last executing test programs: 18m26.1827486s ago: executing program 3 (id=4): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 18m10.859336755s ago: executing program 32 (id=4): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 14m22.733260102s ago: executing program 1 (id=486): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x156}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf5", 0x1bc}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb42", 0xa9}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 14m22.585856944s ago: executing program 1 (id=488): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 14m22.00361016s ago: executing program 1 (id=489): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000023c0)={0x2c, &(0x7f0000002240)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000002100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 14m15.65764382s ago: executing program 1 (id=497): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 14m15.280585426s ago: executing program 1 (id=501): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f000001be00)={0x2, 0x1, 0x7, 0x80000}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ba40), 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x4000000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) 14m11.784653227s ago: executing program 1 (id=507): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f000001be00)={0x2, 0x1, 0x7, 0x80000}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ba40), 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x4000000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) 13m55.894708499s ago: executing program 33 (id=507): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f000001be00)={0x2, 0x1, 0x7, 0x80000}) sendmmsg$unix(0xffffffffffffffff, &(0x7f000001bf00)=[{{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000001ba40), 0x0, 0x0, 0x0, 0x8000}}], 0x1, 0x4000000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) 12m54.787890667s ago: executing program 0 (id=631): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x400000, 0x110) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x6, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100), 0x892031, &(0x7f0000000540)=ANY=[@ANYBLOB="7472616e733d756e69782c64697265b3e4a48132abc6fcb6b9ef8965523263762a95e57f74721474696f2c6163636573733d636c69656e742c7375626a5f726f6c", @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,smackfsroot=,dont_hash,\x00']) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_ethernet(0x1046, 0x0, 0x0) setfsgid(0xee00) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 12m53.314156185s ago: executing program 0 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r3 = socket(0x2a, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x1, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x106f) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r9, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) 12m51.617009587s ago: executing program 0 (id=636): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2ac}, {&(0x7f0000000bc0)="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", 0x1bc}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d", 0x7b}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 12m51.198782869s ago: executing program 0 (id=638): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xc0a82, 0x146) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) futex(0x0, 0x8d, 0x2, 0x0, 0x0, 0x82) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 12m48.465820424s ago: executing program 0 (id=640): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x91) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000580)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x18}}], 0x1, 0x24000084) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r7 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r7, 0x82000000) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) ioprio_get$uid(0x3, r8) 12m44.478182032s ago: executing program 0 (id=646): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x91) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x18}}], 0x1, 0x24000084) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r8, 0x82000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x100) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0xc375300b) 12m28.534090559s ago: executing program 34 (id=646): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x91) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x18}}], 0x1, 0x24000084) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r8 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r8, 0x82000000) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x100) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0xc375300b) 5m14.135798453s ago: executing program 7 (id=666): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = dup2(r4, r4) wait4(0x0, 0x0, 0x8, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote, @private0, @empty, 0x40003, 0x40, 0x5, 0x100, 0x0, 0x590043}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000003cc0)='./file0\x00', 0x0) 11.553521147s ago: executing program 4 (id=1927): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x2082, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000980), 0x20002, 0x0) fsync(r1) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r2 = epoll_create1(0x80000) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x8}) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000000200)=0x80000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048060}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 10.129962966s ago: executing program 4 (id=1940): openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073790530000000000800410073697700140033006c6f0000000000000000000048e4f411cd3d7a2be9be58f71c4583f02a5203d8fae3cd7fa31e5931b4fb13e4a2b5bc8a71446e08d74b0373e8468a9d0e02d174ddc094d5caa8e45f"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x1c}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) ioctl$BLKRASET(0xffffffffffffffff, 0x1262, &(0x7f0000000380)=0x7) fsmount(r5, 0x0, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xff7ffffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0xf}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 8.005717701s ago: executing program 4 (id=1947): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 7.786106495s ago: executing program 4 (id=1950): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) 4.784853768s ago: executing program 4 (id=1955): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x575, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ba23610030478faffc5010203"], 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd) syz_usb_disconnect(r2) write$char_usb(r3, 0x0, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x800, 0x20100) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, 0x0, 0x0) 4.273979723s ago: executing program 5 (id=1958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4.07099874s ago: executing program 5 (id=1960): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931", 0x5b}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63", 0x58}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9", 0x77}], 0x2}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac44", 0x59}, {&(0x7f0000000380)="d104d55e068cac365da19ddc592f58b2855a01fde88dd517778274cba63e28fecd8679ab618de0c9a0660a10794de6612869e8d88af26dbb436965ac8a4ff4aefa5f4a51ca7cf0a741cda92f754e63df8a5deb6a2f150991bb37634352e051b34e8ff0a0a37aa52ee06d17b1715d79239968d996abef39b4c80fe02ca4583615ae14dc80a0bcf101bde2817d40d2944a2787e1cfc83725e66405e2d1038e154750b70415c973efe5d03c2ba7127bfbf95f2c14b9c9b3ae", 0xb7}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.683513087s ago: executing program 5 (id=1964): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931", 0x5b}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd49", 0x64}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac44", 0x59}, {&(0x7f0000000380)="d104d55e068cac365da19ddc592f58b2855a01fde88dd517778274cba63e28fecd8679ab618de0c9a0660a10794de6612869e8d88af26dbb436965ac8a4ff4aefa5f4a51ca7cf0a741cda92f754e63df8a5deb6a2f150991bb37634352e051b34e8ff0a0a37aa52ee06d17b1715d79239968d996abef39b4c80fe02ca4583615ae14dc80a0bcf101bde2817d40d2944a2787e1cfc83725e66405e2d1038e154750b70415c973efe5d03c2ba7127bfbf95f2c14b9c9b3ae", 0xb7}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.343362932s ago: executing program 5 (id=1966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, 0x0, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) 3.004640627s ago: executing program 2 (id=1968): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0xe) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) write$proc_mixer(r6, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) dup3(0xffffffffffffffff, r6, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/oss_mixer\x00', 0xc2001, 0x0) 2.98649739s ago: executing program 2 (id=1969): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd28, 0x0, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x25, &(0x7f00000000c0)={0x0, 0x219a, 0x80, 0x8001, 0x143}, &(0x7f0000000000), &(0x7f0000000640), &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r8, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000080)={0x9, r7, 0x3, {0x9, 0x7}}, 0x1) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, 0x0) 903.931127ms ago: executing program 2 (id=1970): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) 861.557849ms ago: executing program 5 (id=1971): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a00", 0x2a}], 0x1}, 0x0) 793.173841ms ago: executing program 4 (id=1972): r0 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f00000002c0)='./file0\x00', r0) r1 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x1776, @local, 0xfffffffe}, 0x1c, 0x0}, 0x440e0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000000), 0x0) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 668.742547ms ago: executing program 2 (id=1973): r0 = socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, &(0x7f00000002c0)='./file0\x00', r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e20, 0x1776, @local, 0xfffffffe}, 0x1c, 0x0}, 0x440e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0x1c) write$binfmt_misc(r4, &(0x7f0000000100), 0xfef0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 518.51342ms ago: executing program 5 (id=1974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r1, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r2, 0x0, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, r0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0xc1c0, 0xe) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card2/oss_mixer\x00', 0xc2001, 0x0) 400.85561ms ago: executing program 2 (id=1975): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931", 0x5b}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd49", 0x64}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14020f785656813f94f0a10a80cff62212b5842b9740c2e7c8cbc7ad801a6ec481d22ff828b1ba477f736c1712a1334158d7df5bc9584acb5112d5ca2ba8ac44", 0x59}, {&(0x7f0000000380)="d104d55e068cac365da19ddc592f58b2855a01fde88dd517778274cba63e28fecd8679ab618de0c9a0660a10794de6612869e8d88af26dbb436965ac8a4ff4aefa5f4a51ca7cf0a741cda92f754e63df8a5deb6a2f150991bb37634352e051b34e8ff0a0a37aa52ee06d17b1715d79239968d996abef39b4c80fe02ca4583615ae14dc80a0bcf101bde2817d40d2944a2787e1cfc83725e66405e2d1038e154750b70415c973efe5d03c2ba7127bfbf95f2c14b9c9b3ae", 0xb7}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 2 (id=1976): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x8d, 0x2, 0x0, 0x0, 0x82) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ac) kernel console output (not intermixed with test programs): =2, SerialNumber=3 [ 924.433844][T10202] usb 6-1: Product: syz [ 924.433860][T10202] usb 6-1: Manufacturer: syz [ 924.433876][T10202] usb 6-1: SerialNumber: syz [ 924.724776][T11697] netlink: 4588 bytes leftover after parsing attributes in process `syz.4.1393'. [ 924.763022][T10202] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 924.763129][T10202] visor 6-1:1.0: probe with driver visor failed with error -110 [ 924.854746][T11683] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1392'. [ 926.087017][T10202] usb 6-1: USB disconnect, device number 48 [ 927.414126][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 927.414146][ T37] audit: type=1326 audit(1776793503.652:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11706 comm="syz.2.