last executing test programs: 13m7.413674307s ago: executing program 1 (id=1042): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 13m5.082776213s ago: executing program 1 (id=1036): r0 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0x8001, 0x9) getcwd(&(0x7f00000003c0)=""/91, 0x5b) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) ioperm(0x7, 0x8, 0x2) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000002280), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c044) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) r5 = openat$cgroup_ro(r1, &(0x7f0000002500)='blkio.bfq.io_merged\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0) 13m4.211252025s ago: executing program 1 (id=1043): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x7fffffff, 0x53e56ed2], 0x2) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 12m54.234355106s ago: executing program 0 (id=1077): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xa49a, 0x30}, 0xc) 12m54.086942199s ago: executing program 0 (id=1078): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, r4, 0x0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 12m53.285208589s ago: executing program 0 (id=1080): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r1) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 12m53.1062559s ago: executing program 0 (id=1081): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0xfa3bc5f6db214b7e) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/80, 0x50, 0xf1) 12m52.667184181s ago: executing program 0 (id=1082): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}]}}}]}]}], {0x14}}, 0xb0}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001100000000000000fcdbdf25736861312d6176"], 0x108}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f00000021c0)=""/4072, &(0x7f0000001180)=0xfe8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04"], 0x7) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7a2, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @p_u8=&(0x7f0000000180)=0x3}}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3d) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet6(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd49403"], 0xf) syz_open_dev$usbmon(&(0x7f0000000080), 0xf231, 0x4000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0xee01, &(0x7f00000006c0)={0x400000000000, 0x8, 0xd90, 0xffffffffffffffff, 0x10002, 0x1, 0x0, 0x0, 0xe1}) 12m49.246895203s ago: executing program 2 (id=1092): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') fcntl$setstatus(r2, 0x4, 0xfa3bc5f6db214b7e) pread64(r2, &(0x7f00000002c0)=""/80, 0x50, 0xf1) 12m48.014010631s ago: executing program 2 (id=1094): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/igmp\x00') pread64(r0, &(0x7f00000023c0)=""/4081, 0xff1, 0x40000) 12m47.99015022s ago: executing program 3 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x4800) 12m47.80292876s ago: executing program 2 (id=1096): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) close(r2) 12m47.802593164s ago: executing program 3 (id=1097): r0 = socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0x8001, 0x9) getcwd(&(0x7f00000003c0)=""/91, 0x5b) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) ioperm(0x7, 0x8, 0x2) accept4(r0, 0x0, 0x0, 0x80800) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000002280), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) creat(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2400c044) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x16, 0x200, &(0x7f0000000880)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff4175b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) r5 = openat$cgroup_ro(r1, &(0x7f0000002500)='blkio.bfq.io_merged\x00', 0x275a, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, 0x0, 0x0) 12m47.390115994s ago: executing program 2 (id=1098): r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) r1 = creat(&(0x7f0000003dc0)='./file0\x00', 0x27) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffc71) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$caif_stream(0x25, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40010}, 0x0) sendmsg$tipc(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) io_uring_enter(r0, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x7fffffff, 0x53e56ed2], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x120) mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='romfs\x00', 0xa00010, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) 12m46.595561283s ago: executing program 3 (id=1099): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xa49a, 0x30}, 0xc) 12m46.290532321s ago: executing program 4 (id=1100): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[], 0x7) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x11, 0xc8}}}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='jbd2_write_superblock\x00', r6}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0x40086610, &(0x7f0000000180)={@id={0x40000, 0x0, @b}}) syz_emit_vhci(0x0, 0x0) 12m44.084794888s ago: executing program 3 (id=1101): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, r4, 0x0) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r3, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 11m2.585222327s ago: executing program 1 (id=1079): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000d00)=0x84) 9m55.124551476s ago: executing program 3 (id=1104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 9m45.877583124s ago: executing program 4 (id=1105): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 7m1.866865997s ago: executing program 4 (id=1105): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 4m35.463256103s ago: executing program 1 (id=1079): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000d00)=0x84) 3m38.610576185s ago: executing program 4 (id=1105): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 3m16.067642266s ago: executing program 0 (id=1102): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0x791e}, {0x80000006}]}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r5, &(0x7f0000000180)="0b03feffe0ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14) 2m59.266601277s ago: executing program 3 (id=1104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f00000028c0)={&(0x7f0000002840)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2m41.911821172s ago: executing program 4 (id=1105): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 1m39.3802224s ago: executing program 1 (id=1079): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000340)={r1, @in={{0x2, 0x4e22, @loopback}}}, &(0x7f0000000d00)=0x84) 1m1.637422213s ago: executing program 2 (id=1103): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') fcntl$setstatus(r2, 0x4, 0xfa3bc5f6db214b7e) pread64(r2, &(0x7f00000002c0)=""/80, 0x50, 0xf1) 37.639399509s ago: executing program 4 (id=1105): bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r1 = msgget$private(0x0, 0x8d) msgsnd(r1, &(0x7f00000000c0)={0x3}, 0x8, 0x0) r2 = msgget(0x1, 0x0) msgsnd(0x0, &(0x7f0000000880)={0x2}, 0x8, 0x0) msgrcv(r2, 0x0, 0x0, 0x2, 0x1000) msgrcv(r1, &(0x7f0000000580)={0x0, ""/17}, 0x19, 0x1, 0x3000) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {0x1, 0x2}, [], {}, [{0x8, 0x3}, {0x8, 0x5}, {0x8, 0x1}, {}, {}, {}, {}, {0x8, 0x3}, {0x8, 0x5}, {0x8, 0x4}], {0x10, 0x1}}, 0x74, 0x0) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, r4, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe21, 0x0, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="2501f71d330b7e73d6b1d1b8a473ff", 0xf, 0x0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)={0x0, "2f01c4fd8eab3f09b5611b000000000000040013d278a1fc4a8d718eb43087655e5f65991c3e1e6f89550928b713582f37d43e4bd36e0000b12df9438c9c4199"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(0x0, &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "4955b27e79a00413421ba8a1b90573b66cf93af9c44283104e2fc988cb23b6454739681465e0e71e0c4185c26d40f3d4d2cd9212372b114398d20e32f4ad591e", 0x30}, 0x48, 0x0) 0s ago: executing program 2 (id=1103): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') fcntl$setstatus(r2, 0x4, 0xfa3bc5f6db214b7e) pread64(r2, &(0x7f00000002c0)=""/80, 0x50, 0xf1) kernel console output (not intermixed with test programs): config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.401244][ T5268] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 76.414699][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.450692][ T5268] usb 4-1: config 0 descriptor?? [ 76.665633][ T5676] netlink: 'syz.0.126': attribute type 4 has an invalid length. [ 76.671361][ T5268] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 76.843049][ T46] cfg80211: failed to load regulatory.db [ 77.031219][ T5688] syz.0.131 uses obsolete (PF_INET,SOCK_PACKET) [ 77.068634][ T9] usb 4-1: USB disconnect, device number 4 [ 77.077588][ T9] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 77.689720][ T5704] tmpfs: Bad value for 'mpol' [ 78.050052][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 78.450395][ T5740] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 78.549672][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.583261][ T5745] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 78.620364][ T5744] IPVS: stopping master sync thread 5745 ... [ 78.710908][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 78.766596][ T5749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.151'. [ 78.779995][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.811535][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 78.837877][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.856813][ T5751] tmpfs: Bad value for 'mpol' [ 78.893503][ T9] usb 1-1: config 0 descriptor?? [ 79.121627][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 79.546083][ T9] usb 1-1: USB disconnect, device number 5 [ 79.557997][ T9] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 80.268446][ T5272] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 80.604101][ T5785] Zero length message leads to an empty skb [ 80.639231][ T5272] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.650177][ T5272] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.709844][ T5272] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.731540][ T5272] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.801902][ T5272] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.832357][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.833315][ T5794] tmpfs: Bad value for 'mpol' [ 80.867413][ T5272] usb 4-1: Product: syz [ 80.883958][ T5272] usb 4-1: Manufacturer: syz [ 80.901717][ T5272] cdc_wdm 4-1:1.0: skipping garbage [ 80.914475][ T5272] cdc_wdm 4-1:1.0: skipping garbage [ 80.933720][ T5272] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 80.947500][ T5272] cdc_wdm 4-1:1.0: Unknown control protocol [ 81.145506][ T5779] netlink: zone id is out of range [ 81.165462][ T5779] netlink: zone id is out of range [ 81.182750][ T5779] netlink: zone id is out of range [ 81.215738][ T5779] netlink: zone id is out of range [ 81.263634][ T5779] netlink: zone id is out of range [ 81.280595][ T5779] netlink: zone id is out of range [ 81.297577][ T5779] netlink: zone id is out of range [ 81.324970][ T5779] netlink: zone id is out of range [ 81.350997][ T5779] netlink: zone id is out of range [ 81.395233][ T46] usb 4-1: USB disconnect, device number 5 [ 81.795988][ T5814] ipt_rpfilter: unknown options [ 82.197811][ T5272] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.218078][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 82.320563][ T5828] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 82.338477][ T5824] befs: Unrecognized mount option "ß" or missing value [ 82.377847][ T5272] usb 3-1: device descriptor read/64, error -32 [ 82.492340][ T5838] program syz.4.177 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.591710][ T5833] warning: `syz.4.177' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.627962][ T5272] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 82.658340][ T5824] befs: (nbd0): cannot parse mount options [ 82.790598][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 82.812057][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 82.858195][ T5272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 82.913623][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.934587][ T5848] tmpfs: Bad value for 'mpol' [ 82.954062][ T5272] usb 3-1: config 0 descriptor?? [ 82.991615][ T5847] overlay: filesystem on ./file0 not supported as upperdir [ 83.175862][ T5272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 83.263869][ T5857] netlink: 80 bytes leftover after parsing attributes in process `syz.0.188'. [ 83.285641][ T5857] netlink: 80 bytes leftover after parsing attributes in process `syz.0.188'. [ 83.584651][ T5272] usb 3-1: USB disconnect, device number 3 [ 83.595156][ T5272] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 83.678154][ T5868] macvlan0: entered allmulticast mode [ 83.715430][ T5868] bond_slave_0: entered promiscuous mode [ 83.721390][ T5868] bond_slave_1: entered promiscuous mode [ 83.755756][ T5868] bond_slave_0: left promiscuous mode [ 83.768323][ T5868] bond_slave_1: left promiscuous mode [ 83.985930][ T5868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.005829][ T5868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.024640][ T5868] bond0 (unregistering): Released all slaves [ 86.383629][ T4611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.393279][ T4611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.402809][ T4611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.431146][ T4611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.577787][ T4611] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.584114][ T5905] tmpfs: Bad value for 'mpol' [ 86.588157][ T4611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 87.361613][ T5899] chnl_net:caif_netlink_parms(): no params data found [ 88.220494][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.249672][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.291762][ T5899] bridge_slave_0: entered allmulticast mode [ 88.456465][ T5899] bridge_slave_0: entered promiscuous mode [ 88.571881][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 88.573114][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.630432][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.637654][ T5899] bridge_slave_1: entered allmulticast mode [ 88.651109][ T5233] Bluetooth: hci5: command tx timeout [ 88.665224][ T5899] bridge_slave_1: entered promiscuous mode [ 88.737865][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 88.837894][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 88.869459][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 88.910109][ T5927] netlink: 'syz.2.209': attribute type 12 has an invalid length. [ 