last executing test programs: 3m23.406348419s ago: executing program 3 (id=930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) socket(0x1e, 0x805, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) socket$kcm(0x2d, 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000240)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0xfffffffc, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x20000000) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000b00), 0x0}, 0x20) 3m22.264751533s ago: executing program 3 (id=931): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r3 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x10000}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 3m20.79204253s ago: executing program 3 (id=934): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x20, r1, 0x101, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}}, 0x200000d0) 3m20.572847949s ago: executing program 3 (id=936): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x11e, 0x1e, 0xffffffffffffffff, &(0x7f0000000340)=0xfffffffffffffeb8) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) 3m17.727679505s ago: executing program 3 (id=939): mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1a3089, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x42) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m16.071965836s ago: executing program 3 (id=944): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 3m0.890853165s ago: executing program 32 (id=944): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r9, 0x7003) ioctl$RTC_AIE_ON(r9, 0x7001) ioctl$RTC_SET_TIME(r9, 0x4024700a, &(0x7f0000000040)={0x0, 0x2c, 0x0, 0x6, 0x0, 0xa9, 0x3, 0x2, 0x1}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) write$rfkill(r5, &(0x7f0000000080)={0xff, 0x1, 0x3, 0x1, 0x4}, 0x8) 1m41.251861455s ago: executing program 4 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) syz_open_dev$MSR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) socket(0x1e, 0x805, 0x0) accept4$inet6(r4, 0x0, 0x0, 0x800) socket$kcm(0x2d, 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000240)) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xb}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000440)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0xfffffffc, 0x6c}, @in=@empty, {0x200000000, 0x0, 0x7, 0x0, 0x3000000000, 0x0, 0x1000000000000000}, {0x0, 0x4}, {}, 0x70bd2a, 0x0, 0xa, 0x1, 0x6}}, 0xf0}}, 0x20000000) write$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000b00), 0x0}, 0x20) 1m39.185892927s ago: executing program 4 (id=1154): r0 = dup(0xffffffffffffffff) write$UHID_INPUT(r0, &(0x7f0000001880)={0xc, {"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", 0x1000}}, 0x1006) 1m38.779786127s ago: executing program 4 (id=1155): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x80, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x3c, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x20050800) getsockopt$sock_timeval(r3, 0x1, 0x15, 0x0, &(0x7f0000000380)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, 0x0) 1m30.516878855s ago: executing program 4 (id=1173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x10000}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000007c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1m28.18024042s ago: executing program 4 (id=1176): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xd8, 0x32, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc40b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf8000000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x514}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000000)=[{r3, 0x4230}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16], 0xf4}}, 0x20040040) 1m23.909698113s ago: executing program 4 (id=1185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 1m8.19583462s ago: executing program 33 (id=1185): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) 12.068071159s ago: executing program 0 (id=1341): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000f40)=@gettaction={0x14, 0x32, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24008080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) close_range(r0, r1, 0x0) 11.661743566s ago: executing program 0 (id=1344): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 11.544698245s ago: executing program 2 (id=1346): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xd8, 0x32, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc40b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf8000000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x514}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000000)=[{r3, 0x4230}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16], 0xf4}}, 0x20040040) 10.860044689s ago: executing program 0 (id=1348): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) 10.001526652s ago: executing program 0 (id=1350): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x88102, 0x0) write$cgroup_int(r0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @random="941744efc38f"}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 9.421494972s ago: executing program 2 (id=1351): socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 8.495274957s ago: executing program 0 (id=1354): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) getpgid(0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x102, 0xa0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x1, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 7.296575183s ago: executing program 5 (id=1357): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xe25, 0x140) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0505510, 0x0) 6.78388823s ago: executing program 5 (id=1359): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 5.120918235s ago: executing program 5 (id=1361): socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@gettaction={0xd8, 0x32, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc40b}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf8000000}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x514}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}]}, 0xd8}, 0x1, 0x0, 0x0, 0x404}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ppoll(&(0x7f0000000000)=[{r3, 0x4230}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYRESOCT, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES16], 0xf4}}, 0x20040040) 5.110988991s ago: executing program 6 (id=1362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 5.051768116s ago: executing program 2 (id=1363): pipe2(&(0x7f0000001cc0), 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x1, 0x6, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 4.776352628s ago: executing program 1 (id=1364): pipe2(&(0x7f0000000040), 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x14d002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) 4.432078117s ago: executing program 6 (id=1365): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) 3.975972148s ago: executing program 6 (id=1366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 3.901468808s ago: executing program 6 (id=1367): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002100004000000001c0001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000980)='l\x11\xa9Rl^\xba\x00\x81', 0x0) 3.514987507s ago: executing program 1 (id=1368): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 3.387330582s ago: executing program 6 (id=1369): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e0) close_range(r0, 0xffffffffffffffff, 0x0) 3.381553524s ago: executing program 5 (id=1370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x20000040) 3.283075165s ago: executing program 2 (id=1371): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 3.183066727s ago: executing program 1 (id=1372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x2}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r6, 0x3, 0x0) getdents(r6, 0x0, 0x0) 2.970772492s ago: executing program 6 (id=1373): socketpair$unix(0x1, 0x3, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 2.071398367s ago: executing program 2 (id=1374): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@mcast2, 0x10, 0x1, 0xfd, 0x8, 0x7, 0x3}, 0x20) 1.827921463s ago: executing program 5 (id=1375): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x2c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x4}, @TCA_PIE_BYTEMODE={0x8}, @TCA_PIE_ALPHA={0x8, 0x4, 0x19}, @TCA_PIE_BYTEMODE={0x8, 0x7, 0x2}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffb}]}}]}, 0x58}}, 0x0) 1.63081637s ago: executing program 1 (id=1376): r0 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.375732408s ago: executing program 5 (id=1377): syz_usb_connect(0x1, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$char_usb(r0, &(0x7f0000000080)="4bd0", 0x2) 1.325522586s ago: executing program 1 (id=1378): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair(0x9, 0x6, 0x7, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0) 1.274766889s ago: executing program 0 (id=1379): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) r6 = socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, 0x0, 0x4008044) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) poll(&(0x7f00000000c0)=[{r5, 0x3388}], 0x1, 0x800) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 124.356326ms ago: executing program 1 (id=1380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002100004000000001c0001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x80000004, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000240)=0x1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000980)='l\x11\xa9Rl^\xba\x00\x81', 0x0) 0s ago: executing program 2 (id=1381): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) symlinkat(0x0, r1, &(0x7f00000003c0)='./file0\x00') readlinkat(r1, &(0x7f0000000800)='./file0/../file0\x00', &(0x7f0000000840)=""/149, 0x95) kernel console output (not intermixed with test programs): 41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.047172][ T2141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.071762][ T5849] veth0_macvtap: entered promiscuous mode [ 92.083525][ T5849] veth1_macvtap: entered promiscuous mode [ 92.098965][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.114757][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.169529][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.205434][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.239195][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.246507][ T992] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.276599][ T992] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.306031][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.337939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.357808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.368221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.429950][ T992] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.451550][ T992] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.461090][ T992] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.471466][ T992] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.540340][ T992] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.560039][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598991][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.649869][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.690016][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.735574][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.800083][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.821243][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.936405][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.963393][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.006676][ T992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.026425][ T992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.088365][ T5835] Bluetooth: hci1: command tx timeout [ 93.088875][ T51] Bluetooth: hci3: command tx timeout [ 93.093828][ T5835] Bluetooth: hci2: command tx timeout [ 93.114004][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.136911][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.197515][ T5835] Bluetooth: hci0: command tx timeout [ 93.205156][ T5962] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.6'. [ 93.267481][ T5835] Bluetooth: hci4: command tx timeout [ 93.391644][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.488715][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.499366][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.507218][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.527603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 94.768858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.778288][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.297587][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 98.728278][ T6005] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 99.987756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.010965][ T6017] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[6017] [ 100.107062][ T6017] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.114648][ T6017] overlayfs: failed to set xattr on upper [ 100.120969][ T6017] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.130849][ T6017] overlayfs: ...falling back to index=off. [ 100.136918][ T6017] overlayfs: ...falling back to uuid=null. [ 100.144398][ T6017] overlayfs: maximum fs stacking depth exceeded [ 100.200543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.303022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.889325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.294452][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 103.412103][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.1.28'. [ 103.542165][ T36] Bluetooth: (null): Invalid header checksum [ 103.563750][ T36] Bluetooth: (null): Invalid header checksum [ 103.648806][ T36] Bluetooth: (null): Invalid header checksum [ 103.759259][ T3021] Bluetooth: (null): Invalid header checksum [ 103.870631][ T2983] Bluetooth: (null): Invalid header checksum [ 107.207834][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'. [ 107.241572][ T6079] netlink: 16 bytes leftover after parsing attributes in process `syz.4.36'. [ 107.285856][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'. [ 107.288167][ T5850] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.357695][ T6079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'. [ 107.492263][ T5850] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 107.522129][ T5850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.547488][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.564978][ T5850] usb 4-1: config 0 descriptor?? [ 107.603398][ T6088] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.38'. [ 107.727467][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 107.753905][ T5920] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 107.776204][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.790579][ T5920] usb 1-1: config 0 has no interface number 0 [ 107.800035][ T5920] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 107.860978][ T5920] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.935451][ T6094] ======================================================= [ 107.935451][ T6094] WARNING: The mand mount option has been deprecated and [ 107.935451][ T6094] and is ignored by this kernel. Remove the mand [ 107.935451][ T6094] option from the mount to silence this warning. [ 107.935451][ T6094] ======================================================= [ 107.957246][ T5920] usb 1-1: config 0 interface 52 has no altsetting 0 [ 108.393824][ T6094] option changes via remount are deprecated (pid=6089 comm=syz.1.41) [ 108.399986][ T5920] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 108.468119][ T5920] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 108.482420][ T5920] usb 1-1: Manufacturer: syz [ 108.514204][ T5920] usb 1-1: config 0 descriptor?? [ 108.801537][ T5920] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.52/input/input5 [ 109.390083][ T5850] pegasus 4-1:0.0: can't reset MAC [ 109.602520][ T5850] pegasus 4-1:0.0: probe with driver pegasus failed with error -5 [ 109.644846][ C1] synaptics_usb 1-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 109.751119][ T5920] usb 1-1: USB disconnect, device number 2 [ 109.991406][ T5850] usb 4-1: USB disconnect, device number 2 [ 111.184021][ T6115] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.43'. [ 112.390096][ T6127] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'. [ 112.508739][ T6128] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.907036][ T6132] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.756395][ T6147] xt_cgroup: invalid path, errno=-2 [ 115.955830][ T6155] netlink: 180 bytes leftover after parsing attributes in process `syz.4.58'. [ 118.713039][ T6181] netlink: 32 bytes leftover after parsing attributes in process `syz.3.66'. [ 119.437555][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 123.655831][ T6245] lo speed is unknown, defaulting to 1000 [ 123.662470][ T6245] lo speed is unknown, defaulting to 1000 [ 123.676686][ T6245] lo speed is unknown, defaulting to 1000 [ 123.713796][ T6245] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.827988][ T6245] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 123.999651][ T6245] lo speed is unknown, defaulting to 1000 [ 124.020836][ T6245] lo speed is unknown, defaulting to 1000 [ 124.039797][ T6245] lo speed is unknown, defaulting to 1000 [ 124.058568][ T6245] lo speed is unknown, defaulting to 1000 [ 124.079700][ T6245] lo speed is unknown, defaulting to 1000 [ 129.580800][ T6295] netlink: 828 bytes leftover after parsing attributes in process `syz.2.96'. [ 129.692741][ T6295] netlink: 828 bytes leftover after parsing attributes in process `syz.2.96'. [ 130.409777][ T6303] ntfs3(nullb0): Primary boot signature is not NTFS. [ 130.419120][ T6303] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 133.529638][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.536176][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.480557][ T6331] netlink: 828 bytes leftover after parsing attributes in process `syz.0.108'. [ 134.548272][ T6336] netlink: 828 bytes leftover after parsing attributes in process `syz.0.108'. [ 134.847423][ T5950] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 135.044495][ T5950] usb 3-1: config 0 has no interfaces? [ 135.067108][ T5950] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 135.076273][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.086722][ T5950] usb 3-1: Product: syz [ 135.100442][ T5950] usb 3-1: Manufacturer: syz [ 135.123437][ T5950] usb 3-1: SerialNumber: syz [ 135.145581][ T5950] usb 3-1: config 0 descriptor?? [ 135.585565][ T6337] program syz.2.106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 135.757677][ T6346] syz.0.111 uses obsolete (PF_INET,SOCK_PACKET) [ 135.991429][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 137.967791][ T5838] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 140.715340][ T6383] netlink: 828 bytes leftover after parsing attributes in process `syz.0.121'. [ 140.754932][ T6370] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.771282][ T5950] usb 3-1: USB disconnect, device number 2 [ 140.790571][ T6386] netlink: 828 bytes leftover after parsing attributes in process `syz.0.121'. [ 140.970812][ T6370] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.230927][ T6390] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 141.316038][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 141.325098][ T6390] netlink: 20 bytes leftover after parsing attributes in process `syz.1.122'. [ 141.770696][ T6390] geneve2: entered promiscuous mode [ 141.777457][ T6390] geneve2: entered allmulticast mode [ 141.892770][ T6370] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.919391][ T6370] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.952229][ T6370] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.032193][ T6370] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.207267][ T6370] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.213613][ T6370] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.225783][ T6370] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 142.239469][ T6370] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.396895][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.019555][ T6370] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.065942][ T6370] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 143.169768][ T6405] QAT: Device 11 not found [ 143.202831][ T6370] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.211703][ T6370] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 143.235672][ T6370] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 144.404175][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.410375][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 144.416424][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.447506][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.257971][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 146.448775][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.455022][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.461242][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.504439][ T6429] netlink: 'syz.3.133': attribute type 72 has an invalid length. [ 146.528099][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.536723][ T6429] netlink: 'syz.3.133': attribute type 8 has an invalid length. [ 146.601213][ T6432] netlink: 'syz.3.133': attribute type 72 has an invalid length. [ 146.617707][ T6432] netlink: 'syz.3.133': attribute type 8 has an invalid length. [ 147.338612][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 148.527700][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.538594][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.544841][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.187050][ T6449] bridge0: entered promiscuous mode [ 149.214932][ T6449] macvlan2: entered promiscuous mode [ 149.407883][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 150.785483][ T6470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.147'. [ 151.659607][ T6478] orangefs_mount: mount request failed with -4 [ 152.125893][ T6482] netlink: 'syz.1.150': attribute type 72 has an invalid length. [ 152.186797][ T6482] netlink: 'syz.1.150': attribute type 8 has an invalid length. [ 153.401503][ T6482] netlink: 'syz.1.150': attribute type 72 has an invalid length. [ 153.528629][ T6482] netlink: 'syz.1.150': attribute type 8 has an invalid length. [ 153.720655][ T6497] netlink: 48 bytes leftover after parsing attributes in process `syz.0.155'. [ 156.625226][ T6528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.164'. [ 156.765079][ T49] Bluetooth: (null): Invalid header checksum [ 156.780271][ T49] Bluetooth: (null): Invalid header checksum [ 156.868091][ T49] Bluetooth: (null): Invalid header checksum [ 156.984031][ T6067] Bluetooth: (null): Invalid header checksum [ 157.088657][ T3021] Bluetooth: (null): Invalid header checksum [ 157.200175][ T992] Bluetooth: (null): Invalid header checksum [ 157.253660][ T6536] ntfs3(nullb0): Primary boot signature is not NTFS. [ 157.292906][ T6536] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 157.584505][ T6541] netlink: 'syz.2.168': attribute type 72 has an invalid length. [ 157.602168][ T6541] netlink: 'syz.2.168': attribute type 8 has an invalid length. [ 157.684439][ T6543] netlink: 'syz.2.168': attribute type 72 has an invalid length. [ 157.707240][ T6543] netlink: 'syz.2.168': attribute type 8 has an invalid length. [ 159.337545][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 160.257571][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 160.332968][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 160.399130][ T24] usb 2-1: config 0 has no interface number 0 [ 160.567561][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 161.079071][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.097168][ T24] usb 2-1: Product: syz [ 161.345189][ T24] usb 2-1: Manufacturer: syz [ 161.567552][ T24] usb 2-1: SerialNumber: syz [ 161.618464][ T24] usb 2-1: config 0 descriptor?? [ 161.698987][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 161.734132][ T24] usb 2-1: selecting invalid altsetting 1 [ 161.901753][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 161.931498][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 161.946115][ T6577] netlink: 32 bytes leftover after parsing attributes in process `syz.4.178'. [ 161.989838][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 162.004696][ T24] usb 2-1: media controller created [ 162.069955][ T1140] Bluetooth: (null): Invalid header checksum [ 162.080336][ T1140] Bluetooth: (null): Invalid header checksum [ 162.165666][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 162.186606][ T3021] Bluetooth: (null): Invalid header checksum [ 163.155760][ T6574] orangefs_mount: mount request failed with -4 [ 164.262006][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 164.292402][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 164.301794][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 164.515141][ T6590] netlink: 892 bytes leftover after parsing attributes in process `syz.0.182'. [ 164.558792][ T24] usb 2-1: USB disconnect, device number 2 [ 164.598847][ T6592] netlink: 892 bytes leftover after parsing attributes in process `syz.0.182'. [ 167.752814][ T6616] netlink: 32 bytes leftover after parsing attributes in process `syz.2.190'. [ 168.250483][ T992] Bluetooth: (null): Invalid header checksum [ 168.256674][ T992] Bluetooth: (null): Invalid header checksum [ 168.270128][ T3021] Bluetooth: (null): Invalid header checksum [ 168.295478][ T3021] Bluetooth: (null): Invalid header checksum [ 168.341455][ T3021] Bluetooth: (null): Invalid header checksum [ 169.078657][ T2141] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.202225][ T6630] dlm: non-version read from control device 0 [ 169.472218][ T6635] netlink: 892 bytes leftover after parsing attributes in process `syz.4.194'. [ 169.546860][ T6636] netlink: 892 bytes leftover after parsing attributes in process `syz.4.194'. [ 171.647245][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 171.655356][ T51] Bluetooth: hci5: command 0xfc11 tx timeout [ 172.803987][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 177.082241][ T6681] netlink: 892 bytes leftover after parsing attributes in process `syz.0.207'. [ 177.148559][ T6682] netlink: 892 bytes leftover after parsing attributes in process `syz.0.207'. [ 180.467406][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 184.864515][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.228'. [ 185.336782][ T30] audit: type=1800 audit(1751494240.949:2): pid=6744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.227" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 186.329528][ T6763] bridge0: entered promiscuous mode [ 186.334883][ T6763] macvlan2: entered promiscuous mode [ 187.307062][ T6774] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.234'. [ 190.549714][ T6798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 191.189949][ T6812] ntfs3(nullb0): Primary boot signature is not NTFS. [ 191.199001][ T6812] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 193.213140][ T6821] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.246'. [ 194.406704][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.414538][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.758114][ T6831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 196.799513][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 199.827598][ T6874] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.261'. [ 200.737563][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 203.114934][ T24] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 204.466944][ T24] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 204.665873][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.998850][ T24] usb 1-1: config 0 descriptor?? [ 205.327038][ T24] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 205.338402][ T24] asix 1-1:0.0: probe with driver asix failed with error -71 [ 205.997471][ T24] usb 1-1: USB disconnect, device number 3 [ 206.004265][ T6920] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.275'. [ 207.603806][ T51] Bluetooth: hci5: command 0xfc11 tx timeout [ 207.621053][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 210.061739][ T6966] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 210.732183][ T6965] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 211.236129][ T6977] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.290'. [ 212.560900][ T6978] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[6978] [ 212.805693][ T6987] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 212.846635][ T6987] overlayfs: failed to set xattr on upper [ 212.854477][ T6987] overlayfs: ...falling back to redirect_dir=nofollow. [ 212.873186][ T6987] overlayfs: ...falling back to index=off. [ 213.127781][ T6987] overlayfs: ...falling back to uuid=null. [ 213.157529][ T6987] overlayfs: maximum fs stacking depth exceeded [ 215.819729][ T7016] ntfs3(nullb0): Primary boot signature is not NTFS. [ 215.826670][ T7016] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 219.791033][ T7048] orangefs_mount: mount request failed with -4 [ 222.500486][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.318'. [ 224.647890][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 224.847665][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 224.865253][ T43] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 224.897187][ T43] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 224.923122][ T43] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.938632][ T7100] orangefs_mount: mount request failed with -4 [ 225.001452][ T43] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 225.496796][ T43] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 225.525608][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.537339][ T43] usb 5-1: Product: syz [ 225.546117][ T43] usb 5-1: Manufacturer: syz [ 225.562693][ T43] usb 5-1: SerialNumber: syz [ 225.601871][ T43] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input6 [ 227.087906][ T43] imon:send_packet: packet tx failed (-71) [ 227.117910][ T43] imon 5-1:155.0: panel buttons/knobs setup failed [ 227.135136][ T43] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 227.237910][ T43] (id 0x00) [ 227.573733][ T30] audit: type=1800 audit(1751494283.529:3): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.329" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 227.990988][ T43] rc_core: IR keymap rc-imon-pad not found [ 228.014309][ T43] Registered IR keymap rc-empty [ 228.024513][ T43] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 228.090352][ T43] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 228.145370][ T43] imon:send_packet: packet tx failed (-71) [ 228.187631][ T43] imon 5-1:155.0: remote input dev register failed [ 228.465474][ T43] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 229.312530][ T43] imon 5-1:155.0: unable to initialize intf0, err 0 [ 230.184385][ T43] imon:imon_probe: failed to initialize context! [ 230.190966][ T43] imon 5-1:155.0: unable to register, err -19 [ 230.218799][ T43] usb 5-1: USB disconnect, device number 2 [ 233.088262][ T7155] Zero length message leads to an empty skb [ 233.156236][ T7167] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.341'. [ 234.264944][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 234.310516][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.342'. [ 234.648903][ T6654] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.869075][ T6654] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.887384][ T6654] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.917542][ T6654] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.083963][ T7216] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.353'. [ 238.169655][ T6654] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.860048][ T7218] bridge0: entered promiscuous mode [ 238.871174][ T7218] macvlan2: entered promiscuous mode [ 239.977733][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 240.847685][ T43] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 241.118181][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 241.224469][ T43] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 241.377032][ T43] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 241.571177][ T43] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.727508][ T43] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 242.012518][ T43] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 242.516337][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.528817][ T43] usb 2-1: Product: syz [ 242.533120][ T43] usb 2-1: Manufacturer: syz [ 242.892349][ T43] usb 2-1: SerialNumber: syz [ 242.947079][ T43] usb 2-1: can't set config #155, error -71 [ 243.081694][ T7242] : entered promiscuous mode [ 243.738750][ T43] usb 2-1: USB disconnect, device number 3 [ 244.909964][ T7261] ntfs3(nullb0): Primary boot signature is not NTFS. [ 244.916959][ T7261] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 245.475163][ T2141] Bluetooth: hci5: Frame reassembly failed (-84) [ 246.895513][ T7289] lo speed is unknown, defaulting to 1000 [ 247.417792][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 247.425518][ T51] Bluetooth: hci5: command 0xfc11 tx timeout [ 249.076247][ T7298] bridge1: entered promiscuous mode [ 249.801971][ T7321] siw: device registration error -23 [ 253.206541][ T7290] Bluetooth: hci5: Frame reassembly failed (-84) [ 254.800614][ T5835] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 255.432133][ T7357] orangefs_mount: mount request failed with -4 [ 255.738337][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.745273][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.070017][ T7388] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 260.823144][ T7397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.832527][ T7397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.839092][ T7397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.845743][ T7397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.882164][ T7397] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.857557][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.861458][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.864893][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.870516][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.977966][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 265.454072][ T7444] orangefs_mount: mount request failed with -4 [ 266.728809][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 267.633589][ T7475] loop6: detected capacity change from 0 to 524287999 [ 269.005327][ T7492] syz.0.425 (7492): /proc/7491/oom_adj is deprecated, please use /proc/7491/oom_score_adj instead. [ 269.149103][ T7494] siw: device registration error -23 [ 271.452552][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 272.772790][ T7533] ntfs3(nullb0): Primary boot signature is not NTFS. [ 272.779909][ T7533] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 274.041198][ T7549] siw: device registration error -23 [ 279.279698][ T7583] ntfs3(nullb0): Primary boot signature is not NTFS. [ 279.286796][ T7583] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 279.608779][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 280.043652][ T7585] vivid-000: kernel_thread() failed [ 281.708276][ T7586] orangefs_mount: mount request failed with -4 [ 283.792632][ T7597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.103615][ T7597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.385998][ T7597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.674266][ T7633] ntfs3(nullb0): Primary boot signature is not NTFS. [ 285.684730][ T7633] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 286.077447][ T7597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.329729][ T7641] siw: device registration error -23 [ 286.563897][ T6067] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.586853][ T6067] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.602121][ T6067] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.624258][ T6067] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.079359][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.467'. [ 289.194015][ T7656] orangefs_mount: mount request failed with -4 [ 291.370042][ T7684] kvm: kvm [7683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 292.401093][ T7684] kvm: kvm [7683]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 295.123762][ T7706] siw: device registration error -23 [ 300.528619][ T5838] Bluetooth: hci4: command 0x0405 tx timeout [ 300.607506][ T7791] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 300.617407][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.817472][ T7801] macvlan3: entered promiscuous mode [ 301.173897][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 301.200131][ T7791] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.210452][ T7791] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.588778][ T7791] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.595846][ T7791] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 302.687516][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 303.328023][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.648137][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.654266][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 304.617471][ T7346] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 305.368333][ T7346] usb 4-1: Using ep0 maxpacket: 32 [ 305.465304][ T7831] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.498'. [ 306.165837][ T7346] usb 4-1: device descriptor read/all, error -71 [ 306.232141][ T7833] mmap: syz.0.500 (7833) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 306.902870][ T7848] netlink: 52 bytes leftover after parsing attributes in process `syz.4.504'. [ 307.808791][ T7858] ntfs3(nullb0): Primary boot signature is not NTFS. [ 307.815684][ T7858] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 308.149412][ T7859] netlink: 'syz.4.507': attribute type 13 has an invalid length. [ 308.586856][ T7859] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.595480][ T7859] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.253829][ T5834] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 311.467424][ T5834] usb 1-1: Using ep0 maxpacket: 32 [ 311.475147][ T5834] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 311.489407][ T5834] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 311.544526][ T5834] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.588066][ T5834] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 311.670689][ T5834] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 311.717075][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.766264][ T5834] usb 1-1: Product: syz [ 311.797313][ T5834] usb 1-1: Manufacturer: syz [ 311.830855][ T5834] usb 1-1: SerialNumber: syz [ 311.862286][ T5834] usb 1-1: can't set config #155, error -71 [ 311.877663][ T5834] usb 1-1: USB disconnect, device number 4 [ 312.185925][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.236061][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.334157][ T7883] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.512'. [ 315.156662][ T5920] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 315.529653][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 315.772357][ T5920] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 315.929296][ T6655] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.955673][ T5920] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 316.199585][ T5920] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 316.409765][ T6655] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.426334][ T6655] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.435389][ T6655] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.444728][ T5920] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 316.534961][ T5920] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 316.589583][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.617741][ T5920] usb 4-1: Product: syz [ 316.622071][ T5920] usb 4-1: Manufacturer: syz [ 316.626699][ T5920] usb 4-1: SerialNumber: syz [ 316.692181][ T5920] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input8 [ 316.746162][ T7898] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 317.172837][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.179447][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.316949][ T5920] imon:send_packet: packet tx failed (-71) [ 318.377549][ T5920] imon 4-1:155.0: panel buttons/knobs setup failed [ 318.413380][ T5920] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 318.444544][ T5920] (id 0x00) [ 319.266470][ T5920] rc_core: IR keymap rc-imon-pad not found [ 319.723104][ T5920] Registered IR keymap rc-empty [ 319.724138][ T5920] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 319.724206][ T5920] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 319.725325][ T5920] imon:send_packet: packet tx failed (-71) [ 319.738664][ T5920] imon 4-1:155.0: remote input dev register failed [ 319.741416][ T5920] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 320.280909][ T5920] imon 4-1:155.0: unable to initialize intf0, err 0 [ 320.300222][ T5920] imon:imon_probe: failed to initialize context! [ 320.306696][ T5920] imon 4-1:155.0: unable to register, err -19 [ 320.686833][ T7927] siw: device registration error -23 [ 320.696670][ T5920] usb 4-1: USB disconnect, device number 5 [ 321.479287][ T7934] netlink: 64 bytes leftover after parsing attributes in process `syz.3.526'. [ 327.039591][ T5963] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 327.369485][ T5963] usb 2-1: Using ep0 maxpacket: 32 [ 327.483710][ T5963] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 327.699659][ T5963] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 328.848405][ T5963] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.198602][ T7974] siw: device registration error -23 [ 329.931037][ T5963] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 330.106123][ T5963] usb 2-1: string descriptor 0 read error: -71 [ 330.146752][ T5963] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 330.207492][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.231186][ T5963] usb 2-1: can't set config #155, error -71 [ 330.268929][ T5963] usb 2-1: USB disconnect, device number 4 [ 330.479074][ T7991] netlink: 64 bytes leftover after parsing attributes in process `syz.3.541'. [ 330.990346][ T7290] Bluetooth: (null): Invalid header checksum [ 332.600210][ T5932] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 332.773609][ T5963] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 332.827564][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 333.288216][ T5932] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 333.296712][ T5932] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 333.367477][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.398487][ T5963] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 333.399172][ T5932] usb 4-1: config 0 has no interface number 0 [ 333.418188][ T5963] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 333.428372][ T5932] usb 4-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 333.462267][ T5932] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 333.478387][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 333.494246][ T5963] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 333.521650][ T5932] usb 4-1: Product: syz [ 333.540500][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.592533][ T8002] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 333.609118][ T5932] usb 4-1: config 0 descriptor?? [ 333.644867][ T5963] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 334.834248][ T92] usb 5-1: USB disconnect, device number 3 [ 335.939215][ T5963] usb 4-1: USB disconnect, device number 6 [ 337.900979][ T8051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.561'. [ 340.849898][ T8071] vlan2: entered promiscuous mode [ 340.855421][ T8071] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 340.868681][ T8071] vlan2: entered allmulticast mode [ 340.873956][ T8071] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 344.787532][ T5920] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 346.824911][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.574'. [ 349.614421][ T8123] siw: device registration error -23 [ 352.316939][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.329537][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.342044][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.363451][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.378181][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.390621][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.452267][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.475273][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.488717][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 352.505403][ T8144] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 353.098060][ T8148] Bluetooth: MGMT ver 1.23 [ 353.321169][ T8150] capability: warning: `syz.0.589' uses 32-bit capabilities (legacy support in use) [ 353.531739][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 354.364579][ T8160] siw: device registration error -23 [ 354.916799][ T51] Bluetooth: hci3: Malformed Event: 0x02 [ 358.492144][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 360.570236][ T8210] netlink: 'syz.3.610': attribute type 1 has an invalid length. [ 360.580442][ T8210] netlink: 'syz.3.610': attribute type 3 has an invalid length. [ 360.592846][ T8210] netlink: 224 bytes leftover after parsing attributes in process `syz.3.610'. [ 363.635234][ T6655] Bluetooth: (null): Invalid header checksum [ 363.645622][ T6655] Bluetooth: (null): Invalid header checksum [ 363.685562][ T6655] Bluetooth: (null): Invalid header checksum [ 363.723323][ T6909] Bluetooth: (null): Invalid header checksum [ 363.849356][ T8240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.619'. [ 365.797499][ T92] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 365.987607][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 366.056223][ T92] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 366.087518][ T92] usb 2-1: config 0 has no interface number 0 [ 366.127447][ T92] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.183544][ T92] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 366.212887][ T92] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.248541][ T92] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.287353][ T92] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 366.296510][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.324296][ T92] usb 2-1: config 0 descriptor?? [ 366.594327][ T92] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 367.738499][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'. [ 367.932372][ T92] usb 2-1: USB disconnect, device number 5 [ 367.957991][ T92] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 369.679172][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 377.419992][ T8345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'. [ 378.495183][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 378.614504][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.628216][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.879143][ T8387] vlan2: entered promiscuous mode [ 381.921432][ T8387] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 381.968536][ T8387] vlan2: entered allmulticast mode [ 382.096085][ T8387] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 382.985674][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.660'. [ 387.688982][ T8428] "syz.0.667" (8428) uses obsolete ecb(arc4) skcipher [ 387.935283][ T8449] ntfs3(nullb0): Primary boot signature is not NTFS. [ 387.942301][ T8449] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 388.891031][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 391.638266][ T8491] netlink: 'syz.0.683': attribute type 1 has an invalid length. [ 391.685336][ T8491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.790178][ T8491] 8021q: adding VLAN 0 to HW filter on device bond1 [ 391.818496][ T8491] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 391.832987][ T8491] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 391.848599][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.0.683'. [ 392.191735][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 392.748097][ T8495] veth3: entered promiscuous mode [ 392.790204][ T8495] bond1: (slave veth3): Enslaving as an active interface with a down link [ 392.808424][ T8498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.905304][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 397.892769][ T8575] netlink: 