macsec0) entered blocking state [ 639.679887][T10526] bridge0: port 2(macsec0) entered disabled state [ 639.688034][T10526] device macsec0 entered promiscuous mode [ 639.699931][T10526] bridge0: port 2(macsec0) entered blocking state [ 639.706474][T10526] bridge0: port 2(macsec0) entered forwarding state [ 639.715730][T10515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1696'. [ 640.998185][T10551] netlink: 'syz.3.1710': attribute type 7 has an invalid length. [ 641.030819][T10551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1710'. [ 643.824067][T10582] lo speed is unknown, defaulting to 1000 [ 644.098693][T10593] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1723'. [ 644.256557][T10594] netlink: 'syz.4.1722': attribute type 7 has an invalid length. [ 644.279699][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1722'. [ 644.681100][ T26] audit: type=1326 audit(1746077198.035:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.130922][ T26] audit: type=1326 audit(1746077198.085:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.297005][ T26] audit: type=1326 audit(1746077198.085:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.356626][ T26] audit: type=1326 audit(1746077198.085:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.379081][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.393139][ T26] audit: type=1326 audit(1746077198.085:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.415665][ C0] vkms_vblank_simulate: vblank timer overrun [ 645.428717][ T26] audit: type=1326 audit(1746077198.085:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.553428][ T26] audit: type=1326 audit(1746077198.085:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.580846][ T26] audit: type=1326 audit(1746077198.085:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.603884][ T26] audit: type=1326 audit(1746077198.085:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 645.627189][ T26] audit: type=1326 audit(1746077198.085:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10579 comm="syz.5.1718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 646.710163][T10631] netlink: 'syz.5.1735': attribute type 7 has an invalid length. [ 646.752400][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1735'. [ 647.058270][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1736'. [ 652.514846][T10718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1762'. [ 652.560838][ T14] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 652.760844][ T14] usb 6-1: Using ep0 maxpacket: 32 [ 652.827047][ T14] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 652.878175][ T14] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 652.936779][ T14] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 652.967217][ T14] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 652.987540][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 653.028132][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 653.068721][ T14] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 653.088974][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.148127][ T14] usb 6-1: config 0 descriptor?? [ 653.941271][ T26] kauditd_printk_skb: 100 callbacks suppressed [ 653.941285][ T26] audit: type=1326 audit(1746077207.305:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10725 comm="syz.3.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169bf8e969 code=0x7fc00000 [ 655.328573][ T7] usb 6-1: USB disconnect, device number 12 [ 656.462762][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1780'. [ 656.484787][T10772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1780'. [ 657.404617][ T26] audit: type=1326 audit(1746077210.765:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 657.490761][ T26] audit: type=1326 audit(1746077210.765:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 657.644651][ T26] audit: type=1326 audit(1746077210.765:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10773 comm="syz.5.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 657.741750][T10790] lo speed is unknown, defaulting to 1000 [ 658.090479][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 658.561194][ T7] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 658.750887][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 658.758900][ T7] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 658.776388][ T7] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 658.785765][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.880813][ T7] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 658.890185][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 658.900724][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 658.915150][ T7] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 658.925173][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.949638][ T7] usb 4-1: config 0 descriptor?? [ 660.849725][ T26] audit: type=1326 audit(1746077214.205:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10817 comm="syz.4.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 661.338478][ T4288] usb 4-1: USB disconnect, device number 13 [ 662.156880][T10846] lo speed is unknown, defaulting to 1000 [ 663.671118][ T4236] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 663.861598][ T4236] usb 1-1: Using ep0 maxpacket: 32 [ 663.877434][ T4236] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 663.909187][ T4236] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 663.957404][ T4236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 664.003793][ T4236] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 664.043581][ T4236] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 664.079734][ T4236] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 664.133913][ T4236] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 664.198817][ T4236] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.245518][T10875] bridge: RTM_NEWNEIGH with unconfigured vlan 4 on bridge0 [ 664.389238][ T4236] usb 1-1: config 0 descriptor?? [ 665.721587][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 666.460259][ T14] usb 1-1: USB disconnect, device number 21 [ 668.035302][T10930] orangefs_mount: mount request failed with -4 [ 669.950827][ T4236] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 670.153334][ T4236] usb 5-1: Using ep0 maxpacket: 32 [ 670.155717][ T4236] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 670.155734][ T4236] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 670.155744][ T4236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.155754][ T4236] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 670.156131][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 670.156143][ T4236] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 670.156155][ T4236] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 670.156176][ T4236] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 670.156187][ T4236] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.157672][ T4236] usb 5-1: config 0 descriptor?? [ 671.798306][T10981] orangefs_mount: mount request failed with -4 [ 672.529359][T10990] lo speed is unknown, defaulting to 1000 [ 672.653919][ T4236] usb 5-1: USB disconnect, device number 15 [ 673.610924][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 676.091216][ T7] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 676.281077][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 676.305212][ T7] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 676.334502][ T7] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 676.363771][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.375161][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 676.386427][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 676.435023][ T7] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 676.465378][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 676.506008][ T7] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 676.546234][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.575289][ T7] usb 1-1: config 0 descriptor?? [ 676.867689][T11052] lo speed is unknown, defaulting to 1000 [ 678.668779][ T4236] usb 1-1: USB disconnect, device number 22 [ 679.415287][T11104] lo speed is unknown, defaulting to 1000 [ 679.865006][ T26] audit: type=1326 audit(1746077233.225:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11077 comm="syz.4.1873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 679.985278][T11110] lo speed is unknown, defaulting to 1000 [ 681.733571][T11144] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1894'. [ 681.902381][T11144] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 682.739752][T11160] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1897'. [ 683.347315][T11169] lo speed is unknown, defaulting to 1000 [ 683.768441][T11188] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1904'. [ 685.551751][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.558221][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.415627][T11248] lo speed is unknown, defaulting to 1000 [ 686.658583][T11260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1929'. [ 688.126406][T11290] orangefs_mount: mount request failed with -4 [ 689.351045][ T5304] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 689.610681][ T5304] usb 1-1: Using ep0 maxpacket: 16 [ 689.612316][ T5304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.612355][ T5304] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 689.612389][ T5304] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 689.612410][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.614223][ T5304] usb 1-1: config 0 descriptor?? [ 689.617250][ T5304] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 691.261381][T11334] orangefs_mount: mount request failed with -4 [ 692.009291][ T5304] usb 1-1: USB disconnect, device number 23 [ 692.223363][T11343] netlink: 'syz.0.1956': attribute type 7 has an invalid length. [ 692.252149][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1956'. [ 