88.910644][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.952903][ T25] usb 4-1: config 0 descriptor?? [ 88.979326][ T5899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.003456][ T5899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.166840][ T5899] team0: Port device team_slave_0 added [ 89.202752][ T5899] team0: Port device team_slave_1 added [ 89.221823][ T25] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.285389][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.311575][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.337539][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.421222][ T5899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.479055][ T5899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.516724][ T5899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.542730][ C1] vkms_vblank_simulate: vblank timer overrun [ 89.588709][ T25] usb 4-1: USB disconnect, device number 6 [ 89.626538][ T25] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 89.655782][ T5899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.827549][ T5899] hsr_slave_0: entered promiscuous mode [ 89.884302][ T5899] hsr_slave_1: entered promiscuous mode [ 89.908375][ T5899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.947171][ T5899] Cannot create hsr debugfs directory [ 90.245183][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 90.389002][ T5899] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.401993][ T5952] tmpfs: Bad value for 'mpol' [ 90.547524][ T5899] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.730371][ T5899] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.801813][ T5233] Bluetooth: hci5: command tx timeout [ 91.172789][ T5899] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.590135][ T5899] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.700664][ T5899] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.751904][ T5899] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.817911][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.968127][ T5899] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.057940][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 92.108716][ T5986] ======================================================= [ 92.108716][ T5986] WARNING: The mand mount option has been deprecated and [ 92.108716][ T5986] and is ignored by this kernel. Remove the mand [ 92.108716][ T5986] option from the mount to silence this warning. [ 92.108716][ T5986] ======================================================= [ 92.143714][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.161849][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 92.208598][ T46] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.218107][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.234957][ T46] usb 4-1: config 0 descriptor?? [ 92.247017][ T5976] vivid-004: kernel_thread() failed [ 92.444122][ T46] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 92.544566][ T5899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.592989][ T5991] tmpfs: Bad value for 'mpol' [ 92.622118][ T5899] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.811143][ T5233] Bluetooth: hci5: command tx timeout [ 92.846310][ T25] usb 4-1: USB disconnect, device number 7 [ 92.853559][ T25] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 92.981296][ T1068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.046550][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.053929][ T5438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.175481][ T1068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.301002][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.308928][ T5438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.849492][ T1068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.176006][ T6010] random: crng reseeded on system resumption [ 94.206107][ T1068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.248894][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 94.435439][ T46] IPVS: starting estimator thread 0... [ 94.512213][ T6019] net_ratelimit: 1 callbacks suppressed [ 94.512241][ T6019] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 94.538098][ T6020] IPVS: using max 22 ests per chain, 52800 per kthread [ 94.561232][ T6023] tmpfs: Bad value for 'mpol' [ 94.589098][ T1068] bridge_slave_1: left allmulticast mode [ 94.595127][ T1068] bridge_slave_1: left promiscuous mode [ 94.643369][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.691466][ T1068] bridge_slave_0: left allmulticast mode [ 94.697163][ T1068] bridge_slave_0: left promiscuous mode [ 94.729802][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.839466][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.849848][ T4611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.857648][ T4611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.881011][ T4611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.888322][ T5224] Bluetooth: hci5: command tx timeout [ 94.901536][ T4611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 94.910269][ T4611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.609296][ T1068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.730845][ T1068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.749612][ T1068] bond0 (unregistering): Released all slaves [ 95.847908][ T46] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.880670][ T5899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.008856][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 96.056018][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 96.068053][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 96.099673][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.170878][ T46] usb 3-1: config 0 descriptor?? [ 96.284625][ T5899] veth0_vlan: entered promiscuous mode [ 96.400250][ T46] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 96.499164][ T5899] veth1_vlan: entered promiscuous mode [ 96.864000][ T1068] hsr_slave_0: left promiscuous mode [ 96.907918][ T1068] hsr_slave_1: left promiscuous mode [ 96.942454][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.952119][ T46] usb 3-1: USB disconnect, device number 4 [ 96.957912][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.976746][ T5233] Bluetooth: hci4: command tx timeout [ 96.979460][ T46] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 97.012679][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.050380][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.160695][ T1068] veth1_macvtap: left promiscuous mode [ 97.166466][ T1068] veth0_macvtap: left promiscuous mode [ 97.172694][ T1068] veth1_vlan: left promiscuous mode [ 97.178345][ T1068] veth0_vlan: left promiscuous mode [ 98.817415][ T1068] team0 (unregistering): Port device team_slave_1 removed [ 98.996668][ T1068] team0 (unregistering): Port device team_slave_0 removed [ 99.063045][ T5233] Bluetooth: hci4: command tx timeout [ 100.528157][ T6073] tmpfs: Bad value for 'mpol' [ 100.886910][ T5899] veth0_macvtap: entered promiscuous mode [ 100.909302][ T5899] veth1_macvtap: entered promiscuous mode [ 100.961503][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.004657][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.048144][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.083642][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.121419][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.132394][ T5233] Bluetooth: hci4: command tx timeout [ 101.160800][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.171935][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.204024][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.222742][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.689928][ T6011] chnl_net:caif_netlink_parms(): no params data found [ 103.717901][ T4611] Bluetooth: hci4: command tx timeout [ 103.940221][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.950825][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.960731][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.974663][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.984583][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.995256][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.005347][ T5899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.015891][ T5899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.027290][ T5899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.038621][ T5899] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.047362][ T5899] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.056236][ T5899] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.065108][ T5899] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.110016][ T29] audit: type=1326 audit(1727851581.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6066 comm="syz.2.255" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbbde17dff9 code=0x0 [ 104.551083][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.592485][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.633529][ T6011] bridge_slave_0: entered allmulticast mode [ 104.650370][ T6011] bridge_slave_0: entered promiscuous mode [ 104.687428][ T5432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.725985][ T5432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.745651][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.754372][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.767844][ T6011] bridge_slave_1: entered allmulticast mode [ 104.777031][ T6011] bridge_slave_1: entered promiscuous mode [ 104.804368][ T5436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.820648][ T5436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.858984][ T5267] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 104.914959][ T6011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.935323][ T6011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.024070][ T6100] 9pnet_virtio: no channels available for device syz [ 105.067778][ T6011] team0: Port device team_slave_0 added [ 105.088007][ T5267] usb 4-1: Using ep0 maxpacket: 8 [ 105.100508][ T6011] team0: Port device team_slave_1 added [ 105.102700][ T5267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.144068][ T5267] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.170181][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.203688][ T5267] usb 4-1: config 0 descriptor?? [ 105.227603][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.250243][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.283239][ T6011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.299885][ T6011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.307052][ T6011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.342858][ T6011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.420178][ T5267] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.442753][ T6011] hsr_slave_0: entered promiscuous mode [ 105.454954][ T6011] hsr_slave_1: entered promiscuous mode [ 105.485469][ T6011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.514982][ T6011] Cannot create hsr debugfs directory [ 105.684267][ T6112] tmpfs: Bad value for 'mpol' [ 105.819728][ T6115] evm: overlay not supported [ 105.823714][ T5268] usb 4-1: USB disconnect, device number 8 [ 105.848558][ T5268] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 106.135988][ T6011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.208983][ T6011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.230649][ T6011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.270720][ T6011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.389436][ T6134] fuse: Bad value for 'fd' [ 106.461231][ T6011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.485362][ T6011] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.504578][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.511764][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.545282][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.552616][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.768027][ T6147] tmpfs: Bad value for 'mpol' [ 107.112239][ T6011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.265956][ T6011] veth0_vlan: entered promiscuous mode [ 107.326738][ T6164] mmap: syz.3.285 (6164) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.389963][ T6011] veth1_vlan: entered promiscuous mode [ 107.437304][ T6170] syzkaller1: entered promiscuous mode [ 107.442942][ T6170] syzkaller1: entered allmulticast mode [ 107.560759][ T6173] fuse: Bad value for 'fd' [ 107.564558][ T6011] veth0_macvtap: entered promiscuous mode [ 107.634661][ T6011] veth1_macvtap: entered promiscuous mode [ 107.765056][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.837281][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.857809][ T5272] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.881442][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.923043][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.016694][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.028324][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 108.036412][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 108.047691][ T5272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 108.056805][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.092644][ T5272] usb 3-1: config 0 descriptor?? [ 108.110060][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.249849][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.306173][ T5272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 108.325668][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.368145][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.419261][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.520429][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.671542][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.682773][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.786396][ T5305] usb 3-1: USB disconnect, device number 5 [ 108.793658][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.804241][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.804539][ T5305] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 108.814140][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.814204][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.814214][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.814227][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.814254][ T6011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.814266][ T6011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.815584][ T6011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.908534][ T6011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.917389][ T6011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.040936][ T6011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.041225][ T6011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.163570][ T4611] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 109.164796][ T4611] CPU: 0 UID: 0 PID: 4611 Comm: kworker/u9:1 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 109.164828][ T4611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.164846][ T4611] Workqueue: hci5 hci_rx_work [ 109.164890][ T4611] Call Trace: [ 109.164898][ T4611] [ 109.164909][ T4611] dump_stack_lvl+0x241/0x360 [ 109.164936][ T4611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.164963][ T4611] ? __wake_up_klogd+0xcc/0x110 [ 109.164987][ T4611] ? dump_stack+0x9/0x20 [ 109.165014][ T4611] sysfs_create_dir_ns+0x2ce/0x3a0 [ 109.165037][ T4611] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 109.165058][ T4611] ? preempt_schedule_thunk+0x1a/0x30 [ 109.165113][ T4611] kobject_add_internal+0x435/0x8d0 [ 109.165142][ T4611] kobject_add+0x152/0x220 [ 109.165163][ T4611] ? preempt_schedule_thunk+0x1a/0x30 [ 109.165182][ T4611] ? device_add+0x3e7/0xbf0 [ 109.165201][ T4611] ? __pfx_kobject_add+0x10/0x10 [ 109.165223][ T4611] ? _raw_spin_unlock+0x3e/0x50 [ 109.165251][ T4611] ? get_device_parent+0x165/0x410 [ 109.165273][ T4611] device_add+0x4e5/0xbf0 [ 109.165296][ T4611] hci_conn_add_sysfs+0xe8/0x200 [ 109.165320][ T4611] le_conn_complete_evt+0xc9f/0x12e0 [ 109.165355][ T4611] ? trace_contention_end+0x3c/0x120 [ 109.165379][ T4611] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 109.165407][ T4611] ? __mutex_unlock_slowpath+0x21d/0x750 [ 109.165428][ T4611] ? __copy_skb_header+0x437/0x5b0 [ 109.165452][ T4611] ? skb_pull_data+0x112/0x230 [ 109.165480][ T4611] hci_le_enh_conn_complete_evt+0x185/0x420 [ 109.165514][ T4611] hci_event_packet+0xa55/0x1540 [ 109.165541][ T4611] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 109.165572][ T4611] ? __pfx_hci_event_packet+0x10/0x10 [ 109.165592][ T4611] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.165622][ T4611] ? hci_send_to_monitor+0xd8/0x7f0 [ 109.165649][ T4611] ? kcov_remote_start+0x97/0x7d0 [ 109.165677][ T4611] hci_rx_work+0x3e8/0xca0 [ 109.165706][ T4611] ? process_scheduled_works+0x976/0x1850 [ 109.165732][ T4611] process_scheduled_works+0xa63/0x1850 [ 109.165786][ T4611] ? __pfx_process_scheduled_works+0x10/0x10 [ 109.165820][ T4611] ? assign_work+0x364/0x3d0 [ 109.165850][ T4611] worker_thread+0x870/0xd30 [ 109.165881][ T4611] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 109.165907][ T4611] ? __kthread_parkme+0x169/0x1d0 [ 109.165938][ T4611] ? __pfx_worker_thread+0x10/0x10 [ 109.165962][ T4611] kthread+0x2f0/0x390 [ 109.165981][ T4611] ? __pfx_worker_thread+0x10/0x10 [ 109.166006][ T4611] ? __pfx_kthread+0x10/0x10 [ 109.166025][ T4611] ret_from_fork+0x4b/0x80 [ 109.166050][ T4611] ? __pfx_kthread+0x10/0x10 [ 109.166069][ T4611] ret_from_fork_asm+0x1a/0x30 [ 109.166200][ T4611] [ 109.166272][ T4611] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 109.166311][ T4611] Bluetooth: hci5: failed to register connection device [ 109.938258][ T5432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.946470][ T5432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.319672][ T5432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.331888][ T5432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.123690][ T6191] netlink: 'syz.1.294': attribute type 10 has an invalid length. [ 111.131683][ T6191] ipvlan1: entered promiscuous mode [ 111.138481][ T6191] batman_adv: batadv0: Adding interface: ipvlan1 [ 111.145378][ T6191] batman_adv: batadv0: The MTU of interface ipvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.172275][ T6191] batman_adv: batadv0: Not using interface ipvlan1 (retrying later): interface not active [ 111.208056][ T5233] Bluetooth: hci5: command tx timeout [ 111.613346][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.0.235'. [ 111.635473][ T6205] fuse: Bad value for 'fd' [ 111.865388][ T6211] capability: warning: `syz.3.300' uses deprecated v2 capabilities in a way that may be insecure [ 112.053439][ T29] audit: type=1326 audit(1727851589.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6214 comm="syz.1.303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dec97dff9 code=0x0 [ 112.077765][ T5305] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.248167][ T5305] usb 1-1: Using ep0 maxpacket: 8 [ 112.265123][ T5305] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.297860][ T5305] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 112.307142][ T5305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.367979][ T5305] usb 1-1: config 0 descriptor?? [ 112.384339][ T6224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 112.706591][ T6233] tmpfs: Bad value for 'mpol' [ 112.810259][ T5305] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 113.213293][ T5305] usb 1-1: USB disconnect, device number 6 [ 113.231428][ T5305] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 113.245671][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 113.631913][ T29] audit: type=1326 audit(1727851591.030:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6241 comm="syz.2.310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbde17dff9 code=0x0 [ 113.652655][ C0] vkms_vblank_simulate: vblank timer overrun [ 113.687917][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 114.054967][ T6262] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 114.426505][ T6274] tmpfs: Bad value for 'mpol' [ 114.495141][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.321'. [ 114.597345][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 114.626103][ T5436] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.799785][ T5436] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.005421][ T5436] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.189272][ T5436] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.406385][ T5436] bridge_slave_1: left allmulticast mode [ 115.416981][ T5436] bridge_slave_1: left promiscuous mode [ 115.430842][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.441855][ T4611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.457165][ T6289] random: crng reseeded on system resumption [ 115.465220][ T4611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.473293][ T4611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.481444][ T4611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 115.489521][ T5436] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.498520][ T4611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.540523][ T5436] bridge_slave_0: left allmulticast mode [ 115.569785][ T5436] bridge_slave_0: left promiscuous mode [ 115.575848][ T5436] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.279752][ T6297] netlink: 'syz.4.330': attribute type 1 has an invalid length. [ 116.287475][ T6297] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.330'. [ 116.344935][ T6297] netlink: 1 bytes leftover after parsing attributes in process `syz.4.330'. [ 116.748740][ T5436] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.793212][ T5436] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.838343][ T5436] bond0 (unregistering): Released all slaves [ 117.322165][ T5436] hsr_slave_0: left promiscuous mode [ 117.335340][ T5436] hsr_slave_1: left promiscuous mode [ 117.351473][ T5436] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.359329][ T5436] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.377501][ T5436] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.385389][ T5436] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.429488][ T5436] veth1_macvtap: left promiscuous mode [ 117.435172][ T5436] veth0_macvtap: left promiscuous mode [ 117.440918][ T5436] veth1_vlan: left promiscuous mode [ 117.446201][ T5436] veth0_vlan: left promiscuous mode [ 117.613456][ T5233] Bluetooth: hci4: command tx timeout [ 117.838010][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 118.320660][ T6321] tmpfs: Bad value for 'mpol' [ 118.344443][ T6319] 9pnet_fd: Insufficient options for proto=fd [ 118.363886][ T6319] vivid-001: disconnect [ 118.382427][ T6318] vivid-001: reconnect [ 118.547894][ T5227] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.717745][ T5227] usb 2-1: Using ep0 maxpacket: 8 [ 118.735682][ T5227] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 118.779485][ T5227] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.830283][ T5227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.852632][ T5227] usb 2-1: config 0 descriptor?? [ 119.144686][ T5227] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.780886][ T5233] Bluetooth: hci4: command tx timeout [ 119.795802][ T5436] team0 (unregistering): Port device team_slave_1 removed [ 119.928499][ T5436] team0 (unregistering): Port device team_slave_0 removed [ 120.148520][ T5227] usb 2-1: USB disconnect, device number 3 [ 120.155679][ T5227] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 120.775466][ T6332] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 121.028296][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 121.028530][ T6286] chnl_net:caif_netlink_parms(): no params data found [ 122.063705][ T5233] Bluetooth: hci4: command tx timeout [ 122.102095][ T6359] vivid-001: disconnect [ 122.112809][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.126044][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.136181][ T6286] bridge_slave_0: entered allmulticast mode [ 122.151029][ T6286] bridge_slave_0: entered promiscuous mode [ 122.159791][ T6357] vivid-001: reconnect [ 122.202601][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.209809][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.217072][ T6286] bridge_slave_1: entered allmulticast mode [ 122.224412][ T6286] bridge_slave_1: entered promiscuous mode [ 122.299794][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.390209][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.491321][ T6286] team0: Port device team_slave_0 added [ 122.506824][ T6286] team0: Port device team_slave_1 added [ 122.545128][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.556878][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.602371][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.616879][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.626957][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.653114][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.672486][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.727802][ T5272] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 122.751780][ T6286] hsr_slave_0: entered promiscuous mode [ 122.761075][ T6286] hsr_slave_1: entered promiscuous mode [ 122.768128][ T6286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.848001][ T6286] Cannot create hsr debugfs directory [ 122.864029][ T6372] tmpfs: Bad value for 'mpol' [ 122.897837][ T5272] usb 4-1: Using ep0 maxpacket: 8 [ 122.911309][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 122.943966][ T5272] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.990397][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.040567][ T5272] usb 4-1: config 0 descriptor?? [ 123.279965][ T5272] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 123.442912][ T29] audit: type=1326 audit(1727851600.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbde17dff9 code=0x7ffc0000 [ 123.508767][ T5272] usb 4-1: USB disconnect, device number 9 [ 123.527605][ T29] audit: type=1326 audit(1727851600.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbde17dff9 code=0x7ffc0000 [ 123.536931][ T5272] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 123.570541][ T29] audit: type=1326 audit(1727851600.870:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fbbde17dff9 code=0x7ffc0000 [ 123.601895][ T29] audit: type=1326 audit(1727851600.870:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbde17dff9 code=0x7ffc0000 [ 123.775236][ T29] audit: type=1326 audit(1727851600.870:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6378 comm="syz.2.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbde17dff9 code=0x7ffc0000 [ 124.225644][ T5233] Bluetooth: hci4: command tx timeout [ 124.816200][ T6286] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 124.863841][ T6286] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 124.869533][ T6397] vivid-004: disconnect [ 124.892411][ T6394] vivid-004: reconnect [ 124.919941][ T6286] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 124.952655][ T6286] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.086780][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.106491][ T6405] tmpfs: Bad value for 'mpol' [ 125.163632][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.194123][ T5432] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.201342][ T5432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.227107][ T5436] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.234324][ T5436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.337029][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.1.367'. [ 125.418095][ C0] Unknown status report in ack skb [ 125.697970][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.824327][ T6286] veth0_vlan: entered promiscuous mode [ 125.865402][ T6286] veth1_vlan: entered promiscuous mode [ 125.949333][ T6286] veth0_macvtap: entered promiscuous mode [ 125.968977][ T6436] vivid-003: disconnect [ 125.980556][ T6286] veth1_macvtap: entered promiscuous mode [ 125.985165][ T6430] vivid-003: reconnect [ 126.016178][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.045201][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.064492][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.096669][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.098644][ T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 126.112639][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.125463][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.139019][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.153595][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.164327][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.175674][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.189366][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.205074][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.215655][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.239322][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.265185][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.277837][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 126.293373][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.305571][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 126.313519][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.337427][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 126.343602][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.353457][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.381693][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.381873][ T6443] tmpfs: Bad value for 'mpol' [ 126.415860][ T46] usb 3-1: config 0 descriptor?? [ 126.418110][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.459046][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.516303][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.622861][ T6286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.640781][ T46] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 126.662160][ T6286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.688950][ T6286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.714692][ T6286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.860695][ T46] usb 3-1: USB disconnect, device number 6 [ 126.879868][ T46] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 126.971047][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.996723][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.054718][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.077504][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.592060][ T6472] vivid-004: disconnect [ 127.633542][ T6466] vivid-004: reconnect [ 127.859954][ T6482] netlink: 2052 bytes leftover after parsing attributes in process `syz.3.391'. [ 127.873503][ T6482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.391'. [ 127.878010][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.908723][ T6483] 9pnet_virtio: no channels available for device syz [ 127.961249][ T6486] tmpfs: Bad value for 'mpol' [ 128.048857][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 128.056750][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.076317][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.087819][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.099441][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.112665][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.135909][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.447900][ T9] usb 1-1: usb_control_msg returned -32 [ 128.464875][ T9] usbtmc 1-1:16.0: can't read capabilities [ 129.000209][ T5233] Bluetooth: hci1: command tx timeout [ 129.397814][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 129.444848][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'. [ 129.493062][ T6500] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.512718][ T6500] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.568699][ T6500] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.577754][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 129.587521][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.607208][ T6500] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 129.617024][ T25] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 129.657372][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.675168][ T6500] geneve2: entered promiscuous mode [ 129.698063][ T6500] geneve2: entered allmulticast mode [ 129.742735][ T25] usb 3-1: config 0 descriptor?? [ 129.990474][ T25] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 130.147906][ T6515] vivid-003: disconnect [ 130.183703][ T6507] vivid-003: reconnect [ 130.261354][ T25] usb 3-1: USB disconnect, device number 7 [ 130.268850][ T25] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected [ 130.723478][ T6525] tmpfs: Bad value for 'mpol' [ 131.882369][ T5272] usb 1-1: USB disconnect, device number 7 [ 132.107512][ T6536] netlink: zone id is out of range [ 132.143276][ T6547] vivid-004: disconnect [ 132.172000][ T6544] vivid-004: reconnect [ 132.204037][ T6536] netlink: set zone limit has 4 unknown bytes [ 132.343591][ T6553] ubi0: attaching mtd0 [ 132.361923][ T6553] ubi0: scanning is finished [ 132.592542][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 132.658062][ T5272] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.677439][ T6553] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 132.685385][ T6553] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 132.694459][ T6553] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 132.707244][ T6553] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 132.720589][ T6553] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 132.727735][ T6553] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 132.735778][ T6553] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3421979778 [ 132.746191][ T6553] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 132.757207][ T6559] ubi0: detaching mtd0 [ 132.786668][ T6559] ubi0: mtd0 is detached [ 132.817768][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 132.884796][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 132.907123][ T5272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 132.918267][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.937233][ T5272] usb 3-1: config 0 descriptor?? [ 133.003732][ T6573] tmpfs: Bad value for 'mpol' [ 133.132762][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.139235][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.156574][ T5272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 133.465555][ T6590] 9pnet_fd: Insufficient options for proto=fd [ 133.477949][ T6582] vivid-002: disconnect [ 133.478870][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 133.484294][ T6581] vivid-002: reconnect [ 133.732704][ T5272] usb 3-1: USB disconnect, device number 8 [ 133.977895][ T29] audit: type=1326 audit(1727851611.350:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6598 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dec97dff9 code=0x7ffc0000 [ 134.032089][ T29] audit: type=1326 audit(1727851611.350:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6598 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dec97dff9 code=0x7ffc0000 [ 134.136833][ T5272] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 134.173180][ T29] audit: type=1326 audit(1727851611.550:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6598 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6dec97dff9 code=0x7ffc0000 [ 134.297855][ T29] audit: type=1326 audit(1727851611.550:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6598 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dec97dff9 code=0x7ffc0000 [ 134.319825][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.701000][ T29] audit: type=1326 audit(1727851611.550:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6598 comm="syz.1.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dec97dff9 code=0x7ffc0000 [ 135.002928][ T6618] tmpfs: Bad value for 'mpol' [ 135.121423][ T6622] fuse: Bad value for 'fd' [ 135.279605][ T6624] 9pnet_virtio: no channels available for device syz [ 135.549938][ T6631] vivid-004: disconnect [ 135.593559][ T6627] vivid-004: reconnect [ 136.057800][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.220051][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 136.244545][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.273492][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.322184][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.347962][ T25] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 136.366381][ T46] usb 3-1: config 0 descriptor?? [ 136.517872][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 136.535111][ T25] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 136.578868][ T46] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.589516][ T25] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 136.618464][ T25] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 136.657811][ T25] usb 2-1: config 250 has no interface number 0 [ 136.677572][ T25] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 136.720515][ T25] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 136.759259][ T25] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 136.782859][ T25] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 136.794266][ T25] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 136.811919][ T25] usb 2-1: config 250 interface 228 has no altsetting 0 [ 136.915369][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 136.924605][ T25] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 136.937197][ T25] usb 2-1: Product: syz [ 136.944300][ T25] usb 2-1: SerialNumber: syz [ 136.967289][ T25] hub 2-1:250.228: bad descriptor, ignoring hub [ 136.981195][ T46] usb 3-1: USB disconnect, device number 9 [ 136.988651][ T46] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 136.999959][ T25] hub 2-1:250.228: probe with driver hub failed with error -5 [ 137.176540][ T25] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 137.231509][ T6673] fuse: Bad value for 'fd' [ 137.323927][ T6680] tmpfs: Bad value for 'mpol' [ 137.395616][ T6643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.556060][ T6643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.825133][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'. [ 137.859584][ T25] usb 2-1: USB disconnect, device number 4 [ 137.997130][ T25] usblp0: removed [ 139.077124][ T6723] fuse: Bad value for 'fd' [ 139.201703][ T6729] xt_hashlimit: size too large, truncated to 1048576 [ 139.228029][ T6731] tmpfs: Bad value for 'mpol' [ 139.797400][ T25] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 140.240023][ T6744] netlink: 277 bytes leftover after parsing attributes in process `syz.4.474'. [ 140.267949][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 140.283671][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 140.310118][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 140.350877][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.400087][ T25] usb 4-1: config 0 descriptor?? [ 140.634905][ T25] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 141.046846][ T5272] usb 4-1: USB disconnect, device number 10 [ 141.083538][ T5272] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 142.189884][ T6775] tmpfs: Bad value for 'mpol' [ 143.060732][ T5233] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 143.071356][ T5233] Bluetooth: hci4: Injecting HCI hardware error event [ 143.085827][ T5233] Bluetooth: hci4: hardware error 0x00 [ 143.477880][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 143.647882][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 143.675333][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.701618][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.715444][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.738648][ T9] usb 5-1: config 0 descriptor?? [ 144.189924][ T9] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 144.214847][ T9] usb 5-1: USB disconnect, device number 3 [ 144.232972][ T9] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 145.166694][ T6813] tmpfs: Bad value for 'mpol' [ 145.298050][ T5233] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 146.507764][ T5267] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 146.695016][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 146.751402][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 146.779719][ T5267] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 146.804138][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.848413][ T5267] usb 3-1: config 0 descriptor?? [ 146.858088][ T6836] xt_hashlimit: size too large, truncated to 1048576 [ 147.388810][ T5267] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 147.406866][ T5267] usb 3-1: USB disconnect, device number 10 [ 147.416230][ T5267] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 148.153683][ T6842] tmpfs: Bad value for 'mpol' [ 148.439245][ T6773] veth0_vlan: left promiscuous mode [ 149.763475][ T6870] tmpfs: Bad value for 'mpol' [ 149.908416][ T5227] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.077853][ T5227] usb 1-1: Using ep0 maxpacket: 8 [ 150.085719][ T5227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.137559][ T5227] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.161304][ T5227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.190858][ T5227] usb 1-1: config 0 descriptor?? [ 150.883002][ T5227] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 151.360675][ T5227] usb 1-1: USB disconnect, device number 8 [ 151.374393][ T5227] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 151.397551][ T6886] netlink: 48 bytes leftover after parsing attributes in process `syz.3.527'. [ 151.768549][ T6886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.856205][ T6906] tmpfs: Bad value for 'mpol' [ 151.895681][ T6886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.969092][ T6886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.067336][ T6886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.226810][ T6886] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.246744][ T6886] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.293218][ T6886] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.323115][ T6886] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.873169][ T6942] tmpfs: Bad value for 'mpol' [ 153.115151][ T6948] tmpfs: Bad value for 'mpol' [ 153.150019][ T6949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.554'. [ 153.407468][ T6951] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.614868][ T6951] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.728965][ T6966] 9pnet_fd: Insufficient options for proto=fd [ 153.732300][ T6951] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.761829][ T6966] vivid-004: disconnect [ 153.768466][ T6965] vivid-004: reconnect [ 153.844010][ T6951] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.081353][ T6951] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.228503][ T6951] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.266070][ T6951] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.266682][ T6982] tmpfs: Bad value for 'mpol' [ 154.296575][ T6951] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.292762][ T7023] tmpfs: Bad value for 'mpol' [ 156.719851][ T7062] input: syz1 as /devices/virtual/input/input5 [ 157.329274][ T7068] tmpfs: Bad value for 'mpol' [ 158.392587][ T7098] Cannot find add_set index 0 as target [ 158.532451][ T7098] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 158.598429][ T7098] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 158.607072][ T7098] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 159.374305][ T7117] random: crng reseeded on system resumption [ 159.433643][ T7127] fuseblk: Bad value for 'fd' [ 159.443818][ T7128] fuse: Bad value for 'fd' [ 161.352644][ T7149] vivid-001: disconnect [ 161.381771][ T7148] vivid-001: reconnect [ 162.612784][ T7189] vivid-001: disconnect [ 162.630567][ T7188] vivid-001: reconnect [ 162.792368][ T7186] random: crng reseeded on system resumption [ 164.026831][ T7212] fuse: Bad value for 'fd' [ 164.387503][ T7231] vivid-004: disconnect [ 164.405090][ T7221] vivid-004: reconnect [ 164.928905][ T7246] fuse: Bad value for 'fd' [ 164.950069][ T7246] fuseblk: Bad value for 'fd' [ 165.582610][ T7265] 9pnet_fd: Insufficient