last executing test programs: 23.328575435s ago: executing program 4 (id=1098): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x8, [{@remote}, {@multicast2}, {@private=0xa010101, 0x2}, {@rand_addr=0x64010101, 0x8}]}, @noop, @noop, @rr={0x7, 0x3}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r6, 0x0) 22.849267976s ago: executing program 4 (id=1101): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f00"], 0x0) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$video4linux(&(0x7f00000000c0), 0x401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) 21.987887532s ago: executing program 0 (id=1103): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) epoll_create1(0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 20.888532723s ago: executing program 0 (id=1109): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340fd96774fa221d537757e7e140e5897a634fedaf0632d", @ANYRES32=r1, @ANYRES64=r2, @ANYBLOB="1800508014000400ec4b8736"], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = gettid() timer_create(0x0, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 20.594827713s ago: executing program 4 (id=1110): socket(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2b, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x1, 0x4, 0x9}}, @void, @val={0x76, 0x6, {0x0, 0x6, 0x28, 0x924}}}}}}]}, 0x48}}, 0x0) shutdown(0xffffffffffffffff, 0x2) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x801) write$binfmt_aout(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000004000"], 0x48) getpeername(r3, 0x0, &(0x7f0000000200)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r5, &(0x7f0000000cc0)}, 0x20) r6 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @empty, [], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) 19.742173794s ago: executing program 0 (id=1113): syz_usb_connect(0x2, 0x41e, &(0x7f0000000a40)={{0x12, 0x1, 0x0, 0x40, 0xd0, 0x7d, 0x40, 0x1286, 0x1fa4, 0xfb16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40c, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0xd, 0xee, 0x67, 0x8, 0x0, [], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x1, 0x6, 0x2, [@generic={0x51, 0x30, "ad0a37a3cae6e74ee09421988d5f44b67b74e7c0a1bddf9893023d03fc45cc3e6a6c9e66792794543588d89641ce50fc653243775f8ec2f4784cabb6bd35d5f91d8662fef64bddd1c61b995746817b"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x9, 0xc, 0x4, [@generic={0xd, 0x22, "7ec49825018dab42f693cf"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x6, 0x8, 0x8}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x3, 0x3, 0x0, [@generic={0x4f, 0x6, "064eacf84511cbd0d1095588a9af91510ed7c2f2b6934c57597d95b5a87723b0858ed4ff00d73e16ef90bfae8dfc83e78f177c7fcde6ca53384bca4e543073a57b43e6ab23c2a82e9f2234e63b"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x7, 0x0, 0x55, [@generic={0x97, 0x30, "856fcd013a9838cb88a907c23eff534cce773cf371164ea2975b3530fe91c3dba007e64fad13cbe21a49f545c97f45c0bc7e0c04d05f2dd9474a6720cc64bbdc42a0a63460fb625206bdfac9e3298dd218a24f1d39b18fe72d4b3e02ac283d7d0c7929c1e7080b80fa7f382640023658fef442977a76c96e6903d81cad0e3371b9f01c40155f1fc3d98da02fa5b0f4b8b1aaa8d5e1"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0x3, 0x1, 0x3, [@generic={0x93, 0x1, "a21834c4fd8719cded8525a4662f0d8e9a4df736525c834bb68ddff62ebbafe1b9b3b248f4fbdf15820cbb27e0ea6ce06eb736b41e988a5c6540016e21f175ab398862200ac9524e2349f5297bb92a5dcf621d4585221688d3797f4c14c5390a696a67537cf4c7d1c48b9f41d14fad8163e870d7f433090617c74c24bc23e459f4422243a601875e54f7f7f61e5e37f8c1"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x3, 0x8, 0xc2, [@generic={0xd9, 0x3e, "204baf4d4289ab3aa8711ffe1a8535c6224f4b4cc896e00dfa48f588f224e11ae0ed3a04254716460cad71af070dd273373889b4813ff825596cf72919e591d05f56276d98069e4cd08700ae456e0ee7db6413503b060d16e2856e980af86e6f6dba0bd00d2090645ae8b62304af8a71931dae16fb392a850615ba05615faf0fd64cacb7af834a46bc33de0fece7302718a595bc839d84e7ea79b346baa73a846a45db8da6a345a1903e1076ad6c360ed53c74209885502d2bb50417467ba46aebdfac4e83eb529994d81735ea4426456ca0e2223faf81"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x7ff, 0x2, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf8, 0x7790}]}}, {{0x9, 0x5, 0xb671a988d1c4d84e, 0x2, 0x400, 0xea, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x6, 0x6, 0x2, [@generic={0x92, 0x2, "cb8af644be51a6c0c4f0a0f9cc891820b3c1c59bbe1511f803d12bc13abb3e7227a7a0bf7da41de546b02ff121c39ef309dcef5e7f43095a8f339829b1ef996f1d49696e45108a7b94f853fcf412059d41f0ef0e80b0e2f7e7dfa77e130f8b936be3859898d2b4fd3a9faae83a07fba5e718402f9080cff0abb094db2139647ca4f01fb6603c348178ed7c0d54f79253"}]}}, {{0x9, 0x5, 0xf, 0xa, 0x400, 0x6, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0xd, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x100}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xa5, 0x0, 0x10, [@generic={0x27, 0x22, "467b08d236fcb43590ec20bd63fad6bdac377980d65eb54380b0e71a7c4e0466ae39480049"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0xfb, 0x40, 0x1}}]}}]}}]}}, 0x0) epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f00000003c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000040)) syz_usb_connect(0x0, 0x4ce, &(0x7f00000011c0)={{0x12, 0x1, 0x200, 0xcd, 0xf0, 0x8c, 0x40, 0x5c6, 0x9070, 0x111c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4bc, 0x4, 0x92, 0x3, 0x120, 0x7, [{{0x9, 0x4, 0x4, 0xda, 0x8, 0xe2, 0x55, 0x72, 0x4, [], [{{0x9, 0x5, 0x9, 0x0, 0x10, 0x6, 0x7, 0xf4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xd5, 0xa}]}}, {{0x9, 0x5, 0x8, 0x0, 0x0, 0x81, 0x4, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x80, 0x1ff}]}}, {{0x9, 0x5, 0xf, 0x8, 0x8, 0x1, 0x1, 0x9, [@generic={0xc8, 0x21, "ab91427c60cbac2212601e21bfa4f461a4486938fd6d569b9c2e041ec44c2826564235068c56bfe52568f53d19781691feddecb58bc29d4c2e358a50fd5f6ca78c669ac2f64c59fd77702b7317a7311e75dcfdc5d315b7edf95dc6ab43427ace4c0ce4efcf9ec3ab16ec989f421f50a55514c58aad7e5ef5041fb01621ee83ec276d61d63c0d29c5840e7e0a136aeb8c027bf4f190c2eb31b4ceeb0f04c152d2ddcc5f8082d3fca69bac443d7c7554748386f7df7171385553ff5378ca0173b6dfbded990ca0"}, @generic={0xb2, 