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 927.414253][ T37] audit: type=1326 audit(1776793503.652:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11706 comm="syz.2.1398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 927.494214][T11580] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.494480][T11580] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.494698][T11580] bridge_slave_0: entered allmulticast mode [ 927.497627][T11580] bridge_slave_0: entered promiscuous mode [ 927.501242][T11580] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.501490][T11580] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.501709][T11580] bridge_slave_1: entered allmulticast mode [ 927.504587][T11580] bridge_slave_1: entered promiscuous mode [ 929.552042][T11580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 930.345109][T11742] siw: device registration error -23 [ 930.771249][T11580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.783308][T11744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 931.630089][T11751] netlink: 4576 bytes leftover after parsing attributes in process `syz.4.1405'. [ 932.093431][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.093508][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.169908][T11762] siw: device registration error -23 [ 932.174986][T11762] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 932.225084][ T6131] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 932.372988][ T6131] usb 6-1: Using ep0 maxpacket: 32 [ 932.376480][ T6131] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.376515][ T6131] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.376557][ T6131] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 932.376582][ T6131] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.434086][ T6131] usb 6-1: config 0 descriptor?? [ 932.454528][ T6131] hub 6-1:0.0: USB hub found [ 932.519491][T11580] team0: Port device team_slave_0 added [ 932.592309][T11580] team0: Port device team_slave_1 added [ 932.602925][ T5923] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 932.780571][T11580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.780594][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.780626][T11580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.787046][T11580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.787066][T11580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.787097][T11580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.892714][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 932.917542][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.918701][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.943221][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.945380][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 932.950776][ T5923] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 932.951057][ T5923] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 932.951085][ T5923] usb 3-1: Product: syz [ 932.951103][ T5923] usb 3-1: Manufacturer: syz [ 932.951121][ T5923] usb 3-1: SerialNumber: syz [ 932.951273][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.032847][T11759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.033508][T11759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.047674][ T6131] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 933.084999][ T6131] usbhid 6-1:0.0: can't add hid device: -71 [ 933.085129][ T6131] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 933.134351][ T6131] usb 6-1: USB disconnect, device number 49 [ 933.350385][T11766] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1411'. [ 933.455313][ T5923] usb 3-1: palm_os_3_probe - error -110 getting connection information [ 933.455430][ T5923] visor 3-1:1.0: probe with driver visor failed with error -110 [ 933.489871][ T5990] usb 3-1: USB disconnect, device number 47 [ 934.477526][ T5824] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 934.652262][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 934.667885][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 934.697506][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 934.720006][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 935.324677][T11801] netlink: 4576 bytes leftover after parsing attributes in process `syz.4.1417'. [ 935.860109][T11807] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 935.896161][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 936.545375][T11814] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 936.802804][ T5823] Bluetooth: hci1: command tx timeout [ 936.868670][T11580] hsr_slave_0: entered promiscuous mode [ 936.886514][T11580] hsr_slave_1: entered promiscuous mode [ 936.887297][T11580] debugfs: 'hsr0' already exists in 'hsr' [ 936.887318][T11580] Cannot create hsr debugfs directory [ 938.360025][T11790] lo speed is unknown, defaulting to 1000 [ 938.773144][T10888] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 938.923086][ T5823] Bluetooth: hci1: command tx timeout [ 940.017706][T10888] usb 5-1: Using ep0 maxpacket: 32 [ 940.020205][T10888] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 940.020238][T10888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.020260][T10888] usb 5-1: config 0 has no interface number 0 [ 940.020307][T10888] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC [ 940.020337][T10888] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 940.020362][T10888] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 940.020399][T10888] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 940.020426][T10888] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 940.020450][T10888] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 940.020475][T10888] usb 5-1: config 0 interface 146 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 940.058215][T10888] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 940.058303][T10888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.058367][T10888] usb 5-1: Product: syz [ 940.058412][T10888] usb 5-1: Manufacturer: syz [ 940.058457][T10888] usb 5-1: SerialNumber: syz [ 940.181699][T10888] usb 5-1: config 0 descriptor?? [ 940.224341][T10888] usb 5-1: expecting 3 got 2 endpoints! Bailing out. [ 940.949941][T10888] usb 5-1: USB disconnect, device number 48 [ 940.963171][ T5823] Bluetooth: hci1: command tx timeout [ 941.193434][T11836] netlink: 4576 bytes leftover after parsing attributes in process `syz.5.1429'. [ 941.452434][T11838] overlayfs: failed to resolve './file0': -2 [ 942.601795][ T6131] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 943.054920][ T5823] Bluetooth: hci1: command tx timeout [ 943.661956][T11852] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 943.668837][ T6131] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 943.668886][ T6131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.668901][ T6131] usb 6-1: Product: syz [ 943.668912][ T6131] usb 6-1: Manufacturer: syz [ 943.668922][ T6131] usb 6-1: SerialNumber: syz [ 944.356637][ T6131] usb 6-1: config 0 descriptor?? [ 944.449624][ T6131] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 944.591606][T11863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 944.863729][T11841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.884657][T11841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.953060][ T6131] gspca_sunplus: reg_r err -110 [ 945.923385][ T1122] bridge_slave_1: left allmulticast mode [ 945.923418][ T1122] bridge_slave_1: left promiscuous mode [ 945.923708][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.060095][ T1122] bridge_slave_0: left allmulticast mode [ 946.060128][ T1122] bridge_slave_0: left promiscuous mode [ 946.060402][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.190394][T10888] usb 6-1: USB disconnect, device number 50 [ 947.274345][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.373736][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.010762][ T6131] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 948.074859][ T1122] bond0 (unregistering): Released all slaves [ 948.262300][ T6131] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 948.262338][ T6131] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 948.262365][ T6131] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.268161][ T6131] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 948.268265][ T6131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 948.268332][ T6131] usb 5-1: Product: syz [ 948.268369][ T6131] usb 5-1: Manufacturer: syz [ 948.268430][ T6131] usb 5-1: SerialNumber: syz [ 949.316140][ T6131] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 949.351199][ T6131] usb 5-1: USB disconnect, device number 49 [ 949.371208][ T6131] usblp0: removed [ 950.327015][ T1122] hsr_slave_0: left promiscuous mode [ 950.362794][ T1122] hsr_slave_1: left promiscuous mode [ 950.363901][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.415642][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.525373][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 951.628380][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 951.642441][ T37] audit: type=1326 audit(1776793527.872:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11903 comm="syz.5.1448" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 951.933001][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 952.802672][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 952.805945][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 952.809013][ T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 952.809047][ T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 952.809069][ T9] usb 5-1: Product: syz [ 952.809085][ T9] usb 5-1: Manufacturer: syz [ 952.809101][ T9] usb 5-1: SerialNumber: syz [ 953.260619][ T9] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 953.260772][ T9] visor 5-1:1.0: probe with driver visor failed with error -110 [ 954.357646][T11907] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1450'. [ 954.373706][T11790] chnl_net:caif_netlink_parms(): no params data found [ 954.480415][ T5990] usb 5-1: USB disconnect, device number 50 [ 954.910493][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.910673][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.910894][T11790] bridge_slave_0: entered allmulticast mode [ 954.916505][T11790] bridge_slave_0: entered promiscuous mode [ 954.944577][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.944704][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.944967][T11790] bridge_slave_1: entered allmulticast mode [ 954.949864][T11790] bridge_slave_1: entered promiscuous mode [ 955.049568][ T5923] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 955.200991][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.207567][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 955.207598][ T5923] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 955.207625][ T5923] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.210699][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 955.210731][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 955.210754][ T5923] usb 3-1: Product: syz [ 955.210771][ T5923] usb 3-1: Manufacturer: syz [ 955.210787][ T5923] usb 3-1: SerialNumber: syz [ 955.309392][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.715948][T10202] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 956.883644][T10202] usb 6-1: Using ep0 maxpacket: 16 [ 956.890372][T10202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 956.895553][T10202] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 956.895577][T10202] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.895591][T10202] usb 6-1: Product: syz [ 956.895602][T10202] usb 6-1: Manufacturer: syz [ 956.895656][T10202] usb 6-1: SerialNumber: syz [ 957.011613][T10202] usb 6-1: config 0 descriptor?? [ 957.022916][T10202] hub 6-1:0.0: bad descriptor, ignoring hub [ 957.023024][T10202] hub 6-1:0.0: probe with driver hub failed with error -5 [ 957.049888][T11790] team0: Port device team_slave_0 added [ 957.100112][T10202] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17 [ 957.184408][T11790] team0: Port device team_slave_1 added [ 957.927481][T11940] input: syz0 as /devices/virtual/input/input18 [ 957.937397][ T5923] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 958.027718][ T5923] usb 3-1: USB disconnect, device number 48 [ 958.108994][ T5923] usblp0: removed [ 958.157949][T11948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1459'. [ 958.186515][T11767] udevd[11767]: setting mode of /dev/bus/usb/003/048 to 020664 failed: No such file or directory [ 958.186720][T11767] udevd[11767]: setting owner of /dev/bus/usb/003/048 to uid=0, gid=7 failed: No such file or directory [ 958.476021][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.476040][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.476092][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.617704][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.617724][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.617756][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.208672][T11943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 959.230989][T11943] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 959.231208][T11943] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 959.231414][T11943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 960.155929][T11943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 960.184028][ T1122] bridge_slave_1: left allmulticast mode [ 960.184052][ T1122] bridge_slave_1: left promiscuous mode [ 960.184243][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.246008][ T1122] bridge_slave_0: left allmulticast mode [ 960.246040][ T1122] bridge_slave_0: left promiscuous mode [ 960.246305][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.286158][T11943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 961.082160][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 961.100535][T11943] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 961.100826][T11943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 961.184428][T11943] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 961.214645][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.282959][ T5824] Bluetooth: hci0: command 0x0406 tx timeout [ 961.283005][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 961.283059][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 961.285570][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.326998][ T1122] bond0 (unregistering): Released all slaves [ 961.353265][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'. [ 961.482750][ T5923] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 961.637248][T10202] usb 6-1: USB disconnect, device number 51 [ 961.713482][T11790] hsr_slave_0: entered promiscuous mode [ 961.714966][T11790] hsr_slave_1: entered promiscuous mode [ 961.715944][T11790] debugfs: 'hsr0' already exists in 'hsr' [ 961.715971][T11790] Cannot create hsr debugfs directory [ 961.779896][T11580] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 961.946371][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 961.959034][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 961.961518][ T5923] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 961.961552][ T5923] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 961.961568][ T5923] usb 5-1: Product: syz [ 961.961579][ T5923] usb 5-1: Manufacturer: syz [ 961.961590][ T5923] usb 5-1: SerialNumber: syz [ 963.056513][T11580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 963.302215][T11972] Bluetooth: hci1: command 0x0c1a tx timeout [ 963.432161][T11972] Bluetooth: hci4: command 0x0c1a tx timeout [ 963.462821][T11580] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 963.480845][T11971] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1465'. [ 964.002884][T11986] ceph: No mds server is up or the cluster is laggy [ 964.011038][ T5923] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 964.011155][ T5923] visor 5-1:1.0: probe with driver visor failed with error -110 [ 964.046896][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 964.047116][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 964.478858][T11580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 964.520560][ T9] usb 5-1: USB disconnect, device number 51 [ 964.535216][ T37] audit: type=1326 audit(1776793540.772:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11991 comm="syz.2.1470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 964.651078][T11997] vxcan0: tx address claim with different name [ 965.216400][T11580] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 