32 bytes leftover after parsing attributes in process `syz.4.707'. [ 398.352093][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880592bd400: rx timeout, send abort [ 398.362485][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880592bd400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 398.379279][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880592bcc00: rx timeout, send abort [ 398.388771][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880592bcc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 399.567515][ T5920] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 399.863933][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 399.965250][ T5920] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 400.173429][ T5920] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 400.536694][ T5920] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 400.569860][ T8589] macvlan3: entered promiscuous mode [ 400.714933][ T5920] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 401.385025][ T5920] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 401.486257][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.582395][ T5920] usb 5-1: Product: syz [ 401.638543][ T5920] usb 5-1: Manufacturer: syz [ 401.796373][ T5920] usb 5-1: SerialNumber: syz [ 401.863633][ T5920] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input10 [ 403.314680][ T5920] imon:send_packet: packet tx failed (-71) [ 403.407748][ T5920] imon 5-1:155.0: panel buttons/knobs setup failed [ 403.414462][ T5920] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 403.443032][ T5920] (id 0x00) [ 403.857397][ T5920] rc_core: IR keymap rc-imon-pad not found [ 403.863429][ T5920] Registered IR keymap rc-empty [ 404.142769][ T5920] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 404.155181][ T5920] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 404.166744][ T5920] imon:send_packet: packet tx failed (-71) [ 404.187500][ T5920] imon 5-1:155.0: remote input dev register failed [ 404.194527][ T5920] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 404.436078][ T5920] imon 5-1:155.0: unable to initialize intf0, err 0 [ 404.443482][ T5920] imon:imon_probe: failed to initialize context! [ 404.451083][ T5920] imon 5-1:155.0: unable to register, err -19 [ 404.600577][ T5920] usb 5-1: USB disconnect, device number 5 [ 407.603519][ T8643] binder_alloc: 8642: binder_alloc_buf, no vma [ 409.139700][ T8658] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 409.457306][ T7346] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 409.659822][ T7346] usb 4-1: Using ep0 maxpacket: 32 [ 409.674342][ T7346] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 409.695959][ T7346] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 409.714591][ T7346] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.997308][ T7346] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 410.015767][ T7346] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 410.026186][ T7346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.034590][ T7346] usb 4-1: Product: syz [ 410.039102][ T7346] usb 4-1: Manufacturer: syz [ 410.045559][ T7346] usb 4-1: SerialNumber: syz [ 410.069070][ T7346] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input12 [ 411.443716][ T7346] imon:send_packet: packet tx failed (-71) [ 411.507395][ T7346] imon 4-1:155.0: panel buttons/knobs setup failed [ 411.567366][ T7346] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 411.607036][ T7346] (id 0x00) [ 412.117495][ T7346] rc_core: IR keymap rc-imon-pad not found [ 412.139366][ T7346] Registered IR keymap rc-empty [ 412.167651][ T7346] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 412.225801][ T7346] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 412.407422][ T7346] imon:send_packet: packet tx failed (-71) [ 412.496003][ T7346] imon 4-1:155.0: remote input dev register failed [ 412.523332][ T7346] imon 4-1:155.0: imon_init_intf0: rc device setup failed [ 412.759373][ T7346] imon 4-1:155.0: unable to initialize intf0, err 0 [ 412.766034][ T7346] imon:imon_probe: failed to initialize context! [ 412.884311][ T8691] netlink: 52 bytes leftover after parsing attributes in process `syz.3.737'. [ 413.928007][ T7346] imon 4-1:155.0: unable to register, err -19 [ 414.038473][ T7346] usb 4-1: USB disconnect, device number 7 [ 414.708562][ T51] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 417.528894][ T7346] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 418.007460][ T7346] usb 1-1: Using ep0 maxpacket: 32 [ 418.023782][ T7346] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 419.007692][ T92] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 419.527525][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 419.591895][ T7346] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 419.629805][ T92] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 419.789308][ T92] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 420.073221][ T92] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.637160][ T7346] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 420.648392][ T7346] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 420.672501][ T7346] usb 1-1: string descriptor 0 read error: -71 [ 420.679130][ T7346] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 420.688298][ T7346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.702379][ T7346] usb 1-1: can't set config #155, error -71 [ 420.708957][ T92] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 420.710936][ T7346] usb 1-1: USB disconnect, device number 5 [ 421.011397][ T92] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 421.060651][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.069340][ T92] usb 2-1: Product: syz [ 421.073540][ T92] usb 2-1: Manufacturer: syz [ 421.078255][ T92] usb 2-1: SerialNumber: syz [ 421.092828][ T92] usb 2-1: can't set config #155, error -71 [ 421.123516][ T92] usb 2-1: USB disconnect, device number 6 [ 421.469123][ T8723] 9pnet_virtio: no channels available for device syz [ 422.272665][ T8737] netlink: 52 bytes leftover after parsing attributes in process `syz.1.749'. [ 422.468746][ T7290] Bluetooth: (null): Invalid header checksum [ 422.508346][ T8724] lo speed is unknown, defaulting to 1000 [ 422.525475][ T7290] Bluetooth: (null): Invalid header checksum [ 422.580401][ T992] Bluetooth: (null): Invalid header checksum [ 424.057307][ T7346] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 424.437297][ T7346] usb 2-1: Using ep0 maxpacket: 32 [ 424.710499][ T8753] orangefs_mount: mount request failed with -4 [ 424.731559][ T7346] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 424.815180][ T7346] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 424.837902][ T7346] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 424.846151][ T7346] usb 2-1: Product: syz [ 424.860270][ T7346] usb 2-1: Manufacturer: syz [ 424.865036][ T7346] usb 2-1: SerialNumber: syz [ 424.883067][ T7346] usb 2-1: config 0 descriptor?? [ 424.891407][ T8750] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.320850][ T92] usb 2-1: USB disconnect, device number 7 [ 428.697520][ T8792] netlink: 52 bytes leftover after parsing attributes in process `syz.1.762'. [ 429.438569][ T49] Bluetooth: (null): Invalid header checksum [ 430.745581][ T8810] netlink: 32 bytes leftover after parsing attributes in process `syz.3.768'. [ 430.880244][ T992] Bluetooth: (null): Invalid header checksum [ 431.325006][ T992] Bluetooth: (null): Invalid header checksum [ 432.544933][ T8816] orangefs_mount: mount request failed with -4 [ 433.918083][ T8833] netlink: 52 bytes leftover after parsing attributes in process `syz.0.775'. [ 434.522151][ T8826] 9pnet_virtio: no channels available for device syz [ 435.036290][ T8835] ntfs3(nullb0): Primary boot signature is not NTFS. [ 435.043296][ T8835] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 437.187597][ T7346] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 437.564708][ T992] bridge_slave_1: left allmulticast mode [ 437.588704][ T7346] usb 1-1: Using ep0 maxpacket: 32 [ 437.685607][ T992] bridge_slave_1: left promiscuous mode [ 437.722943][ T7346] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 437.842357][ T992] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.930172][ T7346] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 438.172827][ T992] bridge_slave_0: left allmulticast mode [ 438.173355][ T7346] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.200192][ T7346] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 438.447033][ T7346] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 438.490953][ T992] bridge_slave_0: left promiscuous mode [ 439.185807][ T992] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.229820][ T7346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.327501][ T7346] usb 1-1: Product: syz [ 439.357303][ T7346] usb 1-1: Manufacturer: syz [ 439.361967][ T7346] usb 1-1: SerialNumber: syz [ 439.709458][ T8862] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[8862] [ 439.954591][ T7346] usb 1-1: can't set config #155, error -71 [ 439.992314][ T7346] usb 1-1: USB disconnect, device number 6 [ 440.052495][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.059240][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.577022][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.588901][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.599803][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.682559][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.698296][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 441.574882][ T992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.593857][ T992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.018962][ T8885] orangefs_mount: mount request failed with -4 [ 442.053323][ T992] bond0 (unregistering): Released all slaves [ 442.304203][ T8874] lo speed is unknown, defaulting to 1000 [ 443.234849][ T8897] netlink: 52 bytes leftover after parsing attributes in process `syz.1.787'. [ 443.291353][ T5838] Bluetooth: hci0: command tx timeout [ 444.061910][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 445.318673][ T8925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 445.331063][ T5838] Bluetooth: hci0: command tx timeout [ 447.368194][ T992] hsr_slave_0: left promiscuous mode [ 447.389251][ T992] hsr_slave_1: left promiscuous mode [ 447.409395][ T992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.417408][ T5838] Bluetooth: hci0: command tx timeout [ 447.471715][ T992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.597717][ T8941] block nbd2: shutting down sockets [ 448.702843][ T8951] orangefs_mount: mount request failed with -4 [ 449.497354][ T5838] Bluetooth: hci0: command tx timeout [ 450.611000][ T8981] netlink: 32 bytes leftover after parsing attributes in process `syz.3.801'. [ 450.675136][ T8982] siw: device registration error -23 [ 452.397881][ T992] team0 (unregistering): Port device team_slave_1 removed [ 452.564812][ T8996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.806'. [ 453.498996][ T992] team0 (unregistering): Port device team_slave_0 removed [ 453.525967][ T9000] ubi8: attaching mtd0 [ 453.661786][ T9000] ubi8: scanning is finished [ 453.666449][ T9000] ubi8: empty MTD device detected [ 453.842117][ T9000] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB) [ 453.862440][ T9000] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 3008 bytes [ 453.877536][ T9000] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 453.887799][ T9000] ubi8: VID header offset: 1024 (aligned 1024), data offset: 1088 [ 453.912665][ T9000] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 453.922295][ T9000] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 17 [ 453.935112][ T9000] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3948157774 [ 453.951095][ T9000] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 453.964320][ T9004] ubi8: background thread "ubi_bgt8d" started, PID 9004 [ 454.336315][ T8989] vlan2: entered promiscuous mode [ 454.349538][ T8989] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 454.390650][ T8989] vlan2: entered allmulticast mode [ 454.425306][ T8989] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 454.776728][ T8874] chnl_net:caif_netlink_parms(): no params data found [ 454.848352][ T8971] lo speed is unknown, defaulting to 1000 [ 455.563193][ T9025] 9p: Unknown Cache mode or invalid value fscach [ 457.703948][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.771406][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.809525][ T8874] bridge_slave_0: entered allmulticast mode [ 457.830342][ T8874] bridge_slave_0: entered promiscuous mode [ 458.366522][ T9043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.814'. [ 458.404439][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.484002][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.495994][ T3021] Bluetooth: (null): Invalid header checksum [ 458.526317][ T3021] Bluetooth: (null): Invalid header checksum [ 458.526401][ T8874] bridge_slave_1: entered allmulticast mode [ 458.555299][ T8874] bridge_slave_1: entered promiscuous mode [ 458.571124][ T9029] lo speed is unknown, defaulting to 1000 [ 459.024741][ T8874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.095727][ T8874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.272117][ T9063] openvswitch: netlink: Key 12 has unexpected len 644 expected 2 [ 461.113331][ T9062] orangefs_mount: mount request failed with -4 [ 461.334192][ T8874] team0: Port device team_slave_0 added [ 461.758703][ T8874] team0: Port device team_slave_1 added [ 462.279582][ T9090] binder: BINDER_SET_CONTEXT_MGR already set [ 462.516452][ T9090] binder: 9085:9090 ioctl 4018620d 200000000040 returned -16 [ 462.686884][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.701552][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.757444][ T8874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.790864][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.914373][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.940874][ T8874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.072186][ T9103] netlink: 32 bytes leftover after parsing attributes in process `syz.2.825'. [ 464.175553][ T8874] hsr_slave_0: entered promiscuous mode [ 464.194595][ T8874] hsr_slave_1: entered promiscuous mode [ 464.206745][ T8874] debugfs: 'hsr0' already exists in 'hsr' [ 464.215632][ T8874] Cannot create hsr debugfs directory [ 466.358155][ T9122] 9p: Unknown Cache mode or invalid value fscach [ 466.658569][ T9133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.832'. [ 468.186023][ T9151] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 468.759489][ T9154] binder: BINDER_SET_CONTEXT_MGR already set [ 468.765534][ T9154] binder: 9153:9154 ioctl 4018620d 200000000040 returned -16 [ 469.047530][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 469.066648][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 469.128336][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 469.188538][ T8874] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 469.225731][ T8874] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 469.256833][ T8874] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 469.292596][ T8874] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 469.733743][ T8874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.810845][ T8874] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.860887][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.868121][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.959408][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.966640][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.351230][ T8874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.512581][ T9233] orangefs_mount: mount request failed with -4 [ 475.947028][ T8874] veth0_vlan: entered promiscuous mode [ 476.167128][ T8874] veth1_vlan: entered promiscuous mode [ 476.424557][ T8874] veth0_macvtap: entered promiscuous mode [ 476.535568][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 476.557114][ T8874] veth1_macvtap: entered promiscuous mode [ 476.651334][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.743605][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.803056][ T3021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.849339][ T3021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.893760][ T7290] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.018546][ T7290] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.323962][ T7290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.350503][ T7290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.403250][ T7290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.412317][ T7290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.570177][ T5897] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 479.998925][ T5897] usb 4-1: config 0 has no interfaces? [ 480.016932][ T5897] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 480.147723][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.205598][ T5897] usb 4-1: config 0 descriptor?? [ 480.247057][ T5838] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 481.181014][ T9311] orangefs_mount: mount request failed with -4 [ 481.375657][ T92] usb 4-1: USB disconnect, device number 8 [ 482.358643][ T92] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 482.547757][ T92] usb 5-1: Using ep0 maxpacket: 8 [ 483.588595][ T92] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 483.633926][ T92] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 483.644630][ T92] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 483.656551][ T92] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 483.670277][ T92] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 483.683536][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.733238][ T5838] Bluetooth: hci4: unexpected cc 0x2039 length: 9 > 1 [ 483.740984][ T5838] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 484.004445][ T9354] macvlan3: entered promiscuous mode [ 484.033103][ T92] usb 5-1: GET_CAPABILITIES returned 0 [ 484.039223][ T92] usbtmc 5-1:16.0: can't read capabilities [ 485.006527][ T92] usb 5-1: USB disconnect, device number 6 [ 485.098247][ T9348] lo speed is unknown, defaulting to 1000 [ 486.053106][ T9359] orangefs_mount: mount request failed with -4 [ 487.835601][ T5838] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 487.845761][ T5838] Bluetooth: hci4: Injecting HCI hardware error event [ 487.854920][ T5838] Bluetooth: hci4: hardware error 0x00 [ 488.327651][ T9395] netlink: 'syz.2.882': attribute type 10 has an invalid length. [ 488.350105][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.883'. [ 488.554471][ T9395] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 489.897465][ T5838] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 490.835548][ T9430] orangefs_mount: mount request failed with -4 [ 491.779002][ T5920] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 492.157308][ T5920] usb 2-1: Using ep0 maxpacket: 8 [ 492.164347][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.181141][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.212572][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 493.050817][ T5838] Bluetooth: hci2: unknown advertising packet type: 0x6e [ 493.050900][ T5838] Bluetooth: hci2: Malformed LE Event: 0x02 [ 493.064764][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 493.076127][ T5920] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 493.085404][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.112991][ T5920] hub 2-1:1.0: bad descriptor, ignoring hub [ 493.122921][ T5920] hub 2-1:1.0: probe with driver hub failed with error -5 [ 493.131048][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 493.136295][ T5920] cdc_wdm 2-1:1.0: skipping garbage [ 493.145129][ T5920] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 493.151436][ T5920] cdc_wdm 2-1:1.0: Unknown control protocol [ 493.828809][ T9461] vlan2: entered promiscuous mode [ 493.828853][ T9461] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 493.853056][ T9461] vlan2: entered allmulticast mode [ 493.858488][ T9461] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 493.988553][ T9463] input: syz1 as /devices/virtual/input/input14 [ 494.168865][ T9475] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 494.243952][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.899'. [ 494.389750][ T9439] usb 2-1: reset high-speed USB device number 8 using dummy_hcd [ 494.842014][ T92] usb 2-1: USB disconnect, device number 8 [ 499.356897][ T9508] orangefs_mount: mount request failed with -4 [ 500.603884][ T9532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.912'. [ 501.283695][ T9534] netlink: 'syz.2.914': attribute type 12 has an invalid length. [ 501.374256][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.914'. [ 501.501574][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.511265][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.641728][ T9542] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 505.612788][ T9542] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 506.801322][ T9574] netlink: 64 bytes leftover after parsing attributes in process `syz.3.925'. [ 507.104096][ T9582] netlink: 32 bytes leftover after parsing attributes in process `syz.4.926'. [ 507.238808][ T6909] Bluetooth: (null): Invalid header checksum [ 508.207386][ T5963] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 509.092541][ T5963] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 509.282665][ T5963] usb 5-1: config 0 has no interface number 0 [ 509.290437][ T5963] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 509.301769][ T5963] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 509.354517][ T5963] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 510.137964][ T5963] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 510.149495][ T5963] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 510.162108][ T5963] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 510.176323][ T5963] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 510.186999][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.206077][ T5963] usb 5-1: config 0 descriptor?? [ 510.230737][ T9587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 510.250179][ T9587] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 510.311010][ T5963] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 510.330899][ T9588] lo speed is unknown, defaulting to 1000 [ 510.578538][ T5950] usb 5-1: USB disconnect, device number 7 [ 510.657161][ T5950] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 512.918936][ T5838] block nbd4: Receive control failed (result -32) [ 513.676722][ T9619] block nbd4: shutting down sockets [ 514.043104][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.2.940'. [ 515.390921][ T9623] macvlan3: entered promiscuous mode [ 516.489940][ T9639] lo speed is unknown, defaulting to 1000 [ 516.650198][ T9650] lo speed is unknown, defaulting to 1000 [ 521.217727][ T5932] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 521.339125][ T9685] netlink: 32 bytes leftover after parsing attributes in process `syz.4.954'. [ 521.945265][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 521.965814][ T5932] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 522.080129][ T5932] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 522.092278][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 522.100624][ T5932] usb 1-1: Product: syz [ 522.104914][ T5932] usb 1-1: Manufacturer: syz [ 522.111027][ T5932] usb 1-1: SerialNumber: syz [ 522.142273][ T5932] usb 1-1: config 0 descriptor?? [ 522.163793][ T9679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 523.256491][ T7346] usb 1-1: USB disconnect, device number 7 [ 525.277650][ T9718] ntfs3(nullb0): Primary boot signature is not NTFS. [ 525.286357][ T9718] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 525.392407][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 525.748574][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 525.830589][ T5932] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 525.847527][ T5932] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 525.891478][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 525.927275][ T5932] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 526.169744][ T5932] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 526.219019][ T5932] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 526.988104][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.375530][ T5932] usb 3-1: usb_control_msg returned -32 [ 527.387400][ T5932] usbtmc 3-1:16.0: can't read capabilities [ 527.467075][ T9735] netlink: 32 bytes leftover after parsing attributes in process `syz.4.966'. [ 528.552913][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 528.896706][ T9741] macvlan3: entered promiscuous mode [ 530.042871][ T5920] usb 3-1: USB disconnect, device number 3 [ 531.142593][ T9756] orangefs_mount: mount request failed with -4 [ 532.817465][ T9777] netlink: 'syz.4.977': attribute type 10 has an invalid length. [ 532.988085][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 532.997079][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 533.005690][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 533.014995][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 533.023310][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 533.102119][ T9777] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 533.564711][ T2983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.020932][ T9782] lo speed is unknown, defaulting to 1000 [ 534.059274][ T2983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.227578][ T9790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 534.925756][ T2983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.138181][ T51] Bluetooth: hci2: command tx timeout [ 535.922744][ T2983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.137947][ T2983] bridge_slave_1: left allmulticast mode [ 537.167263][ T51] Bluetooth: hci2: command tx timeout [ 537.170500][ T2983] bridge_slave_1: left promiscuous mode [ 537.185972][ T2983] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.231439][ T9822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.988'. [ 537.395013][ T2983] bridge_slave_0: left allmulticast mode [ 537.502078][ T2983] bridge_slave_0: left promiscuous mode [ 537.573502][ T2983] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.760561][ T9829] siw: device registration error -23 [ 538.359226][ T2983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.372317][ T2983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.382693][ T2983] bond0 (unregistering): Released all slaves [ 538.406915][ T9782] chnl_net:caif_netlink_parms(): no params data found [ 540.144537][ T51] Bluetooth: hci2: command tx timeout [ 540.475502][ T9849] netlink: 32 bytes leftover after parsing attributes in process `syz.4.993'. [ 540.667577][ T2983] : left promiscuous mode [ 541.421751][ T9782] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.583244][ T9782] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.725625][ T9782] bridge_slave_0: entered allmulticast mode [ 541.755538][ T9782] bridge_slave_0: entered promiscuous mode [ 541.981515][ T9782] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.997383][ T9782] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.014033][ T9782] bridge_slave_1: entered allmulticast mode [ 542.043688][ T9782] bridge_slave_1: entered promiscuous mode [ 542.214718][ T51] Bluetooth: hci2: command tx timeout [ 542.364553][ T9888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1001'. [ 542.607971][ T9894] siw: device registration error -23 [ 543.004114][ T9782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.055160][ T9782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.324158][ T2983] hsr_slave_0: left promiscuous mode [ 544.245688][ T2983] hsr_slave_1: left promiscuous mode [ 544.268014][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.940195][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.071010][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.315427][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.762260][ T9922] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1007'. [ 546.772284][ T2983] veth1_macvtap: left promiscuous mode [ 546.794610][ T2983] veth0_macvtap: left promiscuous mode [ 546.800435][ T2983] veth1_vlan: left promiscuous mode [ 546.807070][ T2983] veth0_vlan: left promiscuous mode [ 546.900892][ T9926] program syz.4.1009 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.927520][ T9925] binder: 9923:9925 ioctl 4018620d 0 returned -22 [ 549.837897][ T9951] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1017'. [ 549.971728][ T12] Bluetooth: (null): Invalid header checksum [ 549.995125][ T12] Bluetooth: (null): Invalid header checksum [ 550.079083][ T992] Bluetooth: (null): Invalid header checksum [ 550.188985][ T992] Bluetooth: (null): Invalid header checksum [ 550.299301][ T59] Bluetooth: (null): Invalid header checksum [ 550.515238][ T5932] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 550.599429][ T9953] siw: device registration error -23 [ 550.647543][ T5932] usb 2-1: device descriptor read/64, error -71 [ 550.975963][ T9961] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1018'. [ 551.733271][ T2983] team0 (unregistering): Port device team_slave_1 removed [ 551.809918][ T2983] team0 (unregistering): Port device team_slave_0 removed [ 552.197588][ T5932] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 552.547379][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 552.580233][ T5932] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 552.654746][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 552.699851][ T5932] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 552.717943][ T5932] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.744017][ T5932] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 552.760877][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.099546][ T5932] usb 2-1: usb_control_msg returned -71 [ 553.116005][ T5932] usbtmc 2-1:16.0: can't read capabilities [ 553.122013][ T5950] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 553.212114][ T5932] usb 2-1: USB disconnect, device number 10 [ 553.249289][ T9976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 553.299719][ T5950] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 553.345485][ T5950] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.346222][ T9782] team0: Port device team_slave_0 added [ 553.384994][ T5950] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 553.389799][ T9782] team0: Port device team_slave_1 added [ 553.412950][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.609472][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.667184][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.740713][ T5950] usb 3-1: usb_control_msg returned -32 [ 553.750890][ T5950] usbtmc 3-1:16.0: can't read capabilities [ 553.757079][ T9782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.983099][ T9782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.066784][ T9989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1027'. [ 554.665477][ T9782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.703069][ T9782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.315739][ T9782] hsr_slave_0: entered promiscuous mode [ 555.357535][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 555.446596][ T9782] hsr_slave_1: entered promiscuous mode [ 555.538710][ T9782] debugfs: 'hsr0' already exists in 'hsr' [ 555.572099][ T9] usb 2-1: device descriptor read/64, error -71 [ 555.586285][ T9782] Cannot create hsr debugfs directory [ 555.877547][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 556.117490][ T9] usb 2-1: device descriptor read/64, error -71 [ 556.341128][ T9] usb usb2-port1: attempt power cycle [ 556.829172][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 556.982370][ T5932] usb 3-1: USB disconnect, device number 4 [ 557.001101][ T9] usb 2-1: device descriptor read/8, error -71 [ 558.265783][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 558.390187][T10013] ntfs3(nullb0): Primary boot signature is not NTFS. [ 558.397674][T10013] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 558.935079][ T9] usb 2-1: device not accepting address 14, error -71 [ 559.013449][ T9] usb usb2-port1: unable to enumerate USB device [ 560.039683][T10027] netlink: 'syz.0.1036': attribute type 13 has an invalid length. [ 561.062216][T10027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 561.224781][T10037] netlink: 'syz.4.1037': attribute type 10 has an invalid length. [ 561.742249][ T9782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 561.793796][ T9782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.840013][ T9782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 561.931955][ T9782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 563.107877][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.114253][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.214588][ T9782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.311085][ T9782] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.342656][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.349857][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.399276][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.406459][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.390949][ T9782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.764641][T10145] ntfs3(nullb0): Primary boot signature is not NTFS. [ 570.772178][T10145] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 571.989487][T10158] siw: device registration error -23 [ 572.668317][ T9782] veth0_vlan: entered promiscuous mode [ 572.925524][ T9782] veth1_vlan: entered promiscuous mode [ 573.103036][T10170] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1060'. [ 573.910640][ T9782] veth0_macvtap: entered promiscuous mode [ 573.965031][ T9782] veth1_macvtap: entered promiscuous mode [ 574.075918][T10176] erspan0: entered promiscuous mode [ 574.158705][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.206390][ T9782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.268498][ T2983] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.297277][ T992] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.314091][ T992] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.334376][ T992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 575.626848][T10206] ntfs3(nullb0): Primary boot signature is not NTFS. [ 575.627534][T10206] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 576.297800][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.297932][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.299693][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.299780][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.817340][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 577.239585][T10219] siw: device registration error -23 [ 579.243680][T10238] macvlan3: entered promiscuous mode [ 580.090369][T10249] ntfs3(nullb0): Primary boot signature is not NTFS. [ 580.097539][T10249] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 580.258797][T10247] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 580.291189][T10247] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 580.462785][T10247] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 580.483626][T10247] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 580.582502][T10247] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 580.610009][T10247] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 580.688140][T10247] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 580.793740][T10268] fuse: Bad value for 'fd' [ 580.879771][T10247] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 580.963338][T10274] netlink: 'syz.4.1082': attribute type 13 has an invalid length. [ 581.277532][T10274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 581.677446][ T7346] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 582.298284][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 582.305836][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 582.499974][ T7346] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 582.528350][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 582.537914][ T7346] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 582.563228][ T7346] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 582.688421][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 582.733264][ T7346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.829525][T10301] netlink: 'syz.0.1087': attribute type 10 has an invalid length. [ 584.607475][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 584.767200][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 586.017208][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 586.078796][T10327] ntfs3(nullb0): Primary boot signature is not NTFS. [ 586.086242][T10327] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 586.687272][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 586.848913][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 586.917223][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 586.937169][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 586.950503][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 586.967205][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 586.978374][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 586.992027][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 587.007181][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 587.027218][ T9] usb 3-1: Product: syz [ 587.031430][ T9] usb 3-1: Manufacturer: syz [ 587.106217][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 587.128927][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 587.144049][ T7346] usb 2-1: USB disconnect, device number 15 [ 587.151038][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 587.315179][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 589.266066][ T7346] usb 3-1: USB disconnect, device number 5 [ 589.577318][ T9999] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 589.619891][T10358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 589.867180][ T9999] usb 5-1: Using ep0 maxpacket: 8 [ 589.898909][ T9999] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 589.923425][ T9999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 590.564615][ T5963] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 590.667418][ T9999] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 590.677937][ T9999] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 590.690991][ T9999] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 590.700781][ T9999] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.772758][ T5963] usb 3-1: config 8 has an invalid interface number: 169 but max is 0 [ 590.790481][ T5963] usb 3-1: config 8 has no interface number 0 [ 590.808511][T10371] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 590.827231][ T5963] usb 3-1: config 8 interface 169 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 590.852435][ T5963] usb 3-1: config 8 interface 169 has no altsetting 0 [ 590.865162][ T5963] usb 3-1: New USB device found, idVendor=05ac, idProduct=9222, bcdDevice= f.a9 [ 590.877600][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.895871][ T5963] usb 3-1: Product: syz [ 590.907118][ T5963] usb 3-1: Manufacturer: syz [ 590.919238][ T5963] usb 3-1: SerialNumber: syz [ 590.945907][ T9999] usb 5-1: GET_CAPABILITIES returned 0 [ 590.945916][ T5963] appledisplay 3-1:8.169: Could not find int-in endpoint [ 590.968222][ T9999] usbtmc 5-1:16.0: can't read capabilities [ 591.020207][ T5963] usbhid 3-1:8.169: couldn't find an input interrupt endpoint [ 591.146770][ T9999] usb 5-1: USB disconnect, device number 8 [ 591.262267][ T5963] usb 3-1: USB disconnect, device number 6 [ 594.388518][T10395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1109'. [ 595.357212][T10285] Bluetooth: hci2: command 0x0c1a tx timeout [ 595.850925][T10389] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 595.871588][T10389] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 595.891903][T10389] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 595.898702][T10389] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 597.506585][T10419] netlink: 'syz.5.1113': attribute type 10 has an invalid length. [ 597.897398][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 597.903729][T10285] Bluetooth: hci3: command 0x0c1a tx timeout [ 597.968160][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 597.974356][T10285] Bluetooth: hci2: command 0x0c1a tx timeout [ 597.981026][ T5963] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 598.246513][T10419] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 598.257561][ T5963] usb 2-1: Using ep0 maxpacket: 8 [ 598.279366][T10423] macvlan3: entered promiscuous mode [ 598.356456][ T5963] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 598.437345][ T5963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 598.477277][ T5963] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 598.517291][ T5963] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.585354][ T5963] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 598.626253][ T5963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.936431][ T5963] usb 2-1: GET_CAPABILITIES returned 0 [ 598.942164][ T5963] usbtmc 2-1:16.0: can't read capabilities [ 599.170569][ T5963] usb 2-1: USB disconnect, device number 16 [ 599.878874][T10429] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 600.097189][T10429] usb 1-1: Using ep0 maxpacket: 8 [ 601.006854][T10429] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 601.053834][T10429] usb 1-1: config 0 has no interface number 0 [ 601.086890][T10429] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 601.117338][T10429] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 601.305703][T10429] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 601.317673][T10429] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.341678][T10429] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=b8.c5 [ 601.351190][T10429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.359564][T10429] usb 1-1: Product: syz [ 601.363741][T10429] usb 1-1: Manufacturer: syz [ 602.136119][T10429] usb 1-1: SerialNumber: syz [ 602.474982][T10429] usb 1-1: config 0 descriptor?? [ 604.280556][T10494] ntfs3(nullb0): Primary boot signature is not NTFS. [ 604.288403][T10494] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 605.453952][T10429] usb 1-1: can't set config #0, error -71 [ 606.218320][T10429] usb 1-1: USB disconnect, device number 8 [ 606.687221][ T9999] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 606.857821][ T9999] usb 2-1: Using ep0 maxpacket: 8 [ 607.293951][ T9999] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 607.318016][ T9999] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 607.413880][T10518] bridge0: entered promiscuous mode [ 607.426114][T10518] macvlan2: entered promiscuous mode [ 607.465874][ T9999] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 607.498671][ T9999] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 607.597211][ T9999] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 607.626703][ T9999] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 608.569396][ T9999] usb 2-1: GET_CAPABILITIES returned 0 [ 608.602734][ T9999] usbtmc 2-1:16.0: can't read capabilities [ 608.804310][ T9999] usb 2-1: USB disconnect, device number 17 [ 608.881049][T10547] ntfs3(nullb0): Primary boot signature is not NTFS. [ 608.888581][T10547] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 609.924963][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 612.381726][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1151'. [ 612.868760][T10588] siw: device registration error -23 [ 613.283191][T10556] orangefs_mount: mount request failed with -4 [ 616.138061][T10618] ntfs3(nullb0): Primary boot signature is not NTFS. [ 616.145013][T10618] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 620.222778][T10650] siw: device registration error -23 [ 622.448481][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 623.117370][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 624.270542][ T5932] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 624.297349][ T5932] usb 1-1: can't read configurations, error -71 [ 624.408073][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.424751][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.540190][T10702] siw: device registration error -23 [ 626.784693][T10718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.812722][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 628.693529][T10766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 628.808618][T10770] binder: 10769:10770 ioctl 4018620d 0 returned -22 [ 634.712607][T10840] ntfs3(nullb0): Primary boot signature is not NTFS. [ 634.719975][T10840] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 635.797298][T10429] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 636.159697][T10429] usb 3-1: Using ep0 maxpacket: 32 [ 636.302109][T10429] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 636.510234][T10429] usb 3-1: config 155 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 636.809316][T10429] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 636.991567][T10429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.132459][T10429] usb 3-1: Product: syz [ 637.348828][T10429] usb 3-1: Manufacturer: syz [ 638.177168][T10429] usb 3-1: SerialNumber: syz [ 638.359930][T10429] usb 3-1: can't set config #155, error -71 [ 638.509409][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1205'. [ 638.625341][T10429] usb 3-1: USB disconnect, device number 7 [ 641.847681][T10880] orangefs_mount: mount request failed with -4 [ 642.568214][T10901] ntfs3(nullb0): Primary boot signature is not NTFS. [ 642.575606][T10901] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 645.337303][ T5932] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 646.380279][ T5932] usb 1-1: Using ep0 maxpacket: 32 [ 646.428085][ T5932] usb 1-1: device descriptor read/all, error -71 [ 646.719907][T10938] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1223'. [ 646.747222][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 646.852925][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 646.857567][ T5932] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 646.870468][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 646.880197][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 646.892417][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 646.900498][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 646.947167][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 647.047550][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 647.098987][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 647.138877][ T5932] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 647.177180][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 647.188665][ T5932] usb 1-1: config 0 has no interface number 0 [ 647.194814][ T5932] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 647.357134][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.100172][T10940] lo speed is unknown, defaulting to 1000 [ 648.152985][ T5932] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 648.163917][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.185243][ T5932] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 648.199937][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.219422][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 648.275234][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 648.287019][ T5932] usb 1-1: Product: syz [ 648.291506][ T5932] usb 1-1: SerialNumber: syz [ 648.296347][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 648.527162][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.548134][ T5932] usb 1-1: config 0 descriptor?? [ 648.565185][ T5932] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 648.572289][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.590702][ T5932] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input15 [ 648.600877][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.624849][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 648.641194][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 648.719285][ T9] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 648.746033][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 648.774815][ T9] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 648.801924][ T9] usb 2-1: string descriptor 0 read error: -22 [ 648.815227][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 648.825090][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.926004][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 648.935133][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 648.942722][ T51] Bluetooth: hci5: command tx timeout [ 