693.891341][T11365] orangefs_mount: mount request failed with -4 [ 694.575047][T11380] netlink: 'syz.2.1970': attribute type 7 has an invalid length. [ 694.618016][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1970'. [ 694.815243][ T5304] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 694.822995][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1969'. [ 695.094009][ T5304] usb 6-1: Using ep0 maxpacket: 16 [ 695.106431][ T5304] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.123816][ T5304] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 695.137458][ T5304] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 695.146953][ T5304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.162947][ T5304] usb 6-1: config 0 descriptor?? [ 695.178215][ T5304] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 697.369690][T11421] orangefs_mount: mount request failed with -4 [ 697.510370][T11427] syz.4.1982[11427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 697.510437][T11427] syz.4.1982[11427] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 697.586176][T11428] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 697.629526][ T4325] usb 6-1: USB disconnect, device number 13 [ 697.775439][T11433] netlink: 'syz.3.1984': attribute type 7 has an invalid length. [ 697.783593][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1984'. [ 698.178883][T11448] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1987'. [ 699.342855][T11460] orangefs_mount: mount request failed with -4 [ 700.088526][T11466] tipc: Started in network mode [ 700.096716][T11466] tipc: Node identity 5a0d9eaff1bd, cluster identity 4711 [ 700.104282][T11466] tipc: Enabled bearer , priority 0 [ 700.168926][T11473] device syzkaller0 entered promiscuous mode [ 700.179415][T11473] tipc: Resetting bearer [ 700.957551][T11465] tipc: Resetting bearer [ 701.146775][ T4325] tipc: Node number set to 2880478895 [ 701.190713][ T4327] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 701.383829][ T4327] usb 4-1: Using ep0 maxpacket: 16 [ 701.405619][ T4327] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.415897][ T4327] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 701.428881][ T4327] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 701.438018][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.449186][ T4327] usb 4-1: config 0 descriptor?? [ 701.466908][ T4327] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 703.023026][T11465] tipc: Disabling bearer [ 703.403924][ T4327] usb 4-1: USB disconnect, device number 14 [ 704.151011][T11510] orangefs_mount: mount request failed with -4 [ 706.889307][T11547] orangefs_mount: mount request failed with -4 [ 706.943047][T11553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2022'. [ 707.190873][ T4236] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 707.711270][ T4236] usb 4-1: Using ep0 maxpacket: 16 [ 707.719347][ T4236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.739037][ T4236] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 707.758243][ T4236] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 707.768998][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.816273][ T4236] usb 4-1: config 0 descriptor?? [ 707.844305][ T4236] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 707.948326][ T4236] usb 4-1: USB disconnect, device number 15 [ 708.877786][T11601] netlink: 'syz.5.2038': attribute type 7 has an invalid length. [ 708.922770][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2038'. [ 710.180756][ T4327] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 710.410666][ T4327] usb 6-1: Using ep0 maxpacket: 16 [ 710.472704][ T4327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.267058][ T4327] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 711.302119][ T4327] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 711.311510][ T4327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.349214][ T4327] usb 6-1: config 0 descriptor?? [ 711.512949][ T4327] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 711.776177][T11648] netlink: 'syz.2.2052': attribute type 7 has an invalid length. [ 711.784416][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2052'. [ 711.911191][T11653] device syzkaller0 entered promiscuous mode [ 713.612332][ T4236] usb 6-1: USB disconnect, device number 14 [ 715.704294][T11684] netlink: 'syz.3.2063': attribute type 7 has an invalid length. [ 715.724441][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2063'. [ 717.559334][T11721] netlink: 'syz.5.2076': attribute type 7 has an invalid length. [ 717.577014][T11721] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2076'. [ 717.621386][ T4325] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 717.820976][ T4325] usb 1-1: Using ep0 maxpacket: 16 [ 718.426851][ T4325] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 718.462055][ T4325] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 718.481691][ T4325] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 718.495111][ T4325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.510295][ T4325] usb 1-1: config 0 descriptor?? [ 718.533572][ T4325] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 719.683551][T11769] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.708751][T11769] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 720.298982][T11769] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.331343][T11769] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 720.548993][ T7] usb 1-1: USB disconnect, device number 24 [ 720.633060][T11769] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.693596][T11769] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 720.750147][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 721.239460][T11769] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.259618][T11769] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 721.302068][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 721.852500][T11813] kvm [11812]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4000 [ 721.877985][T11813] kvm [11812]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 721.928749][T11813] kvm [11812]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 721.977143][T11813] kvm [11812]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 721.988798][T11813] kvm [11812]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe706111 [ 724.070771][ T4236] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 724.260859][ T4236] usb 3-1: Using ep0 maxpacket: 16 [ 724.272008][ T4236] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 724.293116][ T4236] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 724.320772][ T4236] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 724.340334][ T4236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.377785][ T4236] usb 3-1: config 0 descriptor?? [ 724.411618][ T4236] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 725.650393][ T4236] usb 3-1: USB disconnect, device number 18 [ 726.727151][T11876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2126'. [ 726.810098][T11882] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2126'. [ 726.948218][T11889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2133'. [ 727.476262][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2133'. [ 727.503268][T11891] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2133'. [ 728.000711][ T4327] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 728.190717][ T4327] usb 3-1: Using ep0 maxpacket: 16 [ 728.198078][ T4327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 728.221240][ T4327] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 728.246027][ T4327] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 728.264116][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.282968][ T4327] usb 3-1: config 0 descriptor?? [ 728.295919][ T4327] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 730.351039][ T7] usb 3-1: USB disconnect, device number 19 [ 730.841549][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2162'. [ 732.200659][ T4327] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 732.400791][ T4327] usb 3-1: Using ep0 maxpacket: 16 [ 732.419333][ T4327] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.450181][ T4327] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 732.469241][ T4327] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 732.478543][ T4327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.494231][ T4327] usb 3-1: config 0 descriptor?? [ 732.507395][ T4327] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 734.566575][T12029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2181'. [ 734.683293][ T4299] usb 3-1: USB disconnect, device number 20 [ 735.375351][T12051] lo speed is unknown, defaulting to 1000 [ 736.034396][ T26] audit: type=1326 audit(1746077289.385:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12046 comm="syz.0.2187" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4078e969 code=0x7fc00000 [ 737.908226][ T4327] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 738.100755][ T4327] usb 6-1: Using ep0 maxpacket: 16 [ 738.228094][ T4327] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.281169][ T4327] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 738.281215][ T4327] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 738.281237][ T4327] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.289861][ T4327] usb 6-1: config 0 descriptor?? [ 738.296168][ T4327] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 738.519980][T12094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2199'. [ 740.251711][ T4325] usb 6-1: USB disconnect, device number 15 [ 741.935880][T12130] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 741.991496][T12130] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 742.116052][T12130] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 742.197237][T12130] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 742.484979][T12130] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 