0x11, "b3e877cbb473f95cc40cec49d3cdf7301d2a7997329929dc6097837611bcd3e655fd61d6797e24a8ec30e624d6ee0fc624a131af89a59f8c7de2d850060ca8d9e65eed376d610a716cf958aee760c0f8c6f06d3f45ef423b902ec759d3b4ced492a7a25919ef123b258bdc1bcdda1f2f6cfd1d5fa326f59e90cc394447d5d54f6ae77a98c3b57d55291a7d19b2d7db1a8ff0bacccb0c20a54a84899e6d0ce468fe1a95162a9739be34ba409a4ef1726f"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x3, 0x9, 0x9, [@generic={0x6d, 0xa, "34d30e83f55c710b9d6180e347aa62a6e3d311b46f3426753a72a91ad58279c83bd0558dc500c96d49ee6ce858168d5e0147d43f0d63e3acd7e1a7bb01f4d791fc04a8fa3fefb6eb5cb17c6a30d62d0834c5c46bfdfc44c94c96d3a9943e8d43d48ebd2d2d012ac3115dfa"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x8f, 0xef, 0x6}}, {{0x9, 0x5, 0x8, 0xe, 0x3ff, 0x3, 0x0, 0xf6, [@generic={0x44, 0xc, "7b2d11327ab79d9cf8054e4827040e8801b789f20d170de52af207f5d93b9340b18272197f03547681cf510166b4a7dbcc4a6507b35751b3971bec39efd09081f37d"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x7}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0xfe, 0xe, 0x1, [@generic={0x5e, 0x23, "f664e796906d596ddd9fff3804e5b527765d00ff0146867954cb7bcc9da329804a9292c3cf77f8753f67dd7c24fa0ecc27778242fb39a6a2f9c21fb9de0f4948c3b1a645ed07ffad38f386f4488a9a888ba0f06859d148d3e38334ca"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x6, 0x4, 0x5}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x5, 0xa8, 0x71, 0xc9, 0x8, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x7f, 0x7, 0x6a}}, {{0x9, 0x5, 0xb, 0x4, 0x10, 0x1, 0x0, 0x81}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x6, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x103, 0x6, 0x7}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x77, 0x8, 0x8e}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x8, 0x3b, 0x6}}]}}, {{0x9, 0x4, 0xb0, 0xf7, 0x0, 0x3, 0x81, 0x54, 0x9a}}, {{0x9, 0x4, 0x6, 0x79, 0xc, 0x40, 0x7c, 0xfe, 0x8, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "a83a"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xe00, 0x7, 0x9}, [@network_terminal={0x7, 0x24, 0xa, 0xfe, 0x4, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x73, 0x8001}]}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0x4, 0xd5}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0x81, 0x6, 0x5, [@generic={0x76, 0xf, "fecea5ccbacdc1d4a74120b1dd998301d7af958e2f69898f6a7e113d524f316bb552dcdb1107d36097ca12f060b5f89481aa08104a6f8d0cc675832c13f9196366bb10f9ea9f2a2a56fbdd8e04c1c1148d64062390707b3795837f294f7003c219d020755557274f59251d25e172af99586add6f"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x4, 0x7, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x40, 0x0, 0x9, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x7ca}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x2, 0x0, 0x3}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x6, 0x57, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x6, 0x5, 0x10}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x2, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x40}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x3, 0x1e, 0x2, [@generic={0x38, 0x21, "cfa5d9f69610987fc32ee5bef666be8194a1d38ef67782af922fb977cf29c60a7595c11906e279a68e4419d6cd45d52b61bcc66977b5"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x0, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xf8, 0x35, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x8}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0x6, 0x78, 0xb}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x2, 0x1, 0x6, [@generic={0x2, 0xd}]}}]}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x2, 0x9, 0x2f, 0xff, 0x2}, 0xc, &(0x7f0000000180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x7, 0x1}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xbc, &(0x7f0000000300)=@string={0xbc, 0x3, "3c9c3d93f90f5be18b47b8f1c25e55c362e7356fde0c5dd3b6eacfd7cc66462345afcf24252bfdf6b2ba391b708074e7be36f2943df42afac20653531434d0cab53b1cdd652c0b17c3a7af31bce10708d2b1376d6ff719c4ad04c389c26c3a5440dffa15152239f15e776ce6b734272dfcac515d0aa9dcbcebff30d8e5e61ae5e532c5cb8fbb1779989595710daa47cabdd1b259b36f463b58e334bbddc14729a14277c986af65f0cc554ad3cb201328eb403842fdc42eb87a1d"}}]}) socket(0x10, 0x3, 0x0) 18.952540025s ago: executing program 4 (id=1116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10021) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x9, 0xfffff010}, {0x6}]}, 0x10) write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x8901, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f000000e400)={0x2020}, 0x2020) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r6, &(0x7f0000000d40), 0x0}, 0x20) 17.989721469s ago: executing program 4 (id=1121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 17.747407237s ago: executing program 4 (id=1122): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000a80)=[{0x0}], 0x1}}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 17.547063409s ago: executing program 0 (id=1124): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0xb078, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)) socket$kcm(0xa, 0x5, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xc0800, 0x124) fchmodat(r1, &(0x7f0000000140)='./file0/file0\x00', 0x188) close(r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000004000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0xf52e9750ac6908df}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open$dir(&(0x7f0000000100)='./file0\x00', 0x40200, 0x0) 16.569277494s ago: executing program 0 (id=1127): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000300)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x2, 0x0, [{0x0, 0x69, &(0x7f00000001c0)=""/105}, {0x5000, 0x1a, &(0x7f0000000340)=""/26}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) io_submit(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 15.789552483s ago: executing program 0 (id=1129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f00000000c0)) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 