648.942778][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 648.955629][ T5932] usb 1-1: USB disconnect, device number 12 [ 648.961767][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 648.961792][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 648.988267][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 649.193200][ T9] usb 2-1: USB disconnect, device number 18 [ 649.636347][ T5932] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 650.216537][T10957] orangefs_mount: mount request failed with -4 [ 650.411358][T10940] chnl_net:caif_netlink_parms(): no params data found [ 651.007178][ T51] Bluetooth: hci5: command tx timeout [ 651.940003][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 652.542674][ T5897] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 652.972430][ T9] usb 2-1: config 0 has no interfaces? [ 653.021224][ T9] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 653.034958][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 653.092964][ T51] Bluetooth: hci5: command tx timeout [ 653.163526][ T5897] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 653.176522][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.370479][ T9] usb 2-1: Product: syz [ 654.203330][ T5897] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 654.248711][ T9] usb 2-1: Manufacturer: syz [ 654.253344][ T9] usb 2-1: SerialNumber: syz [ 654.341918][ T5897] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 654.381832][ T9] usb 2-1: config 0 descriptor?? [ 654.452083][ T5897] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 654.483019][T10940] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.519367][ T5897] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 654.539047][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.567996][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.585812][ T5897] usb 3-1: Product: syz [ 654.591602][ T5897] usb 3-1: Manufacturer: syz [ 654.609163][ T5897] usb 3-1: SerialNumber: syz [ 654.650494][ T5897] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 654.667498][T10940] bridge_slave_0: entered allmulticast mode [ 654.673709][ T5897] imon 3-1:155.0: unable to initialize intf0, err -19 [ 654.696387][ T5897] imon:imon_probe: failed to initialize context! [ 654.707176][ T5897] imon 3-1:155.0: unable to register, err -19 [ 654.712425][T10940] bridge_slave_0: entered promiscuous mode [ 655.031397][ T6655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.059848][T10940] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.077988][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.186787][ T51] Bluetooth: hci5: command tx timeout [ 655.199913][T10940] bridge_slave_1: entered allmulticast mode [ 655.222752][T10940] bridge_slave_1: entered promiscuous mode [ 655.948834][ T92] usb 3-1: USB disconnect, device number 8 [ 657.413502][ T9] usb 2-1: can't set config #0, error -71 [ 657.473773][ T9] usb 2-1: USB disconnect, device number 19 [ 657.490312][T11024] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1239'. [ 657.509785][ T6655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.786221][T10940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.787218][ T92] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 658.133762][ T6655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.213659][ T92] usb 3-1: Using ep0 maxpacket: 16 [ 658.216091][T10940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.246974][ T92] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 658.261700][ T92] usb 3-1: config 0 has no interface number 0 [ 658.277490][ T92] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 658.324700][ T92] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 658.326874][ T92] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 658.326904][ T92] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 658.326925][ T92] usb 3-1: Product: syz [ 658.326941][ T92] usb 3-1: SerialNumber: syz [ 658.330211][ T92] usb 3-1: config 0 descriptor?? [ 658.334525][ T92] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 658.336714][ T92] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 658.360425][ T6655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.605816][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.606039][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.606269][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.606493][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.606707][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.606908][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.607332][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.607484][ T7346] usb 3-1: USB disconnect, device number 9 [ 658.607544][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 658.607564][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 658.650783][T10940] team0: Port device team_slave_0 added [ 658.656533][T10940] team0: Port device team_slave_1 added [ 658.665900][ T7346] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 659.341638][T10940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.341726][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.342025][T10940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.381179][T10940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.381202][T10940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.381245][T10940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.701522][T10940] hsr_slave_0: entered promiscuous mode [ 659.702298][T10940] hsr_slave_1: entered promiscuous mode [ 659.702765][T10940] debugfs: 'hsr0' already exists in 'hsr' [ 659.702779][T10940] Cannot create hsr debugfs directory [ 660.917804][T11062] lo speed is unknown, defaulting to 1000 [ 663.569822][ T5932] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 663.627316][ T6655] bridge_slave_1: left allmulticast mode [ 663.633022][ T6655] bridge_slave_1: left promiscuous mode [ 663.665249][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.698127][ T6655] bridge_slave_0: left allmulticast mode [ 663.704157][ T6655] bridge_slave_0: left promiscuous mode [ 663.712471][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.716581][T11080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1251'. [ 663.770450][ T5932] usb 2-1: Using ep0 maxpacket: 32 [ 663.790805][ T5932] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 663.825247][ T5932] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 663.916410][ T5932] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 663.976242][ T5932] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 664.022501][ T5932] usb 2-1: string descriptor 0 read error: -71 [ 664.050738][ T5932] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 664.089541][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.168211][ T5932] usb 2-1: can't set config #155, error -71 [ 664.203152][ T5932] usb 2-1: USB disconnect, device number 20 [ 664.578921][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 667.042124][ T6655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.140209][ T6655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.210106][ T6655] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 667.248842][ T6655] bond0 (unregistering): Released all slaves [ 669.657158][ T5850] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 669.867213][ T5850] usb 1-1: Using ep0 maxpacket: 32 [ 669.920485][ T5850] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 669.967285][ T5850] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 669.987418][ T5850] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.036983][ T5850] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 670.062918][ T5850] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 670.128548][ T5850] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 670.173481][ T5850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.215358][ T5850] usb 1-1: Product: syz [ 670.257166][ T5850] usb 1-1: Manufacturer: syz [ 670.262828][ T5850] usb 1-1: SerialNumber: syz [ 670.309802][ T5850] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 670.354523][ T5850] imon 1-1:155.0: unable to initialize intf0, err -90 [ 670.397071][ T5850] imon:imon_probe: failed to initialize context! [ 670.436993][ T5850] imon 1-1:155.0: unable to register, err -19 [ 670.825159][ T6655] hsr_slave_0: left promiscuous mode [ 670.861948][ T6655] hsr_slave_1: left promiscuous mode [ 670.899329][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.927768][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.982326][ T6655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.037189][ T6655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.166165][ T6655] veth1_vlan: left promiscuous mode [ 671.225699][ T6655] veth0_vlan: left promiscuous mode [ 672.295702][ T9] usb 1-1: USB disconnect, device number 13 [ 672.515944][T11163] siw: device registration error -23 [ 673.327202][T11176] ntfs3(nullb0): Primary boot signature is not NTFS. [ 673.397102][T11176] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 677.557462][ T5850] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 677.918552][ T5850] usb 2-1: Using ep0 maxpacket: 32 [ 678.032809][ T5850] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 678.206603][ T5850] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 679.443061][ T5850] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.469593][ T5850] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 679.494494][ T5850] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 679.559877][ T5850] usb 2-1: string descriptor 0 read error: -71 [ 679.566451][ T5850] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 679.598355][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.598924][ T6655] team0 (unregistering): Port device team_slave_1 removed [ 679.625795][ T5850] usb 2-1: can't set config #155, error -71 [ 679.642429][ T5850] usb 2-1: USB disconnect, device number 21 [ 679.712918][ T6655] team0 (unregistering): Port device team_slave_0 removed [ 680.422503][T11242] netlink: 'syz.5.1283': attribute type 4 has an invalid length. [ 680.578860][T10940] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 680.635462][T10940] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 681.540075][T10940] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 681.714373][T10940] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 683.785313][T11312] tipc: Started in network mode [ 683.920262][T11312] tipc: Node identity 080211000001, cluster identity 4711 [ 684.027639][T11312] tipc: Enabled bearer , priority 0 [ 684.194947][T11318] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 684.290918][T11320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1297'. [ 684.327315][ T5850] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 684.340620][T11318] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 684.577362][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 684.639157][ T5850] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 684.739368][ T5850] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 685.173302][T10429] tipc: Node number set to 134418688 [ 685.182361][ T5850] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.196339][ T5850] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.208006][ T5850] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 685.320012][ T5850] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 685.823578][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.830238][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.757150][T11312] tipc: Resetting bearer [ 687.827136][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.835202][ T5850] usb 6-1: Product: syz [ 687.847094][ T5850] usb 6-1: Manufacturer: syz [ 687.851738][ T5850] usb 6-1: SerialNumber: syz [ 687.978032][ T5850] usb 6-1: can't set config #155, error -71 [ 688.003665][T10940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.036329][ T5850] usb 6-1: USB disconnect, device number 2 [ 688.119346][T10940] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.324325][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.331631][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.138785][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.146074][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.628914][T11382] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1312'. [ 690.863950][T10940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.036159][T11422] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1318'. [ 693.113428][T11422] vlan2: entered promiscuous mode [ 693.127322][T11422] bridge0: entered promiscuous mode [ 696.507204][ T5932] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 696.867118][ T5932] usb 1-1: device descriptor read/64, error -71 [ 697.127527][ T5932] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 697.229030][T10940] veth0_vlan: entered promiscuous mode [ 697.283469][T10940] veth1_vlan: entered promiscuous mode [ 697.298918][ T5932] usb 1-1: device descriptor read/64, error -71 [ 697.394177][T10940] veth0_macvtap: entered promiscuous mode [ 697.418608][ T5932] usb usb1-port1: attempt power cycle [ 697.428426][T10940] veth1_macvtap: entered promiscuous mode [ 697.490561][T10940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 697.542841][T11497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1331'. [ 697.575502][T10940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 697.640939][T10751] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.686369][T10751] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.713521][T10751] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.750778][T10751] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.797161][ T5932] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 697.867473][ T5932] usb 1-1: device descriptor read/8, error -71 [ 697.914658][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 697.936234][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.019171][ T7290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.061777][ T7290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.117873][ T5932] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 698.170613][ T5932] usb 1-1: device descriptor read/8, error -71 [ 699.095981][ T5932] usb usb1-port1: unable to enumerate USB device [ 699.426888][T11545] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1340'. [ 699.490977][T11545] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.498765][T11545] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.602329][T11554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1340'. [ 699.633867][T11553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 699.922140][T11551] futex_wake_op: syz.6.1215 tries to shift op by -1; fix this program [ 699.937195][ T30] audit: type=1326 audit(1751495011.887:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589618e929 code=0x7ffc0000 [ 700.367280][ T30] audit: type=1326 audit(1751495011.947:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f589618e929 code=0x7ffc0000 [ 700.737433][ T30] audit: type=1326 audit(1751495011.947:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589618e929 code=0x7ffc0000 [ 700.737488][ T30] audit: type=1326 audit(1751495011.947:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11560 comm="syz.0.1344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589618e929 code=0x7ffc0000 [ 701.806207][T11590] netlink: 'syz.0.1350': attribute type 10 has an invalid length. [ 701.825089][T11590] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.843040][T11590] bridge_slave_1: left allmulticast mode [ 701.949645][T11590] bridge_slave_1: left promiscuous mode [ 701.985944][T11590] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.039227][T11590] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 702.287920][ T5850] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 702.427759][ T5850] usb 3-1: device descriptor read/64, error -71 [ 702.684176][ T5850] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 702.900474][T11606] ntfs3(nullb0): Primary boot signature is not NTFS. [ 702.907827][T11606] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 702.943429][ T5850] usb 3-1: device descriptor read/64, error -71 [ 703.658138][ T5850] usb usb3-port1: attempt power cycle [ 704.027106][ T5850] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 704.156940][ T5850] usb 3-1: device descriptor read/8, error -71 [ 