966.208564][T12001] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 966.212414][T11972] Bluetooth: hci1: command 0x0c1a tx timeout [ 966.212461][T11972] Bluetooth: hci4: command 0x0c1a tx timeout [ 966.318037][T11580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 966.506820][T11580] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 966.537022][T12005] netlink: 4352 bytes leftover after parsing attributes in process `syz.4.1472'. [ 966.550782][T11580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 967.162810][ T1122] hsr_slave_0: left promiscuous mode [ 967.182728][ T1122] hsr_slave_1: left promiscuous mode [ 967.183695][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.208719][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.685685][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 967.789734][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 968.248307][T11096] Bluetooth: hci1: command 0x0c1a tx timeout [ 970.621965][T12038] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 971.650198][ T37] audit: type=1326 audit(1776793547.542:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12042 comm="syz.2.1481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 973.209436][T11790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 973.247882][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 973.248927][T11790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 973.298102][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 973.300285][T11790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 973.346492][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 973.347545][T11790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 973.565430][T12049] netlink: 4352 bytes leftover after parsing attributes in process `syz.5.1483'. [ 973.603036][T11790] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.876458][T11972] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 973.959781][T11972] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 973.996048][T11972] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 974.040031][T11972] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 974.077347][T11972] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 974.598703][T12066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 975.018450][T12052] lo speed is unknown, defaulting to 1000 [ 976.068522][ T37] audit: type=1326 audit(1776793552.312:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12071 comm="syz.5.1487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 976.162764][T11096] Bluetooth: hci4: command tx timeout [ 978.242881][T11096] Bluetooth: hci4: command tx timeout [ 979.674761][ T37] audit: type=1326 audit(1776793555.902:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12092 comm="syz.5.1492" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 980.668277][T11096] Bluetooth: hci4: command tx timeout [ 980.792867][T12100] netlink: 4352 bytes leftover after parsing attributes in process `syz.5.1493'. [ 981.546147][T12112] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1495'. [ 982.315505][T12052] chnl_net:caif_netlink_parms(): no params data found [ 982.723571][T11096] Bluetooth: hci4: command tx timeout [ 983.418647][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.532669][ T5929] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 983.704359][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 983.720375][ T5929] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 983.720411][ T5929] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 983.720461][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 983.720483][ T5929] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.720502][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 983.720521][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 983.720554][ T5929] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 983.720575][ T5929] usb 3-1: config 168 interface 0 has no altsetting 0 [ 983.805632][ T5929] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 983.805679][ T5929] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 983.805724][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 983.805755][ T5929] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.805784][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 983.805814][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 983.805844][ T5929] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 983.805875][ T5929] usb 3-1: config 168 interface 0 has no altsetting 0 [ 983.868834][ T5929] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 983.868878][ T5929] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 983.868920][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 983.868950][ T5929] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 983.868976][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 983.869002][ T5929] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 983.869031][ T5929] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 983.869059][ T5929] usb 3-1: config 168 interface 0 has no altsetting 0 [ 984.035885][ T5929] usb 3-1: string descriptor 0 read error: -22 [ 984.036048][ T5929] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 984.036076][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.114911][ T5929] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 984.203456][T12052] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.203924][T12052] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.204207][T12052] bridge_slave_0: entered allmulticast mode [ 984.241497][T12052] bridge_slave_0: entered promiscuous mode [ 984.320778][T12123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.322158][T12123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.376821][T12052] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.376951][T12052] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.377213][T12052] bridge_slave_1: entered allmulticast mode [ 984.412751][T12052] bridge_slave_1: entered promiscuous mode [ 984.430191][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.430854][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.524323][ T180] bridge_slave_1: left allmulticast mode [ 984.524357][ T180] bridge_slave_1: left promiscuous mode [ 984.525368][ T180] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.599473][ T180] bridge_slave_0: left allmulticast mode [ 984.599506][ T180] bridge_slave_0: left promiscuous mode [ 984.600356][ T180] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.658163][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.664291][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.727429][ T5990] usb 3-1: USB disconnect, device number 49 [ 985.373947][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1502'. [ 985.633766][ T180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.753880][ T180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.816798][ T180] bond0 (unregistering): Released all slaves [ 986.207565][T12151] siw: device registration error -23 [ 987.314460][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.319241][T12052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.536986][T12052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.572755][ T180] hsr_slave_0: left promiscuous mode [ 988.622869][ T180] hsr_slave_1: left promiscuous mode [ 988.623944][ T180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.626558][T12163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1508'. [ 988.695779][ T180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 990.644948][ T180] team0 (unregistering): Port device team_slave_1 removed [ 990.831156][ T180] team0 (unregistering): Port device team_slave_0 removed [ 991.402486][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.404436][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.500379][T12052] team0: Port device team_slave_0 added [ 991.502000][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.502105][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.523879][ T5900] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 991.545190][T12052] team0: Port device team_slave_1 added [ 991.678697][ T5900] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 991.678734][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.678757][ T5900] usb 5-1: Product: syz [ 991.678772][ T5900] usb 5-1: Manufacturer: syz [ 991.678789][ T5900] usb 5-1: SerialNumber: syz [ 991.732147][ T5900] usb 5-1: config 0 descriptor?? [ 991.744979][ T5900] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 991.872419][T12052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.872436][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.872461][T12052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.878762][T12052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.878780][T12052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.878805][T12052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.093238][T12187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.114539][T12187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.275416][ T5900] gspca_sunplus: reg_r err -110 [ 992.423542][T10202] usb 5-1: USB disconnect, device number 52 [ 992.653175][T12052] hsr_slave_0: entered promiscuous mode [ 992.654764][T12052] hsr_slave_1: entered promiscuous mode [ 992.655789][T12052] debugfs: 'hsr0' already exists in 'hsr' [ 992.655815][T12052] Cannot create hsr debugfs directory [ 993.439186][ T5929] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 993.779402][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.780946][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.472642][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 994.475554][ T5929] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 994.475599][ T5929] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 994.475643][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 994.475674][ T5929] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 994.475702][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 994.475729][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 994.475759][ T5929] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 994.475792][ T5929] usb 5-1: config 168 interface 0 has no altsetting 0 [ 994.477220][ T5929] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 994.477259][ T5929] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 994.477302][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 994.477332][ T5929] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 994.477361][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 994.477389][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 994.477418][ T5929] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 994.477448][ T5929] usb 5-1: config 168 interface 0 has no altsetting 0 [ 994.479014][ T5929] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 994.479053][ T5929] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 994.479095][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 994.479126][ T5929] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 994.479153][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 994.479180][ T5929] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 994.479209][ T5929] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 994.479239][ T5929] usb 5-1: config 168 interface 0 has no altsetting 0 [ 994.496151][ T5929] usb 5-1: string descriptor 0 read error: -22 [ 994.496320][ T5929] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 994.496346][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.776253][ T5929] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 994.900637][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.910697][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.938948][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.939597][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.167317][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.167966][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.182494][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.183439][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.204920][T10888] usb 5-1: USB disconnect, device number 53 [ 995.877514][T11972] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 996.092986][T11972] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 996.099482][T11972] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 996.414961][T11972] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 997.035671][T11972] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 998.303378][ T5473] 8021q: adding VLAN 0 to HW filter on device eth13 [ 999.308752][T11972] Bluetooth: hci5: command tx timeout [ 999.332185][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1526'. [ 1000.912975][T12223] lo speed is unknown, defaulting to 1000 [ 1001.112746][T10888] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1001.288395][T10888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1001.290007][T10888] usb 5-1: not running at top speed; connect to a high speed hub [ 1001.291754][T10888] usb 5-1: config 255 has an invalid interface number: 183 but max is 2 [ 1001.291784][T10888] usb 5-1: config 255 has an invalid interface number: 205 but max is 2 [ 1001.291810][T10888] usb 5-1: config 255 has an invalid interface number: 164 but max is 2 [ 1001.291831][T10888] usb 5-1: config 255 has no interface number 0 [ 1001.291850][T10888] usb 5-1: config 255 has no interface number 1 [ 1001.291868][T10888] usb 5-1: config 255 has no interface number 2 [ 1001.291942][T10888] usb 5-1: config 255 interface 183 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1001.291973][T10888] usb 5-1: config 255 interface 183 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1001.292001][T10888] usb 5-1: config 255 interface 183 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1001.292037][T10888] usb 5-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1001.292062][T10888] usb 5-1: config 255 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1001.292085][T10888] usb 5-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 1001.292113][T10888] usb 5-1: config 255 interface 183 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1001.292138][T10888] usb 5-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1001.292162][T10888] usb 5-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1001.292202][T10888] usb 5-1: config 255 interface 205 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1001.292227][T10888] usb 5-1: config 255 