15.464884798s ago: executing program 2 (id=1132): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) writev(r4, &(0x7f0000000340)=[{&(0x7f0000000440)='K', 0x1}], 0x1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}]}, 0x30}}, 0x10) 15.125114236s ago: executing program 2 (id=1134): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000015c0)={0x34, &(0x7f0000000080)={0x40, 0x18, 0x3, "c76c96"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 10.318851764s ago: executing program 1 (id=1142): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000500)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb904021d0800fe007c05e8fe55a10a001200020014260c600e12100005007f370401a8001000200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5", 0x8d}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 10.186194759s ago: executing program 2 (id=1144): r0 = socket(0x2, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "9b4d3948"}, @main=@item_012={0x1, 0x0, 0x8, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "6d1fa409"}, @main=@item_012={0x2, 0x0, 0x0, "1a79"}]}}, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) ioctl$HIDIOCGUSAGE(r6, 0x81044804, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000140)="2700000014000707030e0000120f0a00110001390005001cb4cb4c7cf26c3ed77d152ee1be3a4123", 0x28) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) 9.146795229s ago: executing program 3 (id=1146): futex(0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x5d71, &(0x7f0000000340)={0x0, 0x0, 0x10700}, &(0x7f0000000200), &(0x7f0000000140)=0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r7, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KDSETMODE(r8, 0x4b3a, 0x0) read$dsp(r0, &(0x7f0000000440)=""/171, 0xab) 8.657457261s ago: executing program 3 (id=1147): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10d480) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES64]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000040)={0x1, 0x0, {0x2, 0x9, 0x10000, 0x9}}) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0x22, 0xf}}]}}]}}, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r6, &(0x7f0000000240)=[{&(0x7f00000001c0)='\b\x00\x00\x00', 0x4}], 0x1) ioctl$VIDIOC_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 8.419876114s ago: executing program 1 (id=1148): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) gettid() r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r3 = dup3(r2, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40500000000000071106b0000000000660000ed00000000950000002837000038c1fc2d646e66425932ce6092008b785258947503ee2220a26b0e263744a4fa18c269bff58cb77cc0d6363ccd7935eae230398dcf28789b0882bacfc5d8111399d70933a25dac2a303d35cecfdcda16895418ca3c72"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) io_setup(0x81, &(0x7f00000005c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) io_pgetevents(r4, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3}]) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0x80184132, &(0x7f00000002c0)={0x2}) 7.721603538s ago: executing program 2 (id=1149): r0 = gettid() r1 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f00000001c0)=0x0) lsetxattr$security_capability(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x8, 0x7}]}, 0x14, 0x3) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0xdd4ad65}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r3, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) ioctl$TCSETS(r3, 0x5402, &(0x7f00000014c0)={0x0, 0x6b, 0x0, 0x0, 0x0, "076a1400"}) r4 = open(&(0x7f0000000140)='./file0\x00', 0x8100, 0x17) ioctl$TCSETA(r4, 0x5406, &(0x7f0000001680)={0x81, 0x82ea, 0x6, 0x2, 0x8, "1bb076fb6583baf5"}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r5 = syz_open_pts(r3, 0x42) sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) dup3(r5, r3, 0x0) 7.347133068s ago: executing program 1 (id=1150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 6.487590422s ago: executing program 3 (id=1151): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x40, 0x1, 0x9, 0x9, {{0x6, 0x4, 0x2, 0x9, 0x18, 0x65, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @dev={0xac, 0x14, 0x14, 0x15}, {[@ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1}, {@dev, 0x659}, {@broadcast, 0x7fff}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x1}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0x6aec43739a1e6a2e, {0x5000, 0xdddd0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de3040095c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) 6.296011128s ago: executing program 1 (id=1152): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_emit_ethernet(0x5a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010103, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x0, "b08b02f5"}, @nop]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000003c0)={0x0, 0x6}) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) 6.154246237s ago: executing program 2 (id=1153): memfd_create(&(0x7f0000000380)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X %\x91\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r\xec\xff\x83z\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]Wr{\xbb\xeb\xa7\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/5) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x1, 0x1) r4 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000140), 0x12) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$pppl2tp(r2, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000740)) r5 = dup2(r2, r2) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000000)=';\x00j') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/power/sync_on_suspend', 0x582080, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000880)={0x74, 0x0, 0xc}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.704184586s ago: executing program 3 (id=1154): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e00f007120306001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r4 = accept4(r1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0xb, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @loopback}, &(0x7f0000000280)=0xc) rt_sigaction(0xf, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newrule={0x24, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8011}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 4.04806891s ago: executing program 2 (id=1155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="1f769a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000300)={0x0, 0x0, 0x2, "9c45"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000017c0)={0x44, &(0x7f00000015c0)={0x40, 0x10, 0x2, "a7ed"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001400)={0x1c, &(0x7f0000001280)={0x20, 0x10, 0x3, "f558e9"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x2, "b07b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x0, 0x0, 0x2, "b54d"}, 0x0, 0x0}) 3.762843569s ago: executing program 3 (id=1156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000c80)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x68142, 0x0) r6 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffb) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) sendfile(r5, r6, 0x0, 0x1000000201005) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x49c89db0, '\x00', r3, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_setup(0x2, &(0x7f0000000640)=0x0) io_submit(r7, 0x39, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x7, 0x1, 0x0, r0, &(0x7f0000000180), 0xfd8a}, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)="577c0db4302ad396a90a571acd8b176eef818983c7229dc07388819ec1d5580a061b62634a3afa04121ae69813bef26f33de5e85d8f7737aa5356452d86a592d0e21af8bc62c55e427fc9b4bc101aafb154d2373555ef156d4d049", 0x5b, 0xa, 0x0, 0x1}]) 3.637167259s ago: executing program 1 (id=1157): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = msgget(0x0, 0x540) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000280)=""/113) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) unshare(0x68040200) poll(&(0x7f0000000080)=[{}, {}], 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {0x2, 0x0, @dev}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @multicast2}, {0x0, @dev}, 0x2, {0x2, 0x0, @empty}, 'lo\x00'}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 658.916275ms ago: executing program 3 (id=1158): r0 = socket$xdp(0x2c, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=1159): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sysfs$1(0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x103982, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x65, &(0x7f0000000180)={0xfffffffffffffffd, 0x3}, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): umber: syz [ 459.272281][ T5287] usb 4-1: config 0 descriptor?? [ 459.279725][ T5289] usb 2-1: Using ep0 maxpacket: 32 [ 459.302260][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.320417][ T5289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.333622][ T5289] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 459.339125][ T5299] usb 3-1: Using ep0 maxpacket: 8 [ 459.362770][ T5289] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 459.373966][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.379983][ T5299] usb 3-1: config 0 has an invalid interface number: 28 but max is 12 [ 459.393986][ T5289] usb 2-1: config 0 descriptor?? [ 459.404246][ T5299] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 459.413494][ T5299] usb 3-1: config 0 has no interface number 0 [ 459.434536][ T5299] usb 3-1: too many endpoints for config 0 interface 28 altsetting 194: 120, using maximum allowed: 30 [ 459.446194][ T5299] usb 3-1: config 0 interface 28 altsetting 194 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 459.476599][ T5299] usb 3-1: config 0 interface 28 has no altsetting 0 [ 459.507353][ T5299] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 459.517748][ T5299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.526340][ T5299] usb 3-1: Product: syz [ 459.536392][ T5299] usb 3-1: Manufacturer: syz [ 459.555389][ T5299] usb 3-1: SerialNumber: syz [ 459.571976][ T5299] usb 3-1: config 0 descriptor?? [ 459.717832][ T5287] airspy 4-1:0.0: Board ID: 00 [ 459.722735][ T5287] airspy 4-1:0.0: Firmware version: [ 459.823370][ T5299] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 459.865970][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.887846][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.912125][ T3003] bond0 (unregistering): Released all slaves [ 459.914095][ T5289] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input22 [ 460.108015][ T5289] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.000C/input/input23 [ 460.150960][ T5287] airspy 4-1:0.0: usb_control_msg() failed -32 request 0e [ 460.194755][ T5287] airspy 4-1:0.0: Registered as swradio16 [ 460.227824][ T5287] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 460.317475][ T5287] usb 4-1: USB disconnect, device number 31 [ 460.386807][ T5289] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 460.586455][ T54] Bluetooth: hci0: command tx timeout [ 460.862278][T10841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.981226][T10841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.991052][ T3003] hsr_slave_0: left promiscuous mode [ 461.017075][ T3003] hsr_slave_1: left promiscuous mode [ 461.026998][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.044741][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.111834][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.136833][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.217204][ T51] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 461.349992][ T5299] gspca_zc3xx: reg_w_i err -71 [ 461.366046][ T3003] veth1_macvtap: left promiscuous mode [ 461.417860][ T3003] veth0_macvtap: left promiscuous mode [ 461.470058][ T3003] veth1_vlan: left promiscuous mode [ 461.518308][ T3003] veth0_vlan: left promiscuous mode [ 462.218260][ T5299] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 462.224644][ T5299] gspca_zc3xx 