742.593431][T12130] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 742.674140][T12130] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 742.682518][T12130] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 743.530681][ T4236] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 743.731182][ T4236] usb 4-1: Using ep0 maxpacket: 16 [ 743.742863][ T4236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.865244][ T4236] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 743.878640][ T4236] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 743.888231][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.368870][ T4236] usb 4-1: config 0 descriptor?? [ 744.393803][ T4236] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 745.386019][T12177] lo speed is unknown, defaulting to 1000 [ 745.727408][T12182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.757058][ T26] audit: type=1326 audit(1746077299.105:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12167 comm="syz.2.2224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 745.779970][T12182] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 746.945592][ T4327] usb 4-1: USB disconnect, device number 16 [ 746.985303][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.992334][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.090430][T12182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.120880][T12182] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 747.348254][T12182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.369760][T12182] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 747.403829][T12201] device batadv_slave_0 entered promiscuous mode [ 747.419071][T12201] device batadv_slave_0 left promiscuous mode [ 747.642198][T12182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.659112][T12182] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 747.977137][T12182] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 748.429863][T12182] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 748.457776][T12182] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 748.466203][T12182] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 748.497468][T12182] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 748.509372][T12182] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 748.570352][T12182] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 748.580375][T12182] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 748.681170][ T14] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 748.851511][T12226] lo speed is unknown, defaulting to 1000 [ 749.011299][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 749.046851][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.046875][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 749.046895][ T14] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 749.046908][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.049504][ T14] usb 3-1: config 0 descriptor?? [ 749.052433][ T14] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 749.287756][ T26] audit: type=1326 audit(1746077302.645:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.4.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 751.367531][ T4325] usb 3-1: USB disconnect, device number 21 [ 751.756993][T12253] device vlan0 entered promiscuous mode [ 751.840172][T12255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2252'. [ 752.007173][T12262] netlink: 'syz.4.2252': attribute type 2 has an invalid length. [ 753.728817][T12275] xt_HMARK: spi-set and port-set can't be combined [ 753.845989][T12275] device syzkaller1 entered promiscuous mode [ 754.843776][T12302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 755.203340][T12311] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2273'. [ 755.335320][T12313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2274'. [ 757.282621][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2280'. [ 757.772757][T12346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2285'. [ 758.841045][ T14] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 759.040916][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 759.048104][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.081125][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 759.100206][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2294'. [ 759.128867][ T14] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 759.146676][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.160362][ T14] usb 1-1: config 0 descriptor?? [ 759.174305][ T14] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 759.579760][T12380] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.629138][T12380] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 759.653186][T12387] netlink: 'syz.2.2300': attribute type 5 has an invalid length. [ 759.767250][T12380] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.787928][T12380] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 759.929079][T12380] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.948760][T12380] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 760.078206][T12380] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.097703][T12380] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 760.248225][T12380] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 760.284502][T12380] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 760.310228][T12380] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 760.319033][T12380] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 760.352762][T12380] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 760.368890][T12380] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 760.393378][T12380] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 760.412484][T12380] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 761.184003][ T14] usb 1-1: USB disconnect, device number 25 [ 763.462223][ T14] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 763.655137][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 763.664167][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.690320][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 763.726190][ T14] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 763.737408][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.756685][ T14] usb 4-1: config 0 descriptor?? [ 763.770095][ T14] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 764.220682][ T4299] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 764.402008][ T4299] usb 5-1: Using ep0 maxpacket: 32 [ 764.408693][ T4299] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 764.417655][ T4299] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 764.438921][ T4299] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 764.448412][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 764.458880][ T4299] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 764.469571][ T4299] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 764.487019][ T4299] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 764.500436][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.523164][ T4299] usb 5-1: config 0 descriptor?? [ 764.704904][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2345'. [ 764.747454][ T4299] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 764.797051][ T4299] usb 5-1: USB disconnect, device number 16 [ 764.814631][ T4299] usblp0: removed [ 764.839615][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2346'. [ 765.336394][T12524] lo speed is unknown, defaulting to 1000 [ 765.714457][ T5304] usb 4-1: USB disconnect, device number 17 [ 765.905251][ T26] audit: type=1326 audit(1746077319.265:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12517 comm="syz.2.2349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b558e969 code=0x7fc00000 [ 766.055202][ T4289] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 766.208775][T12561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2368'. [ 766.241026][ T4289] usb 1-1: Using ep0 maxpacket: 32 [ 766.250964][ T4289] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 766.279975][ T4289] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 766.397762][ T4289] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 766.436240][ T4289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 766.475107][ T4289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 766.502598][ T4289] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 766.528053][ T4289] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 766.539757][ T4289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.556903][ T4289] usb 1-1: config 0 descriptor?? [ 767.046286][ T4289] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 767.169032][ T4289] usb 1-1: USB disconnect, device number 26 [ 767.217824][ T4289] usblp0: removed [ 767.871057][ T4289] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 767.903603][T12587] lo speed is unknown, defaulting to 1000 [ 768.061155][ T4289] usb 5-1: Using ep0 maxpacket: 16 [ 768.068728][ T4289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.110075][ T4289] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 768.146295][ T4289] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 768.166320][ T4289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.179344][T12597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2382'. [ 768.199508][ T4289] usb 5-1: config 0 descriptor?? [ 768.236536][ T4289] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 768.687540][T12611] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2388'. [ 768.837337][T12619] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2392'. [ 768.980766][ T4299] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 769.162693][T12624] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2394'. [ 769.186475][ T4299] usb 3-1: Using ep0 maxpacket: 32 [ 769.203540][ T4299] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 769.228304][ T4299] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 769.246787][ T4299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 769.258477][ T4299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 769.268695][ T4299] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 769.278934][ T4299] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 769.310730][ T4299] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 769.326893][ T4299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.386705][ T4299] usb 3-1: config 0 descriptor?? [ 769.526055][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2399'. [ 769.614016][ T4299] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 769.647875][ T4299] usb 3-1: USB disconnect, device number 22 [ 769.666208][ T4299] usblp0: removed [ 769.893713][T12644] lo speed is unknown, defaulting to 1000 [ 770.176356][ T4289] usb 5-1: USB disconnect, device number 17 [ 770.258641][T12650] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2403'. [ 770.411764][ T26] audit: type=1326 audit(1746077323.775:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12635 comm="syz.3.2398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169bf8e969 code=0x7fc00000 [ 770.745956][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2406'. [ 771.109912][T12669] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2410'. [ 772.270506][T12686] lo speed is unknown, defaulting to 1000 [ 772.421257][ T4289] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 772.611183][ T4289] usb 4-1: Using ep0 maxpacket: 32 [ 772.620494][ T4289] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 772.642995][ T4289] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 772.656670][ T4289] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 772.667231][ T4289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 772.684745][ T4289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 772.706353][ T4289] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 772.727814][ T4289] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 772.737834][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.755013][ T4289] usb 4-1: config 0 descriptor?? [ 772.978290][T12701] lo speed is unknown, defaulting to 1000 [ 773.240154][ T4289] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 773.319849][ T4289] usb 4-1: USB disconnect, device number 18 [ 773.381927][ T4289] usblp0: removed [ 773.413457][ T26] audit: type=1326 audit(1746077326.775:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12697 comm="syz.5.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 773.516956][T12704] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2420'. [ 773.921570][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2425'. [ 775.514591][T12740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2432'. [ 777.008212][T12757] lo speed is unknown, defaulting to 1000 [ 777.360903][ T4325] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 777.436118][ T26] audit: type=1326 audit(1746077330.795:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12751 comm="syz.0.2435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4078e969 code=0x7fc00000 [ 777.552931][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 777.568693][ T4325] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 777.594652][ T4325] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 777.623051][ T4325] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 777.643113][ T4325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 777.686747][ T4325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 777.717671][T12766] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 777.729578][ T4325] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 777.751551][ T4325] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 777.765284][ T4325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.779783][ T4325] usb 5-1: config 0 descriptor?? [ 777.998678][ T4325] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 778.045942][ T4325] usb 5-1: USB disconnect, device number 18 [ 778.066912][ T4325] usblp0: removed [ 778.696022][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2448'. [ 780.130877][ T4236] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 780.340672][ T4236] usb 4-1: Using ep0 maxpacket: 32 [ 780.348556][ T4236] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 780.373213][ T4236] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 780.382282][ T4236] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 780.392090][ T4236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 780.402375][ T4236] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 780.444016][ T4236] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 780.467358][ T4236] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 780.477098][ T4236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.504170][ T4236] usb 4-1: config 0 descriptor?? [ 780.720398][ T4236] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 780.770036][ T4236] usb 4-1: USB disconnect, device number 19 [ 780.816251][ T4236] usblp0: removed [ 781.183698][T12837] lo speed is unknown, defaulting to 1000 [ 783.021153][ T4299] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 783.248602][ T4299] usb 6-1: Using ep0 maxpacket: 32 [ 783.282700][ T4299] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 783.300626][ T4299] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 783.437109][T12878] lo speed is unknown, defaulting to 1000 [ 783.516900][ T4299] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 783.533995][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 783.569926][ T4299] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 783.581664][ T4299] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 783.628189][ T4299] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 783.666644][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.834680][ T4299] usb 6-1: config 0 descriptor?? [ 783.922781][ T26] audit: type=1326 audit(1746077337.285:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12876 comm="syz.3.2486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169bf8e969 code=0x7fc00000 [ 784.049421][ T4299] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 784.081448][ T4299] usb 6-1: USB disconnect, device number 16 [ 784.124562][ T4299] usblp0: removed [ 784.427195][T12904] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.436837][T12904] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.445834][T12904] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.454946][T12904] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 784.466472][T12904] device vxlan0 entered promiscuous mode [ 784.474509][T12904] IPv6: ADDRCONF(NETDEV_CHANGE): vxlan0: link becomes ready [ 785.467018][T12935] device netdevsim0 entered promiscuous mode [ 785.496269][T12935] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 785.754688][ T4325] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 785.950789][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 785.957996][ T4325] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 785.975655][ T4325] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 786.017256][ T4325] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 786.054168][ T4325] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 786.178544][ T4325] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 786.277954][ T4325] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 786.402520][ T4325] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 786.491965][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.618108][ T4325] usb 3-1: config 0 descriptor?? [ 786.873850][T12969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 786.875530][ T4325] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 787.195755][ T4325] usb 3-1: USB disconnect, device number 23 [ 787.319800][ T4325] usblp0: removed [ 787.415023][T12980] Bluetooth: MGMT ver 1.22 [ 787.517193][T12986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2528'. [ 789.061144][ T4325] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 789.255212][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 789.275676][ T4325] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 789.336614][ T4325] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 789.406251][ T4325] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 789.514168][ T4325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 789.525369][ T4325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 789.544988][ T4325] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 789.567877][ T4325] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 790.203240][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.329876][ T4325] usb 4-1: config 0 descriptor?? [ 790.557475][ T4325] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 790.649535][ T4325] usb 4-1: USB disconnect, device number 20 [ 790.676383][ T4325] usblp0: removed [ 791.503836][T13075] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2559'. [ 791.548682][T13075] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2559'. [ 791.715978][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2559'. [ 792.412284][T13091] lo speed is unknown, defaulting to 1000 [ 792.443414][T13098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2569'. [ 792.610645][ T4327] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 792.690742][T13104] tipc: Enabling of bearer rejected, failed to enable media [ 792.714488][T13100] lo speed is unknown, defaulting to 1000 [ 792.811626][ T4327] usb 4-1: Using ep0 maxpacket: 32 [ 792.823700][ T4327] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 792.850162][ T4327] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 792.885539][ T4327] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 792.895558][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 792.905817][ T4327] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 792.915896][ T4327] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 792.929271][ T4327] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 