interface 205 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1001.292252][T10888] usb 5-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 1001.292277][T10888] usb 5-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 1001.292302][T10888] usb 5-1: config 255 interface 205 altsetting 127 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1001.292328][T10888] usb 5-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0x8E, skipping [ 1001.292354][T10888] usb 5-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 1001.292393][T10888] usb 5-1: config 255 interface 164 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1001.292417][T10888] usb 5-1: config 255 interface 205 has no altsetting 0 [ 1001.292437][T10888] usb 5-1: config 255 interface 164 has no altsetting 0 [ 1001.338256][T10888] usb 5-1: string descriptor 0 read error: -22 [ 1001.338431][T10888] usb 5-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=7f.89 [ 1001.338457][T10888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.362708][T11972] Bluetooth: hci5: command tx timeout [ 1001.618374][T12249] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1001.746486][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1528'. [ 1001.869873][ T5900] usb 5-1: USB disconnect, device number 54 [ 1003.067644][T12256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1529'. [ 1003.473343][T11972] Bluetooth: hci5: command tx timeout [ 1003.552816][ T9] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1003.733609][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1003.735526][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1003.735556][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1003.735589][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1003.735610][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.735629][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1003.735649][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1003.735669][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1003.735690][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1003.736940][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1003.736968][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1003.736996][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1003.737017][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.737036][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1003.737056][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1003.737076][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1003.737096][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1003.738488][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1003.738516][ T9] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1003.738551][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1003.738571][ T9] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1003.738590][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1003.738610][ T9] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1003.738630][ T9] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1003.738650][ T9] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1003.815987][ T9] usb 6-1: string descriptor 0 read error: -22 [ 1003.816137][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1003.816158][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.122828][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1004.352723][T12263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.353386][T12263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.408054][T12264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.428143][T12264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.792212][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.807439][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.825093][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.828599][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.855877][ T9] usb 6-1: USB disconnect, device number 52 [ 1005.967386][T11972] Bluetooth: hci5: command tx timeout [ 1008.002740][ T5900] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1008.157502][ T5900] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1008.157533][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.157552][ T5900] usb 5-1: Product: syz [ 1008.157567][ T5900] usb 5-1: Manufacturer: syz [ 1008.157581][ T5900] usb 5-1: SerialNumber: syz [ 1008.245950][ T5900] usb 5-1: config 0 descriptor?? [ 1008.269913][ T5900] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1008.520739][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.539656][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.690708][ T5900] gspca_sunplus: reg_r err -71 [ 1009.792732][ T5900] usb 5-1: USB disconnect, device number 55 [ 1010.179552][T12052] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1010.265319][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.271518][T12223] chnl_net:caif_netlink_parms(): no params data found [ 1010.332233][T12052] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1010.845752][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1011.822502][T12052] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1011.949564][ T37] audit: type=1326 audit(1776793588.182:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12309 comm="syz.5.1542" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 1012.153661][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1012.273892][T12052] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1012.914912][T12052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1013.172692][ T5800] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1013.335676][ T5800] usb 5-1: Using ep0 maxpacket: 8 [ 1013.338181][ T5800] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.338212][ T5800] usb 5-1: config 0 has no interfaces? [ 1013.341226][ T5800] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1013.341259][ T5800] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1013.341283][ T5800] usb 5-1: Product: syz [ 1013.341299][ T5800] usb 5-1: Manufacturer: syz [ 1013.341315][ T5800] usb 5-1: SerialNumber: syz [ 1013.429229][ T5800] usb 5-1: config 0 descriptor?? [ 1013.573354][T12327] siw: device registration error -23 [ 1013.649785][ T9] usb 5-1: USB disconnect, device number 56 [ 1014.083875][ T66] bridge_slave_1: left allmulticast mode [ 1014.083910][ T66] bridge_slave_1: left promiscuous mode [ 1014.084203][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.185525][ T66] bridge_slave_0: left allmulticast mode [ 1014.185558][ T66] bridge_slave_0: left promiscuous mode [ 1014.185808][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.420247][ T37] audit: type=1326 audit(1776793590.652:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12339 comm="syz.2.1547" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 1015.113733][T12351] overlayfs: failed to resolve './file0': -2 [ 1017.687330][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.773609][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.805367][ T66] bond0 (unregistering): Released all slaves [ 1017.883773][T12359] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1551'. [ 1018.190479][T12223] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.190614][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.190900][T12223] bridge_slave_0: entered allmulticast mode [ 1018.195238][T12223] bridge_slave_0: entered promiscuous mode [ 1018.458079][T12223] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.458223][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.458485][T12223] bridge_slave_1: entered allmulticast mode [ 1018.461587][T12223] bridge_slave_1: entered promiscuous mode [ 1019.461067][ T5929] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1019.672925][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 1019.675664][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1019.678745][ T5929] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1019.678778][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.678802][ T5929] usb 3-1: Product: syz [ 1019.678818][ T5929] usb 3-1: Manufacturer: syz [ 1019.678834][ T5929] usb 3-1: SerialNumber: syz [ 1020.066839][ T5929] usb 3-1: config 0 descriptor?? [ 1020.075290][ T5929] hub 3-1:0.0: bad descriptor, ignoring hub [ 1020.075320][ T5929] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1020.092884][ T5929] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 1020.186565][T12223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.461748][T12378] input: syz0 as /devices/virtual/input/input20 [ 1020.478051][ T66] hsr_slave_0: left promiscuous mode [ 1020.638496][ T66] hsr_slave_1: left promiscuous mode [ 1020.639542][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.683823][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.865271][T12377] siw: device registration error -23 [ 1020.866622][T12377] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1021.533761][ T66] team0 (unregistering): Port device team_slave_1 removed [ 1021.624434][ T66] team0 (unregistering): Port device team_slave_0 removed [ 1021.990299][T12223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.419729][T12223] team0: Port device team_slave_0 added [ 1022.428736][T12223] team0: Port device team_slave_1 added [ 1022.546267][T12223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.546305][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.546336][T12223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.609761][T12223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.609780][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1022.609821][T12223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.828523][T12223] hsr_slave_0: entered promiscuous mode [ 1022.872889][T12223] hsr_slave_1: entered promiscuous mode [ 1022.873999][T12223] debugfs: 'hsr0' already exists in 'hsr' [ 1022.874026][T12223] Cannot create hsr debugfs directory [ 1022.998167][T12383] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1022.998498][T12383] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1022.998866][T12383] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1022.999298][T12383] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1022.999431][T12383] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1023.115557][T12383] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1023.130233][ T37] audit: type=1326 audit(1776793599.362:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.131873][ T37] audit: type=1326 audit(1776793599.362:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.132225][ T37] audit: type=1326 audit(1776793599.362:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.136629][ T37] audit: type=1326 audit(1776793599.372:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.142359][ T37] audit: type=1326 audit(1776793599.372:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.144797][ T37] audit: type=1326 audit(1776793599.382:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.146527][ T37] audit: type=1326 audit(1776793599.382:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.148535][ T37] audit: type=1326 audit(1776793599.382:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.149379][ T37] audit: type=1326 audit(1776793599.382:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.366775][T12383] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1023.366867][T12383] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1023.484641][T12383] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1023.649589][ T37] audit: type=1326 audit(1776793599.842:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12398 comm="syz.4.1560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff22c5ac819 code=0x7ffc0000 [ 1023.803655][T12052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.288767][ T5923] usb 3-1: USB disconnect, device number 50 [ 1025.102626][ T5473] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1025.172177][T11972] Bluetooth: hci4: command 0x0c1a tx timeout [ 1025.172216][T11096] Bluetooth: hci0: command 0x0406 tx timeout [ 1025.172249][T11096] Bluetooth: hci3: command 0x0406 tx timeout [ 1025.172277][T11096] Bluetooth: hci2: command 0x0406 tx timeout [ 1025.482713][T11972] Bluetooth: hci5: command 0x0c1a tx timeout [ 1025.753720][T12052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.645179][ T5923] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1027.312642][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 1027.315447][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.315488][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.315536][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1027.315566][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.385310][ T5923] usb 3-1: config 0 descriptor?? [ 1027.426906][ T5923] hub 3-1:0.0: USB hub found [ 1027.660786][T11972] Bluetooth: hci4: command 0x0c1a tx timeout [ 1027.660830][T11972] Bluetooth: hci5: command 0x0c1a tx timeout [ 1027.713711][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.713866][ T6747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.782947][ T5923] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1027.815361][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.815518][ T6747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.208655][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.221850][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.402753][ T5929] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1028.444097][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.444760][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.448728][T12423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.452235][T12423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.537465][ T5923] hid-generic 0003:046D:C31C.001E: unknown main item tag 0x0 [ 1028.561917][ T5923] hid-generic 0003:046D:C31C.001E: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 1028.585718][ T5929] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1028.585748][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.585769][ T5929] usb 5-1: Product: syz [ 1028.585783][ T5929] usb 5-1: Manufacturer: syz [ 1028.585798][ T5929] usb 5-1: SerialNumber: syz [ 1028.680247][ T5929] usb 5-1: config 0 descriptor?? [ 1028.723720][ T5929] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1028.913438][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.913946][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.915874][ T9] usb 3-1: USB disconnect, device number 51 [ 1029.094106][T12440] fido_id[12440]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1029.225413][ T5929] gspca_sunplus: reg_r err -71 [ 1029.266568][ T5929] usb 5-1: USB disconnect, device number 57 [ 1029.682089][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 1029.682110][ T37] audit: type=1326 audit(1776793605.902:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.682608][ T37] audit: type=1326 audit(1776793605.912:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.692708][ T5823] Bluetooth: hci5: command 0x0c1a tx timeout [ 1029.692759][ T5823] Bluetooth: hci4: command 0x0c1a tx timeout [ 1029.778497][ T37] audit: type=1326 audit(1776793606.012:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.778540][ T37] audit: type=1326 audit(1776793606.012:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.778573][ T37] audit: type=1326 audit(1776793606.012:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.778605][ T37] audit: type=1326 audit(1776793606.012:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.782358][ T37] audit: type=1326 audit(1776793606.012:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.897977][ T37] audit: type=1326 audit(1776793606.012:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.898050][ T37] audit: type=1326 audit(1776793606.022:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1029.898099][ T37] audit: type=1326 audit(1776793606.022:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12451 comm="syz.2.1568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0df171c819 code=0x7ffc0000 [ 1030.736789][T12052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.185551][T12484] siw: device registration error -23 [ 1035.979220][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1036.026213][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1036.031769][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1036.071701][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1036.097361][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1037.803829][T12530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1578'. [ 1040.067503][T11972] Bluetooth: hci1: command tx timeout [ 1040.886914][T12541] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1041.175512][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1583'. [ 1041.219301][T12223] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1041.271527][T12223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.303980][T12223] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1041.339864][T12223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.340236][T12509] lo speed is unknown, defaulting to 1000 [ 1041.409988][T12223] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1041.480100][T12223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.516926][T12223] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1041.583068][T12223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.722805][T10202] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1041.914766][T10202] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1041.914866][T10202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.914929][T10202] usb 5-1: Product: syz [ 1041.914946][T10202] usb 5-1: Manufacturer: syz [ 1041.914962][T10202] usb 5-1: SerialNumber: syz [ 1041.985258][T10202] usb 5-1: config 0 descriptor?? [ 1042.012775][T10202] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1042.092884][T11972] Bluetooth: hci1: command tx timeout [ 1042.258233][T12557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.258829][T12557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.383193][T10202] gspca_sunplus: reg_r err -71 [ 1042.404682][T10202] usb 5-1: USB disconnect, device number 58 [ 1043.084697][T12571] siw: device registration error -23 [ 1043.439823][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1043.523068][ T5990] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 1043.622937][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1043.625472][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1043.627906][ T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1043.627938][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.627960][ T9] usb 5-1: Product: syz [ 1043.627976][ T9] usb 5-1: Manufacturer: syz [ 1043.627992][ T9] usb 5-1: SerialNumber: syz [ 1043.691480][ T5990] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1043.692127][ T5990] usb 6-1: not running at top speed; connect to a high speed hub [ 1043.695271][ T5990] usb 6-1: config 255 has an invalid interface number: 183 but max is 2 [ 1043.695303][ T5990] usb 6-1: config 255 has an invalid interface number: 205 but max is 2 [ 1043.695328][ T5990] usb 6-1: config 255 has an invalid interface number: 164 but max is 2 [ 1043.695351][ T5990] usb 6-1: config 255 has an invalid interface association descriptor of length 2, skipping [ 1043.695373][ T5990] usb 6-1: config 255 has no interface number 0 [ 1043.695391][ T5990] usb 6-1: config 255 has no interface number 1 [ 1043.695410][ T5990] usb 6-1: config 255 has no interface number 2 [ 1043.695498][ T5990] usb 6-1: config 255 interface 183 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1043.695529][ T5990] usb 6-1: config 255 interface 183 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1043.695557][ T5990] usb 6-1: config 255 interface 183 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1043.695586][ T5990] usb 6-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 1043.695612][ T5990] usb 6-1: config 255 interface 183 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1043.695636][ T5990] usb 6-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0x81, skipping [ 1043.695664][ T5990] usb 6-1: config 255 interface 183 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 1043.695689][ T5990] usb 6-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 1043.695714][ T5990] usb 6-1: config 255 interface 183 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 1043.695753][ T5990] usb 6-1: config 255 interface 205 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1043.695778][ T5990] usb 6-1: config 255 interface 205 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1043.695811][ T5990] usb 6-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0x6, skipping [ 1043.695836][ T5990] usb 6-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0xE, skipping [ 1043.695861][ T5990] usb 6-1: config 255 interface 205 altsetting 127 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1043.695889][ T5990] usb 6-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0x8E, skipping [ 1043.695917][ T5990] usb 6-1: config 255 interface 205 altsetting 127 has a duplicate endpoint with address 0x9, skipping [ 1043.695955][ T5990] usb 6-1: config 255 interface 164 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1043.695979][ T5990] usb 6-1: config 255 interface 164 altsetting 9 has a duplicate endpoint with address 0x1, skipping [ 1043.696004][ T5990] usb 6-1: config 255 interface 205 has no altsetting 0 [ 1043.696023][ T5990] usb 6-1: config 255 interface 164 has no altsetting 0 [ 1043.769746][ T5990] usb 6-1: string descriptor 0 read error: -22 [ 1043.769929][ T5990] usb 6-1: New USB device found, idVendor=0c45, idProduct=60fe, bcdDevice=7f.89 [ 1043.769958][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.971384][ T9] usb 5-1: config 0 descriptor?? [ 1044.033475][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 1044.033515][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1044.045310][T12575] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1044.085547][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 1044.162805][T11972] Bluetooth: hci1: command tx timeout [ 1044.430418][ T5923] usb 6-1: USB disconnect, device number 53 [ 1044.449394][T12573] input: syz0 as /devices/virtual/input/input22 [ 1044.768417][T12509] chnl_net:caif_netlink_parms(): no params data found [ 1045.341646][T10202] usb 5-1: USB disconnect, device number 59 [ 1046.469414][T11972] Bluetooth: hci1: command tx timeout [ 1046.518760][T12223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1047.009153][T12509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1047.009284][T12509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1047.009596][T12509] bridge_slave_0: entered allmulticast mode [ 1047.019967][T12509] bridge_slave_0: entered promiscuous mode [ 1047.060384][T12509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1047.060514][T12509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1047.060795][T12509] bridge_slave_1: entered allmulticast mode [ 1047.110953][T12509] bridge_slave_1: entered promiscuous mode [ 1048.336788][T12223] 8021q: adding VLAN 0 to HW filter on device team0 [ 1048.472948][T12611] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1049.500728][T12509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.100156][T12509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.543208][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.543431][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.606048][T12622] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1051.661433][ T6568] bridge_slave_1: left allmulticast mode [ 1051.661468][ T6568] bridge_slave_1: left promiscuous mode [ 1051.661719][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.930916][ T6568] bridge_slave_0: left allmulticast mode [ 1051.930950][ T6568] bridge_slave_0: left promiscuous mode [ 1051.931225][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.314490][T12630] siw: device registration error -23 [ 1054.485604][ T6568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.696356][ T6568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.739106][ T6568] bond0 (unregistering): Released all slaves [ 1054.818930][T12509] team0: Port device team_slave_0 added [ 1054.902230][T12509] team0: Port device team_slave_1 added [ 1054.968257][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.968365][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.986884][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.987057][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.111477][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1604'. [ 1055.937746][T12509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.937761][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.937783][T12509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.942193][T12509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.942215][T12509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.942236][T12509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.023743][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1057.180458][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1057.201932][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1057.219441][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1057.238251][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1057.527190][ T6568] hsr_slave_0: left promiscuous mode [ 1057.785489][ T6568] hsr_slave_1: left promiscuous mode [ 1057.786630][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.824506][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1059.698815][T11972] Bluetooth: hci4: command tx timeout [ 1060.415199][ T6568] team0 (unregistering): Port device team_slave_1 removed [ 1060.973582][ T6568] team0 (unregistering): Port device team_slave_0 removed [ 1061.762784][T11972] Bluetooth: hci4: command tx timeout [ 1061.880194][T12509] hsr_slave_0: entered promiscuous mode [ 1061.881742][T12509] hsr_slave_1: entered promiscuous mode [ 1061.884414][T12509] debugfs: 'hsr0' already exists in 'hsr' [ 1061.884443][T12509] Cannot create hsr debugfs directory [ 1062.441991][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1615'. [ 1063.855259][T11972] Bluetooth: hci4: command tx timeout [ 1063.962431][T12702] overlayfs: missing 'lowerdir' [ 1065.478288][T12715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1065.679825][T12652] lo speed is unknown, defaulting to 1000 [ 1065.937818][T11972] Bluetooth: hci4: command tx timeout [ 1066.102716][ T9] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1066.313005][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1066.315398][ T9] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 1066.315429][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.315451][ T9] usb 6-1: config 0 has no interface number 0 [ 1066.315497][ T9] usb 6-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1066.315527][ T9] usb 6-1: config 0 interface 200 has no altsetting 0 [ 1066.319015][ T9] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1066.319049][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.319072][ T9] usb 6-1: Product: syz [ 1066.319089][ T9] usb 6-1: Manufacturer: syz [ 1066.319105][ T9] usb 6-1: SerialNumber: syz [ 1066.414347][ T9] usb 6-1: config 0 descriptor?? [ 1066.722437][ T5473] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1067.181538][T12723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.192920][T12723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.421621][T12723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.423069][T12723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.468953][T12723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.469676][T12723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.499285][T12739] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1624'. [ 1067.536532][ T9] usbhid 6-1:0.200: couldn't find an input interrupt endpoint [ 1067.577564][ T9] usb 6-1: USB disconnect, device number 54 [ 1067.619478][T12724] udevd[12724]: setting owner of /dev/bus/usb/006/054 to uid=0, gid=0 failed: No such file or directory [ 1071.437038][T12759] siw: device registration error -23 [ 1073.101378][T12771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1630'. [ 1074.835771][T12652] chnl_net:caif_netlink_parms(): no params data found [ 1074.968056][T12775] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'. [ 1075.721507][T12792] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1075.728012][T12792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1636'. [ 1077.336443][T12798] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1079.098025][ T5800] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1079.972600][ T5800] usb 6-1: Using ep0 maxpacket: 16 [ 1079.975105][ T5800] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1079.977612][ T5800] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1079.977642][ T5800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.977663][ T5800] usb 6-1: Product: syz [ 1079.977676][ T5800] usb 6-1: Manufacturer: syz [ 1079.977690][ T5800] usb 6-1: SerialNumber: syz [ 1080.158448][ T5800] usb 6-1: config 0 descriptor?? [ 1080.163283][ T5800] hub 6-1:0.0: bad descriptor, ignoring hub [ 1080.163389][ T5800] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1080.204370][ T5800] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input23 [ 1080.534074][T12814] input: syz0 as /devices/virtual/input/input24 [ 1081.513726][T12652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.513944][T12652] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.514360][T12652] bridge_slave_0: entered allmulticast mode [ 1081.517041][T12652] bridge_slave_0: entered promiscuous mode [ 1081.579481][T12652] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.579647][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.579975][T12652] bridge_slave_1: entered allmulticast mode [ 1081.592001][T12652] bridge_slave_1: entered promiscuous mode [ 1081.904129][T12814] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1081.908746][T12814] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1081.909162][T12814] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1081.909483][T12814] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1081.909885][T12814] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1082.029516][T12652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.046699][T12652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1082.147794][T12814] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1082.208840][ T13] raw-gadget.0 gadget.5: failed to queue suspend event [ 1082.262654][T12652] team0: Port device team_slave_0 added [ 1082.284814][T12652] team0: Port device team_slave_1 added [ 1082.378445][T12814] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1082.378541][T12814] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1082.487921][T12814] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1083.085621][T12652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.085636][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.085659][T12652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1083.207476][T12814] raw-gadget.0 gadget.5: failed to queue disconnect event [ 1083.313113][ T9] usb 6-1: USB disconnect, device number 55 [ 1083.493955][T12652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.493976][T12652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.494007][T12652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.843661][T11972] Bluetooth: hci2: command 0x0406 tx timeout [ 1083.879208][T12509] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1084.088763][T11972] Bluetooth: hci1: command 0x0c1a tx timeout [ 1084.093037][T11096] Bluetooth: hci3: command 0x0406 tx timeout [ 1084.093099][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 1084.413485][T11972] Bluetooth: hci4: command 0x0c1a tx timeout [ 1084.549272][T12509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.155597][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1085.524584][ T9] usb 5-1: device descriptor read/64, error -71 [ 1085.937421][T12509] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1085.992731][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1086.011187][T12848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1650'. [ 1086.011230][T12848] openvswitch: netlink: Flow key attr not present in new flow. [ 1086.075482][T12509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1086.127443][ T9] usb 5-1: device descriptor read/64, error -71 [ 1086.162929][T11972] Bluetooth: hci1: command 0x0c1a tx timeout [ 1086.194959][T12509] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1086.243229][ T9] usb usb5-port1: attempt power cycle [ 1086.279478][T12509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1086.328671][T12652] hsr_slave_0: entered promiscuous mode [ 1086.330147][T12652] hsr_slave_1: entered promiscuous mode [ 1086.331117][T12652] debugfs: 'hsr0' already exists in 'hsr' [ 1086.331144][T12652] Cannot create hsr debugfs directory [ 1086.335311][T12509] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1086.485106][T11972] Bluetooth: hci4: command 0x0c1a tx timeout [ 1086.582784][ T9] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1086.603804][ T9] usb 5-1: device descriptor read/8, error -71 [ 1086.764002][T12509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1087.303852][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 1087.303902][ T37] audit: type=1326 audit(1776793663.432:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.5.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0178e6c819 code=0x7ffc0000 [ 1087.304682][ T37] audit: type=1326 audit(1776793663.442:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.5.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0178e6c819 code=0x7ffc0000 [ 1087.644159][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1087.666134][ T37] audit: type=1326 audit(1776793663.902:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12856 comm="syz.2.1654" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 1087.992108][ T9] usb 5-1: device not accepting address 63, error -71 [ 1088.026979][T12860] misc userio: Begin command sent, but we're already running [ 1088.038033][ T9] usb usb5-port1: unable to enumerate USB device [ 1088.552841][ T37] audit: type=1326 audit(1776793664.762:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12866 comm="syz.5.1656" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 1088.553164][T11972] Bluetooth: hci1: command 0x0c1a tx timeout [ 1089.329074][T11972] Bluetooth: hci4: command 0x0c1a tx timeout [ 1089.737022][ T37] audit: type=1326 audit(1776793665.972:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12877 comm="syz.5.1658" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 1090.973117][ T6568] bridge_slave_1: left allmulticast mode [ 1090.973141][ T6568] bridge_slave_1: left promiscuous mode [ 1091.020274][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1091.094603][ T6568] bridge_slave_0: left allmulticast mode [ 1091.094627][ T6568] bridge_slave_0: left promiscuous mode [ 1091.126876][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.183974][ T6568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1092.285092][ T6568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1092.355701][ T6568] bond0 (unregistering): Released all slaves [ 1093.279581][ T6568] hsr_slave_0: left promiscuous mode [ 1093.292808][ T6568] hsr_slave_1: left promiscuous mode [ 1093.293931][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1093.302719][T10202] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1093.312652][ T9] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1093.354570][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1093.494552][T10202] usb 6-1: Using ep0 maxpacket: 16 [ 1093.527285][T10202] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1093.527318][T10202] usb 6-1: config 1 has no interface number 0 [ 1093.528362][T10202] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1093.528393][T10202] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1093.528421][T10202] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1093.540425][ T37] audit: type=1326 audit(1776793669.722:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12916 comm="syz.2.1668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 1094.390738][T10202] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1094.390775][T10202] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1094.390810][T10202] usb 6-1: Product: syz [ 1094.390827][T10202] usb 6-1: Manufacturer: syz [ 1094.390843][T10202] usb 6-1: SerialNumber: syz [ 1094.445374][T12913] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1094.446421][T12913] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1094.552607][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1094.578462][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1094.578508][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1094.578553][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1094.578585][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1094.578614][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1094.578643][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1094.578673][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1094.578702][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1094.581717][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1094.581763][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1094.581808][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1094.581840][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1094.581868][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1094.581897][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1094.581927][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1094.581958][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1094.595032][ T9] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1094.595097][ T9] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1094.595152][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1094.595233][ T9] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1094.595283][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1094.595313][ T9] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1094.595380][ T9] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1094.595439][ T9] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1094.605948][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1094.606263][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1094.606291][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.908106][T12913] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1094.908328][T12913] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1095.062934][ T9] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1095.068757][T12910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.099176][T12910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1095.112322][ T37] audit: type=1326 audit(1776793671.342:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12924 comm="syz.2.1669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 1095.137339][T10202] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 1095.137698][T10202] aqc111 6-1:1.105: probe with driver aqc111 failed with error -61 [ 1095.368101][ T9] usb 5-1: USB disconnect, device number 64 [ 1095.559384][ T5990] usb 6-1: USB disconnect, device number 56 [ 1096.015227][ T6568] team0 (unregistering): Port device team_slave_1 removed [ 1096.083507][ T6568] team0 (unregistering): Port device team_slave_0 removed [ 1096.496691][ T5473] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1098.411966][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1098.459045][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1098.461151][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1098.485223][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1098.486164][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1098.888320][T12950] lo speed is unknown, defaulting to 1000 [ 1100.355573][ T37] audit: type=1326 audit(1776793676.592:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12976 comm="syz.2.1677" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 1100.642749][T11972] Bluetooth: hci5: command tx timeout [ 1102.867266][T11972] Bluetooth: hci5: command tx timeout [ 1103.497475][T12950] chnl_net:caif_netlink_parms(): no params data found [ 1104.572629][ T5900] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1104.776501][ T5900] usb 6-1: Using ep0 maxpacket: 8 [ 1104.779418][ T5900] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1104.779462][ T5900] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1104.779516][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1104.779546][ T5900] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.779574][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1104.779603][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1104.779632][ T5900] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1104.779662][ T5900] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1104.781353][ T5900] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1104.781395][ T5900] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1104.781436][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1104.781465][ T5900] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.781497][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1104.781526][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1104.781556][ T5900] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1104.781587][ T5900] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1104.788100][ T5900] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1104.788151][ T5900] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1104.788181][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1104.788202][ T5900] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1104.788221][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1104.788239][ T5900] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1104.788261][ T5900] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1104.788281][ T5900] usb 6-1: config 168 interface 0 has no altsetting 0 [ 1104.879222][ T5900] usb 6-1: string descriptor 0 read error: -22 [ 1104.879332][ T5900] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1104.879350][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.882900][T11972] Bluetooth: hci5: command tx timeout [ 1105.157072][ T5900] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1105.457412][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.458081][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.502146][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 1105.662245][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.672763][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.677842][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.678591][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.737119][ T5900] usb 6-1: USB disconnect, device number 57 [ 1105.891901][T13030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1688'. [ 1105.961647][T12950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.961767][T12950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.962043][T12950] bridge_slave_0: entered allmulticast mode [ 1106.003691][T12950] bridge_slave_0: entered promiscuous mode [ 1106.973022][T11972] Bluetooth: hci5: command tx timeout [ 