options for proto=fd [ 165.601357][ T7265] vivid-001: disconnect [ 165.657861][ T7264] vivid-001: reconnect [ 165.880768][ T7272] fuse: Bad value for 'fd' [ 165.893434][ T7272] fuseblk: Bad value for 'fd' [ 167.082689][ T7295] 9pnet_fd: Insufficient options for proto=fd [ 167.120897][ T9] IPVS: starting estimator thread 0... [ 167.190149][ T7300] vivid-002: disconnect [ 167.217882][ T7299] IPVS: using max 33 ests per chain, 79200 per kthread [ 167.244272][ T7293] vivid-002: reconnect [ 167.341583][ T7304] fuse: Bad value for 'fd' [ 167.369151][ T7304] fuseblk: Bad value for 'fd' [ 167.873286][ T5227] IPVS: starting estimator thread 0... [ 167.967981][ T7326] IPVS: using max 33 ests per chain, 79200 per kthread [ 168.094414][ T7332] 9pnet_fd: Insufficient options for proto=fd [ 168.129642][ T7332] vivid-000: disconnect [ 168.136909][ T7331] vivid-000: reconnect [ 168.761685][ T5305] IPVS: starting estimator thread 0... [ 168.867918][ T7356] IPVS: using max 33 ests per chain, 79200 per kthread [ 168.970031][ T7363] vivid-000: disconnect [ 169.000127][ T7362] vivid-000: reconnect [ 170.010087][ T7394] vivid-003: disconnect [ 170.028584][ T7393] vivid-003: reconnect [ 170.518126][ T7425] vivid-001: disconnect [ 170.536777][ T7424] vivid-001: reconnect [ 171.713087][ T7454] vivid-002: disconnect [ 171.761516][ T7450] vivid-002: reconnect [ 173.035027][ T7502] vivid-003: disconnect [ 173.523685][ T7495] vivid-003: reconnect [ 175.249059][ T25] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 175.430892][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 175.486105][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.560907][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.586188][ T25] usb 4-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 175.619344][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.628783][ T7547] vivid-000: disconnect [ 175.640541][ T25] usb 4-1: Product: syz [ 175.646028][ T25] usb 4-1: Manufacturer: syz [ 175.658404][ T25] usb 4-1: SerialNumber: syz [ 175.670478][ T7541] vivid-000: reconnect [ 175.692406][ T25] usb 4-1: config 0 descriptor?? [ 175.714967][ T25] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 175.737792][ T25] em28xx 4-1:0.0: Video interface 0 found: isoc [ 175.796860][ T7549] fuse: Bad value for 'fd' [ 175.802411][ T7549] fuseblk: Bad value for 'fd' [ 175.900892][ T29] audit: type=1326 audit(1727851653.300:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7551 comm="syz.1.802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dec97dff9 code=0x0 [ 175.924101][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.118155][ T25] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 176.188004][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 176.226746][ T25] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 176.248149][ T4611] Bluetooth: hci1: command 0x0406 tx timeout [ 176.252480][ T25] em28xx 4-1:0.0: board has no eeprom [ 176.259935][ T4611] Bluetooth: hci0: command 0x0406 tx timeout [ 176.387010][ T25] em28xx 4-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 176.403436][ T25] em28xx 4-1:0.0: analog set to isoc mode. [ 176.420869][ T5227] em28xx 4-1:0.0: Registering V4L2 extension [ 176.512086][ T5227] em28xx 4-1:0.0: reading from i2c device at 0x4a failed (error=-5) [ 176.521827][ T5227] em28xx 4-1:0.0: reading from i2c device at 0x48 failed (error=-5) [ 176.531164][ T25] usb 4-1: USB disconnect, device number 11 [ 176.538662][ T25] em28xx 4-1:0.0: Disconnecting em28xx [ 176.546658][ T5227] em28xx 4-1:0.0: reading from i2c device at 0x42 failed (error=-5) [ 176.554891][ T5227] em28xx 4-1:0.0: Config register raw data: 0xffffffed [ 176.562345][ T5227] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 176.569675][ T5227] em28xx 4-1:0.0: No AC97 audio processor [ 176.592414][ T5227] usb 4-1: Decoder not found [ 176.597928][ T5227] em28xx 4-1:0.0: failed to create media graph [ 176.604259][ T5227] em28xx 4-1:0.0: V4L2 device video71 deregistered [ 176.648144][ T5227] em28xx 4-1:0.0: Remote control support is not available for this card. [ 176.659187][ T25] em28xx 4-1:0.0: Closing input extension [ 176.676915][ T25] em28xx 4-1:0.0: Freeing device [ 176.743147][ T7583] vivid-003: disconnect [ 176.749172][ T7579] vivid-003: reconnect [ 177.232086][ T7586] fuse: Bad value for 'fd' [ 177.369601][ T7586] fuseblk: Bad value for 'fd' [ 178.898635][ T7628] fuse: Bad value for 'fd' [ 178.960666][ T7628] fuseblk: Bad value for 'fd' [ 179.163120][ T5233] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 180.761477][ T7658] vivid-004: disconnect [ 180.767575][ T7657] vivid-004: reconnect [ 181.086709][ T7666] sp0: Synchronizing with TNC [ 181.200110][ T7671] syz.0.847: attempt to access beyond end of device [ 181.200110][ T7671] nbd0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 181.244362][ T7671] hfsplus: unable to find HFS+ superblock [ 181.404432][ T7680] netlink: 766 bytes leftover after parsing attributes in process `syz.0.851'. [ 181.450050][ T7680] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 183.209413][ T5233] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 183.218948][ T5233] Bluetooth: hci1: Injecting HCI hardware error event [ 183.226624][ T5233] Bluetooth: hci1: hardware error 0x00 [ 187.718035][ T5233] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 187.724636][ T5233] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 187.733497][ T5233] Bluetooth: hci5: Injecting HCI hardware error event [ 187.742511][ T5233] Bluetooth: hci5: hardware error 0x00 [ 187.838924][ T7713] syz.4.858 (7713) used greatest stack depth: 18072 bytes left [ 189.895574][ T5233] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 191.114110][ T7785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.887'. [ 192.619614][ T7790] virtio-fs: tag <(null)> not found [ 193.417127][ T7818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 193.979673][ T5267] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 194.575266][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.577758][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 194.587846][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.610479][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.627817][ T5267] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.680337][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.728764][ T5267] usb 3-1: config 0 descriptor?? [ 195.574299][ T7841] futex_wake_op: syz.3.906 tries to shift op by 144; fix this program [ 195.669384][ T7841] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 195.677167][ T7841] netlink: 224 bytes leftover after parsing attributes in process `syz.3.906'. [ 196.518596][ T5267] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 196.533545][ T5267] usb 3-1: USB disconnect, device number 11 [ 196.552651][ T5267] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 197.798224][ T7872] tipc: Started in network mode [ 197.824310][ T7872] tipc: Node identity 1, cluster identity 4711 [ 198.131658][ T7872] tipc: Node number set to 1 [ 198.833628][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.922'. [ 199.207877][ T5269] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 199.377883][ T5269] usb 1-1: Using ep0 maxpacket: 8 [ 199.416845][ T5269] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 199.444210][ T5269] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 199.567801][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.656169][ T5269] usb 1-1: config 0 descriptor?? [ 203.510970][ T5269] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 203.592813][ T5269] usb 1-1: USB disconnect, device number 9 [ 203.606310][ T5269] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 204.818264][ T5227] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 205.129199][ T7923] syzkaller1: entered promiscuous mode [ 205.138928][ T7923] syzkaller1: entered allmulticast mode [ 205.148193][ T5227] usb 3-1: Using ep0 maxpacket: 8 [ 205.179654][ T5227] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.225703][ T5227] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 205.237969][ T5227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 205.254102][ T5227] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18277, setting to 1024 [ 205.272308][ T5227] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 205.283791][ T5227] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.296706][ T7916] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 205.318006][ T5227] hub 3-1:1.0: bad descriptor, ignoring hub [ 205.325281][ T5227] hub 3-1:1.0: probe with driver hub failed with error -5 [ 205.338570][ T5227] cdc_wdm 3-1:1.0: skipping garbage [ 205.346778][ T5227] cdc_wdm 3-1:1.0: skipping garbage [ 205.363387][ T5227] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 205.370471][ T5227] cdc_wdm 3-1:1.0: Unknown control protocol [ 206.158267][ T5267] usb 3-1: USB disconnect, device number 12 [ 206.602911][ T5267] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 207.187819][ T5272] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.198293][ T5267] usb 3-1: Using ep0 maxpacket: 8 [ 207.205506][ T5267] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.231334][ T5267] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 207.256696][ T5267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 115, changing to 10 [ 207.296171][ T5267] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18277, setting to 1024 [ 207.316524][ T5267] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 207.338527][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.348884][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 207.358101][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.377082][ T5272] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 207.397381][ T5272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.410675][ T5267] usb 3-1: can't set config #1, error -71 [ 207.426693][ T5272] usb 1-1: config 0 descriptor?? [ 207.950294][ T5267] usb 3-1: USB disconnect, device number 13 [ 208.190323][ T5272] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 208.620398][ T5227] usb 1-1: USB disconnect, device number 10 [ 208.659967][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.669116][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.687572][ T5227] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 210.642989][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.714299][ T7971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.670159][ T8015] netlink: 276 bytes leftover after parsing attributes in process `syz.3.966'. [ 211.847407][ T7971] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.558257][ T7971] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.577712][ T7971] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.587454][ T7971] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.868046][ T5272] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 212.897134][ T7971] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.927223][ T7971] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.942075][ T7971] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 212.971241][ T7971] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 213.037859][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 213.049423][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.081698][ T5272] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 213.107713][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.159106][ T5272] usb 5-1: config 0 descriptor?? [ 213.716732][ T5272] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 214.151593][ T5320] usb 5-1: USB disconnect, device number 4 [ 214.161528][ T5320] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 214.236091][ T8043] netlink: 'syz.3.979': attribute type 1 has an invalid length. [ 214.943248][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.978456][ T8043] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 215.594070][ T8043] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 215.636849][ T8043] bond2 (unregistering): Released all slaves [ 217.727801][ T5272] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 217.908645][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 217.915599][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.944229][ T5272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.996295][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.024924][ T5272] usb 3-1: config 0 descriptor?? [ 218.270660][ T5272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 219.233819][ T25] usb 3-1: USB disconnect, device number 14 [ 219.268312][ T25] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 221.829861][ T8126] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 224.178213][ T5320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 224.608688][ T5320] usb 2-1: Using ep0 maxpacket: 8 [ 224.656064][ T5320] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.702315][ T5320] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 224.743503][ T5320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.782002][ T5320] usb 2-1: config 0 descriptor?? [ 225.328753][ T5320] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 225.746723][ T8196] ubi0: attaching mtd0 [ 225.772993][ T8196] ubi0: scanning is finished [ 225.843318][ T5320] usb 2-1: USB disconnect, device number 5 [ 225.878056][ T5320] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 225.978016][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 226.046368][ T8196] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 226.057220][ T8196] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 226.069101][ T8196] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 226.081336][ T8196] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 226.146848][ T8196] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 226.154591][ T8196] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 226.164419][ T8196] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3421979778 [ 226.175076][ T8196] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 226.185899][ T8205] ubi0: background thread "ubi_bgt0d" started, PID 8205 [ 226.194110][ T8201] ubi0: detaching mtd0 [ 226.245568][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.274880][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.341655][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.342265][ T8206] kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 226.363854][ T8201] ubi0: mtd0 is detached [ 226.430973][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.531460][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.564944][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.595451][ T25] usb 1-1: Product: syz [ 226.626869][ T25] usb 1-1: Manufacturer: syz [ 226.644184][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 