792.938692][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.977467][ T4327] usb 4-1: config 0 descriptor?? [ 793.200020][ T4327] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 793.267773][ T4327] usb 4-1: USB disconnect, device number 21 [ 793.288952][ T4327] usblp0: removed [ 795.290453][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2580'. [ 795.914830][T13153] lo speed is unknown, defaulting to 1000 [ 796.631248][ T26] audit: type=1326 audit(1746077349.965:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13135 comm="syz.3.2582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169bf8e969 code=0x7fc00000 [ 796.648358][T12893] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 797.210658][T12893] usb 6-1: Using ep0 maxpacket: 32 [ 797.217991][T12893] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 797.236113][T12893] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 797.255208][T12893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 797.284016][T12893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 797.310854][T12893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 797.348506][T12893] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 797.386240][T12893] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 797.412857][T12893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.437623][T13174] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2595'. [ 797.455005][T12893] usb 6-1: config 0 descriptor?? [ 797.681072][T12893] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 797.876906][T12893] usb 6-1: USB disconnect, device number 17 [ 797.888597][T12893] usblp0: removed [ 798.248935][T13190] Bluetooth: MGMT ver 1.22 [ 798.283736][T13190] device geneve3 entered promiscuous mode [ 798.477446][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2599'. [ 799.838363][T13214] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2607'. [ 800.165349][T13222] sctp: [Deprecated]: syz.3.2610 (pid 13222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 800.165349][T13222] Use struct sctp_sack_info instead [ 800.242655][T13225] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 800.331763][T13232] sctp: [Deprecated]: syz.3.2610 (pid 13232) Use of int in max_burst socket option deprecated. [ 800.331763][T13232] Use struct sctp_assoc_value instead [ 800.531243][ T4288] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 800.697402][T13226] bridge0: port 2(macsec0) entered disabled state [ 800.703964][T13226] bridge0: port 1(netdevsim1) entered disabled state [ 800.721126][ T4288] usb 5-1: Using ep0 maxpacket: 32 [ 800.728454][ T4288] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 800.747404][ T4288] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 800.763236][ T4288] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 800.774814][ T4288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.785022][ T4288] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.795153][ T4288] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 800.808612][ T4288] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 800.819663][ T4288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.842210][ T4288] usb 5-1: config 0 descriptor?? [ 801.057212][ T4288] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 801.102914][ T4288] usb 5-1: USB disconnect, device number 19 [ 801.115140][ T4288] usblp0: removed [ 801.473531][T13226] device vlan0 left promiscuous mode [ 801.823947][T13226] device netdevsim0 left promiscuous mode [ 801.941256][T13226] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 801.950087][T13226] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 801.964744][T13226] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 801.975345][T13226] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 801.988421][T13226] device geneve2 left promiscuous mode [ 802.013004][T13226] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.022273][T13226] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.035271][T13226] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.045662][T13226] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.058730][T13226] device geneve3 left promiscuous mode [ 802.127437][T13226] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.136442][T13226] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.145418][T13226] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.154471][T13226] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.163790][T13226] device vxlan0 left promiscuous mode [ 802.202593][T13249] lo speed is unknown, defaulting to 1000 [ 802.498217][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2624'. [ 803.574312][T13281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 803.979372][T13291] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2631'. [ 804.205027][T13302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2637'. [ 804.697273][T13317] lo speed is unknown, defaulting to 1000 [ 805.124303][T13325] lo speed is unknown, defaulting to 1000 [ 805.405435][ T26] audit: type=1326 audit(1746077358.755:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13311 comm="syz.0.2642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4078e969 code=0x7fc00000 [ 805.589083][T13341] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2652'. [ 806.241552][T13360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2655'. [ 807.080689][ T26] audit: type=1326 audit(1746077360.435:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz.4.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa089d8e969 code=0x7fc00000 [ 807.142196][T13365] lo speed is unknown, defaulting to 1000 [ 807.718037][T13386] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2667'. [ 808.432445][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.438901][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.851134][T13415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2671'. [ 810.761248][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2681'. [ 813.629643][ T26] audit: type=1326 audit(1746077366.985:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13467 comm="syz.0.2696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd4078e969 code=0x7fc00000 [ 815.594320][T13533] lo speed is unknown, defaulting to 1000 [ 816.196391][ T26] audit: type=1326 audit(1746077369.555:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13512 comm="syz.5.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 816.357762][ T26] audit: type=1326 audit(1746077369.715:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f169bf8e969 code=0x7fc00000 [ 818.134432][T13602] sctp: [Deprecated]: syz.3.2743 (pid 13602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 818.134432][T13602] Use struct sctp_sack_info instead [ 818.275772][T13607] device wlan1 entered promiscuous mode [ 818.282258][T13607] device macvtap1 entered promiscuous mode [ 818.893433][T13623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.904677][T13623] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 819.095651][T13623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.122935][T13623] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 819.245496][T13623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.256372][T13623] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 819.382039][T13623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.415751][T13623] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 819.479824][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2756'. [ 819.541789][T13638] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 819.557358][T13638] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 819.815102][T13623] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 819.825311][T13623] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 819.848392][T13623] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 819.867975][T13623] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 819.892738][T13623] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 819.921096][T13623] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 819.938127][T13623] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 819.960388][T13623] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 820.120777][T12893] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 820.434809][T13673] Driver unsupported XDP return value 0 on prog (id 504) dev N/A, expect packet loss! [ 820.450884][T12893] usb 6-1: Using ep0 maxpacket: 32 [ 820.458119][T12893] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 820.484112][T12893] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 820.493663][T12893] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 820.503539][T12893] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 820.514185][T12893] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 820.526452][T12893] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 820.541664][T12893] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 820.551036][T12893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.578533][T12893] usb 6-1: config 0 descriptor?? [ 820.790943][T12893] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 820.817576][T12893] usb 6-1: USB disconnect, device number 18 [ 820.832234][T12893] usblp0: removed [ 821.176140][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 821.191424][T13686] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 821.240775][T13686] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 821.723148][T13694] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2779'. [ 821.766217][T13694] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 822.390914][ T14] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 822.507091][T13719] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2788'. [ 822.580876][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 822.592928][ T14] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 822.614010][ T14] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 822.625228][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 