last executing test programs: 17m26.713252632s ago: executing program 32 (id=1274): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x80c42, 0x1d0) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, 0xee01, 0x0) 12m29.838320221s ago: executing program 33 (id=5128): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) timer_settime(0x0, 0x0, 0x0, 0x0) 11m44.80578025s ago: executing program 5 (id=5864): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000040), 0x4) 11m44.499125418s ago: executing program 5 (id=5865): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 11m44.339736768s ago: executing program 5 (id=5867): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 11m44.107623651s ago: executing program 5 (id=5868): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x2, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 11m43.746787214s ago: executing program 5 (id=5869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5ff, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 11m43.102395227s ago: executing program 34 (id=5869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044010) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a3f0400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0xf5ff, 0x0, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 10m58.463853103s ago: executing program 35 (id=6332): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x11) io_setup(0x4000, &(0x7f0000000280)=0x0) io_pgetevents(r1, 0x3, 0x3e, 0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={[0x3fc]}, 0x8}) 10m7.252188391s ago: executing program 36 (id=6915): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}], 0x20}, 0x24006840) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x0) 9m2.366182262s ago: executing program 37 (id=7569): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x2000413, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f000000bb40)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000000)={0x50, 0x0, 0x8000000000203, {0x7, 0x29, 0xcf940281, 0x702000a1, 0x1, 0x1a76, 0x4, 0x1801, 0x0, 0x0, 0x4, 0x2000009e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m0.829530607s ago: executing program 38 (id=8194): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x130}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001880)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) madvise(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x4) 2m36.632051538s ago: executing program 39 (id=11454): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) timerfd_create(0x0, 0x80000) openat$kvm(0xffffffffffffff9c, 0x0, 0x80c00, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m32.980402567s ago: executing program 6 (id=11634): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 2m32.864994823s ago: executing program 6 (id=11635): listen(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1301"], 0x16) sync() sync() sync() sync() 2m32.402253305s ago: executing program 6 (id=11636): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040)=0x3, 0x4) write$binfmt_misc(r0, &(0x7f0000000040), 0xfe46) recvfrom$inet6(r0, 0x0, 0x31, 0x100c0, 0x0, 0x4b) 2m32.261612684s ago: executing program 6 (id=11637): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}], 0x1}, 0x0) 2m32.136380304s ago: executing program 6 (id=11638): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2m31.979721573s ago: executing program 6 (id=11641): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,us', @ANYRESDEC=0x0]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 2m25.87815698s ago: executing program 40 (id=11579): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x195) r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000300)=[{0x6, 0x10, 0x0, 0xfff}]}) setsockopt$sock_int(r2, 0x1, 0x20, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m19.425767509s ago: executing program 5 (id=11704): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2m16.683260596s ago: executing program 41 (id=11641): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,us', @ANYRESDEC=0x0]) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1], 0x15) 2m4.309963607s ago: executing program 42 (id=11704): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2m1.79518567s ago: executing program 4 (id=11868): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/47, 0x2f}, {&(0x7f0000001e40)=""/104, 0x63}], 0x2}, 0x2}], 0x1, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca124", 0x91}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 2m0.521965434s ago: executing program 4 (id=11872): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000280)={r2, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000100)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={r3}) 2m0.362833629s ago: executing program 4 (id=11873): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x5f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000003c0)="c4c37905d6040f0866bad104ec66660f388043006665660f3a0d9a0050000000b805000000b9050000000f01d926d0eb0f20e035200000000f22e0b9800000c00f3235000100000f306566dad3", 0x4d}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m59.94457235s ago: executing program 4 (id=11875): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x8) 1m56.815401042s ago: executing program 4 (id=11888): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "ec094e36a7e3970f8c35c47e5804000300", "c700", "fffffffffffffffd"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 1m56.629934603s ago: executing program 4 (id=11889): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x5) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m50.252901313s ago: executing program 7 (id=11916): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fcntl$dupfd(r2, 0x0, r0) connect$pppl2tp(r3, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 1m50.17942408s ago: executing program 7 (id=11917): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r0, 0x0, 0x0, 0x80000) 1m50.104102217s ago: executing program 7 (id=11918): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x1}, 0x40000102) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4001044}], 0x1, 0x24008844) sendmmsg$inet(r1, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="ec0767", 0x3}, {&(0x7f0000000400)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2bf920be733d5e21ac510b27975", 0x2e}], 0x2}}], 0x1, 0x8058) 1m49.963350972s ago: executing program 7 (id=11919): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 1m49.870477187s ago: executing program 7 (id=11920): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1m49.699456657s ago: executing program 7 (id=11921): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x204008, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m41.461976435s ago: executing program 43 (id=11889): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x8d) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x5) r2 = socket$tipc(0x1e, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 1m40.007598979s ago: executing program 0 (id=12003): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000100)={{&(0x7f000050c000/0x3000)=nil, 0x3000}, 0x1}) 1m39.868541352s ago: executing program 0 (id=12005): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000a, 0x12, r1, 0x0) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f00000001c0)=0x307, 0x4) 1m39.731994092s ago: executing program 0 (id=12006): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x30, 0x0) 1m39.579519373s ago: executing program 0 (id=12007): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 1m39.318380119s ago: executing program 0 (id=12008): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r2, 0x4, 0x42000) 1m39.221692982s ago: executing program 0 (id=12009): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ff9, 0x8, '9P2000.u'}, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m34.419354772s ago: executing program 44 (id=11921): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), 0x204008, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m30.970356882s ago: executing program 9 (id=12040): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x800000400, 0x4002004c4, 0x3, 0x1, 0x94, 0x10, 0x0, 0x3, 0x4, 0x1, 0x8], 0xeeee7ffb, 0x40000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x30000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m30.574378427s ago: executing program 9 (id=12042): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x50d1, &(0x7f0000000000)={0x0, 0xfffff7fc, 0x1000, 0x2, 0x333}, &(0x7f0000000080), &(0x7f0000ff4000)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m30.282137975s ago: executing program 9 (id=12044): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 1m30.061397623s ago: executing program 9 (id=12046): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x10}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x40040}], 0x1, 0x8040) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x1401, 0x1, 0x70bd25, 0x25dfdbff}, 0x10}}, 0x0) recvmsg(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001240)=""/47, 0x2f}], 0x1}, 0x10002) 1m29.903069535s ago: executing program 9 (id=12048): ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f00000000c0)={0x1, "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"}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1m29.736024866s ago: executing program 9 (id=12049): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32], 0x15) 1m24.175576075s ago: executing program 45 (id=12009): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ff9, 0x8, '9P2000.u'}, 0x15) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m14.655519011s ago: executing program 46 (id=12049): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32], 0x15) 5.234448395s ago: executing program 3 (id=12692): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) 4.981814312s ago: executing program 3 (id=12695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4.779370911s ago: executing program 3 (id=12697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x12, r2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.482849659s ago: executing program 3 (id=12700): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @local, 0xfff}, 0x1c) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81006e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) 4.288277418s ago: executing program 3 (id=12701): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000000)="ea", 0x1) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close(r1) 4.0526491s ago: executing program 3 (id=12704): r0 = fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x400) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 3.914982837s ago: executing program 2 (id=12705): mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x100, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file1\x00', 0x42, 0x0) 3.671134435s ago: executing program 2 (id=12707): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./bus\x00', r1, &(0x7f0000000140)='./file0\x00') fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, &(0x7f0000000000)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 3.639770714s ago: executing program 1 (id=12708): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a", 0xc2}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 3.46865664s ago: executing program 2 (id=12710): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) pipe2(&(0x7f00000000c0), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 3.39250604s ago: executing program 1 (id=12711): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xba98000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) 3.325941921s ago: executing program 2 (id=12713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0xfe, 0x0, 0x2a}, 0xe) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 3.218658938s ago: executing program 1 (id=12714): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) getdents(r2, &(0x7f0000000440)=""/4090, 0xffa) getdents(r2, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.929757798s ago: executing program 1 (id=12717): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)=""/73, 0x49}], 0x1}, 0x10000) 2.733986506s ago: executing program 1 (id=12719): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0x100000000, 0xffffffffffffffff}, 0x0, &(0x7f0000000240)={0x1f, 0x100000, 0x7, 0x0, 0x229c, 0x1, 0x800000000000000, 0x2}, &(0x7f0000000280), 0x0) 2.384359241s ago: executing program 1 (id=12720): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2.004273141s ago: executing program 2 (id=12721): fsopen(&(0x7f0000000000)='befs\x00', 0x1) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)='e', 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 1.807808579s ago: executing program 8 (id=12723): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = epoll_create1(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) 1.78587151s ago: executing program 2 (id=12724): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) 1.597609768s ago: executing program 8 (id=12725): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r1, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r2, 0x8000}], 0x1, 0x0, 0x0, 0x0) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 612.469637ms ago: executing program 8 (id=12726): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000001100)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x5}}}, &(0x7f0000000040)=0x84) sendto$inet6(r0, &(0x7f0000001200)='!', 0x1, 0x20000054, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f00000011c0)="020000000980ffff", 0x8) 442.974987ms ago: executing program 8 (id=12727): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 304.287204ms ago: executing program 8 (id=12728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 8 (id=12729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): e number 55 using dummy_hcd [ 1029.656330][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 1029.663495][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1029.673436][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1029.683889][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1029.697880][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1029.708329][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.721968][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1029.732428][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.950576][ T9] usb 10-1: usb_control_msg returned -32 [ 1029.959124][ T9] usbtmc 10-1:16.0: can't read capabilities [ 1030.463099][T32135] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11141'. [ 1030.537099][ T5908] usb 9-1: new full-speed USB device number 71 using dummy_hcd [ 1030.677892][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1030.690032][ T5908] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.702404][ T5908] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.721664][ T5908] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1030.731273][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1030.740619][ T5908] usb 9-1: Product: syz [ 1030.745006][ T5908] usb 9-1: Manufacturer: syz [ 1030.750134][ T5908] usb 9-1: SerialNumber: syz [ 1030.771104][ T5908] usb 9-1: 0:2 : does not exist [ 1030.838926][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1030.849872][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.860484][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.871588][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.882570][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.899945][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1030.911142][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.923934][T18027] usb 10-1: USB disconnect, device number 55 [ 1030.982115][ T5908] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1031.052899][ T5908] usb 9-1: USB disconnect, device number 71 [ 1031.104873][T21227] udevd[21227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.157078][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 1031.165058][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1031.361205][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.370376][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.379468][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.388632][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.408982][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.418160][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.427298][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.436417][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.481820][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.490999][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.500124][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.509256][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.581561][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.590745][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.599887][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.609025][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1031.630636][ T9] usb 3-1: USB disconnect, device number 62 [ 1031.828261][T32175] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1032.306186][T28158] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1032.478223][T28158] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1032.488439][T28158] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1032.498034][T28158] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1032.507863][T28158] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1032.516447][T28158] usb 10-1: Product: syz [ 1032.520958][T28158] usb 10-1: Manufacturer: syz [ 1032.525712][T28158] usb 10-1: SerialNumber: syz [ 1032.534000][T28158] usb 10-1: config 0 descriptor?? [ 1032.552438][T28158] usb 10-1: selecting invalid altsetting 0 [ 1032.686570][ T24] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1032.763618][T28158] usb 10-1: USB disconnect, device number 56 [ 1032.849317][ T24] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1032.869114][ T24] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1032.904032][ T24] usb 3-1: config 0 has no interface number 0 [ 1032.920333][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1032.930146][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.939140][ T24] usb 3-1: Product: syz [ 1032.943404][ T24] usb 3-1: Manufacturer: syz [ 1032.949466][ T24] usb 3-1: SerialNumber: syz [ 1032.961232][ T24] usb 3-1: config 0 descriptor?? [ 1033.375768][ T24] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1033.398897][ T24] uvcvideo 3-1:0.64: No valid video chain found. [ 1033.587989][ T24] usb 3-1: USB disconnect, device number 63 [ 1033.836505][T32224] sctp: [Deprecated]: syz.6.11180 (pid 32224) Use of int in max_burst socket option. [ 1033.836505][T32224] Use struct sctp_assoc_value instead [ 1034.060614][T32242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1034.067193][T32242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1034.077015][ T5917] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 1034.186223][T20696] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1034.274192][T32251] syzkaller1: entered promiscuous mode [ 1034.283763][T32251] syzkaller1: entered allmulticast mode [ 1034.385834][T20696] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1034.402130][T20696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 31, changing to 8 [ 1034.424295][T20696] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1034.448530][T20696] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1034.479086][T20696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.553798][T20696] usb 10-1: config 0 descriptor?? [ 1034.981093][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1034.993403][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.002286][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.011608][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.019477][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.027783][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.035273][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.043072][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.050655][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.058329][T20696] plantronics 0003:047F:FFFF.0084: unknown main item tag 0x0 [ 1035.072197][T20696] plantronics 0003:047F:FFFF.0084: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1035.616360][T20696] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1035.766726][T20696] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1035.777565][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.786790][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1035.798697][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.809147][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.819143][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1035.830355][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.838554][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.847818][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1035.860892][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.868929][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.878074][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1035.889194][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.897427][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.906567][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1035.918650][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.927583][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.936757][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1035.947823][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.955896][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.965045][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1035.976468][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1035.988895][T20696] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1035.997929][T20696] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1036.008949][T20696] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1036.020394][T20696] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1036.030131][T20696] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1036.039759][T20696] usb 3-1: Product: syz [ 1036.044152][T20696] usb 3-1: Manufacturer: syz [ 1036.049220][T20696] usb 3-1: SerialNumber: syz [ 1036.057182][T20696] usb 3-1: config 0 descriptor?? [ 1036.074298][T20696] yurex 3-1:0.0: USB YUREX device now attached to Yurex #1 [ 1036.313094][T20696] usb 3-1: USB disconnect, device number 64 [ 1036.336961][T20696] yurex 3-1:0.0: USB YUREX #1 now disconnected [ 1036.364272][T32285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11206'. [ 1036.378414][T32285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11206'. [ 1036.520352][ T5161] Bluetooth: hci3: command 0x0406 tx timeout [ 1036.894629][T32292] netlink: 'syz.8.11208': attribute type 39 has an invalid length. [ 1036.903947][T32293] netlink: 'syz.2.11207': attribute type 9 has an invalid length. [ 1036.912414][T32293] netlink: 'syz.2.11207': attribute type 11 has an invalid length. [ 1036.921059][T32293] netlink: 'syz.2.11207': attribute type 12 has an invalid length. [ 1036.931120][T32293] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.11207'. [ 1037.138319][T32299] lo speed is unknown, defaulting to 1000 [ 1037.444810][ T9] usb 10-1: USB disconnect, device number 57 [ 1037.503558][T32312] syzkaller1: entered promiscuous mode [ 1037.526434][T32312] syzkaller1: entered allmulticast mode [ 1037.613638][T32314] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11225'. [ 1037.811519][T32316] ./file0: Can't open blockdev [ 1038.038465][T32319] ./file0: Can't open blockdev [ 1038.129767][T32334] netlink: 176 bytes leftover after parsing attributes in process `syz.8.11222'. [ 1039.696452][T18027] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1039.858166][T18027] usb 3-1: Using ep0 maxpacket: 8 [ 1039.874747][T18027] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1039.902391][T18027] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1039.933358][T18027] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.971012][T18027] usb 3-1: config 0 descriptor?? [ 1040.203913][T18027] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1040.246715][ T5908] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1040.408534][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.419716][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.430454][ T5908] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1040.440390][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.451837][ T5908] usb 9-1: config 0 descriptor?? [ 1040.664136][T20696] usb 3-1: USB disconnect, device number 65 [ 1040.867072][ T5908] cp2112 0003:10C4:EA90.0085: global environment stack underflow [ 1040.875004][ T5908] cp2112 0003:10C4:EA90.0085: item 0 2 1 11 parsing failed [ 1040.883434][ T5908] cp2112 0003:10C4:EA90.0085: parse failed [ 1040.889619][ T5908] cp2112 0003:10C4:EA90.0085: probe with driver cp2112 failed with error -22 [ 1041.082600][ T9] usb 9-1: USB disconnect, device number 72 [ 1041.301068][T32422] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1041.319344][T32422] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1041.448411][T32427] netlink: 1343 bytes leftover after parsing attributes in process `syz.9.11263'. [ 1041.672892][T32433] could not open pipe file descriptor [ 1041.896390][T28158] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1042.058671][T28158] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1042.068435][T28158] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.080869][T28158] usb 9-1: config 0 descriptor?? [ 1042.089892][T28158] cp210x 9-1:0.0: cp210x converter detected [ 1042.462120][T32445] syzkaller1: entered promiscuous mode [ 1042.467860][T32445] syzkaller1: entered allmulticast mode [ 1042.501152][T28158] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1042.521740][T32447] overlayfs: failed to clone upperpath [ 1042.528620][T28158] cp210x 9-1:0.0: GPIO initialisation failed: -524 [ 1042.549959][T28158] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1042.670607][ T5161] Bluetooth: hci5: sending frame failed (-49) [ 1042.680295][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 1042.757733][ T5908] usb 9-1: USB disconnect, device number 73 [ 1042.779785][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1042.790748][ T5908] cp210x 9-1:0.0: device disconnected [ 1043.480458][ T5161] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 1043.631316][T32473] netlink: 'syz.6.11285': attribute type 3 has an invalid length. [ 1044.897837][ T5908] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1045.058019][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.071414][ T5908] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.081834][ T5908] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1045.095226][ T5908] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1045.104691][ T5908] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.118321][ T5908] usb 9-1: config 0 descriptor?? [ 1045.477254][ T5161] Bluetooth: hci5: command 0x1003 tx timeout [ 1045.488748][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1045.575651][ T5908] plantronics 0003:047F:FFFF.0086: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1046.245190][ T143] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 1046.399755][T18027] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1046.563846][T32555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11315'. [ 1046.577298][T18027] usb 10-1: Using ep0 maxpacket: 8 [ 1046.587775][T18027] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1046.606758][T18027] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1046.617649][T18027] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1046.634518][T18027] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.649544][T18027] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1046.659938][T18027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.891287][T18027] usb 10-1: GET_CAPABILITIES returned 0 [ 1046.897951][T18027] usbtmc 10-1:16.0: can't read capabilities [ 1046.996001][T32571] netlink: 1335 bytes leftover after parsing attributes in process `syz.6.11324'. [ 1047.168777][ T24] usb 10-1: USB disconnect, device number 58 [ 1047.431037][T32589] netlink: 176 bytes leftover after parsing attributes in process `syz.8.11331'. [ 1047.449960][T32589] netlink: 176 bytes leftover after parsing attributes in process `syz.8.11331'. [ 1047.617981][T20696] usb 9-1: USB disconnect, device number 74 [ 1047.727747][ T5917] Bluetooth: (null): Invalid header checksum [ 1047.817136][T18360] Bluetooth: (null): Invalid header checksum [ 1047.928920][ T143] Bluetooth: (null): Invalid header checksum [ 1048.036963][ T5917] Bluetooth: (null): Invalid header checksum [ 1048.147720][T18360] Bluetooth: (null): Invalid header checksum [ 1048.260084][ T143] Bluetooth: (null): Invalid header checksum [ 1048.368637][ T5917] Bluetooth: (null): Invalid header checksum [ 1048.477539][ T5917] Bluetooth: (null): Invalid header checksum [ 1048.571202][T32598] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1048.580274][T32598] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1048.593771][T32598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1048.600541][T32598] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1048.608213][T32598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1048.615191][T32598] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1048.628697][T32598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1048.634742][T32598] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1048.710609][ T5847] Bluetooth: hci0: unexpected event for opcode 0x043d [ 1049.421995][T32658] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1049.433282][T32658] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1049.459872][T32658] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1049.469036][T32658] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1049.478134][T32658] overlayfs: d_ino too big (1086, ino=9223372036854781471, xinobits=3) [ 1049.487308][T32658] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1049.496832][T32658] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1049.510529][T32658] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1049.519277][T32658] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1049.530234][T32658] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1049.541550][T32658] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1049.553227][T32658] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1049.602709][T32662] netlink: 56 bytes leftover after parsing attributes in process `syz.6.11359'. [ 1049.799011][ T5161] Bluetooth: hci4: command 0x0406 tx timeout [ 1050.676281][ T5161] Bluetooth: hci3: command 0x0406 tx timeout [ 1050.683288][ T5161] Bluetooth: hci2: command 0x0406 tx timeout [ 1050.709672][ T29] audit: type=1326 audit(1773696280.411:7123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.8.11375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55f899c799 code=0x0 [ 1050.946808][ T29] audit: type=1326 audit(1773696280.651:7124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32705 comm="syz.6.11376" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f136479c799 code=0x0 [ 1051.082294][ T5847] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1051.877580][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 1051.881652][T32738] netlink: 1335 bytes leftover after parsing attributes in process `syz.9.11389'. [ 1052.221166][T32757] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11395'. [ 1052.556475][T18027] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1052.586645][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1052.751884][T18027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.763306][ T5847] Bluetooth: hci2: command 0x0406 tx timeout [ 1052.763321][ T5161] Bluetooth: hci3: command 0x0406 tx timeout [ 1052.770138][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.797530][T18027] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.809348][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1052.820062][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.829561][T18027] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1052.841472][T18027] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1052.855517][ T9] usb 3-1: config 0 descriptor?? [ 1052.872076][T18027] usb 9-1: Manufacturer: syz [ 1052.887050][T18027] usb 9-1: config 0 descriptor?? [ 1053.078606][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1053.087599][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1053.102685][ T9] usb 3-1: USB disconnect, device number 66 [ 1053.536507][T20696] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1053.696193][T20696] usb 3-1: Using ep0 maxpacket: 32 [ 1053.705090][T20696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.718606][T20696] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1053.729872][T18027] uclogic 0003:256C:006D.0087: interface is invalid, ignoring [ 1053.741365][T20696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.754594][T18027] usb 9-1: USB disconnect, device number 75 [ 1053.762586][T20696] usb 3-1: config 0 