1107.345604][T12950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.345733][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1107.346001][T12950] bridge_slave_1: entered allmulticast mode [ 1107.351573][T12950] bridge_slave_1: entered promiscuous mode [ 1107.641315][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1694'. [ 1107.652752][ T5900] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1107.745252][T12950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1107.812645][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 1107.813536][ T5900] usb 6-1: no configurations [ 1107.813554][ T5900] usb 6-1: can't read configurations, error -22 [ 1107.942707][ T5900] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1109.016526][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 1109.364767][ T5900] usb 6-1: no configurations [ 1109.364791][ T5900] usb 6-1: can't read configurations, error -22 [ 1109.365588][ T5900] usb usb6-port1: attempt power cycle [ 1109.742745][ T5900] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1109.763588][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 1109.764565][ T5900] usb 6-1: no configurations [ 1109.764584][ T5900] usb 6-1: can't read configurations, error -22 [ 1109.904735][T12950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1110.044641][ T5900] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1110.064316][ T5900] usb 6-1: Using ep0 maxpacket: 16 [ 1110.065279][ T5900] usb 6-1: no configurations [ 1110.065304][ T5900] usb 6-1: can't read configurations, error -22 [ 1110.065746][ T5900] usb usb6-port1: unable to enumerate USB device [ 1110.248904][T12950] team0: Port device team_slave_0 added [ 1110.307343][T12950] team0: Port device team_slave_1 added [ 1110.357129][T13074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 1111.764845][T12950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.764860][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.764883][T12950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1112.367256][T12950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1112.367276][T12950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1112.367306][T12950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.446856][T13100] siw: device registration error -23 [ 1113.094173][T12950] hsr_slave_0: entered promiscuous mode [ 1113.098801][T12950] hsr_slave_1: entered promiscuous mode [ 1113.102810][T12950] debugfs: 'hsr0' already exists in 'hsr' [ 1113.102843][T12950] Cannot create hsr debugfs directory [ 1113.216394][T12652] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1113.883238][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1113.936329][T12652] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1115.325407][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1115.382630][T12652] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1115.622207][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1115.671512][T12652] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1115.708300][T12652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1116.553483][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.553559][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.019938][T13124] overlayfs: missing 'lowerdir' [ 1117.593842][T12652] kthread_run failed with err -4 [ 1118.224567][ T6568] bridge_slave_1: left allmulticast mode [ 1118.224602][ T6568] bridge_slave_1: left promiscuous mode [ 1118.227666][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.345057][ T6568] bridge_slave_0: left allmulticast mode [ 1118.345091][ T6568] bridge_slave_0: left promiscuous mode [ 1118.345386][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.871386][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1717'. [ 1119.226997][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1119.267271][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1119.270106][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1119.437976][ T6568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1119.635034][T10202] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1120.261885][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1120.327177][T13154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1120.342394][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1120.408736][ T6568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1120.557016][ T6568] bond0 (unregistering): Released all slaves [ 1120.634550][T10202] usb 6-1: Using ep0 maxpacket: 32 [ 1120.899554][T10202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.899590][T10202] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.899632][T10202] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1120.899656][T10202] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.906165][T10202] usb 6-1: config 0 descriptor?? [ 1120.922320][T10202] hub 6-1:0.0: USB hub found [ 1121.377254][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.383746][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.399589][T13145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.406247][T13145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.414123][T10202] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1121.431369][T10202] usbhid 6-1:0.0: can't add hid device: -71 [ 1121.431510][T10202] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1121.475019][T10202] usb 6-1: USB disconnect, device number 62 [ 1122.280082][ T37] audit: type=1326 audit(1776793698.512:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13171 comm="syz.5.1723" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 1122.562807][T11972] Bluetooth: hci1: command tx timeout [ 1122.817197][T13173] misc userio: Begin command sent, but we're already running [ 1124.872843][T11972] Bluetooth: hci1: command tx timeout [ 1125.145439][ T5473] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1125.684130][T13190] overlayfs: missing 'lowerdir' [ 1127.547785][T11972] Bluetooth: hci1: command tx timeout [ 1127.836285][ T6568] hsr_slave_0: left promiscuous mode [ 1127.882913][ T6568] hsr_slave_1: left promiscuous mode [ 1127.883838][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.902802][T10888] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1128.201622][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1128.302758][T10888] usb 3-1: Using ep0 maxpacket: 32 [ 1128.307711][T10888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.307751][T10888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1128.307801][T10888] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1128.307925][T10888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.371410][T10888] usb 3-1: config 0 descriptor?? [ 1128.389337][T10888] hub 3-1:0.0: USB hub found [ 1128.791716][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.792370][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.815703][T13208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.816593][T13208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.822424][T10888] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1128.876234][T10888] usbhid 3-1:0.0: can't add hid device: -71 [ 1128.876377][T10888] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1128.913803][T10888] usb 3-1: USB disconnect, device number 52 [ 1129.133508][ T6568] team0 (unregistering): Port device team_slave_1 removed [ 1129.207144][ T6568] team0 (unregistering): Port device team_slave_0 removed [ 1129.424973][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1731'. [ 1129.603398][T11972] Bluetooth: hci1: command tx timeout [ 1129.692319][T13150] lo speed is unknown, defaulting to 1000 [ 1129.725100][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1738'. [ 1130.348303][ T37] audit: type=1326 audit(1776793706.582:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13224 comm="syz.2.1739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 1134.356592][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1134.401946][T13150] chnl_net:caif_netlink_parms(): no params data found [ 1135.672627][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1135.678006][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.678066][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1135.678117][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1135.678144][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.728036][ T9] usb 3-1: config 0 descriptor?? [ 1135.781147][ T9] hub 3-1:0.0: bad descriptor, ignoring hub [ 1135.781184][ T9] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1135.897997][T13262] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1746'. [ 1135.949024][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1136.204526][T13248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.208859][T13248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.389698][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.390445][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.673823][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.676191][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.696459][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.697171][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.479792][T13292] overlayfs: missing 'lowerdir' [ 1139.195815][T13150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.195997][T13150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.196280][T13150] bridge_slave_0: entered allmulticast mode [ 1139.199500][T13150] bridge_slave_0: entered promiscuous mode [ 1139.258755][T13150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.258844][T13150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.259060][T13150] bridge_slave_1: entered allmulticast mode [ 1139.331252][T13150] bridge_slave_1: entered promiscuous mode [ 1139.505651][ T5990] usb 3-1: USB disconnect, device number 53 [ 1139.730305][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1752'. [ 1140.519567][T13309] siw: device registration error -23 [ 1140.657520][T13150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.761216][T13150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.962661][T12950] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1141.011050][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1141.012632][ T5990] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1141.192619][ T5990] usb 5-1: Using ep0 maxpacket: 32 [ 1141.198812][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.198856][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.198888][ T5990] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1141.198907][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.310720][ T5990] usb 5-1: config 0 descriptor?? [ 1141.326824][ T5990] hub 5-1:0.0: USB hub found [ 1141.542186][ T5990] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1141.588133][T13150] team0: Port device team_slave_0 added [ 1141.588459][T12950] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1141.709167][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1141.730172][T13150] team0: Port device team_slave_1 added [ 1141.793771][T12950] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1141.818581][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1141.869983][T12950] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1141.921896][T12950] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1141.948853][T13311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.966460][T13311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1141.984603][ T5990] hid-generic 0003:046D:C31C.001F: unknown main item tag 0x0 [ 1142.079188][ T5990] hid-generic 0003:046D:C31C.001F: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 1142.383716][ T5800] usb 5-1: USB disconnect, device number 65 [ 1142.624607][T13150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.624626][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.624658][T13150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.680802][T13150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.680824][T13150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.680860][T13150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.490869][T13150] hsr_slave_0: entered promiscuous mode [ 1145.492277][T13150] hsr_slave_1: entered promiscuous mode [ 1145.493780][T13150] debugfs: 'hsr0' already exists in 'hsr' [ 1145.493808][T13150] Cannot create hsr debugfs directory [ 1147.305349][T13379] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1148.185341][ T37] audit: type=1326 audit(1776793724.412:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13377 comm="syz.2.1771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0df171c819 code=0x0 [ 1148.879504][T13396] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1150.699362][T13405] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1150.795062][T12950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.212817][ T6568] bridge_slave_1: left allmulticast mode [ 1152.212852][ T6568] bridge_slave_1: left promiscuous mode [ 1152.213146][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1152.364535][ T6568] bridge_slave_0: left allmulticast mode [ 1152.364571][ T6568] bridge_slave_0: left promiscuous mode [ 1152.367280][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1152.742827][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1777'. [ 1153.694179][ T6568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1156.173412][ T6568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1157.495185][ T6568] bond0 (unregistering): Released all slaves [ 1158.742934][ T6568] hsr_slave_0: left promiscuous mode [ 1158.836542][ T6568] hsr_slave_1: left promiscuous mode [ 1158.837778][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1158.901577][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1159.213861][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1159.396898][T13470] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 1159.409769][T13470] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1786'. [ 1160.332977][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1160.363799][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1160.506412][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1160.508697][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1161.017319][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'. [ 1161.764831][ T6568] team0 (unregistering): Port device team_slave_1 removed [ 1161.806635][ T6568] team0 (unregistering): Port device team_slave_0 removed [ 1162.818450][T11972] Bluetooth: hci4: command tx timeout [ 1164.916699][T11972] Bluetooth: hci4: command tx timeout [ 1166.966574][T11972] Bluetooth: hci4: command tx timeout [ 1168.733843][T13467] lo