226.670961][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 226.795606][ T25] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 226.809335][ T25] cdc_wdm 1-1:1.0: Unknown control protocol [ 227.001576][ T8199] netlink: zone id is out of range [ 227.358464][ T8199] netlink: zone id is out of range [ 227.433134][ T8199] netlink: zone id is out of range [ 227.533069][ T8199] netlink: zone id is out of range [ 227.676771][ T8199] netlink: zone id is out of range [ 227.764012][ T8199] netlink: zone id is out of range [ 227.784987][ T8199] netlink: zone id is out of range [ 227.947882][ T8199] netlink: zone id is out of range [ 227.970191][ T8199] netlink: zone id is out of range [ 228.853718][ T8199] netlink: set zone limit has 4 unknown bytes [ 229.449017][ T5269] usb 1-1: USB disconnect, device number 11 [ 231.098654][ T5320] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.267948][ T5320] usb 3-1: Using ep0 maxpacket: 8 [ 231.335639][ T5320] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 231.398675][ T5320] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 231.429343][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.462471][ T5320] usb 3-1: config 0 descriptor?? [ 231.677996][ T5320] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 232.511902][ T25] usb 3-1: USB disconnect, device number 15 [ 232.520248][ T25] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 233.308997][ T8290] sctp: [Deprecated]: syz.2.1051 (pid 8290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.308997][ T8290] Use struct sctp_sack_info instead [ 233.574404][ T8276] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 235.638179][ T5272] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 235.799086][ T5272] usb 5-1: Using ep0 maxpacket: 8 [ 235.819769][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 235.836464][ T5272] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 235.864556][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.935185][ T5272] usb 5-1: config 0 descriptor?? [ 236.151104][ T5272] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 236.551834][ T5272] usb 5-1: USB disconnect, device number 5 [ 236.559792][ T5272] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 238.151864][ T8345] ubi0: attaching mtd0 [ 238.248801][ T8345] ubi0: scanning is finished [ 238.842873][ T8345] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 238.850901][ T8345] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 238.873505][ T8345] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 238.910414][ T8345] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 238.936579][ T8345] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 238.963844][ T8345] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 239.006463][ T8345] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 3421979778 [ 239.050378][ T8345] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 239.097064][ T8355] ubi0: background thread "ubi_bgt0d" started, PID 8355 [ 239.111380][ T8346] ubi0: detaching mtd0 [ 239.170486][ T8346] ubi0: mtd0 is detached [ 240.030432][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1072'. [ 240.077371][ T8366] ax25_connect(): syz.0.1072 uses autobind, please contact jreuter@yaina.de [ 241.257737][ T5269] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 241.327736][ T5272] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 241.417765][ T5269] usb 4-1: Using ep0 maxpacket: 8 [ 241.435975][ T5269] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 241.445657][ T5269] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.817711][ T5269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.887754][ T5269] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.887788][ T5269] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.887827][ T5269] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.907725][ T5272] usb 3-1: Using ep0 maxpacket: 8 [ 241.966215][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.996546][ T5272] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.997666][ T5269] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.054479][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.079468][ T5272] usb 3-1: config 0 descriptor?? [ 242.178380][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 242.190067][ T5224] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 242.202061][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 242.229680][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 242.273514][ T5224] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 242.281560][ T5224] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 242.460248][ T5269] usb 4-1: usb_control_msg returned -32 [ 242.465894][ T5269] usbtmc 4-1:16.0: can't read capabilities [ 243.390866][ T8382] chnl_net:caif_netlink_parms(): no params data found [ 243.533987][ T5272] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 243.613428][ T5272] usb 3-1: USB disconnect, device number 16 [ 243.667186][ T5272] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected [ 243.707998][ T5269] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 243.768616][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.788354][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.795769][ T8382] bridge_slave_0: entered allmulticast mode [ 243.823313][ T8382] bridge_slave_0: entered promiscuous mode [ 243.870332][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.888569][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.909430][ T8382] bridge_slave_1: entered allmulticast mode [ 243.937783][ T5269] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 243.959094][ T8382] bridge_slave_1: entered promiscuous mode [ 243.982322][ T5269] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.020842][ T5269] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.063042][ T5269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.121469][ T8382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.143286][ T8396] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 244.174337][ T8382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.187868][ T5269] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.340890][ T8382] team0: Port device team_slave_0 added [ 244.383167][ T8382] team0: Port device team_slave_1 added [ 244.418196][ T5233] Bluetooth: hci6: command tx timeout [ 244.449464][ T5269] usb 4-1: USB disconnect, device number 12 [ 244.591537][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.626955][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.741534][ T8382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.099532][ T8382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.117060][ T8382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.194780][ T8382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.001857][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1087'. [ 246.033761][ T8382] hsr_slave_0: entered promiscuous mode [ 246.068549][ T8382] hsr_slave_1: entered promiscuous mode [ 246.553092][ T5233] Bluetooth: hci6: command tx timeout [ 246.563803][ T8382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.572915][ T8382] Cannot create hsr debugfs directory [ 248.647724][ T5233] Bluetooth: hci6: command tx timeout [ 248.952510][ T8440] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 248.961086][ T8440] syz.2.1098: attempt to access beyond end of device [ 248.961086][ T8440] loop2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 248.991704][ T8382] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 249.061587][ T8382] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 251.054306][ T5233] Bluetooth: hci6: command tx timeout [ 255.077681][ T5269] usb 1-1: USB disconnect, device number 12 [ 257.205989][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.268350][ T8382] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 263.372354][ T8382] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.889292][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.899401][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.864247][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 299.060033][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.146841][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 302.150575][ T4611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 302.159505][ T4611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.170802][ T4611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 303.171113][ T4611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 303.192495][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 306.260800][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 306.274257][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 306.274464][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.337884][ T5224] Bluetooth: hci4: command tx timeout [ 307.341991][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.352498][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.370180][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.387780][ T5224] Bluetooth: hci4: command tx timeout [ 309.394935][ T5224] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.403703][ T5224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.457873][ T5224] Bluetooth: hci7: command tx timeout [ 311.477766][ T5233] Bluetooth: hci1: command tx timeout [ 311.480166][ T4611] Bluetooth: hci4: command tx timeout [ 312.518214][ T4611] Bluetooth: hci7: command tx timeout [ 313.528109][ T4611] Bluetooth: hci4: command tx timeout [ 313.533602][ T4611] Bluetooth: hci1: command tx timeout [ 314.586790][ T4611] Bluetooth: hci7: command tx timeout [ 316.697782][ T4611] Bluetooth: hci1: command tx timeout [ 316.703282][ T4611] Bluetooth: hci7: command tx timeout [ 317.694370][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.731021][ T5233] Bluetooth: hci1: command tx timeout [ 318.758492][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 324.013175][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.137993][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.341559][ T4611] Bluetooth: hci0: Opcode 0x1005 failed: -110 [ 340.348455][ T5233] Bluetooth: hci0: command 0x1005 tx timeout [ 340.360679][ T4611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.361029][ T5232] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 341.375932][ T5232] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 343.447781][ T8465] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 343.487528][ T5233] Bluetooth: hci8: Opcode 0x1001 failed: -110 [ 344.433957][ T5233] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 346.368833][ T8467] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 346.377119][ T5233] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 346.388575][ T5233] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 346.397497][ T5233] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 352.560970][ T5233] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 361.841995][ T5233] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 364.918348][ T5233] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 375.201444][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.212169][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.261017][ T5232] Bluetooth: hci9: command tx timeout [ 376.267645][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.275938][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.507697][ T5232] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 379.514482][ T5233] Bluetooth: hci0: Opcode 0x0c14 failed: -110 [ 379.524506][ T5232] Bluetooth: hci9: command tx timeout [ 382.568057][ T8483] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 382.623218][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.647914][ T8481] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 397.072755][ T5232] Bluetooth: hci9: command tx timeout [ 400.037732][ T5233] Bluetooth: hci9: command tx timeout [ 423.136265][ T5233] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 423.191059][ T5224] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.296202][ T8488] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 427.330069][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 429.291784][ T5224] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.315180][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.325541][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.334022][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.343451][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 430.351151][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.296282][ T1068] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.280239][ T4611] Bluetooth: hci7: command 0x0406 tx timeout [ 436.288047][ T5233] Bluetooth: hci1: Opcode 0x0c16 failed: -110 [ 436.289305][ T4611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 436.295650][ T5232] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 440.336590][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.667827][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.677256][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.685582][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.693553][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 443.067797][ T8494] Bluetooth: hci0: Opcode 0x0c23 failed: -110 [ 452.557703][ T4611] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 454.567648][ T8497] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 454.647634][ T8491] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 455.582199][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 478.300394][ T8496] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 478.311861][ T8496] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.258378][ T8496] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 482.269583][ T4611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 482.277213][ T4611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 482.299090][ T4611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.409930][ T4611] Bluetooth: hci0: command tx timeout [ 488.488258][ T4611] Bluetooth: hci0: command tx timeout [ 491.637588][ T4611] Bluetooth: hci0: command tx timeout [ 493.727677][ T5233] Bluetooth: hci0: command tx timeout [ 493.736770][ T5233] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 495.667832][ T5233] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 495.676816][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 495.690040][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 495.697914][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 496.668749][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.747751][ T5232] Bluetooth: hci9: command 0x0406 tx timeout [ 499.687769][ T4611] Bluetooth: hci1: Opcode 0x0c39 failed: -110 [ 499.798321][ T8496] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 501.770434][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.801435][ T8508] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 530.656296][ T4611] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 532.378252][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 535.507801][ T4611] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 537.557660][ T8514] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 538.630410][ T4611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 538.638696][ T8518] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 541.032410][ T1068] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.239138][ T8496] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 549.257728][ T8496] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 550.247705][ T8496] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 555.404667][ T8496] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 555.416488][ T8496] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 555.427973][ T8496] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 557.479672][ T4611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 558.435978][ T4611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 558.444390][ T4611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 558.452768][ T4611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 558.460728][ T4611] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 559.539709][ T5233] Bluetooth: hci8: command tx timeout [ 559.546745][ T4611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 562.366569][ T4611] Bluetooth: hci8: command tx timeout [ 563.408709][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.947663][ T8496] Bluetooth: hci8: command tx timeout [ 576.953382][ T4611] Bluetooth: hci1: command tx timeout [ 578.987628][ T4611] Bluetooth: hci1: command tx timeout [ 578.993109][ T4611] Bluetooth: hci8: command tx timeout [ 581.047672][ T4611] Bluetooth: hci1: command tx timeout [ 581.094341][ T1068] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.153435][ T8496] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 582.163001][ T8496] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 584.147690][ T8496] Bluetooth: hci1: command tx timeout [ 584.163562][ T5233] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 585.197649][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 585.211124][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 586.173885][ T1068] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.218561][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 586.231825][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 586.247883][ T8528] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 586.255491][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 590.271235][ T4611] Bluetooth: hci4: command tx timeout [ 590.278992][ T4611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 590.287966][ T4611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 590.295662][ T4611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 590.304399][ T4611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 590.312736][ T4611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 592.258869][ T4611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 593.239760][ T5232] Bluetooth: hci4: command tx timeout [ 595.337718][ T5232] Bluetooth: hci6: command tx timeout [ 595.344365][ T5232] Bluetooth: hci4: command tx timeout [ 597.377764][ T4611] Bluetooth: hci4: command tx timeout [ 597.383245][ T4611] Bluetooth: hci6: command tx timeout [ 599.447777][ T5232] Bluetooth: hci6: command tx timeout [ 601.527718][ T5232] Bluetooth: hci6: command tx timeout [ 607.386131][ T4611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 607.488775][ T4611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 609.574001][ T4611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 609.594948][ T4611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 609.602655][ T4611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 610.587683][ T4611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 611.668988][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 613.666775][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 613.675416][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 613.689671][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 613.698222][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 614.658220][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 616.731272][ T5232] Bluetooth: hci0: command tx timeout [ 616.759102][ T5232] Bluetooth: hci1: command tx timeout [ 620.257778][ T5233] Bluetooth: hci1: command tx timeout [ 620.263246][ T5233] Bluetooth: hci0: command tx timeout [ 622.328779][ T5232] Bluetooth: hci0: command tx timeout [ 622.333564][ T5233] Bluetooth: hci1: command tx timeout [ 625.387962][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.395446][ T5233] Bluetooth: hci0: command tx timeout [ 625.400951][ T5232] Bluetooth: hci1: command tx timeout [ 627.517816][ T1068] bridge_slave_1: left allmulticast mode [ 627.523535][ T1068] bridge_slave_1: left promiscuous mode [ 629.471111][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.496091][ T1068] bridge_slave_0: left allmulticast mode [ 631.457591][ T1068] bridge_slave_0: left promiscuous mode [ 631.613474][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.829476][ T4611] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 645.841011][ T4611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 646.878122][ T5232] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 646.888672][ T5232] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 646.896837][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 647.849066][ T5232] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 648.876877][ T5233] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 651.170929][ T5233] Bluetooth: hci9: command tx timeout [ 651.219253][ T5233] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 653.141506][ T5233] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 653.149539][ T5233] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 653.157227][ T5233] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 653.166035][ T5233] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 654.148227][ T5233] Bluetooth: hci9: command tx timeout [ 655.164472][ T5233] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 656.175269][ T5233] Bluetooth: hci9: command tx timeout [ 656.232038][ T5233] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 656.248094][ T5233] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 656.257223][ T5233] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 657.227599][ T5233] Bluetooth: hci10: command tx timeout [ 658.248662][ T4611] Bluetooth: hci9: command tx timeout [ 658.470073][ T4611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 658.477523][ T4611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 660.227622][ T4611] Bluetooth: hci10: command tx timeout [ 661.288014][ T5232] Bluetooth: hci6: command tx timeout [ 664.257642][ T5232] Bluetooth: hci10: command tx timeout [ 664.264206][ T5232] Bluetooth: hci6: command tx timeout [ 665.348701][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 665.408705][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 666.379121][ T5233] Bluetooth: hci6: command tx timeout [ 666.397832][ T5233] Bluetooth: hci10: command tx timeout [ 666.407884][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 666.427007][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 666.441344][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 668.517715][ T4611] Bluetooth: hci7: Opcode 0x0c38 failed: -110 [ 668.524499][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 668.531597][ T5233] Bluetooth: hci6: command tx timeout [ 668.537311][ T4611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 670.541132][ T4611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 671.497990][ T4611] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 671.505928][ T4611] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 671.514166][ T4611] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 671.521820][ T4611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 673.608094][ T4611] Bluetooth: hci7: command tx timeout [ 674.655618][ T5233] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 677.637604][ T4611] Bluetooth: hci11: Opcode 0x1003 failed: -110 [ 677.644434][ T5233] Bluetooth: hci7: command tx timeout [ 677.651152][ T5233] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 677.671095][ T5232] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 678.655993][ T5232] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 678.665274][ T5232] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 678.679040][ T5232] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 679.688398][ T5232] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 679.695689][ T4611] Bluetooth: hci7: command tx timeout [ 679.702103][ T5232] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 681.788245][ T5232] Bluetooth: hci11: command tx timeout [ 681.794358][ T5232] Bluetooth: hci7: command tx timeout [ 683.867812][ T5233] Bluetooth: hci8: command 0x0406 tx timeout [ 683.873900][ T5233] Bluetooth: hci11: command tx timeout [ 685.929856][ T5232] Bluetooth: hci11: command tx timeout [ 686.853681][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.897561][ T5232] Bluetooth: hci11: command tx timeout [ 715.147559][ T8496] Bluetooth: hci4: command 0x0406 tx timeout [ 716.158128][ T8496] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 716.170230][ T8496] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 717.301191][ T8496] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 718.261371][ T4611] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 718.270198][ T4611] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 718.270933][ T5233] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 719.429241][ T4611] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 719.436811][ T4611] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 719.439184][ T5233] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 719.472990][ T5233] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 719.480796][ T5233] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 721.269071][ T4611] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 723.357803][ T8496] Bluetooth: hci12: command tx timeout [ 725.337793][ T8496] Bluetooth: hci13: command tx timeout [ 725.376647][ T8496] Bluetooth: hci12: command tx timeout [ 727.374513][ T8496] Bluetooth: hci13: command tx timeout [ 727.390323][ T1068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 729.348175][ T1068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.387901][ T1068] bond0 (unregistering): Released all slaves [ 730.399224][ T5232] Bluetooth: hci12: command tx timeout [ 730.404763][ T5232] Bluetooth: hci13: command tx timeout [ 730.415028][ T4611] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 730.417669][ T8496] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 731.419306][ T8496] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 732.488776][ T8496] Bluetooth: hci13: command tx timeout [ 732.494298][ T8496] Bluetooth: hci12: command tx timeout [ 733.283464][ T4611] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 733.298347][ T4611] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 733.307673][ T4611] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 736.668117][ T8571] Bluetooth: hci14: Opcode 0x0c14 failed: -110 [ 737.628455][ T5224] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 737.641857][ T5224] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 738.605950][ T5224] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 738.615490][ T5224] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 738.623389][ T5224] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 738.630891][ T5224] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 740.587919][ T5224] Bluetooth: hci1: command 0x0406 tx timeout [ 740.607676][ T5224] Bluetooth: hci0: command 0x0406 tx timeout [ 741.671484][ T5224] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 743.719828][ T5233] Bluetooth: hci15: command tx timeout [ 744.734118][ T5224] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 744.745332][ T5224] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 744.755272][ T5224] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 744.763316][ T5224] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 744.771036][ T5224] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 745.767888][ T5233] Bluetooth: hci15: command tx timeout [ 747.713499][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.787469][ T4611] Bluetooth: hci15: command tx timeout [ 748.808303][ T4611] Bluetooth: hci14: command tx timeout [ 750.808186][ T4611] Bluetooth: hci15: command tx timeout [ 751.887466][ T4611] Bluetooth: hci14: command tx timeout [ 756.947914][ T4611] Bluetooth: hci14: command tx timeout [ 758.967737][ T4611] Bluetooth: hci14: command tx timeout [ 774.228126][ T8496] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 774.239411][ T5224] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 775.193266][ T8496] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 775.228378][ T8496] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 776.217730][ T8496] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 778.217606][ T8496] Bluetooth: hci9: command 0x0406 tx timeout [ 778.225537][ T8496] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 783.447536][ T8496] Bluetooth: hci16: command tx timeout [ 783.454168][ T8496] Bluetooth: hci10: command 0x0406 tx timeout [ 788.492403][ T5233] Bluetooth: hci16: command tx timeout [ 788.498222][ T5233] Bluetooth: hci6: command 0x0406 tx timeout [ 788.504861][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 791.638293][ T5232] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 791.645066][ T8591] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 792.457495][ T8591] Bluetooth: hci16: command tx timeout [ 794.487541][ T8589] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 795.464136][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.471453][ T4611] Bluetooth: hci16: command tx timeout [ 797.597451][ T8591] Bluetooth: hci7: command 0x0406 tx timeout [ 801.935368][ T8591] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 802.970094][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 805.022017][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 806.020669][ T4611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 806.031916][ T4611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 806.045296][ T4611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 806.054057][ T4611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 807.048289][ T4611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 809.028469][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.074349][ T5224] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 814.096885][ T5224] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 817.007460][ T8597] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 822.077494][ T5224] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 823.059161][ T8496] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 825.127988][ T8600] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 842.487519][ T8591] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 843.484325][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 844.470336][ T5224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 844.479568][ T5224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 844.488139][ T5224] Bluetooth: hci4: command tx timeout [ 845.497521][ T8603] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 845.508808][ T8591] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 845.518623][ T8591] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 845.528448][ T8591] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 845.535759][ T8591] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 846.767835][ T8591] Bluetooth: hci4: command tx timeout [ 849.649404][ T8591] Bluetooth: hci4: command tx timeout [ 852.068702][ T8591] Bluetooth: hci4: command tx timeout [ 859.211763][ T5224] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 860.170143][ T8591] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 861.161870][ T8591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 861.170849][ T8591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 863.137608][ T8591] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 865.431432][ T5224] Bluetooth: hci7: command tx timeout [ 865.448505][ T5224] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 866.383206][ T4611] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 866.408103][ T5224] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 866.415200][ T5224] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 866.422744][ T4611] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 866.429982][ T4611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 867.471934][ T5224] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 868.518005][ T5224] Bluetooth: hci7: command tx timeout [ 869.490643][ T5232] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 870.537651][ T4611] Bluetooth: hci6: command tx timeout [ 870.547619][ T4611] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 870.555807][ T4611] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 870.557836][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.535657][ T8591] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 871.548145][ T8591] Bluetooth: hci7: command tx timeout [ 871.573611][ T5232] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 872.568065][ T5232] Bluetooth: hci6: command tx timeout [ 872.680282][ T5232] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 873.667572][ T8591] Bluetooth: hci9: command tx timeout [ 873.675084][ T8591] Bluetooth: hci7: command tx timeout [ 873.687578][ T4611] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 873.695022][ T4611] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 874.648649][ T4611] Bluetooth: hci6: command tx timeout [ 876.657723][ T4611] Bluetooth: hci9: command tx timeout [ 876.744459][ T4611] Bluetooth: hci6: command tx timeout [ 886.827955][ T5224] Bluetooth: hci9: command tx timeout [ 889.857573][ T4611] Bluetooth: hci9: command tx timeout [ 889.863249][ T4611] Bluetooth: hci10: command tx timeout [ 892.334981][ T4611] Bluetooth: hci10: command tx timeout [ 894.408405][ T4611] Bluetooth: hci10: command tx timeout [ 896.528413][ T4611] Bluetooth: hci10: command tx timeout [ 896.556022][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 897.557046][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 898.587848][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 899.582719][ T5224] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 899.590458][ T5224] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 902.567956][ T5224] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 905.737522][ T5224] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 905.751153][ T4611] Bluetooth: hci4: Opcode 0x0c16 failed: -110 [ 905.758408][ T4611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 905.759696][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 907.529444][ T4611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 907.567720][ T4611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 907.578997][ T4611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 907.590149][ T4611] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 907.597574][ T4611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 908.599040][ T4611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 909.620563][ T4611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.628412][ T4611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 910.636085][ T4611] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 910.645212][ T4611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.647969][ T8631] Bluetooth: hci0: Opcode 0x0c38 failed: -110 [ 912.659888][ T4611] Bluetooth: hci4: command tx timeout [ 915.738896][ T4611] Bluetooth: hci4: command tx timeout [ 918.717578][ T4611] Bluetooth: hci4: command tx timeout [ 920.779499][ T5232] Bluetooth: hci4: command tx timeout [ 924.867916][ T4611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 925.880247][ T1068] hsr_slave_0: left promiscuous mode [ 925.888418][ T4611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 926.914103][ T4611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 926.925424][ T5224] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 927.922338][ T8591] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 928.905601][ T8591] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 928.924567][ T8591] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 928.933287][ T5224] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 928.940464][ T5224] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 929.928237][ T1068] hsr_slave_1: left promiscuous mode [ 929.936706][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 929.949784][ T5232] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 930.981478][ T5232] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 930.988949][ T5232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 931.958636][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.008127][ T4611] Bluetooth: hci0: command tx timeout [ 932.017885][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 933.208578][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 933.218346][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 933.226477][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 933.234447][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 933.958516][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.015649][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.017444][ T4611] Bluetooth: hci7: Opcode 0x0c14 failed: -110 [ 936.050019][ T8591] Bluetooth: hci6: command tx timeout [ 936.050152][ T4611] Bluetooth: hci0: command tx timeout [ 936.061283][ T4611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 937.055603][ T1068] veth1_macvtap: left promiscuous mode [ 937.061873][ T4611] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 938.088008][ T4611] Bluetooth: hci6: command tx timeout [ 938.094950][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 939.057512][ T1068] veth0_macvtap: left promiscuous mode [ 939.063262][ T1068] veth1_vlan: left promiscuous mode [ 939.078945][ T1068] veth0_vlan: left promiscuous mode [ 939.087467][ T4611] Bluetooth: hci0: command tx timeout [ 942.327541][ T8641] Bluetooth: hci7: Opcode 0x0c23 failed: -110 [ 948.432463][ T4611] Bluetooth: hci6: command tx timeout [ 949.360284][ T4611] Bluetooth: hci0: command tx timeout [ 952.377609][ T4611] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 952.384654][ T8591] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 952.399431][ T4611] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 952.419499][ T4611] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 953.430306][ T4611] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 953.443376][ T4611] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 953.451616][ T4611] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 953.460916][ T4611] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 954.427422][ T4611] Bluetooth: hci6: command tx timeout [ 958.548131][ T8591] Bluetooth: hci8: command tx timeout [ 958.708214][ T4611] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 960.727674][ T8645] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 960.739363][ T4611] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 960.749410][ T4611] Bluetooth: hci8: command tx timeout [ 963.807917][ T8591] Bluetooth: hci8: command tx timeout [ 965.859677][ T8591] Bluetooth: hci8: command tx timeout [ 994.097728][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 996.961059][ T8591] Bluetooth: hci9: command 0x0406 tx timeout [ 997.039143][ T5224] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 998.010607][ T5224] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 999.997418][ T5224] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1000.010854][ T4611] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1008.100476][ T8496] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1011.039320][ T5232] Bluetooth: hci11: Opcode 0x1001 failed: -110 [ 1011.171578][ T5232] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1012.064366][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1012.075013][ T5224] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1013.075568][ T5224] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1013.090656][ T4611] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1013.097895][ T4611] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1014.057655][ T8655] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1014.093518][ T5224] Bluetooth: hci10: command 0x0406 tx timeout [ 1014.100851][ T5224] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1015.117393][ T8591] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1015.142529][ T8591] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1016.137864][ T8591] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1016.176333][ T8591] Bluetooth: hci7: command tx timeout [ 1018.247667][ T8591] Bluetooth: hci7: command tx timeout [ 1020.327692][ T8591] Bluetooth: hci7: command tx timeout [ 1022.373292][ T5232] Bluetooth: hci12: command tx timeout [ 1023.387631][ T8591] Bluetooth: hci7: command tx timeout [ 1023.418434][ T8591] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1024.407614][ T8591] Bluetooth: hci12: command tx timeout [ 1024.417716][ T8591] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1024.434666][ T8591] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1027.448591][ T8591] Bluetooth: hci12: command tx timeout [ 1027.528538][ T4611] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1027.566836][ T4611] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1027.586915][ T4611] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1030.543552][ T5232] Bluetooth: hci12: command tx timeout [ 1030.602919][ T5224] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1030.622018][ T5224] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1031.567548][ T8496] Bluetooth: hci11: command tx timeout [ 1032.563273][ T8591] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1032.567644][ T5224] Bluetooth: hci4: command 0x0406 tx timeout [ 1032.576184][ T8591] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1032.586468][ T8591] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1032.594115][ T8591] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1033.616304][ T8591] Bluetooth: hci11: command tx timeout [ 1036.108671][ T8591] Bluetooth: hci11: command tx timeout [ 1036.114259][ T8591] Bluetooth: hci13: command tx timeout [ 1039.257561][ T8591] Bluetooth: hci13: command tx timeout [ 1039.257569][ T4611] Bluetooth: hci11: command tx timeout [ 1041.287559][ T4611] Bluetooth: hci13: command tx timeout [ 1045.228438][ T4611] Bluetooth: hci13: command tx timeout [ 1049.497674][ T8591] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1050.488814][ T8591] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1050.697730][ T8591] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1050.707451][ T8591] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1050.715166][ T8591] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1050.723032][ T8591] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1054.637496][ T30] INFO: task syz-executor:8539 blocked for more than 147 seconds. [ 1054.658249][ T8591] Bluetooth: hci14: command tx timeout [ 1054.678058][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 1054.685742][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1054.697181][ T30] task:syz-executor state:D stack:24128 pid:8539 tgid:8539 ppid:1 flags:0x00004006 [ 1055.651112][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.677394][ T30] Call Trace: [ 1055.680734][ T30] [ 1055.683691][ T30] __schedule+0x1843/0x4ae0 [ 1056.727643][ T5224] Bluetooth: hci14: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1058.293505][ T5224] Bluetooth: hci0: command 0x0406 tx timeout [ 1058.293609][ T5232] Bluetooth: hci6: command 0x0406 tx timeout [ 1060.287533][ T30] ? __pfx___schedule+0x10/0x10 [ 1060.292463][ T30] ? __pfx_lock_release+0x10/0x10 [ 1061.337345][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1061.353549][ T30] ? schedule+0x90/0x320 [ 1061.367530][ T30] schedule+0x14b/0x320 [ 1062.350652][ T30] schedule_preempt_disabled+0x13/0x30 [ 1062.356191][ T30] __mutex_lock+0x6a7/0xd70 [ 1062.361569][ T5232] Bluetooth: hci14: command tx timeout [ 1062.368877][ T30] ? __mutex_lock+0x52a/0xd70 [ 1062.373617][ T30] ? cangw_pernet_exit_batch+0x20/0x90 [ 1063.419155][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1063.424261][ T30] ? setup_net+0x794/0x9e0 [ 1064.329440][ T30] ? kfree+0x1a0/0x440 [ 1064.397326][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 1064.403374][ T30] cangw_pernet_exit_batch+0x20/0x90 [ 1064.409075][ T5232] Bluetooth: hci14: command tx timeout [ 1064.414612][ T30] ? __pfx_cangw_pernet_exit_batch+0x10/0x10 [ 1064.420768][ T30] setup_net+0x829/0x9e0 [ 1064.425047][ T30] ? __pfx_down_read_killable+0x10/0x10