descriptor?? [ 1053.799409][T20696] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1053.821469][T20696] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1054.246703][T20696] usb 3-1: USB disconnect, device number 67 [ 1054.263861][T20696] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1054.567257][T28158] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1054.728208][T28158] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.738894][T28158] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1054.749136][T28158] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1054.759598][T28158] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1054.768374][T28158] usb 9-1: SerialNumber: syz [ 1054.926842][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.989459][T28158] usb 9-1: 0:2 : does not exist [ 1055.069364][T28158] usb 9-1: USB disconnect, device number 76 [ 1055.132201][T21227] udevd[21227]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1055.152099][ T5908] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1055.281240][ T363] overlayfs: failed to clone upperpath [ 1055.306289][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 1055.314283][ T5908] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1055.329554][ T5908] usb 3-1: config 0 has no interface number 0 [ 1055.340841][ T5908] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1055.351058][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.359298][ T5908] usb 3-1: Product: syz [ 1055.363538][ T5908] usb 3-1: Manufacturer: syz [ 1055.368366][ T5908] usb 3-1: SerialNumber: syz [ 1055.377092][ T5908] usb 3-1: config 0 descriptor?? [ 1055.805017][ T5908] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1055.822534][ T5908] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1056.336280][ T24] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1056.446238][ T5908] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1056.466764][ T5908] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 1056.483176][ T5908] usb 3-1: USB disconnect, device number 68 [ 1056.528989][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1056.537841][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11449'. [ 1056.547182][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11449'. [ 1056.560664][ T24] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1056.570732][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.586654][ T24] usb 9-1: Product: syz [ 1056.596515][ T24] usb 9-1: Manufacturer: syz [ 1056.607348][ T24] usb 9-1: SerialNumber: syz [ 1056.629502][ T24] usb 9-1: config 0 descriptor?? [ 1056.857123][ T24] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1056.906324][ T5908] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1057.068654][ T5908] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1057.088905][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1057.100545][ T5908] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1057.111154][ T5908] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1057.130284][ T5908] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1057.141551][ T5908] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1057.152784][ T5908] usb 10-1: Manufacturer: syz [ 1057.162213][ T5908] usb 10-1: config 0 descriptor?? [ 1057.595276][ T5908] hid_parser_main: 5 callbacks suppressed [ 1057.595302][ T5908] appleir 0003:05AC:8243.0088: unknown main item tag 0x0 [ 1057.621461][ T5908] appleir 0003:05AC:8243.0088: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 1057.869350][ T24] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1057.890674][ T24] usb 9-1: USB disconnect, device number 77 [ 1058.130013][ T438] 9pnet: p9_errstr2errno: server reported unknown error  [ 1059.419323][ T489] overlayfs: failed to clone upperpath [ 1059.670932][T20696] usb 10-1: USB disconnect, device number 59 [ 1059.979156][ T511] netlink: 'syz.8.11484': attribute type 1 has an invalid length. [ 1061.142036][ T549] netlink: 'syz.8.11500': attribute type 9 has an invalid length. [ 1061.153853][ T549] netlink: 'syz.8.11500': attribute type 11 has an invalid length. [ 1061.163070][ T549] netlink: 'syz.8.11500': attribute type 12 has an invalid length. [ 1061.172026][ T549] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.11500'. [ 1061.181857][ T549] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11500'. [ 1062.715866][ T587] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 1062.734694][ T587] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1063.096292][T28158] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1063.278576][T28158] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1063.290492][T28158] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1063.301350][T28158] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1063.311121][T28158] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.327188][ T594] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1063.340651][T28158] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1063.545152][T28158] usb 9-1: USB disconnect, device number 78 [ 1065.499299][ T680] fuse: fd is not a fuse device [ 1065.696537][ T5908] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1065.796356][T28158] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1065.851040][ T5908] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.862735][ T5908] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1065.873655][ T5908] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.890806][ T5908] usb 10-1: config 0 descriptor?? [ 1065.914074][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 1065.966159][T28158] usb 9-1: Using ep0 maxpacket: 32 [ 1065.975449][T28158] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.996169][T28158] usb 9-1: config 0 has no interfaces? [ 1066.010779][T28158] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1066.020071][T28158] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.028863][T28158] usb 9-1: Product: syz [ 1066.033102][T28158] usb 9-1: Manufacturer: syz [ 1066.037849][T28158] usb 9-1: SerialNumber: syz [ 1066.048127][T28158] usb 9-1: config 0 descriptor?? [ 1066.313927][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1066.330382][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 1066.343390][ T5928] usb 9-1: USB disconnect, device number 79 [ 1066.353277][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1066.563098][ T5908] pwc: recv_control_msg error -71 req 04 val 1300 [ 1066.580331][ T5908] pwc: recv_control_msg error -71 req 04 val 1400 [ 1066.591373][ T5908] pwc: recv_control_msg error -71 req 02 val 2000 [ 1066.606614][ T5908] pwc: recv_control_msg error -71 req 02 val 2100 [ 1066.617585][ T5908] pwc: recv_control_msg error -71 req 04 val 1500 [ 1066.628950][ T5908] pwc: recv_control_msg error -71 req 02 val 2500 [ 1066.646224][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 1066.654960][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 1066.663746][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 1066.676786][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 1066.684008][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 1066.693990][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 1066.707982][ T5908] pwc: Registered as video103. [ 1066.731574][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input139 [ 1066.766201][ T5908] usb 10-1: USB disconnect, device number 60 [ 1066.985154][ T29] audit: type=1326 audit(1773696296.681:7125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.035219][ T29] audit: type=1326 audit(1773696296.681:7126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.060597][ T29] audit: type=1326 audit(1773696296.701:7127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.090328][ T29] audit: type=1326 audit(1773696296.711:7128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.115808][ T29] audit: type=1326 audit(1773696296.711:7129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.176124][ T29] audit: type=1326 audit(1773696296.711:7130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.235790][ T29] audit: type=1326 audit(1773696296.711:7131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.273355][ T29] audit: type=1326 audit(1773696296.711:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.317218][ T29] audit: type=1326 audit(1773696296.711:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.341879][ T29] audit: type=1326 audit(1773696296.711:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=694 comm="syz.6.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f136479c799 code=0x7ffc0000 [ 1067.450757][ T705] netlink: 'syz.8.11567': attribute type 1 has an invalid length. [ 1067.473754][ T705] netlink: 16110 bytes leftover after parsing attributes in process `syz.8.11567'. [ 1067.568233][ T711] netlink: 'syz.8.11570': attribute type 9 has an invalid length. [ 1067.586251][ T711] netlink: 'syz.8.11570': attribute type 11 has an invalid length. [ 1067.594295][ T711] netlink: 'syz.8.11570': attribute type 12 has an invalid length. [ 1067.614470][ T711] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.11570'. [ 1067.625320][ T711] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11570'. [ 1068.566238][T20696] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1068.718631][T20696] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1068.732106][T20696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1068.743658][T20696] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1068.755045][T20696] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1068.772622][T20696] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1068.788112][T20696] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.801231][T20696] usb 10-1: config 0 descriptor?? [ 1069.091774][ T746] netlink: 19 bytes leftover after parsing attributes in process `syz.6.11586'. [ 1069.226515][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.233999][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.244077][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.252051][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.259714][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.267479][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.274932][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.282442][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.290037][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.297538][T20696] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1069.312876][T20696] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1069.507988][T20696] usb 10-1: USB disconnect, device number 61 [ 1070.575511][ T764] netlink: 'syz.9.11593': attribute type 1 has an invalid length. [ 1070.596492][ T764] netlink: 'syz.9.11593': attribute type 4 has an invalid length. [ 1070.616121][ T764] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.11593'. [ 1070.741750][ T766] netlink: 'syz.9.11594': attribute type 4 has an invalid length. [ 1070.768936][ T766] netlink: 'syz.9.11594': attribute type 4 has an invalid length. [ 1070.968813][ T771] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11596'. [ 1070.987516][ T771] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11596'. [ 1071.165809][ T776] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11598'. [ 1071.300236][ T780] netlink: 'syz.9.11600': attribute type 3 has an invalid length. [ 1071.431535][ T784] sctp: [Deprecated]: syz.9.11602 (pid 784) Use of int in max_burst socket option. [ 1071.431535][ T784] Use struct sctp_assoc_value instead [ 1072.644351][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1072.662472][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1072.679814][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1072.692992][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1072.701940][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1072.758333][ T801] lo speed is unknown, defaulting to 1000 [ 1073.174643][ T801] chnl_net:caif_netlink_parms(): no params data found [ 1073.215218][ T816] fuse: fd is not a fuse device [ 1073.359098][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.366974][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.374451][ T801] bridge_slave_0: entered allmulticast mode [ 1073.384098][ T801] bridge_slave_0: entered promiscuous mode [ 1073.396303][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.403814][ T801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.415987][ T801] bridge_slave_1: entered allmulticast mode [ 1073.425205][ T801] bridge_slave_1: entered promiscuous mode [ 1073.516503][ T801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.531527][ T801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.577352][ T801] team0: Port device team_slave_0 added [ 1073.588186][ T801] team0: Port device team_slave_1 added [ 1073.627831][ T801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.634825][ T801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.661096][ T801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.675158][ T801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.683663][ T801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1073.710881][ T801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.774208][ T801] hsr_slave_0: entered promiscuous mode [ 1073.781962][ T801] hsr_slave_1: entered promiscuous mode [ 1073.789971][ T801] debugfs: 'hsr0' already exists in 'hsr' [ 1073.795745][ T801] Cannot create hsr debugfs directory [ 1074.020366][ T801] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.168490][ T801] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.422131][ T801] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.569326][ T801] team0: Port device netdevsim0 removed [ 1074.580534][ T801] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.768818][ T5847] Bluetooth: hci5: command tx timeout [ 1074.884741][ T801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1074.898474][ T801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1074.913746][ T801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1074.927969][ T801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1075.094993][ T801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.141477][ T801] 8021q: adding VLAN 0 to HW filter on device team0 [ 1075.180515][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.187733][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1075.231662][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.238933][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.622225][ T801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.756354][T18027] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1075.917824][T18027] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1075.935723][T18027] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.952552][T18027] usb 10-1: config 220 has no interface number 2 [ 1075.969457][T18027] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1075.983831][T18027] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1075.991221][T18027] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1075.999051][T18027] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1076.009500][T18027] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1076.019224][T18027] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.051790][T18027] usb 10-1: Product: syz [ 1076.073468][T18027] usb 10-1: Manufacturer: syz [ 1076.073974][ T801] veth0_vlan: entered promiscuous mode [ 1076.083847][T18027] usb 10-1: SerialNumber: syz [ 1076.128181][ T801] veth1_vlan: entered promiscuous mode [ 1076.253496][ T801] veth0_macvtap: entered promiscuous mode [ 1076.322854][T18027] usb 10-1: selecting invalid altsetting 0 [ 1076.332303][ T801] veth1_macvtap: entered promiscuous mode [ 1076.352362][T18027] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1076.403171][T18027] uvcvideo 10-1:220.0: No valid video chain found. [ 1076.426639][T18027] usb 10-1: selecting invalid altsetting 0 [ 1076.432685][T18027] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1076.448721][T18027] usb 10-1: USB disconnect, device number 62 [ 1076.475762][ T801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1076.513952][ T801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1076.552232][T30783] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.567156][T30783] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.580379][T30783] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.590901][T30783] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1076.828058][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.838514][ T5847] Bluetooth: hci5: command tx timeout [ 