3-1:0.28: probe with driver gspca_zc3xx failed with error -71 [ 462.243776][ T5299] usb 3-1: USB disconnect, device number 27 [ 462.288066][ T5291] usb 2-1: USB disconnect, device number 26 [ 462.681859][ T54] Bluetooth: hci0: command tx timeout [ 463.464690][T10879] kvm: kvm [10872]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 463.480039][T10879] kvm: kvm [10872]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 463.495067][T10879] kvm: kvm [10872]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 463.525563][T10879] kvm: kvm [10872]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 463.541772][T10879] kvm: kvm [10872]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 463.596335][ T5287] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 463.757035][ T5287] usb 3-1: Using ep0 maxpacket: 32 [ 463.774851][ T5287] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 463.843513][ T5287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.891689][ T5287] usb 3-1: config 0 descriptor?? [ 463.904252][ T5287] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 464.318268][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 464.545812][ T3003] team0 (unregistering): Port device team_slave_0 removed [ 464.748969][ T54] Bluetooth: hci0: command tx timeout [ 465.226482][ T5290] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 465.396471][ T5290] usb 4-1: Using ep0 maxpacket: 8 [ 465.423753][ T5290] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 465.455896][ T5290] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.515026][ T5290] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 465.559613][ T5290] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 465.573352][T10905] Cannot find add_set index 0 as target [ 465.599280][ T5290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.631742][T10824] chnl_net:caif_netlink_parms(): no params data found [ 465.646621][ T5290] usb 4-1: config 0 descriptor?? [ 465.901309][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.940480][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.940686][T10824] bridge_slave_0: entered allmulticast mode [ 465.941765][T10824] bridge_slave_0: entered promiscuous mode [ 465.961014][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.961091][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.961290][T10824] bridge_slave_1: entered allmulticast mode [ 465.965082][T10824] bridge_slave_1: entered promiscuous mode [ 466.092035][T10919] bridge0: entered promiscuous mode [ 466.092245][T10919] vlan2: entered promiscuous mode [ 466.092412][T10919] vlan2: entered allmulticast mode [ 466.092465][T10919] bridge0: entered allmulticast mode [ 466.107118][T10919] bridge0: left allmulticast mode [ 466.107339][T10919] bridge0: left promiscuous mode [ 466.206203][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.229740][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.272521][ T5299] usb 4-1: USB disconnect, device number 32 [ 466.335599][T10824] team0: Port device team_slave_0 added [ 466.377057][T10824] team0: Port device team_slave_1 added [ 466.419264][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.428205][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.457658][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.531932][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.544268][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.572397][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.779760][T10824] hsr_slave_0: entered promiscuous mode [ 466.829491][T10824] hsr_slave_1: entered promiscuous mode [ 466.830413][ T54] Bluetooth: hci0: command tx timeout [ 467.220791][ T5287] gspca_vc032x: reg_r err -71 [ 467.225569][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.231730][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.237609][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.242938][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.248410][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.254269][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.260026][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.265352][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.271506][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.277227][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.282552][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.288272][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.293883][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.299447][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.304771][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.310358][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.315688][ T5287] gspca_vc032x: I2c Bus Busy Wait 00 [ 467.321117][ T5287] gspca_vc032x: Unknown sensor... [ 467.326314][ T5287] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 467.346393][ T5290] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 467.348697][ T5287] usb 3-1: USB disconnect, device number 28 [ 467.508133][T10941] syzkaller0: entered promiscuous mode [ 467.520144][ T5290] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 467.532751][T10941] syzkaller0: entered allmulticast mode [ 467.532855][ T5290] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 467.563361][ T5290] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.580976][ T5290] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 467.615713][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.676560][ T5290] usb 4-1: Product: syz [ 467.680928][ T5290] usb 4-1: Manufacturer: syz [ 467.704441][ T5290] usb 4-1: SerialNumber: syz [ 467.725169][ T5290] usb 4-1: config 0 descriptor?? [ 467.748782][T10934] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 467.765705][ T5290] imon_raw 4-1:0.0: IR endpoint missing [ 467.993975][ T5287] usb 4-1: USB disconnect, device number 33 [ 472.662790][T11009] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.027094][T11009] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.238866][T10824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 