822.636034][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 822.646441][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 822.657016][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 822.671539][ T14] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 822.681262][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.715888][ T14] usb 1-1: config 0 descriptor?? [ 822.942392][ T14] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 822.981738][ T14] usb 1-1: USB disconnect, device number 27 [ 823.027628][ T14] usblp0: removed [ 823.634972][T13747] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 825.701567][ T4257] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 826.958844][ T14] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 827.330669][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 827.332693][ T14] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 827.332717][ T14] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 827.332735][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 827.332768][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 827.332789][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 827.332810][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 827.332842][ T14] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 827.332863][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.334748][ T14] usb 1-1: config 0 descriptor?? [ 827.557908][T13807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2819'. [ 827.607155][T13807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2819'. [ 827.622070][T13807] device team0 entered promiscuous mode [ 827.647216][T13807] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 827.660689][T13807] Cannot create hsr debugfs directory [ 827.666206][T13807] hsr1: Slave A (team0) is not up; please bring it up to get a fully working HSR network [ 827.685892][ T14] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 827.730511][ T14] usb 1-1: USB disconnect, device number 28 [ 827.779045][ T14] usblp0: removed [ 827.798389][T13807] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 828.027860][T13814] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2823'. [ 829.991624][T13836] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2827'. [ 830.040916][T13836] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2827'. [ 831.288673][T13852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2834'. [ 831.645588][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2835'. [ 836.915668][T13921] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2852'. [ 840.066580][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2868'. [ 840.160010][T13966] netlink: 'syz.5.2868': attribute type 10 has an invalid length. [ 840.320935][T13966] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 840.962756][T13966] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 841.038154][T13966] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 841.055491][T13966] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 841.110004][T13971] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2871'. [ 841.682770][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2873'. [ 843.539783][T14009] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2884'. [ 844.612300][T14046] device geneve3 entered promiscuous mode [ 844.688659][T13753] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 844.698024][T13753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 844.710912][T13753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 844.721673][T13753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 844.729258][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2900'. [ 844.747469][T13753] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 844.756022][T13753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 844.824041][T14052] lo speed is unknown, defaulting to 1000 [ 844.930109][T14056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'. [ 845.447591][T14052] chnl_net:caif_netlink_parms(): no params data found [ 845.651108][T14052] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.671013][T14052] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.701358][T14052] device bridge_slave_0 entered promiscuous mode [ 845.785264][T14052] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.831375][T14052] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.877132][T14052] device bridge_slave_1 entered promiscuous mode [ 846.114851][T14052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.190412][T14052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.370178][T14052] team0: Port device team_slave_0 added [ 846.413358][T14052] team0: Port device team_slave_1 added [ 846.459950][ T26] audit: type=1326 audit(1746077399.815:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.528834][T14052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.540697][ T26] audit: type=1326 audit(1746077399.815:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.554923][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.632627][ T26] audit: type=1326 audit(1746077399.815:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.675506][T14052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.686373][ T26] audit: type=1326 audit(1746077399.815:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.686409][ T26] audit: type=1326 audit(1746077399.815:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.686439][ T26] audit: type=1326 audit(1746077399.815:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.686469][ T26] audit: type=1326 audit(1746077399.815:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.686498][ T26] audit: type=1326 audit(1746077399.815:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.686527][ T26] audit: type=1326 audit(1746077399.815:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.686653][ T26] audit: type=1326 audit(1746077399.815:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz.5.2914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7f1d8e969 code=0x7fc00000 [ 846.796582][T14052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.844255][ T4257] Bluetooth: hci1: command 0x0409 tx timeout [ 846.868237][T14052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.895062][T14052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.031907][T14052] device hsr_slave_0 entered promiscuous mode [ 847.038843][T14052] device hsr_slave_1 entered promiscuous mode [ 847.687370][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2928'. [ 848.041624][T14133] netlink: 'syz.0.2933': attribute type 7 has an invalid length. [ 848.065280][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'. [ 848.108812][T14052] device netdevsim1 left promiscuous mode [ 848.128026][T14052] bridge0: port 1(netdevsim1) entered disabled state [ 848.900956][T13753] Bluetooth: hci1: command 0x041b tx timeout [ 849.007477][T14052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 849.065182][T14052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 849.105439][T14052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 849.142951][T14052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 849.692202][T14052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.755999][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 849.784007][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 849.798723][T14167] netlink: 'syz.5.2945': attribute type 7 has an invalid length. [ 849.806932][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2945'. [ 849.846964][T14052] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.860140][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 849.872269][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 849.881237][ T4365] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.888408][ T4365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.916027][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 849.924532][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 849.933787][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 849.944256][ T4365] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.951425][ T4365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.962330][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 849.982014][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 849.992725][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 850.072428][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 850.098431][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 850.127122][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 850.170271][T14176] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2949'. [ 850.187336][T14177] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2949'. [ 850.204864][T14052] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 850.260446][T14052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 850.411621][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 850.419801][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 850.431946][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 850.452288][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 850.461502][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 850.491894][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 850.680268][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 850.711577][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 850.733397][T14052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.827581][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 850.871265][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 850.981169][T13753] Bluetooth: hci1: command 0x040f tx timeout [ 851.135729][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 851.145141][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 851.191462][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 851.223611][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 851.249062][T14052] device veth0_vlan entered promiscuous mode [ 