1076.854597][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1076.920603][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1076.940510][ T900] netlink: 642 bytes leftover after parsing attributes in process `syz.6.11638'. [ 1076.950171][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1077.117912][ T904] kvm: kvm [903]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 1077.127050][ T904] kvm: kvm [903]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 1078.154516][ T961] tipc: Enabled bearer , priority 0 [ 1078.163240][ T961] tipc: Enabling of bearer rejected, already enabled [ 1078.196352][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 1078.490468][ T976] input: syz1 as /devices/virtual/input/input140 [ 1078.916422][ T5847] Bluetooth: hci5: command tx timeout [ 1079.069816][ T996] netlink: 'syz.9.11672': attribute type 9 has an invalid length. [ 1079.082384][ T996] netlink: 'syz.9.11672': attribute type 11 has an invalid length. [ 1079.091075][ T996] netlink: 'syz.9.11672': attribute type 12 has an invalid length. [ 1079.099357][ T996] netlink: 210020 bytes leftover after parsing attributes in process `syz.9.11672'. [ 1079.109789][ T996] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11672'. [ 1079.266218][ T9] tipc: Node number set to 3758096385 [ 1079.377135][ T1008] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1080.287718][ T5161] Bluetooth: hci4: command 0x0406 tx timeout [ 1080.549316][ T13] bridge_slave_1: left allmulticast mode [ 1080.555053][ T13] bridge_slave_1: left promiscuous mode [ 1080.564232][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.574089][ T13] bridge_slave_0: left allmulticast mode [ 1080.581786][ T13] bridge_slave_0: left promiscuous mode [ 1080.589281][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.892861][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.909399][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.920959][ T13] bond0 (unregistering): Released all slaves [ 1080.948453][ T1052] syzkaller1: entered promiscuous mode [ 1080.954087][ T1052] syzkaller1: entered allmulticast mode [ 1081.008708][ T5161] Bluetooth: hci5: command tx timeout [ 1081.459177][ T1068] lo speed is unknown, defaulting to 1000 [ 1081.749572][ T13] hsr_slave_0: left promiscuous mode [ 1081.770259][ T13] hsr_slave_1: left promiscuous mode [ 1081.782125][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.790039][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.821189][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.835823][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.857256][ T13] veth1_macvtap: left promiscuous mode [ 1081.868647][ T13] veth0_macvtap: left promiscuous mode [ 1081.874889][ T13] veth1_vlan: left promiscuous mode [ 1081.884812][ T13] veth0_vlan: left promiscuous mode [ 1082.443040][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1082.478223][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1083.467960][ T5847] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1083.490349][ T5847] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1083.500013][ T5847] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1083.510178][ T5847] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1083.519392][ T5847] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1083.608596][ T1111] lo speed is unknown, defaulting to 1000 [ 1084.196247][T28158] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1084.363851][T28158] usb 5-1: Using ep0 maxpacket: 16 [ 1084.381873][T28158] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1084.400038][T28158] usb 5-1: string descriptor 0 read error: -22 [ 1084.410461][T28158] usb 5-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 1084.432643][T28158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.540886][ T1111] chnl_net:caif_netlink_parms(): no params data found [ 1084.689924][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.697471][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.704816][ T1111] bridge_slave_0: entered allmulticast mode [ 1084.714901][ T1111] bridge_slave_0: entered promiscuous mode [ 1084.724734][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.732514][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1084.740044][ T1111] bridge_slave_1: entered allmulticast mode [ 1084.749043][ T1111] bridge_slave_1: entered promiscuous mode [ 1084.801487][ T1111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.817300][ T1111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.868305][ T1111] team0: Port device team_slave_0 added [ 1084.873178][T28158] hid (null): invalid report_count 463869145 [ 1084.882987][ T1111] team0: Port device team_slave_1 added [ 1084.922806][ T1111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1084.930130][ T1111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.957761][ T1111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.972840][ T1111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.980013][ T1111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1084.992239][T28158] thrustmaster 0003:044F:B320.008A: invalid report_count 463869145 [ 1085.006606][ T1111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1085.031025][T28158] thrustmaster 0003:044F:B320.008A: item 0 4 1 9 parsing failed [ 1085.041210][T28158] thrustmaster 0003:044F:B320.008A: parse failed [ 1085.047838][T28158] thrustmaster 0003:044F:B320.008A: probe with driver thrustmaster failed with error -22 [ 1085.097661][T28158] usb 5-1: USB disconnect, device number 48 [ 1085.119307][ T1111] hsr_slave_0: entered promiscuous mode [ 1085.128162][ T1111] hsr_slave_1: entered promiscuous mode [ 1085.138316][ T1111] debugfs: 'hsr0' already exists in 'hsr' [ 1085.144173][ T1111] Cannot create hsr debugfs directory [ 1085.642558][ T5161] Bluetooth: hci6: command tx timeout [ 1086.691123][ T1111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1086.730604][ T1111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1086.764792][ T1111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1086.793015][ T1111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1087.015724][ T1111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.088609][ T1111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.115423][T18360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.122670][T18360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.149844][T18360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.157057][T18360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.695108][ T1111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.716240][ T5161] Bluetooth: hci6: command tx timeout [ 1088.397513][ T1257] overlayfs: statfs failed on './file0' [ 1088.477131][ T1111] veth0_vlan: entered promiscuous mode [ 1088.558933][ T1111] veth1_vlan: entered promiscuous mode [ 1088.724672][ T1111] veth0_macvtap: entered promiscuous mode [ 1088.764589][ T1111] veth1_macvtap: entered promiscuous mode [ 1088.815258][ T1111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.850592][ T1111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.910740][ T1054] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.939362][ T1054] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.965066][ T1054] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.996538][ T1054] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.255290][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.280873][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.355774][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1089.380424][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1089.796524][ T5161] Bluetooth: hci6: command tx timeout [ 1091.876360][ T5161] Bluetooth: hci6: command tx timeout [ 1092.520762][ T1374] netlink: 64 bytes leftover after parsing attributes in process `syz.9.11764'. [ 1092.804551][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1092.817716][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1092.831230][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1092.852165][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1092.865645][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1092.911066][ T1387] netlink: 'syz.4.11768': attribute type 9 has an invalid length. [ 1092.921420][ T1387] netlink: 'syz.4.11768': attribute type 11 has an invalid length. [ 1092.940593][ T1387] netlink: 'syz.4.11768': attribute type 12 has an invalid length. [ 1092.962642][ T1387] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.11768'. [ 1092.999863][ T1387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11768'. [ 1093.002473][ T1380] lo speed is unknown, defaulting to 1000 [ 1093.613309][ T1410] Invalid ELF header magic: != ELF [ 1093.788135][T28158] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1093.966947][T28158] usb 10-1: Using ep0 maxpacket: 32 [ 1093.990960][T28158] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1094.028499][T28158] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1094.053705][T28158] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1094.069625][T28158] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.083995][ T1380] chnl_net:caif_netlink_parms(): no params data found [ 1094.105951][T28158] usb 10-1: config 0 descriptor?? [ 1094.309066][ T1380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.316764][ T1380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.324220][ T1380] bridge_slave_0: entered allmulticast mode [ 1094.334019][ T1380] bridge_slave_0: entered promiscuous mode [ 1094.349559][ T1380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.359328][ T1380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.368354][ T1380] bridge_slave_1: entered allmulticast mode [ 1094.380026][ T1380] bridge_slave_1: entered promiscuous mode [ 1094.478884][ T1380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.504759][ T1380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.578265][ T1380] team0: Port device team_slave_0 added [ 1094.593500][ T1380] team0: Port device team_slave_1 added [ 1094.619270][T28158] savu 0003:1E7D:2D5A.008B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 1094.727451][ T1380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.747601][ T1380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.805576][ T1380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.828562][ T1380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.835583][ T1380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.906196][ T1380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1094.917862][T28158] usb 10-1: USB disconnect, device number 63 [ 1094.997677][ T5161] Bluetooth: hci7: command tx timeout [ 1095.118583][ T1380] hsr_slave_0: entered promiscuous mode [ 1095.127152][ T1380] hsr_slave_1: entered promiscuous mode [ 1095.139231][ T1380] debugfs: 'hsr0' already exists in 'hsr' [ 1095.155386][ T1380] Cannot create hsr debugfs directory [ 1095.271897][ T1454] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11781'. [ 1096.944438][ T1380] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1096.972469][ T1380] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1097.025237][ T1380] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1097.046809][ T1507] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1097.078166][ T5161] Bluetooth: hci7: command tx timeout [ 1097.084669][ T1380] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1097.379222][ T1380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.442799][ T1380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.473704][T30783] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.481052][T30783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.528876][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.536232][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.320706][ T1380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.386553][ T9462] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1098.511332][ T1380] veth0_vlan: entered promiscuous mode [ 1098.550913][ T9462] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1098.564951][ T1380] veth1_vlan: entered promiscuous mode [ 1098.578110][ T9462] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.614918][ T9462] usb 10-1: config 0 descriptor?? [ 1098.736429][ T1380] veth0_macvtap: entered promiscuous mode [ 1098.755653][ T1380] veth1_macvtap: entered promiscuous mode [ 1098.810525][ T1380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.835735][ T1380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.866781][ T1054] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.880937][ T1054] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.895717][ T1054] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.908077][ T1054] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.157602][ T5161] Bluetooth: hci7: command tx timeout [ 1099.205631][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.227199][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.273471][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.282445][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.525975][ T1581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1099.865489][ T9462] usb 10-1: Cannot set autoneg [ 1099.887025][ T9462] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1099.912218][ T9462] usb 10-1: USB disconnect, device number 64 [ 1101.237235][ T5161] Bluetooth: hci7: command tx timeout [ 1101.374028][ T1647] "syz.0.11827" (1647) uses obsolete ecb(arc4) skcipher [ 1101.385577][ T1655] netlink: 'syz.9.11828': attribute type 4 has an invalid length. [ 1101.436383][ T1655] netlink: 'syz.9.11828': attribute type 4 has an invalid length. [ 1102.344756][ T1683] netlink: 9872 bytes leftover after parsing attributes in process `syz.9.11833'. [ 1103.220303][ T9462] IPVS: starting estimator thread 0... [ 1103.327290][ T1724] IPVS: using max 26 ests per chain, 62400 per kthread [ 1103.371286][ T1729] netlink: 'syz.4.11846': attribute type 9 has an invalid length. [ 1103.390600][ T1729] netlink: 'syz.4.11846': attribute type 11 has an invalid length. [ 1103.415864][ T1729] netlink: 'syz.4.11846': attribute type 12 has an invalid length. [ 1103.440910][ T1729] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.11846'. [ 1103.452834][ T1729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11846'. [ 1104.294546][ T1760] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11853'. [ 1104.583592][ T5161] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1104.790912][ T1779] TCP: TCP_TX_DELAY enabled [ 1104.846183][ T9462] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1104.871731][ T42] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1104.923027][ T5847] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1104.948656][ T5847] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1104.962914][ T5847] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1104.978228][ T5847] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1104.994025][ T5847] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1105.026486][ T9462] usb 10-1: Using ep0 maxpacket: 8 [ 1105.035318][ T9462] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1105.056996][ T42] usb 1-1: Using ep0 maxpacket: 8 [ 1105.074999][ T42] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1105.086717][ T9462] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1105.115870][ T1785] netlink: 'syz.4.11860': attribute type 3 has an invalid length. [ 1105.128207][ T42] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1105.140956][ T1781] lo speed is unknown, defaulting to 1000 [ 1105.146860][ T9462] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.173585][ T42] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1105.196636][ T9462] usb 10-1: config 0 descriptor?? [ 1105.220750][ T42] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1105.254333][ T42] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1105.288333][ T42] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1105.308018][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.441239][ T9462] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1105.550812][ T42] usb 1-1: usb_control_msg returned -32 [ 1105.559995][ T42] usbtmc 1-1:16.0: can't read capabilities [ 1105.871637][ T9462] usb 10-1: USB disconnect, device number 65 [ 1106.213691][ T1781] chnl_net:caif_netlink_parms(): no params data found [ 1106.410295][ T1781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.418072][ T1781] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.425631][ T1781] bridge_slave_0: entered allmulticast mode [ 1106.452535][ T1781] bridge_slave_0: entered promiscuous mode [ 1106.478605][ T1781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.492022][ T1781] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.508458][ T1781] bridge_slave_1: entered allmulticast mode [ 1106.527222][ T1781] bridge_slave_1: entered promiscuous mode [ 1107.076323][ T5847] Bluetooth: hci8: command tx timeout [ 1107.107215][ T1781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.138504][ T1781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1107.203750][ T1781] team0: Port device team_slave_0 added [ 1107.228456][ T1781] team0: Port device team_slave_1 added [ 1107.345409][ T1781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.352724][ T1781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.430100][ T1781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.466368][ T1781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.486096][ T1781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1107.551691][ T1781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.729303][ T9462] usb 1-1: USB disconnect, device number 72 [ 1107.889560][ T1781] hsr_slave_0: entered promiscuous mode [ 1107.910969][ T1781] hsr_slave_1: entered promiscuous mode [ 1107.935163][ T1781] debugfs: 'hsr0' already exists in 'hsr' [ 1107.952315][ T1781] Cannot create hsr debugfs directory [ 1109.156270][ T5847] Bluetooth: hci8: command tx timeout [ 1111.240081][ T5847] Bluetooth: hci8: command tx timeout [ 1111.510456][ T1781] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1111.573995][ T1781] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1111.623632][ T1781] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1111.677859][ T1781] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1112.163486][ T1781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.243789][ T1781] 8021q: adding VLAN 0 to HW filter on device team0 [ 1112.282590][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.289886][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.344833][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.352113][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.866202][ T896] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1112.943409][ T1781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.034269][ T896] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1113.068817][ T896] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1113.082331][ T896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1113.100041][ T896] usb 1-1: Product: syz [ 1113.113054][ T896] usb 1-1: Manufacturer: syz [ 1113.129842][ T896] usb 1-1: SerialNumber: syz [ 1113.316342][ T5161] Bluetooth: hci8: command tx timeout [ 1113.354671][ T896] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 73 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1113.501443][ T1781] veth0_vlan: entered promiscuous mode [ 1113.528023][ T1781] veth1_vlan: entered promiscuous mode [ 1113.608278][ T1781] veth0_macvtap: entered promiscuous mode [ 1113.626896][ T1781] veth1_macvtap: entered promiscuous mode [ 1113.690022][ T1781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1113.724755][ T1781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.773555][ T1054] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.787351][ T1054] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.806670][ T1054] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.856975][ T1054] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.190691][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.222555][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.319935][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.328196][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1116.364870][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.545450][ T2057] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1116.558518][ T2057] syzkaller1: Refused to change device type [ 1117.107033][ T896] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1117.218442][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1117.226208][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1117.278873][ T896] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.312151][ T896] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1117.341192][ T896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1117.359844][ T896] usb 10-1: Product: syz [ 1117.364288][ T896] usb 10-1: Manufacturer: syz [ 1117.369149][ T896] usb 10-1: SerialNumber: syz [ 1117.487429][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1117.493938][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1117.591324][ T896] usblp 10-1:1.0: usblp1: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1118.007349][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1118.020535][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1118.035330][ T2083] ceph: No mds server is up or the cluster is laggy [ 1119.099972][ T24] IPVS: starting estimator thread 0... [ 1119.198779][ T2144] IPVS: using max 28 ests per chain, 67200 per kthread [ 1119.861740][ T9462] usb 10-1: USB disconnect, device number 66 [ 1119.893918][ T9462] usblp1: removed [ 1120.262067][ T9] usb 1-1: USB disconnect, device number 73 [ 1120.292015][ T9] usblp0: removed [ 1120.714442][ T2208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1120.727243][ T2208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11931'. [ 1123.286689][ T2259] netlink: 'syz.0.11953': attribute type 9 has an invalid length. [ 1123.294667][ T2259] netlink: 'syz.0.11953': attribute type 11 has an invalid length. [ 1123.304956][ T2259] netlink: 'syz.0.11953': attribute type 12 has an invalid length. [ 1123.313446][ T2259] netlink: 210020 bytes leftover after parsing attributes in process `syz.0.11953'. [ 1123.323772][ T2259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11953'. [ 1123.617605][ T2270] netlink: 566 bytes leftover after parsing attributes in process `syz.9.11958'. [ 1123.679423][ T2272] netlink: 'syz.0.11959': attribute type 1 has an invalid length. [ 1123.692384][ T2272] netlink: 'syz.0.11959': attribute type 4 has an invalid length. [ 1123.700852][ T2272] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.11959'. [ 1124.032420][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1124.032440][ T29] audit: type=1804 audit(1773696353.731:7154): pid=2291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.11967" name="/newroot/64/file1" dev="tmpfs" ino=359 res=1 errno=0 [ 1124.785013][ T9462] libceph: connect (1)[c::]:6789 error -101 [ 1124.791737][ T9462] libceph: mon0 (1)[c::]:6789 connect error [ 1124.848368][ T2318] ceph: No mds server is up or the cluster is laggy [ 1125.196369][T18027] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1125.319059][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1125.346211][T18027] usb 10-1: Using ep0 maxpacket: 32 [ 1125.353504][T18027] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1125.363418][T18027] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1125.372196][T18027] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1125.381368][T18027] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1125.391387][T18027] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1125.403407][T18027] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1125.417985][T18027] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1125.427248][T18027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.437703][T18027] usb 10-1: config 0 descriptor?? [ 1125.492878][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.503995][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1125.514587][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.525519][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.536785][ T2333] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1125.552479][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1125.667445][T18027] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1125.691011][T18027] usb 10-1: USB disconnect, device number 67 [ 1125.712051][T18027] usblp0: removed [ 1125.758952][ T24] usb 1-1: USB disconnect, device number 74 [ 1126.176134][T18027] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1126.347533][T18027] usb 10-1: Using ep0 maxpacket: 32 [ 1126.354984][T18027] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 1126.364742][T18027] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1126.373625][T18027] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1126.382816][T18027] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1126.392984][T18027] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1126.402829][T18027] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1126.416293][T18027] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1126.425465][T18027] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.439297][T18027] usb 10-1: config 0 descriptor?? [ 1126.654945][T18027] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 68 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1127.230005][ T42] usb 10-1: USB disconnect, device number 68 [ 1127.248785][ T42] usblp0: removed [ 1127.701570][ T5847] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1127.724699][ T5847] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1127.736359][ T5847] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1127.747057][ T5847] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1127.754775][ T5847] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1127.888940][ T2346] lo speed is unknown, defaulting to 1000 [ 1128.192503][ T2363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11996'. [ 1128.718310][ T2346] chnl_net:caif_netlink_parms(): no params data found [ 1128.927581][ T2346] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.935884][ T2346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.943516][ T2346] bridge_slave_0: entered allmulticast mode [ 1128.952602][ T2346] bridge_slave_0: entered promiscuous mode [ 1128.963672][ T2346] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.971334][ T2346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.979122][ T2346] bridge_slave_1: entered allmulticast mode [ 1128.988257][ T2346] bridge_slave_1: entered promiscuous mode [ 1129.050998][ T2346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1129.071233][ T2346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.150729][ T2346] team0: Port device team_slave_0 added [ 1129.170516][ T2346] team0: Port device team_slave_1 added [ 1129.223558][ T2346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.231737][ T2346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.259088][ T2346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.274291][ T2346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.283462][ T2346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1129.311869][ T2346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.451907][ T2346] hsr_slave_0: entered promiscuous mode [ 1129.469947][ T2346] hsr_slave_1: entered promiscuous mode [ 1129.488933][ T2346] debugfs: 'hsr0' already exists in 'hsr' [ 1129.499304][ T2346] Cannot create hsr debugfs directory [ 1129.876443][ T5161] Bluetooth: hci9: command tx timeout [ 1131.684900][ T2445] dvmrp0: entered allmulticast mode [ 1131.735356][ T2346] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1131.791782][ T2346] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1131.845379][ T2346] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1131.893368][ T2452] netlink: 'syz.9.12015': attribute type 4 has an invalid length. [ 1131.904335][ T2346] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1131.922105][ T2452] netlink: 'syz.9.12015': attribute type 1 has an invalid length. [ 1131.953102][ T2452] netlink: 15314 bytes leftover after parsing attributes in process `syz.9.12015'. [ 1131.966572][ T5161] Bluetooth: hci9: command tx timeout [ 1132.423392][ T2346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.519736][ T2346] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.593304][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.600593][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.703109][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.710414][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.301674][ T2346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.411650][ T2500] netlink: 'syz.9.12020': attribute type 11 has an invalid length. [ 1133.472223][ T2346] veth0_vlan: entered promiscuous mode [ 1133.504855][ T2346] veth1_vlan: entered promiscuous mode [ 1133.592015][ T2346] veth0_macvtap: entered promiscuous mode [ 1133.613318][ T2346] veth1_macvtap: entered promiscuous mode [ 1133.661020][ T2346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.697882][ T2346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.765033][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.784887][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.825915][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.842751][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.049899][ T5161] Bluetooth: hci9: command tx timeout [ 1134.261492][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.270829][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.480649][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1134.508817][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1134.953301][ T5847] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1134.980467][ T5847] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1134.992835][ T5847] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1135.015116][ T5847] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1135.029646][ T5847] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1135.197670][ T2533] lo speed is unknown, defaulting to 1000 [ 1136.078952][ T2533] chnl_net:caif_netlink_parms(): no params data found [ 1136.116593][ T5161] Bluetooth: hci9: command tx timeout [ 1136.334495][ T2533] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.347105][ T2533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.354751][ T2533] bridge_slave_0: entered allmulticast mode [ 1136.366742][ T2533] bridge_slave_0: entered promiscuous mode [ 1136.379840][ T2533] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.389497][ T2533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.397763][ T2533] bridge_slave_1: entered allmulticast mode [ 1136.407956][ T2533] bridge_slave_1: entered promiscuous mode [ 1136.483986][ T2533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1136.505304][ T2533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1136.632265][ T2533] team0: Port device team_slave_0 added [ 1136.668444][ T2533] team0: Port device team_slave_1 added [ 1136.819593][ T2533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1136.850906][ T2533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1136.911455][ T2533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1136.964062][ T2533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1136.980753][ T2533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.021118][ T2533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1137.076652][ T5161] Bluetooth: hci10: command tx timeout [ 1137.311136][ T2533] hsr_slave_0: entered promiscuous mode [ 1137.338565][ T2533] hsr_slave_1: entered promiscuous mode [ 1137.357814][ T2533] debugfs: 'hsr0' already exists in 'hsr' [ 1137.375431][ T2533] Cannot create hsr debugfs directory [ 1138.040855][ T2533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.414825][ T2533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.815527][ T2533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.072709][ T2533] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1139.157891][ T5161] Bluetooth: hci10: command tx timeout [ 1139.522281][ T2685] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12050'. [ 1140.054447][ T2691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12050'. [ 1140.076834][ T2691] nbd: device at index 64 is going down [ 1140.099466][ T2533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1140.155015][ T2533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1140.202070][ T2533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1140.241944][ T2533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1140.772150][ T2533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.871969][ T2533] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.919270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.926605][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.959374][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.966703][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.236438][ T5161] Bluetooth: hci10: command tx timeout [ 1141.326213][ T10] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1141.440223][ T2533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.496871][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1141.509374][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1141.523711][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.532703][ T10] usb 4-1: Product: syz [ 1141.537314][ T10] usb 4-1: Manufacturer: syz [ 1141.549277][ T10] usb 4-1: SerialNumber: syz [ 1141.568175][ T10] usb 4-1: config 0 descriptor?? [ 1141.625055][ T2533] veth0_vlan: entered promiscuous mode [ 1141.656604][ T2533] veth1_vlan: entered promiscuous mode [ 1141.745311][ T2533] veth0_macvtap: entered promiscuous mode [ 1141.761216][ T2533] veth1_macvtap: entered promiscuous mode [ 1141.791496][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1141.839069][ T2533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1141.864753][ T2533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1141.903346][ T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.928667][ T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.960554][ T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.004374][ T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.230519][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.240509][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.338589][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.348518][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.510294][ T2763] netlink: 'syz.1.12023': attribute type 9 has an invalid length. [ 1142.521531][ T2763] netlink: 'syz.1.12023': attribute type 11 has an invalid length. [ 1142.533165][ T2763] netlink: 'syz.1.12023': attribute type 12 has an invalid length. [ 1142.542185][ T2763] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.12023'. [ 1142.552119][ T2763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12023'. [ 1142.623162][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1142.657716][ T10] usb 4-1: USB disconnect, device number 102 [ 1143.326493][ T5161] Bluetooth: hci10: command tx timeout [ 1143.666260][ T895] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1143.847791][ T895] usb 4-1: Using ep0 maxpacket: 16 [ 1143.859742][ T895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.870765][ T895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.899426][ T895] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1143.917185][ T895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.925267][ T895] usb 4-1: Product: syz [ 1143.935224][ T895] usb 4-1: Manufacturer: syz [ 1143.942643][ T895] usb 4-1: SerialNumber: syz [ 1143.978302][ T895] usb 4-1: 0:2 : does not exist [ 1144.174883][ T895] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1144.251345][ T895] usb 4-1: USB disconnect, device number 103 [ 1144.310920][ T2334] udevd[2334]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1144.405891][ T5161] Bluetooth: hci10: unexpected event 0x2f length: 509 > 260 [ 1145.045625][ T5847] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1145.071318][ T2854] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 1145.087370][ T5847] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1145.120100][ T5847] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1145.134346][ T5847] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1145.146649][ T5847] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1145.368193][ T2852] lo speed is unknown, defaulting to 1000 [ 1145.747456][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806575d400: rx timeout, send abort [ 1145.757190][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806575d400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1146.003104][ T2852] chnl_net:caif_netlink_parms(): no params data found [ 1146.221443][ T2852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.229215][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.237286][ T2852] bridge_slave_0: entered allmulticast mode [ 1146.253070][ T2852] bridge_slave_0: entered promiscuous mode [ 1146.275246][ T2852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.345785][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.373451][ T2852] bridge_slave_1: entered allmulticast mode [ 1146.389576][ T2852] bridge_slave_1: entered promiscuous mode [ 1146.520677][ T2852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.544580][ T2852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.615328][ T2852] team0: Port device team_slave_0 added [ 1146.639412][ T2852] team0: Port device team_slave_1 added [ 1146.710688][ T2892] VFS: Mount too revealing [ 1146.764278][ T2852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.786647][ T2852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.852580][ T2852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.870045][ T2852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.877685][ T2852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.904414][ T2852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.107815][ T2852] hsr_slave_0: entered promiscuous mode [ 1147.115827][ T2852] hsr_slave_1: entered promiscuous mode [ 1147.127917][ T2852] debugfs: 'hsr0' already exists in 'hsr' [ 1147.133706][ T2852] Cannot create hsr debugfs directory [ 1147.237256][ T5161] Bluetooth: hci11: command tx timeout [ 1148.124283][ T2852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.601915][ T2852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.904957][ T2852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.141537][ T2852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.316223][ T5161] Bluetooth: hci11: command tx timeout [ 1150.203758][ T2852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1150.241179][ T2852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1150.278701][ T2852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1150.333096][ T2852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1150.881686][ T2852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.992768][ T2852] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.057878][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.065163][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.168686][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.176052][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.396255][ T5161] Bluetooth: hci11: command tx timeout [ 1151.932578][ T2852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.125259][ T2852] veth0_vlan: entered promiscuous mode [ 1152.238942][ T2852] veth1_vlan: entered promiscuous mode [ 1152.335678][ T2852] veth0_macvtap: entered promiscuous mode [ 1152.374328][ T2852] veth1_macvtap: entered promiscuous mode [ 1152.434531][ T2852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.500743][ T2852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.635644][T18360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.658740][T18360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.680974][T18360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.711700][T18360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.039912][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.058223][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.157408][T30783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1153.187106][T30783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.477611][ T5161] Bluetooth: hci11: command tx timeout [ 1154.099097][ T3001] netlink: 'syz.2.12120': attribute type 9 has an invalid length. [ 1154.109774][ T3001] netlink: 'syz.2.12120': attribute type 11 has an invalid length. [ 1154.124517][ T3001] netlink: 'syz.2.12120': attribute type 12 has an invalid length. [ 1154.142057][ T3001] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.12120'. [ 1154.152725][ T3001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12120'. [ 1154.659055][ T5847] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1154.671237][ T5847] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1154.694515][ T5847] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1154.711764][ T5847] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1154.722517][ T5847] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1154.846124][ T10] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1154.869909][ T3022] lo speed is unknown, defaulting to 1000 [ 1155.024007][ T10] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1155.046447][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.066498][ T10] usb 3-1: Product: syz [ 1155.070842][ T10] usb 3-1: Manufacturer: syz [ 1155.075570][ T10] usb 3-1: SerialNumber: syz [ 1155.099043][ T10] usb 3-1: config 0 descriptor?? [ 1155.119084][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1155.236371][T31504] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1155.405602][T31504] usb 4-1: Using ep0 maxpacket: 16 [ 1155.425553][T31504] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1155.439538][ T3022] chnl_net:caif_netlink_parms(): no params data found [ 1155.460481][T31504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.491864][T31504] usb 4-1: config 0 descriptor?? [ 1155.528611][T31504] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1155.609197][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.616933][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.626267][ T3022] bridge_slave_0: entered allmulticast mode [ 1155.635308][ T3022] bridge_slave_0: entered promiscuous mode [ 1155.645482][ T3022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.653252][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.660824][ T3022] bridge_slave_1: entered allmulticast mode [ 1155.669911][ T3022] bridge_slave_1: entered promiscuous mode [ 1155.731706][ T3022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1155.747937][ T3022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1155.805347][ T3022] team0: Port device team_slave_0 added [ 1155.817003][ T3022] team0: Port device team_slave_1 added [ 1155.878356][ T3022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.885692][ T3022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.912274][ T3022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.937861][ T3022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.944924][ T3022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.972156][ T3022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1156.091154][ T3022] hsr_slave_0: entered promiscuous mode [ 1156.100590][ T3022] hsr_slave_1: entered promiscuous mode [ 1156.108544][ T3022] debugfs: 'hsr0' already exists in 'hsr' [ 1156.114316][ T3022] Cannot create hsr debugfs directory [ 1156.424518][ T3022] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.548349][ T3022] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.569452][ T10] gspca_sunplus: reg_w_riv err -71 [ 1156.583208][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1156.596556][ T10] usb 3-1: USB disconnect, device number 69 [ 1156.697271][ T3022] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.812512][ T3022] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.839169][ T5161] Bluetooth: hci7: command tx timeout [ 1156.912926][ T3044] input: syz1 as /devices/virtual/input/input141 [ 1157.027440][T31504] gspca_sonixj: i2c_w8 err -71 [ 1157.061907][T31504] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1157.078462][T31504] usb 4-1: USB disconnect, device number 104 [ 1157.361959][ T3022] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1157.406774][ T3022] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1157.437417][ T3022] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1157.451242][ T3022] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1157.643672][ T3022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.738891][ T3022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.767930][ T5917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.775264][ T5917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.852065][ T5917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.859316][ T5917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.501388][ T3022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1158.917769][ T5161] Bluetooth: hci7: command tx timeout [ 1159.265170][ T3022] veth0_vlan: entered promiscuous mode [ 1159.299908][ T3022] veth1_vlan: entered promiscuous mode [ 1159.420828][ T3022] veth0_macvtap: entered promiscuous mode [ 1159.437812][ T3022] veth1_macvtap: entered promiscuous mode [ 1159.500921][ T3022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1159.539058][ T3022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1159.564345][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.591582][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.605076][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.634548][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1159.646493][ T5885] usb 4-1: new low-speed USB device number 105 using dummy_hcd [ 1159.838368][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1159.906290][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.930326][ T5885] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1159.942804][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.961216][ T5885] usb 4-1: config 0 descriptor?? [ 1160.024254][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.057144][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.106745][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.114789][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.402338][ T5885] aquacomputer_d5next 0003:0C70:F0B6.008C: item fetching failed at offset 5/7 [ 1160.426983][ T5885] aquacomputer_d5next 0003:0C70:F0B6.008C: probe with driver aquacomputer_d5next failed with error -22 [ 1160.647921][ T5885] usb 4-1: USB disconnect, device number 105 [ 1160.999637][ T5161] Bluetooth: hci7: command tx timeout [ 1162.364346][ T3129] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 1162.576149][ T3129] usb 9-1: Using ep0 maxpacket: 8 [ 1162.588304][ T3129] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.628849][ T3129] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1162.645850][ T3129] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.682944][ T3129] usb 9-1: config 0 descriptor?? [ 1162.707914][ T3129] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1163.102290][ T5161] Bluetooth: hci7: command tx timeout [ 1164.178699][ T24] usb 9-1: USB disconnect, device number 80 [ 1165.338328][ T3225] fuse: root generation should be zero [ 1166.269677][ T3244] netlink: 24 bytes leftover after parsing attributes in process `syz.8.12206'. [ 1167.352753][ T3280] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1169.834231][ T3330] tipc: Started in network mode [ 1169.845240][ T3330] tipc: Node identity ac14140f, cluster identity 4711 [ 1169.853142][ T3330] tipc: New replicast peer: 10.1.1.0 [ 1169.878232][ T3330] tipc: Enabled bearer , priority 10 [ 1169.915841][ T3330] tipc: New replicast peer: 100.1.1.2 [ 1169.975302][ T3332] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1169.994682][ T3332] overlayfs: failed to set xattr on upper [ 1170.003556][ T3332] overlayfs: ...falling back to redirect_dir=nofollow. [ 1170.017350][ T3332] overlayfs: ...falling back to index=off. [ 1170.999685][ T10] tipc: Node number set to 2886997007 [ 1171.926415][ T10] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1172.087370][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1172.098117][ T10] usb 9-1: config index 0 descriptor too short (expected 59940, got 74) [ 1172.124312][ T10] usb 9-1: config 0 has too many interfaces: 61, using maximum allowed: 32 [ 1172.148022][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.165656][ T10] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 61 [ 1172.180670][ T10] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1172.194799][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1172.214814][ T10] usb 9-1: SerialNumber: syz [ 1172.229714][ T10] usb 9-1: config 0 descriptor?? [ 1172.291235][ T3375] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1172.297827][ T3375] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1172.464205][ T5908] usb 9-1: USB disconnect, device number 81 [ 1172.703807][ T3385] binder: 3384:3385 ioctl c0306201 200000000040 returned -14 [ 1173.059311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1175.030795][ T5908] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1175.327109][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 1176.987149][ T3528] cgroup: Setting release_agent not allowed [ 1177.683558][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1177.708358][ T5908] usb 4-1: no configurations [ 1177.728375][ T5908] usb 4-1: can't read configurations, error -22 [ 1177.810561][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.106451][ T3559] tipc: Failed to remove unknown binding: 66,1,1/2886997007:743923401/743923403 [ 1178.155134][ T3559] tipc: Failed to remove unknown binding: 66,1,1/2886997007:743923401/743923403 [ 1179.086215][T31504] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1179.236247][ T5908] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1179.256080][T31504] usb 3-1: Using ep0 maxpacket: 32 [ 1179.270438][T31504] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1179.297524][T31504] usb 3-1: config 0 has no interface number 0 [ 1179.314306][T31504] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1179.347490][T31504] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1179.371063][T31504] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1179.393519][T31504] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.421226][T31504] usb 3-1: Product: syz [ 1179.429253][T31504] usb 3-1: Manufacturer: syz [ 1179.439170][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 1179.450896][T31504] usb 3-1: SerialNumber: syz [ 1179.469577][ T5908] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1179.493001][T31504] usb 3-1: config 0 descriptor?? [ 1179.510898][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.550060][ T5908] usb 2-1: Product: syz [ 1179.563658][ T5908] usb 2-1: Manufacturer: syz [ 1179.581213][ T5908] usb 2-1: SerialNumber: syz [ 1179.612863][ T5908] usb 2-1: config 0 descriptor?? [ 1179.874557][ T5908] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 109 [ 1180.150425][T31504] appletouch 3-1:0.85: Geyser mode initialized. [ 1180.188406][T31504] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input142 [ 1180.389054][T31504] usb 3-1: USB disconnect, device number 70 [ 1180.454001][T31504] appletouch 3-1:0.85: input: appletouch disconnected [ 1180.756485][ T3129] usb 2-1: USB disconnect, device number 109 [ 1181.456219][T31504] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1181.648937][T31504] usb 9-1: Using ep0 maxpacket: 8 [ 1181.669551][T31504] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.686805][T31504] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1181.706176][ T5908] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1181.713921][T31504] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.741340][T31504] usb 9-1: config 0 descriptor?? [ 1181.762319][T31504] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1181.886505][ T5908] usb 3-1: Using ep0 maxpacket: 8 [ 1181.901617][ T5908] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1181.917998][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.936571][ T5908] usb 3-1: Product: syz [ 1181.948525][ T5908] usb 3-1: Manufacturer: syz [ 1181.959878][ T5908] usb 3-1: SerialNumber: syz [ 1181.983379][ T5908] usb 3-1: config 0 descriptor?? [ 1182.005620][ T5908] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1183.203723][T31504] gspca_vc032x: reg_w err -71 [ 1183.224639][T31504] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1183.252732][T31504] usb 9-1: USB disconnect, device number 82 [ 1183.436065][ T5908] gspca_sonixj: i2c_w8 err -71 [ 1183.489144][ T5908] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1183.521982][ T5908] usb 3-1: USB disconnect, device number 71 [ 1184.428304][ T3660] KVM: debugfs: duplicate directory 3660-4 [ 1184.505015][ T3664] netlink: 'syz.3.12374': attribute type 5 has an invalid length. [ 1184.518021][ T3664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12374'. [ 1185.185506][ T3696] netlink: 'syz.3.12388': attribute type 1 has an invalid length. [ 1185.207934][ T3696] netlink: 'syz.3.12388': attribute type 4 has an invalid length. [ 1185.233056][ T3696] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12388'. [ 1185.265395][ T3699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12389'. [ 1185.354580][ T3704] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12392'. [ 1185.742672][ T3730] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.12400'. [ 1185.853237][ T3734] netlink: 'syz.3.12402': attribute type 10 has an invalid length. [ 1185.862726][ T3734] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12402'. [ 1185.941208][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12402'. [ 1185.980582][ T3734] : entered promiscuous mode [ 1187.626121][ T5908] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 1187.782034][ T5908] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1187.790870][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.801913][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1187.811010][ T5908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.826767][ T5908] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1187.837487][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1187.845663][ T5908] usb 4-1: Product: syz [ 1187.849920][ T5908] usb 4-1: Manufacturer: syz [ 1187.860746][ T5908] cdc_wdm 4-1:1.0: skipping garbage [ 1187.867368][ T5908] cdc_wdm 4-1:1.0: skipping garbage [ 1187.874554][ T5908] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1187.887811][ T5908] cdc_wdm 4-1:1.0: Unknown control protocol [ 1188.071758][ T5908] usb 4-1: USB disconnect, device number 108 [ 1188.393234][ T3708] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1188.530718][ T5908] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 1188.688572][ T5908] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1188.704090][ T5908] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.725443][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1188.746122][ T5908] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1188.779224][ T5908] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1188.796052][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1188.819744][ T5908] usb 4-1: Product: syz [ 1188.825160][ T5908] usb 4-1: Manufacturer: syz [ 1188.859573][ T5908] cdc_wdm 4-1:1.0: skipping garbage [ 1188.865026][ T5908] cdc_wdm 4-1:1.0: skipping garbage [ 1188.872676][ T5908] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1188.890050][ T5908] cdc_wdm 4-1:1.0: Unknown control protocol [ 1189.383389][ T3757] overlayfs: statfs failed on './file0' [ 1190.626177][ T896] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1190.808757][ T896] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1190.858694][ T24] usb 4-1: USB disconnect, device number 109 [ 1190.864842][ T896] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1190.891475][ T896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.918301][ T896] usb 9-1: Product: syz [ 1190.939250][ T896] usb 9-1: Manufacturer: syz [ 1190.946584][ T3818] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1190.965342][ T896] usb 9-1: SerialNumber: syz [ 1190.993814][ T3818] overlayfs: failed to set xattr on upper [ 1191.018422][ T3818] overlayfs: ...falling back to index=off. [ 1191.039403][ T3818] overlayfs: ...falling back to uuid=null. [ 1191.816830][T28158] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1191.846566][T31504] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 1191.996141][T28158] usb 3-1: Using ep0 maxpacket: 32 [ 1192.004456][T28158] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1192.027280][T28158] usb 3-1: config 0 has no interface number 0 [ 1192.033836][T28158] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1192.046797][ T896] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1192.063068][ T896] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1192.074925][ T896] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 1192.092340][T28158] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1192.105473][T31504] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1192.115818][T28158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.138913][T31504] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1192.138976][T28158] usb 3-1: Product: syz [ 1192.139016][T31504] usb 4-1: can't read configurations, error -71 [ 1192.157860][T28158] usb 3-1: Manufacturer: syz [ 1192.168739][T28158] usb 3-1: SerialNumber: syz [ 1192.190935][T28158] usb 3-1: config 0 descriptor?? [ 1192.218012][ T3840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1192.441245][ T3840] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1192.450848][ T896] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 1192.494072][ T896] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1192.532170][ T896] usb 9-1: USB disconnect, device number 83 [ 1192.542559][ T896] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 1193.876309][T28158] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1193.907377][T28158] asix 3-1:0.188: probe with driver asix failed with error -71 [ 1193.933467][T28158] usb 3-1: USB disconnect, device number 72 [ 1193.940765][ T3869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12453'. [ 1194.199863][ T3877] netlink: 'syz.3.12456': attribute type 21 has an invalid length. [ 1194.212803][ T3877] netlink: 'syz.3.12456': attribute type 6 has an invalid length. [ 1194.221226][ T3877] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12456'. [ 1194.982055][ T3908] netlink: 703 bytes leftover after parsing attributes in process `syz.3.12466'. [ 1195.236374][ T5161] Bluetooth: hci5: command 0x0406 tx timeout [ 1196.173760][ T3937] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1196.191786][ T3937] overlayfs: failed to set xattr on upper [ 1196.216037][ T3937] overlayfs: ...falling back to redirect_dir=nofollow. [ 1196.232336][ T3937] overlayfs: ...falling back to uuid=null. [ 1196.250876][ T3937] overlayfs: conflicting lowerdir path [ 1196.501473][ T5847] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci7/hci7:201' [ 1196.520884][ T5847] CPU: 0 UID: 0 PID: 5847 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 1196.520921][ T5847] Tainted: [L]=SOFTLOCKUP [ 1196.520930][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1196.520946][ T5847] Workqueue: hci7 hci_rx_work [ 1196.520990][ T5847] Call Trace: [ 1196.520999][ T5847] [ 1196.521009][ T5847] dump_stack_lvl+0xe8/0x150 [ 1196.521047][ T5847] sysfs_create_dir_ns+0x271/0x2a0 [ 1196.521081][ T5847] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1196.521113][ T5847] ? do_raw_spin_unlock+0xf5/0x210 [ 1196.521147][ T5847] kobject_add_internal+0x62b/0xd00 [ 1196.521182][ T5847] kobject_add+0x163/0x240 [ 1196.521213][ T5847] ? __pfx_kobject_add+0x10/0x10 [ 1196.521263][ T5847] ? _raw_spin_unlock+0x28/0x50 [ 1196.521300][ T5847] ? get_device_parent+0x366/0x3a0 [ 1196.521342][ T5847] device_add+0x408/0xb70 [ 1196.521378][ T5847] hci_conn_add_sysfs+0xd5/0x210 [ 1196.521415][ T5847] le_conn_complete_evt+0xf1d/0x1430 [ 1196.521453][ T5847] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1196.521477][ T5847] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1196.521504][ T5847] ? __pfx___mutex_lock+0x10/0x10 [ 1196.521526][ T5847] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1196.521547][ T5847] ? skb_pull_data+0xfb/0x200 [ 1196.521582][ T5847] hci_le_conn_complete_evt+0x187/0x470 [ 1196.521616][ T5847] hci_event_packet+0x7af/0x12c0 [ 1196.521655][ T5847] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1196.521681][ T5847] ? __pfx_hci_event_packet+0x10/0x10 [ 1196.521722][ T5847] ? kcov_remote_start+0x49a/0x7a0 [ 1196.521763][ T5847] ? hci_send_to_monitor+0xe2/0x590 [ 1196.521796][ T5847] hci_rx_work+0x3ee/0x1040 [ 1196.521844][ T5847] ? process_one_work+0x8bb/0x1780 [ 1196.521878][ T5847] process_one_work+0x9ab/0x1780 [ 1196.521934][ T5847] ? __pfx_process_one_work+0x10/0x10 [ 1196.521966][ T5847] ? do_raw_spin_lock+0x12b/0x2f0 [ 1196.522013][ T5847] worker_thread+0xba8/0x11e0 [ 1196.522063][ T5847] kthread+0x388/0x470 [ 1196.522091][ T5847] ? __pfx_worker_thread+0x10/0x10 [ 1196.522125][ T5847] ? __pfx_kthread+0x10/0x10 [ 1196.522153][ T5847] ret_from_fork+0x51e/0xb90 [ 1196.522190][ T5847] ? __pfx_ret_from_fork+0x10/0x10 [ 1196.522221][ T5847] ? __switch_to+0xc7d/0x1450 [ 1196.522256][ T5847] ? __pfx_kthread+0x10/0x10 [ 1196.522284][ T5847] ret_from_fork_asm+0x1a/0x30 [ 1196.522324][ T5847] [ 1196.522385][ T5847] kobject: kobject_add_internal failed for hci7:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1196.773449][ T5847] Bluetooth: hci7: failed to register connection device [ 1199.767962][T28158] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1199.936233][T28158] usb 9-1: Using ep0 maxpacket: 16 [ 1199.954699][ T4029] overlayfs: failed to clone upperpath [ 1199.978578][T28158] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1200.011836][T28158] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1200.038117][T28158] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1200.056129][T28158] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.077392][T28158] usb 9-1: Product: syz [ 1200.086335][T28158] usb 9-1: Manufacturer: syz [ 1200.093943][T28158] usb 9-1: SerialNumber: syz [ 1200.114512][T28158] usb 9-1: config 0 descriptor?? [ 1200.127465][T28158] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1200.140359][T28158] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1200.747282][T28158] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1200.760511][T28158] em28xx 9-1:0.0: Config register raw data: 0xf4 [ 1200.788184][T28158] em28xx 9-1:0.0: I2S Audio (3 sample rate(s)) [ 1200.811635][T28158] em28xx 9-1:0.0: No AC97 audio processor [ 1201.608116][T28158] usb 9-1: USB disconnect, device number 84 [ 1202.916133][ T5161] Bluetooth: hci7: command 0x0406 tx timeout [ 1203.076895][ T4062] kvm: pic: single mode not supported [ 1203.095902][ T4062] kvm: pic: non byte read [ 1203.131613][ T4062] kvm: pic: non byte read [ 1203.161528][ T4062] kvm: pic: non byte read [ 1203.179240][ T4062] kvm: pic: non byte read [ 1203.196340][ T4062] kvm: pic: single mode not supported [ 1203.196627][ T4062] kvm: pic: level sensitive irq not supported [ 1203.241627][ T4062] kvm: pic: non byte read [ 1203.270870][ T4062] kvm: pic: non byte read [ 1203.289189][ T4062] kvm: pic: non byte read [ 1203.308820][ T4062] kvm: pic: non byte read [ 1203.324855][ T4062] kvm: pic: non byte read [ 1204.726212][ T896] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1204.907224][ T896] usb 4-1: Using ep0 maxpacket: 32 [ 1204.922342][ T896] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1204.961920][ T896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.989663][ T896] usb 4-1: config 0 descriptor?? [ 1205.014091][ T896] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1206.664110][ T896] gspca_vc032x: reg_w err -71 [ 1206.689503][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.706792][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.724415][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.738559][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.751017][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.773775][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.785875][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.804585][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.819213][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.842662][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.856041][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.868910][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.882381][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.894427][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.907424][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.930173][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.941936][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.954251][ T896] gspca_vc032x: I2c Bus Busy Wait 00 [ 1206.970841][ T896] gspca_vc032x: Unknown sensor... [ 1206.981086][ T896] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 1207.008164][ T896] usb 4-1: USB disconnect, device number 112 [ 1207.648343][ T4151] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12567'. [ 1207.665324][ T4151] unsupported nlmsg_type 40 [ 1209.428048][ T4192] binder: 4191:4192 ioctl c0306201 200000000640 returned -22 [ 1209.756246][ T896] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1209.867720][ T4201] netlink: 'syz.3.12589': attribute type 10 has an invalid length. [ 1209.930377][ T896] usb 2-1: config 0 has no interfaces? [ 1209.941667][ T896] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1209.963183][ T4201] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1209.984285][ T896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1209.993073][ T4201] team0: Failed to send options change via netlink (err -105) [ 1210.013759][ T896] usb 2-1: SerialNumber: syz [ 1210.023648][ T896] usb 2-1: config 0 descriptor?? [ 1210.037251][ T4201] team0: Port device netdevsim0 added [ 1210.268658][ T896] usb 