473.286078][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 473.286100][ T29] audit: type=1326 audit(1727916542.055:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11030 comm="syz.3.900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca17dff9 code=0x0 [ 473.377932][T11009] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.393292][T10186] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 473.403675][T10186] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 473.412200][T10186] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 473.422125][T10186] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 473.430828][T10186] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 473.438654][T10186] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 473.477546][T10824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 473.491479][T10824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 473.606593][T11009] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.648630][T10824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 473.953495][T11009] bridge_slave_1: left allmulticast mode [ 473.984837][T11009] bridge_slave_1: left promiscuous mode [ 473.992849][T11009] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.023554][T11009] bridge_slave_0: left allmulticast mode [ 474.029736][T11009] bridge_slave_0: left promiscuous mode [ 474.035633][T11009] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.246897][ T5291] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 474.418346][ T5291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.436366][ T5291] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 474.465955][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.520495][ T5291] usb 1-1: config 0 descriptor?? [ 474.541873][ T5291] pwc: Askey VC010 type 2 USB webcam detected. [ 474.754076][ T5291] pwc: send_video_command error -71 [ 474.766395][ T5291] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 474.789716][ T5291] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 474.823710][ T5291] usb 1-1: USB disconnect, device number 20 [ 475.287438][ T5291] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 475.426761][T11009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.466886][T11009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.467468][ T5291] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.519069][T11009] bond0 (unregistering): Released all slaves [ 475.536627][ T5291] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 475.552009][T10186] Bluetooth: hci4: command tx timeout [ 475.565374][ T5291] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.605589][ T5291] usb 1-1: config 0 descriptor?? [ 475.672166][ T5291] pwc: Askey VC010 type 2 USB webcam detected. [ 476.071846][ T5291] pwc: recv_control_msg error -32 req 02 val 2b00 [ 476.078985][T11009] hsr_slave_0: left promiscuous mode [ 476.086662][ T5291] pwc: recv_control_msg error -32 req 02 val 2700 [ 476.095194][ T5291] pwc: recv_control_msg error -32 req 02 val 2c00 [ 476.103135][ T5291] pwc: recv_control_msg error -32 req 04 val 1000 [ 476.111737][ T5291] pwc: recv_control_msg error -32 req 04 val 1300 [ 476.126924][ T5291] pwc: recv_control_msg error -32 req 04 val 1400 [ 476.133984][T11009] hsr_slave_1: left promiscuous mode [ 476.134590][ T5291] pwc: recv_control_msg error -32 req 02 val 2000 [ 476.155649][ T5291] pwc: recv_control_msg error -32 req 02 val 2100 [ 476.163334][T11009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.163985][ T5291] pwc: recv_control_msg error -32 req 04 val 1500 [ 476.188735][ T5291] pwc: recv_control_msg error -32 req 02 val 2500 [ 476.199631][T11009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.200179][ T5291] pwc: recv_control_msg error -32 req 02 val 2400 [ 476.227457][ T5291] pwc: recv_control_msg error -32 req 02 val 2600 [ 476.235351][T11009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.260749][T11009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.340647][T11009] veth1_macvtap: left promiscuous mode [ 476.366418][T11009] veth0_macvtap: left promiscuous mode [ 476.372230][T11009] veth1_vlan: left promiscuous mode [ 476.406445][T11009] veth0_vlan: left promiscuous mode [ 476.440652][ T5291] pwc: recv_control_msg error -71 req 02 val 2800 [ 476.450378][ T5291] pwc: recv_control_msg error -71 req 04 val 1100 [ 476.467077][ T5291] pwc: recv_control_msg error -71 req 04 val 1200 [ 476.494348][ T5291] pwc: Registered as video71. [ 476.510947][ T5291] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 476.575522][ T5291] usb 1-1: USB disconnect, device number 21 [ 477.534403][ T9786] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 477.638482][T10186] Bluetooth: hci4: command tx timeout [ 477.653745][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 477.682261][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 477.692029][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 477.699714][ T9786] usb 4-1: Using ep0 maxpacket: 32 [ 477.710949][ T9786] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.726324][ T9786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 477.761137][ T9786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 477.772853][ T9786] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 477.784493][ T9786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.796564][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 477.805759][ T9786] usb 4-1: config 0 descriptor?? [ 477.813012][T11113] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 477.822160][ T9786] hub 4-1:0.0: USB hub found [ 477.827000][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 477.840677][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.059005][ T9786] hub 4-1:0.0: 2 ports detected [ 478.371762][T11009] team0 (unregistering): Port device team_slave_1 removed [ 478.458766][T11009] team0 (unregistering): Port device team_slave_0 removed [ 479.018912][T10189] bridge0: port 3(syz_tun) entered disabled state [ 