851.290254][T14052] device veth1_vlan entered promiscuous mode [ 851.588608][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2958'. [ 851.637374][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 851.638623][T14199] lo speed is unknown, defaulting to 1000 [ 851.655290][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 851.703111][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 851.746198][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 851.795198][T14052] device veth0_macvtap entered promiscuous mode [ 851.819271][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 851.848201][T14052] device veth1_macvtap entered promiscuous mode [ 851.912772][T14212] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2959'. [ 851.925620][T14212] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2959'. [ 852.007386][T14052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.052621][T14205] lo speed is unknown, defaulting to 1000 [ 852.064782][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 852.077224][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 852.135093][T14052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.148552][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 852.170116][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 852.287149][T14052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.306529][T14052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.337072][T14052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.367279][T14052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.671373][ T4311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.702415][ T4311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.743019][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2966'. [ 852.752345][T14228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2966'. [ 852.776213][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 852.796206][ T4311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.807032][ T4311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.820478][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 853.061532][T13753] Bluetooth: hci1: command 0x0419 tx timeout [ 853.156447][T14238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 853.442349][T14246] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 853.667355][T13753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 853.678625][T13753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 853.687477][T13753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 853.695737][T13753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 853.703907][T13753] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 853.714397][T13753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 853.776371][T14253] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2972'. [ 853.936624][T14248] lo speed is unknown, defaulting to 1000 [ 854.049102][ T4303] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 854.112126][ T4303] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.227724][ T4303] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 854.268466][ T4303] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.320065][T14264] IPv6: Can't replace route, no match found [ 854.392599][ T4303] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 854.419282][ T4303] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.523155][ T4303] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 854.575469][ T4303] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 854.882759][T14274] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2981'. [ 855.127629][T14248] chnl_net:caif_netlink_parms(): no params data found [ 855.224663][T14283] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2983'. [ 855.419971][T14248] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.459106][T14248] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.509474][T14289] Bluetooth: MGMT ver 1.22 [ 855.516177][T14248] device bridge_slave_0 entered promiscuous mode [ 855.642131][T14248] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.658558][T14248] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.671334][T14289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2984'. [ 855.722447][T14248] device bridge_slave_1 entered promiscuous mode [ 855.781184][T13753] Bluetooth: hci4: command 0x0409 tx timeout [ 855.892258][T14301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2988'. [ 855.918328][T14301] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2988'. [ 856.070192][T14248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.161757][T14248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.361976][T14248] team0: Port device team_slave_0 added [ 856.424343][T14248] team0: Port device team_slave_1 added [ 856.469958][T14324] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2993'. [ 856.569224][T14248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.578390][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.631178][T14248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.711695][T14248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.718708][T14248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.781163][T14248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.946266][T14339] bridge0: port 1(hsr0) entered blocking state [ 856.954792][T14342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3000'. [ 856.991575][T14339] bridge0: port 1(hsr0) entered disabled state [ 857.012467][T14339] device hsr0 entered promiscuous mode [ 857.038049][T14339] bridge0: port 1(hsr0) entered blocking state [ 857.044647][T14339] bridge0: port 1(hsr0) entered forwarding state [ 857.123588][T14348] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 857.393175][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 857.414809][T14248] device hsr_slave_0 entered promiscuous mode [ 857.444658][T14248] device hsr_slave_1 entered promiscuous mode [ 857.475877][T14248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 857.501035][T14248] Cannot create hsr debugfs directory [ 857.541317][T13181] [ 857.543678][T13181] ============================================ [ 857.549896][T13181] WARNING: possible recursive locking detected [ 857.556038][T13181] 6.1.135-syzkaller #0 Not tainted [ 857.561137][T13181] -------------------------------------------- [ 857.567298][T13181] kworker/1:2/13181 is trying to acquire lock: [ 857.573465][T13181] ffff888076d66d88 (&hsr->seqnr_lock){+.-.}-{2:2}, at: hsr_dev_xmit+0x12e/0x200 [ 857.582507][T13181] [ 857.582507][T13181] but task is already holding lock: [ 857.589850][T13181] ffff888077c60d88 (&hsr->seqnr_lock){+.-.}-{2:2}, at: hsr_dev_xmit+0x12e/0x200 [ 857.598949][T13181] [ 857.598949][T13181] other info that might help us debug this: [ 857.606991][T13181] Possible unsafe locking scenario: [ 857.606991][T13181] [ 857.614418][T13181] CPU0 [ 857.617674][T13181] ---- [ 857.620937][T13181] lock(&hsr->seqnr_lock); [ 857.625441][T13181] lock(&hsr->seqnr_lock); [ 857.629922][T13181] [ 857.629922][T13181] *** DEADLOCK *** [ 857.629922][T13181] [ 857.638044][T13181] May be due to missing lock nesting notation [ 857.638044][T13181] [ 857.646343][T13181] 11 locks held by kworker/1:2/13181: [ 857.651694][T13181] #0: ffff88802f7b2d38 ((wq_completion)mld){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 857.661761][T13181] #1: ffffc90003257d00 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 857.674256][T13181] #2: ffff88807318b538 (&idev->mc_lock){+.+.}-{3:3}, at: mld_ifc_work+0x29/0xb40 [ 857.683453][T13181] #3: ffffffff8c92a9e0 (rcu_read_lock){....}-{1:2}, at: mld_sendpack+0x1f7/0xe80 [ 857.692643][T13181] #4: ffffffff8c92a9e0 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x593/0x1590 [ 857.702456][T13181] #5: ffffffff8c92aa40 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x26f/0x3760 [ 857.712355][T13181] #6: ffff888077c60d88 (&hsr->seqnr_lock){+.-.}-{2:2}, at: hsr_dev_xmit+0x12e/0x200 [ 857.721818][T13181] #7: ffffffff8c92a9e0 (rcu_read_lock){....}-{1:2}, at: hsr_forward_skb+0x98/0x20d0 [ 857.731276][T13181] #8: ffffffff8c92aa40 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x26f/0x3760 [ 857.741165][T13181] #9: ffffffff8c92a9e0 (rcu_read_lock){....}-{1:2}, at: br_dev_xmit+0x176/0x16e0 [ 857.750363][T13181] #10: ffffffff8c92aa40 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x26f/0x3760 [ 857.760339][T13181] [ 857.760339][T13181] stack backtrace: [ 857.766217][T13181] CPU: 1 PID: 13181 Comm: kworker/1:2 Not tainted 6.1.135-syzkaller #0 [ 857.774431][T13181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 857.784466][T13181] Workqueue: mld mld_ifc_work [ 857.789129][T13181] Call Trace: [ 857.792386][T13181] [ 857.795297][T13181] dump_stack_lvl+0x168/0x22e [ 857.799963][T13181] ? show_regs_print_info+0x12/0x12 [ 857.805137][T13181] ? load_image+0x3b0/0x3b0 [ 857.809618][T13181] __lock_acquire+0x122f/0x7c50 [ 857.814455][T13181] ? __lock_acquire+0x12e5/0x7c50 [ 857.819461][T13181] ? verify_lock_unused+0x140/0x140 [ 857.824654][T13181] ? stack_trace_save+0xe0/0xe0 [ 857.829494][T13181] lock_acquire+0x1b4/0x490 [ 857.833976][T13181] ? hsr_dev_xmit+0x12e/0x200 [ 857.838633][T13181] ? skb_crc32c_csum_help+0x520/0x520 [ 857.843984][T13181] ? read_lock_is_recursive+0x10/0x10 [ 857.849336][T13181] ? xfrm_init_replay+0x2a0/0x2a0 [ 857.854343][T13181] ? mark_lock+0x94/0x320 [ 857.858650][T13181] ? netif_skb_features+0x833/0xbc0 [ 857.861176][T13753] Bluetooth: hci4: command 0x041b tx timeout [ 857.863823][T13181] ? hsr_dev_xmit+0x12e/0x200 [ 857.874435][T13181] _raw_spin_lock_bh+0x32/0x50 [ 857.879183][T13181] ? hsr_dev_xmit+0x12e/0x200 [ 857.883842][T13181] hsr_dev_xmit+0x12e/0x200 [ 857.888352][T13181] dev_hard_start_xmit+0x262/0x870 [ 857.893443][T13181] __dev_queue_xmit+0x1bf1/0x3760 [ 857.898440][T13181] ? lockdep_hardirqs_on+0x94/0x140 [ 857.903616][T13181] ? __dev_queue_xmit+0x26f/0x3760 [ 857.908704][T13181] ? netdev_core_pick_tx+0x340/0x340 [ 857.913961][T13181] ? ebt_do_table+0x25b2/0x2760 [ 857.918787][T13181] ? lock_chain_count+0x20/0x20 [ 857.923613][T13181] ? ebt_do_table+0x25b2/0x2760 [ 857.928441][T13181] br_dev_queue_push_xmit+0x6a2/0x850 [ 857.933791][T13181] ? __lock_acquire+0x7c50/0x7c50 [ 857.938791][T13181] ? nla_nest_cancel+0x90/0x90 [ 857.943535][T13181] ? nf_hook_slow+0x1b0/0x200 [ 857.948188][T13181] ? nla_nest_cancel+0x90/0x90 [ 857.952929][T13181] ? nla_nest_cancel+0x90/0x90 [ 857.957671][T13181] NF_HOOK+0x33c/0x3d0 [ 857.961718][T13181] ? NF_HOOK+0x9b/0x3d0 [ 857.965853][T13181] ? br_forward_finish+0x120/0x120 [ 857.970941][T13181] ? nla_nest_cancel+0x90/0x90 [ 857.975692][T13181] ? __lock_acquire+0x7c50/0x7c50 [ 857.980693][T13181] ? rhashtable_lookup+0x75b/0x7c0 [ 857.985785][T13181] br_forward_finish+0xcf/0x120 [ 857.990617][T13181] ? nla_nest_cancel+0x90/0x90 [ 857.995371][T13181] ? br_dev_queue_push_xmit+0x850/0x850 [ 858.000893][T13181] ? br_dev_queue_push_xmit+0x850/0x850 [ 858.006432][T13181] NF_HOOK+0x33c/0x3d0 [ 858.010491][T13181] ? NF_HOOK+0x9b/0x3d0 [ 858.014637][T13181] ? br_forward_finish+0x120/0x120 [ 858.019731][T13181] ? br_multicast_count+0xeb/0xc90 [ 858.024827][T13181] ? br_dev_queue_push_xmit+0x850/0x850 [ 858.030353][T13181] __br_forward+0x41f/0x600 [ 858.034835][T13181] ? br_dev_queue_push_xmit+0x850/0x850 [ 858.040364][T13181] ? should_deliver+0x350/0x350 [ 858.045207][T13181] ? br_flood+0x3d9/0x450 [ 858.049539][T13181] br_dev_xmit+0x104a/0x16e0 [ 858.054108][T13181] ? br_dev_xmit+0x176/0x16e0 [ 858.058765][T13181] ? br_net_exit_batch+0x200/0x200 [ 858.063849][T13181] ? kasan_set_track+0x60/0x70 [ 858.068591][T13181] ? skb_crc32c_csum_help+0x520/0x520 [ 858.073937][T13181] ? hsr_create_tagged_frame+0x21f/0xc80 [ 858.079549][T13181] ? hsr_forward_skb+0xf08/0x20d0 [ 858.084589][T13181] ? hsr_dev_xmit+0x139/0x200 [ 858.089246][T13181] ? xfrm_init_replay+0x2a0/0x2a0 [ 858.094247][T13181] ? ip6_finish_output+0x5d3/0xa60 [ 858.099338][T13181] ? netdev_rx_csum_fault+0x40/0x40 [ 858.104627][T13181] ? netif_skb_features+0x833/0xbc0 [ 858.109809][T13181] dev_hard_start_xmit+0x262/0x870 [ 858.114900][T13181] __dev_queue_xmit+0x1bf1/0x3760 [ 858.119923][T13181] ? __pskb_copy_fclone+0xa6/0x1010 [ 858.125102][T13181] ? __dev_queue_xmit+0x26f/0x3760 [ 858.130193][T13181] ? netdev_core_pick_tx+0x340/0x340 [ 858.135455][T13181] ? memmove+0x3c/0x60 [ 858.139521][T13181] ? hsr_addr_subst_dest+0x30f/0x7d0 [ 858.144810][T13181] hsr_forward_skb+0x12f4/0x20d0 [ 858.149738][T13181] ? hsr_forward_skb+0x98/0x20d0 [ 858.154660][T13181] ? prp_fill_frame_info+0x6f0/0x6f0 [ 858.159930][T13181] ? do_raw_spin_lock+0x11d/0x280 [ 858.164973][T13181] ? __rwlock_init+0x140/0x140 [ 858.169719][T13181] ? netif_skb_features+0x833/0xbc0 [ 858.174923][T13181] ? hsr_dev_xmit+0x12e/0x200 [ 858.179581][T13181] hsr_dev_xmit+0x139/0x200 [ 858.184064][T13181] dev_hard_start_xmit+0x262/0x870 [ 858.189159][T13181] __dev_queue_xmit+0x1bf1/0x3760 [ 858.194164][T13181] ? __dev_queue_xmit+0x26f/0x3760 [ 858.199252][T13181] ? netdev_core_pick_tx+0x340/0x340 [ 858.204516][T13181] ? eth_header+0x117/0x200 [ 858.208995][T13181] ? llc_sysctl_exit+0x60/0x60 [ 858.213734][T13181] ? neigh_connected_output+0x3ac/0x450 [ 858.219256][T13181] ip6_finish_output2+0xda2/0x1590 [ 858.224435][T13181] ? ip6_finish_output2+0x593/0x1590 [ 858.229712][T13181] ? nf_hook+0x370/0x370 [ 858.233949][T13181] ? ip6_mtu+0x79/0x3f0 [ 858.238087][T13181] ? ip6_mtu+0x79/0x3f0 [ 858.242224][T13181] ip6_finish_output+0x5d3/0xa60 [ 858.247149][T13181] NF_HOOK+0x15d/0x460 [ 858.251205][T13181] ? mld_send_report+0x2e0/0x2e0 [ 858.256114][T13181] ? NF_HOOK+0x460/0x460 [ 858.260331][T13181] ? icmp6_dst_alloc+0x3ea/0x460 [ 858.265249][T13181] mld_sendpack+0x893/0xe80 [ 858.269758][T13181] ? mld_sendpack+0x1f7/0xe80 [ 858.274409][T13181] ? add_grec+0x1660/0x1660 [ 858.278889][T13181] mld_ifc_work+0x836/0xb40 [ 858.283366][T13181] ? _raw_spin_unlock_irq+0x1f/0x40 [ 858.288556][T13181] ? process_one_work+0x7a1/0x1160 [ 858.293641][T13181] process_one_work+0x898/0x1160 [ 858.298554][T13181] ? worker_detach_from_pool+0x240/0x240 [ 858.304161][T13181] ? _raw_spin_lock_irq+0xab/0xe0 [ 858.309173][T13181] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 858.314521][T13181] ? kthread_data+0x4b/0xc0 [ 858.319003][T13181] worker_thread+0xaa2/0x1250 [ 858.323658][T13181] ? __kthread_parkme+0x162/0x1c0 [ 858.328682][T13181] kthread+0x29d/0x330 [ 858.332741][T13181] ? worker_clr_flags+0x1a0/0x1a0 [ 858.337756][T13181] ? kthread_blkcg+0xd0/0xd0 [ 858.342331][T13181] ret_from_fork+0x1f/0x30 [ 858.346745][T13181] [ 858.534130][ T4303] device hsr_slave_0 left promiscuous mode [ 858.541660][ T4303] device hsr_slave_1 left promiscuous mode [ 858.564187][ T4303] device veth1_macvtap left promiscuous mode [ 858.571443][ T4303] device veth0_macvtap left promiscuous mode [ 858.577569][ T4303] device veth1_vlan left promiscuous mode [ 858.585667][ T4303] device veth0_vlan left promiscuous mode [ 858.723837][ T4303] infiniband syz0: set down [ 859.298492][ T4303] bond0 (unregistering): Released all slaves [ 859.352823][ T4355] smc: removing ib device syz0 [ 859.360371][T13181] lo speed is unknown, defaulting to 1000 [ 859.884147][T14248] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 859.903147][T14248] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 859.917456][T14248] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 859.931656][T14248] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 859.941085][ T4257] Bluetooth: hci4: command 0x040f tx timeout [ 859.994084][T14248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 860.012107][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 860.021000][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 860.032112][T14248] 8021q: adding VLAN 0 to HW filter on device team0 [ 860.042449][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 860.053862][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 860.062587][ T4776] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.069652][ T4776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 860.077543][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 860.088283][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 860.098855][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 860.107640][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.114758][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.126033][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 860.138495][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 860.153079][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 860.162771][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 860.179256][T14248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 860.190473][T14248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 860.204770][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 860.215473][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 860.224888][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 860.236402][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 860.245602][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 860.256513][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 860.265544][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 860.278899][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 860.384310][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 860.393074][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 860.407053][T14248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.430499][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 860.441607][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 860.459642][T14248] device veth0_vlan entered promiscuous mode [ 860.468469][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 860.478539][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 860.487145][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 860.497413][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 860.509969][T14248] device veth1_vlan entered promiscuous mode [ 860.528430][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 860.537358][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 860.546825][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 860.555896][T11780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 860.566390][T14248] device veth0_macvtap entered promiscuous mode [ 860.583067][T14248] device veth1_macvtap entered promiscuous mode [ 860.603503][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.617275][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.628449][T14248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.638738][T14248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 860.649357][T14248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 860.660768][T14248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.671893][T14248] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.683537][T14248] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.692633][T14248] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.701772][T14248] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.712126][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 860.720589][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 860.729571][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 860.738473][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 860.747549][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 860.756375][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 860.784791][T14248] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 860.811614][ T4776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.819457][ T4776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.828810][T14248] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 860.842346][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 860.868879][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.877167][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.886975][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 862.021068][ T4257] Bluetooth: hci4: command 0x0419 tx timeout