2-1: USB disconnect, device number 110 [ 1210.603905][ T5847] Bluetooth: hci6: command 0x0406 tx timeout [ 1211.367283][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1211.534354][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.577655][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1211.596100][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1211.611235][ T24] usb 2-1: Product: syz [ 1211.621927][ T24] usb 2-1: Manufacturer: syz [ 1211.640470][ T24] usb 2-1: SerialNumber: syz [ 1211.923870][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1212.325626][ T24] usb 2-1: USB disconnect, device number 111 [ 1212.354654][ T24] usblp0: removed [ 1212.781503][ T4264] "syz.1.12614" (4264) uses obsolete ecb(arc4) skcipher [ 1213.219670][ T4283] netlink: 'syz.2.12620': attribute type 4 has an invalid length. [ 1213.238007][ T4283] netlink: 'syz.2.12620': attribute type 4 has an invalid length. [ 1213.380062][ T4287] netlink: 'syz.2.12621': attribute type 10 has an invalid length. [ 1213.396913][ T4287] veth0_vlan: entered allmulticast mode [ 1213.433126][ T4288] netlink: 'syz.2.12621': attribute type 10 has an invalid length. [ 1213.460989][ T4287] veth0_vlan: left promiscuous mode [ 1213.502795][ T4287] veth0_vlan: entered promiscuous mode [ 1213.541262][ T4287] team0: Device veth0_vlan failed to register rx_handler [ 1213.584593][ T4288] ipvlan1: entered promiscuous mode [ 1213.623512][ T4288] team0: Device ipvlan1 failed to register rx_handler [ 1214.202032][ T4314] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1214.375729][ T4319] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1214.383241][ T4319] overlayfs: failed to set xattr on upper [ 1214.389524][ T4319] overlayfs: ...falling back to redirect_dir=nofollow. [ 1214.396849][ T4319] overlayfs: ...falling back to index=off. [ 1214.409009][ T4319] overlayfs: ...falling back to uuid=null. [ 1214.415028][ T4319] overlayfs: ...falling back to xino=off. [ 1216.166680][ T4340] tipc: Failed to remove unknown binding: 66,1,1/2886997007:641658295/641658297 [ 1216.428645][ T4345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12642'. [ 1216.517168][ T4344] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1216.538136][ T5908] IPVS: starting estimator thread 0... [ 1216.562039][ T4344] block device autoloading is deprecated and will be removed. [ 1216.647119][ T4348] IPVS: using max 28 ests per chain, 67200 per kthread [ 1216.720021][ T4352] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12646'. [ 1216.965389][ T4339] tipc: Failed to remove unknown binding: 66,1,1/2886997007:641658295/641658297 [ 1216.994462][ T4339] tipc: Failed to remove unknown binding: 66,1,1/2886997007:641658295/641658297 [ 1217.805903][ T4389] netlink: 'syz.8.12660': attribute type 10 has an invalid length. [ 1217.839753][ T4389] team0: Device vxcan1 is of different type [ 1218.207607][ T4401] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1218.214680][ T4401] overlayfs: failed to set xattr on upper [ 1218.220975][ T4401] overlayfs: ...falling back to redirect_dir=nofollow. [ 1218.230269][ T4401] overlayfs: ...falling back to index=off. [ 1218.236446][ T4401] overlayfs: ...falling back to uuid=null. [ 1218.242323][ T4401] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1219.037149][ T4409] lo speed is unknown, defaulting to 1000 [ 1220.403067][ T4431] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1220.438328][ T4431] overlayfs: failed to set xattr on upper [ 1220.463003][ T4431] overlayfs: ...falling back to redirect_dir=nofollow. [ 1220.497231][ T4431] overlayfs: ...falling back to metacopy=off. [ 1220.521471][ T4431] overlayfs: ...falling back to index=off. [ 1220.542631][ T4431] overlayfs: ...falling back to uuid=null. [ 1229.000403][ T30] INFO: task syz.8.11579:732 blocked for more than 143 seconds. [ 1229.034020][ T30] Tainted: G L syzkaller #0 [ 1229.064706][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1229.087963][ T30] task:syz.8.11579 state:D stack:27296 pid:732 tgid:730 ppid:21914 task_flags:0x400140 flags:0x00080002 [ 1229.117206][ T30] Call Trace: [ 1229.124093][ T30] [ 1229.134215][ T30] __schedule+0x1665/0x5590 [ 1229.138889][ T30] ? __kernel_text_address+0xd/0x30 [ 1229.151564][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1229.162350][ T30] ? __pfx___schedule+0x10/0x10 [ 1229.168584][ T30] ? schedule+0x90/0x360 [ 1229.172919][ T30] schedule+0x164/0x360 [ 1229.179861][ T30] schedule_timeout+0xc3/0x2c0 [ 1229.184735][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1229.192772][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1229.199405][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1229.204740][ T30] ? wait_for_completion+0x274/0x5e0 [ 1229.211287][ T30] wait_for_completion+0x2cc/0x5e0 [ 1229.216920][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1229.222652][ T30] ? __flush_work+0x100/0xc50 [ 1229.239833][ T30] __flush_work+0xa17/0xc50 [ 1229.251457][ T30] ? __flush_work+0x100/0xc50 [ 1229.266085][ T30] ? __pfx___flush_work+0x10/0x10 [ 1229.276095][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 1229.287664][ T30] ? flush_work+0xd/0x30 [ 1229.298504][ T30] p9_fd_close+0x245/0x430 [ 1229.308613][ T30] p9_client_create+0x68d/0xc90 [ 1229.321384][ T30] ? __pfx_p9_client_create+0x10/0x10 [ 1229.327274][ T30] v9fs_session_init+0x46/0xdf0 [ 1229.332299][ T30] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1229.339448][ T30] ? kfree+0x1c5/0x650 [ 1229.343609][ T30] ? v9fs_get_tree+0xaa/0xac0 [ 1229.360263][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1229.376954][ T30] v9fs_get_tree+0xbd/0xac0 [ 1229.381561][ T30] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1229.396309][ T30] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1229.406140][ T30] vfs_get_tree+0x92/0x2a0 [ 1229.416046][ T30] do_new_mount+0x341/0xd30 [ 1229.426128][ T30] ? apparmor_capable+0x126/0x170 [ 1229.436158][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 1229.446080][ T30] ? ns_capable+0x89/0xe0 [ 1229.457783][ T30] ? path_mount+0x690/0x10e0 [ 1229.467619][ T30] ? user_path_at+0xd4/0x160 [ 1229.480645][ T30] __se_sys_mount+0x31d/0x420 [ 1229.497845][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 1229.503160][ T30] ? __x64_sys_mount+0x20/0xc0 [ 1229.518185][ T30] do_syscall_64+0x14d/0xf80 [ 1229.526015][ T30] ? trace_irq_disable+0x3b/0x150 [ 1229.536049][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.556967][ T30] ? clear_bhb_loop+0x40/0x90 [ 1229.562219][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.576074][ T30] RIP: 0033:0x7f55f899c799 [ 1229.582237][ T30] RSP: 002b:00007f55f6bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1229.606114][ T30] RAX: ffffffffffffffda RBX: 00007f55f8c16090 RCX: 00007f55f899c799 [ 1229.615659][ T30] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 1229.637312][ T30] RBP: 00007f55f8a32c99 R08: 0000200000000480 R09: 0000000000000000 [ 1229.656157][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1229.676250][ T30] R13: 00007f55f8c16128 R14: 00007f55f8c16090 R15: 00007fff55bc7998 [ 1229.696073][ T30] [ 1229.699215][ T30] INFO: task syz.6.11641:906 blocked for more than 144 seconds. [ 1229.709276][ T30] Tainted: G L syzkaller #0 [ 1229.715843][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1229.725849][ T30] task:syz.6.11641 state:D stack:25744 pid:906 tgid:905 ppid:19275 task_flags:0x400140 flags:0x00080002 [ 1229.740287][ T30] Call Trace: [ 1229.743935][ T30] [ 1229.747960][ T30] __schedule+0x1665/0x5590 [ 1229.752604][ T30] ? __kernel_text_address+0xd/0x30 [ 1229.762101][ T30] ? stack_depot_save_flags+0x33/0x810 [ 1229.767922][ T30] ? __pfx___schedule+0x10/0x10 [ 1229.772915][ T30] ? schedule+0x90/0x360 [ 1229.777356][ T30] schedule+0x164/0x360 [ 1229.781643][ T30] schedule_timeout+0xc3/0x2c0 [ 1229.789215][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1229.794716][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 1229.805330][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1229.810751][ T30] ? wait_for_completion+0x274/0x5e0 [ 1229.816222][ T30] wait_for_completion+0x2cc/0x5e0 [ 1229.821464][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1229.827364][ T30] ? __flush_work+0x100/0xc50 [ 1229.832183][ T30] __flush_work+0xa17/0xc50 [ 1229.838969][ T30] ? __flush_work+0x100/0xc50 [ 1229.843787][ T30] ? __pfx___flush_work+0x10/0x10 [ 1229.850470][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 1229.856008][ T30] ? flush_work+0xd/0x30 [ 1229.860382][ T30] p9_fd_close+0x245/0x430 [ 1229.868645][ T30] p9_client_create+0x68d/0xc90 [ 1229.873678][ T30] ? __pfx_p9_client_create+0x10/0x10 [ 1229.884109][ T30] v9fs_session_init+0x46/0xdf0 [ 1229.889176][ T30] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1229.894891][ T30] ? kfree+0x1c5/0x650 [ 1229.901202][ T30] ? v9fs_get_tree+0xaa/0xac0 [ 1229.906152][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1229.911870][ T30] v9fs_get_tree+0xbd/0xac0 [ 1229.916538][ T30] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 1229.922301][ T30] ? __pfx_v9fs_get_tree+0x10/0x10 [ 1229.927730][ T30] vfs_get_tree+0x92/0x2a0 [ 1229.932277][ T30] do_new_mount+0x341/0xd30 [ 1229.936963][ T30] ? apparmor_capable+0x126/0x170 [ 1229.942125][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 1229.950220][ T30] ? ns_capable+0x89/0xe0 [ 1229.954691][ T30] ? path_mount+0x690/0x10e0 [ 1229.963479][ T30] ? user_path_at+0xd4/0x160 [ 1229.972596][ T30] __se_sys_mount+0x31d/0x420 [ 1229.979380][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 1229.984731][ T30] ? __x64_sys_mount+0x20/0xc0 [ 1229.989913][ T30] do_syscall_64+0x14d/0xf80 [ 1229.994612][ T30] ? trace_irq_disable+0x3b/0x150 [ 1229.999800][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.005999][ T30] ? clear_bhb_loop+0x40/0x90 [ 1230.010790][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.018813][ T30] RIP: 0033:0x7f136479c799 [ 1230.023355][ T30] RSP: 002b:00007f13655e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1230.032643][ T30] RAX: ffffffffffffffda RBX: 00007f1364a15fa0 RCX: 00007f136479c799 [ 1230.040884][ T30] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 1230.049017][ T30] RBP: 00007f1364832c99 R08: 0000200000000100 R09: 0000000000000000 [ 1230.060127][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1230.074644][ T30] R13: 00007f1364a16038 R14: 00007f1364a15fa0 R15: 00007fff22f5a0d8 [ 1230.082843][ T30] [ 1230.086080][ T30] [ 1230.086080][ T30] Showing all locks held in the system: [ 1230.094000][ T30] 1 lock held by khungtaskd/30: [ 1230.101079][ T30] #0: ffffffff8eb5d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1230.111550][ T30] 3 locks held by kworker/u9:1/5161: [ 1230.118587][ T30] #0: ffff8880655e7940 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 1230.131099][ T30] #1: ffffc900103cfc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 1230.143321][ T30] #2: ffff88809d268ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1230.153608][ T30] 2 locks held by getty/5600: [ 1230.158675][ T30] #0: ffff888037a780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1230.175833][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 1230.189992][ T30] 2 locks held by kworker/0:6/5928: [ 1230.195316][ T30] #0: ffff88813fe03140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 1230.213154][ T30] #1: ffffc90004657c40 (p9_poll_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 1230.223020][ T30] 1 lock held by syz.1.12720/4540: [ 1230.228529][ T30] 1 lock held by syz.2.12721/4544: [ 1230.233772][ T30] [ 1230.244756][ T30] ============================================= [ 1230.244756][ T30] [ 1230.253620][ T30] NMI backtrace for cpu 0 [ 1230.253639][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1230.253666][ T30] Tainted: [L]=SOFTLOCKUP [ 1230.253673][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1230.253686][ T30] Call Trace: [ 1230.253694][ T30] [ 1230.253702][ T30] dump_stack_lvl+0xe8/0x150 [ 1230.253736][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1230.253762][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1230.253792][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1230.253820][ T30] sys_info+0x135/0x170 [ 1230.253840][ T30] watchdog+0x1002/0x1060 [ 1230.253872][ T30] ? watchdog+0x1da/0x1060 [ 1230.253901][ T30] kthread+0x388/0x470 [ 1230.253925][ T30] ? __pfx_watchdog+0x10/0x10 [ 1230.253947][ T30] ? __pfx_kthread+0x10/0x10 [ 1230.253971][ T30] ret_from_fork+0x51e/0xb90 [ 1230.254001][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.254028][ T30] ? __switch_to+0xc7d/0x1450 [ 1230.254056][ T30] ? __pfx_kthread+0x10/0x10 [ 1230.254081][ T30] ret_from_fork_asm+0x1a/0x30 [ 1230.254115][ T30] [ 1230.254123][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1230.376987][ C1] NMI backtrace for cpu 1 [ 1230.377007][ C1] CPU: 1 UID: 0 PID: 5917 Comm: kworker/u8:8 Tainted: G L syzkaller #0 PREEMPT(full) [ 1230.377032][ C1] Tainted: [L]=SOFTLOCKUP [ 1230.377039][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1230.377052][ C1] Workqueue: bat_events batadv_tt_purge [ 1230.377080][ C1] RIP: 0010:kasan_check_range+0x9d/0x2c0 [ 1230.377108][ C1] Code: 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 0f 85 9e 01 00 00 <49> ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd 83 e5 07 0f 84 b5 [ 1230.377124][ C1] RSP: 0018:ffffc900046979a8 EFLAGS: 00000046 [ 1230.377138][ C1] RAX: 0000000000000001 RBX: ffffffffffffffff RCX: ffffffff81cf0f8c [ 1230.377152][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff905441f0 [ 1230.377163][ C1] RBP: ffff88805b824118 R08: ffffffff905441f7 R09: 1ffffffff20a883e [ 1230.377177][ C1] R10: dffffc0000000000 R11: fffffbfff20a883e R12: 0000000000000001 [ 1230.377190][ C1] R13: dffffc0000000000 R14: fffffbfff20a883f R15: 1ffffffff20a883e [ 1230.377204][ C1] FS: 0000000000000000(0000) GS:ffff888124ee2000(0000) knlGS:0000000000000000 [ 1230.377218][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1230.377230][ C1] CR2: 00005555740834e8 CR3: 000000002c63e000 CR4: 00000000003526f0 [ 1230.377248][ C1] Call Trace: [ 1230.377256][ C1] [ 1230.377264][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1230.377287][ C1] trace_irq_enable+0x2c/0x150 [ 1230.377309][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1230.377330][ C1] trace_hardirqs_on+0x18/0x40 [ 1230.377350][ C1] __local_bh_enable_ip+0xd0/0x130 [ 1230.377377][ C1] batadv_tt_local_purge+0x2a7/0x340 [ 1230.377405][ C1] ? process_one_work+0x8bb/0x1780 [ 1230.377430][ C1] batadv_tt_purge+0x35/0x9e0 [ 1230.377457][ C1] ? process_one_work+0x8bb/0x1780 [ 1230.377481][ C1] process_one_work+0x9ab/0x1780 [ 1230.377517][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1230.377541][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1230.377571][ C1] worker_thread+0xba8/0x11e0 [ 1230.377592][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1230.377619][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1230.377636][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1230.377656][ C1] kthread+0x388/0x470 [ 1230.377676][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1230.377701][ C1] ? __pfx_kthread+0x10/0x10 [ 1230.377722][ C1] ret_from_fork+0x51e/0xb90 [ 1230.377748][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.377771][ C1] ? __switch_to+0xc7d/0x1450 [ 1230.377795][ C1] ? __pfx_kthread+0x10/0x10 [ 1230.377815][ C1] ret_from_fork_asm+0x1a/0x30 [ 1230.377841][ C1] [ 1230.648940][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1230.655837][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1230.666571][ T30] Tainted: [L]=SOFTLOCKUP [ 1230.670928][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1230.681019][ T30] Call Trace: [ 1230.684334][ T30] [ 1230.687295][ T30] vpanic+0x56c/0xa60 [ 1230.691316][ T30] ? __pfx___schedule+0x10/0x10 [ 1230.696219][ T30] ? __pfx_vpanic+0x10/0x10 [ 1230.700757][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1230.706957][ T30] panic+0xc5/0xd0 [ 1230.710706][ T30] ? __pfx_panic+0x10/0x10 [ 1230.715200][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1230.720618][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1230.726812][ T30] watchdog+0x105b/0x1060 [ 1230.731190][ T30] ? watchdog+0x1da/0x1060 [ 1230.735642][ T30] kthread+0x388/0x470 [ 1230.739778][ T30] ? __pfx_watchdog+0x10/0x10 [ 1230.744532][ T30] ? __pfx_kthread+0x10/0x10 [ 1230.749176][ T30] ret_from_fork+0x51e/0xb90 [ 1230.753810][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1230.758954][ T30] ? __switch_to+0xc7d/0x1450 [ 1230.763658][ T30] ? __pfx_kthread+0x10/0x10 [ 1230.768278][ T30] ret_from_fork_asm+0x1a/0x30 [ 1230.773072][ T30] [ 1230.777102][ T30] Kernel Offset: disabled [ 1230.781439][ T30] Rebooting in 86400 seconds..