479.043997][T10189] syz_tun (unregistering): left allmulticast mode [ 479.050640][T10189] syz_tun (unregistering): left promiscuous mode [ 479.058091][T10189] bridge0: port 3(syz_tun) entered disabled state [ 479.069903][T11037] chnl_net:caif_netlink_parms(): no params data found [ 479.142839][T10824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.352923][T11037] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.367200][T11037] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.374617][T11037] bridge_slave_0: entered allmulticast mode [ 479.387982][T11037] bridge_slave_0: entered promiscuous mode [ 479.405805][T11037] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.419602][T11037] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.426930][T11037] bridge_slave_1: entered allmulticast mode [ 479.434122][T11037] bridge_slave_1: entered promiscuous mode [ 479.476680][T10824] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.546927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.554183][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.571722][T11152] tipc: Started in network mode [ 479.579372][T11152] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 479.592166][T11152] tipc: Enabled bearer , priority 10 [ 479.614454][T11037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.641350][T11037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.665485][T11152] tipc: Resetting bearer [ 479.709564][ T54] Bluetooth: hci4: command tx timeout [ 479.729680][T11152] tipc: Disabling bearer [ 479.865665][T10824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 479.877011][T10824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 479.907092][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.918308][T11002] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.925554][T11002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.947672][ T54] Bluetooth: hci2: command tx timeout [ 479.960430][ T9786] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 480.034742][T11037] team0: Port device team_slave_0 added [ 480.053431][T11037] team0: Port device team_slave_1 added [ 480.200038][T11037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.209756][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.237364][T11037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.252917][T11037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.260240][T11037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.286206][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.306480][ T937] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 480.320857][T11037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.343290][T10824] veth0_vlan: entered promiscuous mode [ 480.360919][T11127] chnl_net:caif_netlink_parms(): no params data found [ 480.511639][T11037] hsr_slave_0: entered promiscuous mode [ 480.521940][ T937] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 480.533346][T11037] hsr_slave_1: entered promiscuous mode [ 480.540328][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.551916][T11037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.552057][ T937] usb 1-1: Product: syz [ 480.563329][T11037] Cannot create hsr debugfs directory [ 480.564540][ T937] usb 1-1: Manufacturer: syz [ 480.574614][ T937] usb 1-1: SerialNumber: syz [ 480.582067][T10824] veth1_vlan: entered promiscuous mode [ 480.600164][ T937] usb 1-1: config 0 descriptor?? [ 480.612766][ T5289] usb 4-1: USB disconnect, device number 34 [ 480.619509][ T9786] usb 4-1-port2: cannot reset (err = -71) [ 480.625291][ T9786] usb 4-1-port2: Cannot enable. Maybe the USB cable is bad? [ 480.639989][ T937] ch341 1-1:0.0: ch341-uart converter detected [ 480.651134][ T9786] usb 4-1-port2: attempt power cycle [ 480.672203][T11009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.823405][T11009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.855353][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.872289][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.883710][T11127] bridge_slave_0: entered allmulticast mode [ 480.891721][T11127] bridge_slave_0: entered promiscuous mode [ 480.969250][T11009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.014755][T11127] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.035941][T11127] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.058195][T11127] bridge_slave_1: entered allmulticast mode [ 481.076809][T11127] bridge_slave_1: entered promiscuous mode [ 481.103762][T10824] veth0_macvtap: entered promiscuous mode [ 481.129009][T10824] veth1_macvtap: entered promiscuous mode [ 481.189503][T11009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.408420][ T937] usb 1-1: failed to send control message: -71 [ 481.428656][ T937] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 481.444677][T11127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.458807][ T937] usb 1-1: USB disconnect, device number 22 [ 481.482129][T11127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.507664][ T937] ch341 1-1:0.0: device disconnected [ 481.579289][T11197] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.918'. [ 481.591007][T11197] netlink: zone id is out of range [ 481.596138][T11197] netlink: zone id is out of range [ 481.610686][T11197] netlink: zone id is out of range [ 481.616737][T11197] netlink: zone id is out of range [ 481.621977][T11197] netlink: zone id is out of range [ 481.638844][T11197] netlink: zone id is out of range [ 481.644396][T11197] netlink: zone id is out of range [ 481.657137][T11197] netlink: zone id is out of range [ 481.663392][T11197] netlink: zone id is out of range [ 481.672063][T11197] netlink: zone id is out of range [ 481.675184][T11127] team0: Port device team_slave_0 added [ 481.728280][T11127] team0: Port device team_slave_1 added [ 481.768000][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.788031][ T54] Bluetooth: hci4: command tx timeout [ 