704.447575][ T5850] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 704.497850][ T5850] usb 3-1: device descriptor read/8, error -71 [ 704.612053][ T5850] usb usb3-port1: unable to enumerate USB device [ 707.397768][T11674] block nbd1: shutting down sockets [ 707.865910][T11685] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1367'. [ 709.667091][ T5897] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 709.887400][ T5897] usb 7-1: device descriptor read/64, error -71 [ 710.197647][ T5897] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 710.541226][T11729] ntfs3(nullb0): Primary boot signature is not NTFS. [ 710.548992][T11729] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 711.165414][ T5897] usb 7-1: device descriptor read/64, error -71 [ 711.227476][ T9] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 711.277445][ T5897] usb usb7-port1: attempt power cycle [ 711.417417][T11737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 711.566514][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 711.585972][ T9] usb 6-1: config 0 has no interface number 0 [ 711.620841][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 711.718276][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 711.748964][ T9] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 711.791052][ T5897] usb 7-1: device descriptor read/8, error -71 [ 711.807209][ T9] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 711.818806][ C0] ================================================================== [ 711.818824][ C0] BUG: KASAN: slab-use-after-free in flush_tlb_func+0x23d/0x6c0 [ 711.818854][ C0] Write of size 8 at addr ffff888021f3e000 by task kworker/0:0/9 [ 711.818873][ C0] [ 711.818894][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 711.818918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.818932][ C0] Workqueue: usb_hub_wq hub_event [ 711.818975][ C0] Call Trace: [ 711.818983][ C0] [ 711.818993][ C0] dump_stack_lvl+0x189/0x250 [ 711.819023][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 711.819040][ C0] ? rcu_is_watching+0x15/0xb0 [ 711.819067][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.819095][ C0] ? rcu_is_watching+0x15/0xb0 [ 711.819120][ C0] ? lock_release+0x4b/0x3e0 [ 711.819145][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 711.819162][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 711.819179][ C0] print_report+0xd2/0x2b0 [ 711.819203][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 711.819220][ C0] kasan_report+0x118/0x150 [ 711.819239][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 711.819261][ C0] kasan_check_range+0x2b0/0x2c0 [ 711.819281][ C0] flush_tlb_func+0x23d/0x6c0 [ 711.819305][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 711.819323][ C0] ? sched_clock_cpu+0x74/0x430 [ 711.819349][ C0] ? rcu_is_watching+0x15/0xb0 [ 711.819374][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 711.819394][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 711.819422][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 711.819442][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 711.819464][ C0] sysvec_call_function_single+0x9e/0xc0 [ 711.819494][ C0] [ 711.819501][ C0] [ 711.819508][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 711.819533][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 711.819553][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 711.819571][ C0] RSP: 0018:ffffc900000e6d00 EFLAGS: 00000287 [ 711.819589][ C0] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000100000 [ 711.819604][ C0] RDX: ffffc9001946b000 RSI: 000000000000e4dc RDI: 000000000000e4dd [ 711.819618][ C0] RBP: ffffc900000e6e50 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 711.819632][ C0] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 711.819647][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 711.819672][ C0] ? console_flush_all+0x13a/0xc40 [ 711.819693][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 711.819717][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 711.819740][ C0] console_unlock+0xc4/0x270 [ 711.819769][ C0] ? __pfx_console_unlock+0x10/0x10 [ 711.819817][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 711.819839][ C0] vprintk_emit+0x5b7/0x7a0 [ 711.819867][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 711.819896][ C0] ? __pfx_snprintf+0x10/0x10 [ 711.819928][ C0] dev_vprintk_emit+0x337/0x3f0 [ 711.819954][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 711.819980][ C0] dev_printk_emit+0xe0/0x130 [ 711.820002][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 711.820024][ C0] ? __dev_printk+0x131/0x190 [ 711.820055][ C0] _dev_notice+0x10a/0x160 [ 711.820076][ C0] ? __pfx__dev_notice+0x10/0x10 [ 711.820097][ C0] ? rcu_is_watching+0x15/0xb0 [ 711.820121][ C0] ? trace_kmalloc+0x1f/0xd0 [ 711.820149][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 711.820173][ C0] usb_get_configuration+0x24ea/0x52c0 [ 711.820223][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 711.820250][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 711.820277][ C0] usb_new_device+0x146/0x16f0 [ 711.820322][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 711.820345][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 711.820370][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.820398][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.820437][ C0] hub_event+0x2941/0x4a00 [ 711.820492][ C0] ? __pfx_hub_event+0x10/0x10 [ 711.820520][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 711.820549][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.820576][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 711.820601][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 711.820627][ C0] process_scheduled_works+0xae1/0x17b0 [ 711.820668][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 711.820703][ C0] worker_thread+0x8a0/0xda0 [ 711.820744][ C0] kthread+0x70e/0x8a0 [ 711.820764][ C0] ? __pfx_worker_thread+0x10/0x10 [ 711.820790][ C0] ? __pfx_kthread+0x10/0x10 [ 711.820809][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.820836][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.820864][ C0] ? __pfx_kthread+0x10/0x10 [ 711.820882][ C0] ret_from_fork+0x3fc/0x770 [ 711.820910][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 711.820938][ C0] ? __switch_to_asm+0x39/0x70 [ 711.820961][ C0] ? __switch_to_asm+0x33/0x70 [ 711.820980][ C0] ? __pfx_kthread+0x10/0x10 [ 711.820998][ C0] ret_from_fork_asm+0x1a/0x30 [ 711.821026][ C0] [ 711.821033][ C0] [ 711.821040][ C0] Allocated by task 11691: [ 711.821068][ C0] kasan_save_track+0x3e/0x80 [ 711.821093][ C0] __kasan_slab_alloc+0x6c/0x80 [ 711.821119][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 711.821144][ C0] copy_mm+0xdb/0x4b0 [ 711.821168][ C0] copy_process+0x1706/0x3c00 [ 711.821189][ C0] kernel_clone+0x21e/0x870 [ 711.821214][ C0] __x64_sys_clone+0x18b/0x1e0 [ 711.821228][ C0] do_syscall_64+0xfa/0x3b0 [ 711.821245][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.821263][ C0] [ 711.821268][ C0] Freed by task 11741: [ 711.821278][ C0] kasan_save_track+0x3e/0x80 [ 711.821302][ C0] kasan_save_free_info+0x46/0x50 [ 711.821319][ C0] __kasan_slab_free+0x62/0x70 [ 711.821339][ C0] kmem_cache_free+0x18f/0x400 [ 711.821359][ C0] exec_mmap+0x6ac/0x7d0 [ 711.821377][ C0] begin_new_exec+0x129c/0x2120 [ 711.821395][ C0] load_elf_binary+0x993/0x2730 [ 711.821409][ C0] bprm_execve+0x999/0x1450 [ 711.821428][ C0] do_execveat_common+0x510/0x6a0 [ 711.821448][ C0] __x64_sys_execve+0x94/0xb0 [ 711.821467][ C0] do_syscall_64+0xfa/0x3b0 [ 711.821480][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.821494][ C0] [ 711.821498][ C0] The buggy address belongs to the object at ffff888021f3d600 [ 711.821498][ C0] which belongs to the cache mm_struct of size 2584 [ 711.821512][ C0] The buggy address is located 2560 bytes inside of [ 711.821512][ C0] freed 2584-byte region [ffff888021f3d600, ffff888021f3e018) [ 711.821528][ C0] [ 711.821532][ C0] The buggy address belongs to the physical page: [ 711.821545][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21f38 [ 711.821560][ C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 711.821572][ C0] memcg:ffff888076ab3701 [ 711.821580][ C0] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 711.821599][ C0] page_type: f5(slab) [ 711.821613][ C0] raw: 00fff00000000040 ffff88801a44bb40 ffffea0001f67000 dead000000000005 [ 711.821627][ C0] raw: 0000000000000000 00000000800b000b 00000000f5000000 ffff888076ab3701 [ 711.821641][ C0] head: 00fff00000000040 ffff88801a44bb40 ffffea0001f67000 dead000000000005 [ 711.821655][ C0] head: 0000000000000000 00000000800b000b 00000000f5000000 ffff888076ab3701 [ 711.821669][ C0] head: 00fff00000000003 ffffea000087ce01 00000000ffffffff 00000000ffffffff [ 711.821682][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 711.821691][ C0] page dumped because: kasan: bad access detected [ 711.821703][ C0] page_owner tracks the page as allocated [ 711.821709][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5631, tgid 5631 (dhcpcd), ts 61019523312, free_ts 60939094982 [ 711.821736][ C0] post_alloc_hook+0x240/0x2a0 [ 711.821758][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 711.821774][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 711.821790][ C0] alloc_pages_mpol+0x232/0x4a0 [ 711.821812][ C0] allocate_slab+0x8a/0x370 [ 711.821827][ C0] ___slab_alloc+0xbeb/0x1410 [ 711.821840][ C0] kmem_cache_alloc_noprof+0x283/0x3c0 [ 711.821860][ C0] mm_alloc+0x23/0xd0 [ 711.821877][ C0] alloc_bprm+0x378/0x5b0 [ 711.821895][ C0] do_execveat_common+0x1b3/0x6a0 [ 711.821915][ C0] __x64_sys_execve+0x94/0xb0 [ 711.821934][ C0] do_syscall_64+0xfa/0x3b0 [ 711.821954][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.821968][ C0] page last free pid 5497 tgid 5497 stack trace: [ 711.821976][ C0] __free_frozen_pages+0xb80/0xd80 [ 711.821990][ C0] __put_partials+0x156/0x1a0 [ 711.822003][ C0] put_cpu_partial+0x17c/0x250 [ 711.822018][ C0] __slab_free+0x2d5/0x3c0 [ 711.822033][ C0] qlist_free_all+0x97/0x140 [ 711.822051][ C0] kasan_quarantine_reduce+0x148/0x160 [ 711.822071][ C0] __kasan_slab_alloc+0x22/0x80 [ 711.822090][ C0] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 711.822111][ C0] __alloc_skb+0x112/0x2d0 [ 711.822126][ C0] alloc_skb_with_frags+0xca/0x890 [ 711.822143][ C0] sock_alloc_send_pskb+0x857/0x990 [ 711.822162][ C0] unix_dgram_sendmsg+0x4f6/0x1870 [ 711.822180][ C0] __sock_sendmsg+0x219/0x270 [ 711.822202][ C0] sock_write_iter+0x258/0x330 [ 711.822220][ C0] vfs_write+0x54b/0xa90 [ 711.822239][ C0] ksys_write+0x145/0x250 [ 711.822258][ C0] [ 711.822262][ C0] Memory state around the buggy address: [ 711.822271][ C0] ffff888021f3df00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 711.822282][ C0] ffff888021f3df80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 711.822292][ C0] >ffff888021f3e000: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 711.822301][ C0] ^ [ 711.822308][ C0] ffff888021f3e080: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 711.822326][ C0] ffff888021f3e100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 711.822335][ C0] ================================================================== [ 711.822348][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 711.822359][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-next-20250702-syzkaller #0 PREEMPT(full) [ 711.822378][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 711.822389][ C0] Workqueue: usb_hub_wq hub_event [ 711.822412][ C0] Call Trace: [ 711.822418][ C0] [ 711.822424][ C0] dump_stack_lvl+0x99/0x250 [ 711.822447][ C0] ? __asan_memcpy+0x40/0x70 [ 711.822466][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 711.822488][ C0] ? __pfx__printk+0x10/0x10 [ 711.822509][ C0] panic+0x2db/0x790 [ 711.822533][ C0] ? __pfx_panic+0x10/0x10 [ 711.822558][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 711.822580][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 711.822601][ C0] ? print_memory_metadata+0x314/0x400 [ 711.822623][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 711.822638][ C0] check_panic_on_warn+0x89/0xb0 [ 711.822654][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 711.822668][ C0] end_report+0x78/0x160 [ 711.822681][ C0] kasan_report+0x129/0x150 [ 711.822696][ C0] ? flush_tlb_func+0x23d/0x6c0 [ 711.822714][ C0] kasan_check_range+0x2b0/0x2c0 [ 711.822729][ C0] flush_tlb_func+0x23d/0x6c0 [ 711.822748][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 711.822762][ C0] ? sched_clock_cpu+0x74/0x430 [ 711.822783][ C0] ? rcu_is_watching+0x15/0xb0 [ 711.822809][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 711.822825][ C0] __flush_smp_call_function_queue+0x370/0xaa0 [ 711.822847][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 711.822863][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 711.822881][ C0] sysvec_call_function_single+0x9e/0xc0 [ 711.822903][ C0] [ 711.822909][ C0] [ 711.822915][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 711.822931][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 711.822950][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 b5 36 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 a6 36 1f 00 eb 06 e8 9f 36 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 0a 4a 83 00 48 8b 1b 48 8b 44 24 [ 711.822964][ C0] RSP: 0018:ffffc900000e6d00 EFLAGS: 00000287 [ 711.822978][ C0] RAX: 1ffffffff1d36b7b RBX: ffffffff8e9b5bd8 RCX: 0000000000100000 [ 711.822990][ C0] RDX: ffffc9001946b000 RSI: 000000000000e4dc RDI: 000000000000e4dd [ 711.823002][ C0] RBP: ffffc900000e6e50 R08: ffffffff8fa17c37 R09: 1ffffffff1f42f86 [ 711.823014][ C0] R10: dffffc0000000000 R11: fffffbfff1f42f87 R12: dffffc0000000000 [ 711.823026][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9b5b80 [ 711.823046][ C0] ? console_flush_all+0x13a/0xc40 [ 711.823063][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 711.823100][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 711.823118][ C0] console_unlock+0xc4/0x270 [ 711.823141][ C0] ? __pfx_console_unlock+0x10/0x10 [ 711.823165][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 711.823183][ C0] vprintk_emit+0x5b7/0x7a0 [ 711.823208][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 711.823235][ C0] ? __pfx_snprintf+0x10/0x10 [ 711.823261][ C0] dev_vprintk_emit+0x337/0x3f0 [ 711.823277][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 711.823299][ C0] dev_printk_emit+0xe0/0x130 [ 711.823317][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 711.823335][ C0] ? __dev_printk+0x131/0x190 [ 711.823360][ C0] _dev_notice+0x10a/0x160 [ 711.823378][ C0] ? __pfx__dev_notice+0x10/0x10 [ 711.823395][ C0] ? rcu_is_watching+0x15/0xb0 [ 711.823415][ C0] ? trace_kmalloc+0x1f/0xd0 [ 711.823442][ C0] ? usb_get_configuration+0x1c4f/0x52c0 [ 711.823462][ C0] usb_get_configuration+0x24ea/0x52c0 [ 711.823502][ C0] ? __pfx_usb_get_configuration+0x10/0x10 [ 711.823529][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 711.823551][ C0] usb_new_device+0x146/0x16f0 [ 711.823573][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 711.823591][ C0] ? __pfx_usb_new_device+0x10/0x10 [ 711.823611][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.823632][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.823657][ C0] hub_event+0x2941/0x4a00 [ 711.823700][ C0] ? __pfx_hub_event+0x10/0x10 [ 711.823722][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 711.823745][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.823767][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 711.823787][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 711.823808][ C0] process_scheduled_works+0xae1/0x17b0 [ 711.823840][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 711.823868][ C0] worker_thread+0x8a0/0xda0 [ 711.823899][ C0] kthread+0x70e/0x8a0 [ 711.823915][ C0] ? __pfx_worker_thread+0x10/0x10 [ 711.823936][ C0] ? __pfx_kthread+0x10/0x10 [ 711.823956][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 711.823978][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 711.824001][ C0] ? __pfx_kthread+0x10/0x10 [ 711.824015][ C0] ret_from_fork+0x3fc/0x770 [ 711.824037][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 711.824059][ C0] ? __switch_to_asm+0x39/0x70 [ 711.824074][ C0] ? __switch_to_asm+0x33/0x70 [ 711.824088][ C0] ? __pfx_kthread+0x10/0x10 [ 711.824103][ C0] ret_from_fork_asm+0x1a/0x30 [ 711.824125][ C0] [ 711.824441][ C0] Kernel Offset: disabled