speed is unknown, defaulting to 1000 [ 1168.853052][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 1169.168387][T11972] Bluetooth: hci4: command tx timeout [ 1170.762626][ T6131] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1171.569338][ T6131] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.569373][ T6131] usb 6-1: config 0 has no interfaces? [ 1171.661585][ T6131] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1171.661621][ T6131] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.661643][ T6131] usb 6-1: Product: syz [ 1171.661659][ T6131] usb 6-1: Manufacturer: syz [ 1171.661675][ T6131] usb 6-1: SerialNumber: syz [ 1171.941312][ T6131] usb 6-1: config 0 descriptor?? [ 1172.203566][T13521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.208111][T13521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1172.258659][T10888] usb 6-1: USB disconnect, device number 63 [ 1172.552656][ T5990] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1172.716036][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 1172.719050][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1172.722205][ T5990] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 1172.722239][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.722262][ T5990] usb 5-1: Product: syz [ 1172.722279][ T5990] usb 5-1: Manufacturer: syz [ 1172.722296][ T5990] usb 5-1: SerialNumber: syz [ 1173.784445][ T5990] usb 5-1: config 0 descriptor?? [ 1174.977098][ T5990] hub 5-1:0.0: bad descriptor, ignoring hub [ 1174.977149][ T5990] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1175.015127][ T5990] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 1175.083348][T13553] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1175.084862][T13553] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1176.083025][T13467] chnl_net:caif_netlink_parms(): no params data found [ 1177.326458][T10202] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1177.665845][T10202] usb 3-1: Using ep0 maxpacket: 16 [ 1177.666877][T10202] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 1177.668372][T10202] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.670085][T10202] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1180.028753][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 1180.028838][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 1180.087790][T13573] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1180.104064][T13573] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1180.985461][T10202] usb 3-1: unable to read config index 2 descriptor/all [ 1180.985516][T10202] usb 3-1: can't read configurations, error -71 [ 1182.246790][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1182.300524][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1182.333211][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1182.351653][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1182.372948][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1182.568500][T13586] vxcan0: tx address claim with different name [ 1184.746104][ T37] audit: type=1326 audit(1776793760.372:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13596 comm="syz.5.1818" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 1185.997116][T11972] Bluetooth: hci5: command tx timeout [ 1186.349883][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'. [ 1186.820419][T13166] usb 5-1: USB disconnect, device number 66 [ 1188.013744][T11972] Bluetooth: hci5: command tx timeout [ 1188.952956][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1819'. [ 1190.829119][T11972] Bluetooth: hci5: command tx timeout [ 1191.695112][T13467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.695238][T13467] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.695457][T13467] bridge_slave_0: entered allmulticast mode [ 1191.697752][T13467] bridge_slave_0: entered promiscuous mode [ 1191.703578][T13576] lo speed is unknown, defaulting to 1000 [ 1191.726314][T13467] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.726450][T13467] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.726745][T13467] bridge_slave_1: entered allmulticast mode [ 1191.729612][T13467] bridge_slave_1: entered promiscuous mode [ 1192.052995][T13467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.182367][T13467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.469712][ T37] audit: type=1326 audit(1776793768.702:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13652 comm="syz.5.1840" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 1192.611620][T13467] team0: Port device team_slave_0 added [ 1192.679523][T13467] team0: Port device team_slave_1 added [ 1192.882686][T11972] Bluetooth: hci5: command tx timeout [ 1194.320308][T13467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.320329][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.320362][T13467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.712760][T13467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.712781][T13467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.712815][T13467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.114972][T13467] hsr_slave_0: entered promiscuous mode [ 1199.116582][T13467] hsr_slave_1: entered promiscuous mode [ 1199.117675][T13467] debugfs: 'hsr0' already exists in 'hsr' [ 1199.117703][T13467] Cannot create hsr debugfs directory [ 1199.412184][T13576] chnl_net:caif_netlink_parms(): no params data found [ 1199.458986][ T37] audit: type=1326 audit(1776793775.692:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13706 comm="syz.4.1859" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff22c5ac819 code=0x0 [ 1199.844490][ T6568] bridge_slave_1: left allmulticast mode [ 1199.844525][ T6568] bridge_slave_1: left promiscuous mode [ 1199.844815][ T6568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.676516][ T6568] bridge_slave_0: left allmulticast mode [ 1200.676551][ T6568] bridge_slave_0: left promiscuous mode [ 1200.676858][ T6568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.327569][T13745] trusted_key: encrypted_key: key user:syz not found [ 1201.351960][T13745] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1201.358980][T13745] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1204.657488][ T6568] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1204.773854][ T6568] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1204.843304][ T6568] bond0 (unregistering): Released all slaves [ 1205.603999][ T6568] hsr_slave_0: left promiscuous mode [ 1205.916753][ T6568] hsr_slave_1: left promiscuous mode [ 1205.931260][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1205.953600][ T6568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1207.019312][T13846] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1207.019842][T13846] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1209.507005][ T6568] team0 (unregistering): Port device team_slave_1 removed [ 1209.656770][ T6568] team0 (unregistering): Port device team_slave_0 removed [ 1209.759263][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'. [ 1210.587971][T13576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.588103][T13576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.588393][T13576] bridge_slave_0: entered allmulticast mode [ 1210.635183][T13576] bridge_slave_0: entered promiscuous mode [ 1210.835127][T13576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.835260][T13576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.835556][T13576] bridge_slave_1: entered allmulticast mode [ 1210.840785][T13576] bridge_slave_1: entered promiscuous mode [ 1212.210570][T13912] siw: device registration error -23 [ 1212.221683][T13912] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1212.424075][ T5473] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1212.461032][T13576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.501231][T13576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.761172][T13576] team0: Port device team_slave_0 added [ 1215.708820][T13576] team0: Port device team_slave_1 added [ 1216.646574][ T37] audit: type=1326 audit(1776793792.442:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13942 comm="syz.5.1952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0178e6c819 code=0x0 [ 1216.842709][ T6131] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1216.995503][ T6131] usb 5-1: Using ep0 maxpacket: 8 [ 1216.999758][ T6131] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1216.999806][ T6131] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1216.999860][ T6131] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1216.999891][ T6131] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1216.999922][ T6131] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1217.001383][ T6131] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1217.001426][ T6131] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1217.001471][ T6131] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1217.001503][ T6131] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1217.001534][ T6131] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1217.086118][ T6131] usb 5-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 1217.086168][ T6131] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1217.086215][ T6131] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1217.086245][ T6131] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1217.086275][ T6131] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1217.190940][ T6131] usb 5-1: string descriptor 0 read error: -22 [ 1217.191101][ T6131] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1217.191127][ T6131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.254807][ T6131] adutux 5-1:168.0: interrupt endpoints not found [ 1217.355226][T13576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.355244][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.355270][T13576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.367603][T13576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.367667][T13576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.371419][T13576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.465295][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.473706][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.495766][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.496411][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.705882][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1217.706542][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.711897][ T5929] usb 5-1: USB disconnect, device number 67 [ 1218.786908][T13576] hsr_slave_0: entered promiscuous mode [ 1218.788479][T13576] hsr_slave_1: entered promiscuous mode [ 1218.789556][T13576] debugfs: 'hsr0' already exists in 'hsr' [ 1218.789583][T13576] Cannot create hsr debugfs directory [ 1221.086379][ T5823] 1024-page vmalloc region starting at 0xffffc90006b62000 allocated at kcov_ioctl+0x58/0x640 [ 1221.086483][ T5823] list_del corruption. next->prev should be ffffc9001a921000, but was 0000000000000000. (next=ffffc90006b62000) [ 1221.087361][ T5823] ------------[ cut here ]------------ [ 1221.087372][ T5823] kernel BUG at lib/list_debug.c:67! [ 1221.087603][ T5823] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1221.087640][ T5823] CPU: 1 UID: 0 PID: 5823 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1221.087665][ T5823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1221.087682][ T5823] Workqueue: hci1 hci_rx_work [ 1221.087819][ T5823] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1221.087852][ T5823] Code: cc 11 60 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 2d 1f 80 fd 49 8b 56 08 48 c7 c7 a0 43 a7 8b 48 89 de 4c 89 f1 e8 57 e7 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1221.087874][ T5823] RSP: 0018:ffffc90004ca79e0 EFLAGS: 00010246 [ 1221.087893][ T5823] RAX: 000000000000006d RBX: ffffc9001a921000 RCX: 5967efdda4e34d00 [ 1221.087910][ T5823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.087925][ T5823] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.087939][ T5823] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92000d6c401 [ 1221.087956][ T5823] R13: dffffc0000000000 R14: ffffc90006b62000 R15: ffffc90006b62008 [ 1221.087974][ T5823] FS: 0000000000000000(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000 [ 1221.087992][ T5823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.088013][ T5823] CR2: 00007f017709cff8 CR3: 000000003efb8000 CR4: 00000000003526f0 [ 1221.088033][ T5823] Call Trace: [ 1221.088045][ T5823] [ 1221.088057][ T5823] kcov_remote_start+0x2af/0x710 [ 1221.088097][ T5823] hci_rx_work+0x10f/0x1040 [ 1221.088127][ T5823] ? process_scheduled_works+0xa70/0x1860 [ 1221.088164][ T5823] process_scheduled_works+0xb5d/0x1860 [ 1221.088217][ T5823] ? __pfx_process_scheduled_works+0x10/0x10 [ 1221.088263][ T5823] ? assign_work+0x3d5/0x5e0 [ 1221.088301][ T5823] worker_thread+0xa53/0xfc0 [ 1221.088337][ T5823] kthread+0x388/0x470 [ 1221.088365][ T5823] ? __pfx_worker_thread+0x10/0x10 [ 1221.088395][ T5823] ? __pfx_kthread+0x10/0x10 [ 1221.088423][ T5823] ret_from_fork+0x514/0xb70 [ 1221.088447][ T5823] ? __pfx_ret_from_fork+0x10/0x10 [ 1221.088469][ T5823] ? __switch_to+0xc79/0x1410 [ 1221.088501][ T5823] ? __pfx_kthread+0x10/0x10 [ 1221.088528][ T5823] ret_from_fork_asm+0x1a/0x30 [ 1221.088563][ T5823] [ 1221.088577][ T5823] Modules linked in: [ 1221.088606][ T5823] ---[ end trace 0000000000000000 ]--- [ 1221.088643][ T5823] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 1221.088692][ T5823] Code: cc 11 60 fd 43 80 3c 2c 00 74 08 4c 89 ff e8 2d 1f 80 fd 49 8b 56 08 48 c7 c7 a0 43 a7 8b 48 89 de 4c 89 f1 e8 57 e7 7b fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1221.088730][ T5823] RSP: 0018:ffffc90004ca79e0 EFLAGS: 00010246 [ 1221.088788][ T5823] RAX: 000000000000006d RBX: ffffc9001a921000 RCX: 5967efdda4e34d00 [ 1221.088823][ T5823] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.088867][ T5823] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.088900][ T5823] R10: dffffc0000000000 R11: ffffed1017124923 R12: 1ffff92000d6c401 [ 1221.088941][ T5823] R13: dffffc0000000000 R14: ffffc90006b62000 R15: ffffc90006b62008 [ 1221.088975][ T5823] FS: 0000000000000000(0000) GS:ffff8881261fe000(0000) knlGS:0000000000000000 [ 1221.089011][ T5823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.089044][ T5823] CR2: 00007f017709cff8 CR3: 000000003efb8000 CR4: 00000000003526f0 [ 1221.089099][ T5823] Kernel panic - not syncing: Fatal exception [ 1221.089723][ T5823] Kernel Offset: disabled