481.788745][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.813481][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.833379][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.845112][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.856399][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.868733][T10824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.963987][T11127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.974694][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.028109][T10186] Bluetooth: hci2: command tx timeout [ 482.041579][T11127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.057494][T11127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.064576][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.098366][T11127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.154318][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.177791][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.198612][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.215137][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.272446][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.292353][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.306453][T10824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 482.333513][T10824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 482.368404][T10824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.378516][T11009] bridge_slave_1: left allmulticast mode [ 482.384230][T11009] bridge_slave_1: left promiscuous mode [ 482.416488][T11009] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.468386][T11009] bridge_slave_0: left allmulticast mode [ 482.474197][T11009] bridge_slave_0: left promiscuous mode [ 482.490692][T11009] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.432210][T11009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.452158][T11009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.469697][T11009] bond0 (unregistering): Released all slaves [ 483.699792][T10824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.709860][T10824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.722971][T10824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.733816][T10824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.937609][T11127] hsr_slave_0: entered promiscuous mode [ 483.953801][T11127] hsr_slave_1: entered promiscuous mode [ 483.970214][T11127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.984552][T11127] Cannot create hsr debugfs directory [ 484.126911][T10186] Bluetooth: hci2: command tx timeout [ 484.252728][T11009] hsr_slave_0: left promiscuous mode [ 484.261274][T11009] hsr_slave_1: left promiscuous mode [ 484.280529][T11009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.313291][T11009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.334901][T11009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.384095][T11009] veth1_macvtap: left promiscuous mode [ 484.389973][T11009] veth0_macvtap: left promiscuous mode [ 484.395941][T11009] veth1_vlan: left promiscuous mode [ 484.414167][T11009] veth0_vlan: left promiscuous mode [ 486.200191][T10186] Bluetooth: hci2: command tx timeout [ 486.375104][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.404179][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.567747][T11037] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 486.599187][T11037] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 486.861292][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.871338][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.071999][T11037] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 487.104931][T11037] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.901947][T11037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.968118][T11037] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.166374][ T5291] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 488.260408][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.267626][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.330555][T11002] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.336486][ T5291] usb 4-1: Using ep0 maxpacket: 16 [ 488.337737][T11002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.370299][ T5291] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 488.396473][ T5291] usb 4-1: config 0 has no interface number 0 [ 488.439355][ T5291] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 488.488000][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.496135][ T5291] usb 4-1: Product: syz [ 488.536497][ T5291] usb 4-1: Manufacturer: syz [ 488.541265][ T5291] usb 4-1: SerialNumber: syz [ 488.568650][ T5291] usb 4-1: config 0 descriptor?? [ 488.604737][ T5291] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 488.746974][T11127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 488.791726][T11127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 488.854234][ T5291] gspca_spca1528: reg_w err -71 [ 488.890633][T11127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 488.896422][ T5291] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 488.935697][ T5291] usb 4-1: USB disconnect, device number 39 [ 488.952895][T11127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.010712][T11037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.186200][T11037] veth0_vlan: entered promiscuous mode [ 489.243600][T11037] veth1_vlan: entered promiscuous mode [ 489.336795][ T5290] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 489.345370][T11127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.378115][T11037] veth0_macvtap: entered promiscuous mode [ 489.395033][T11127] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.414652][T11037] veth1_macvtap: entered promiscuous mode [ 489.443023][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.450245][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 489.488550][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.505835][ T5290] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.529641][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.550129][ T5290] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 489.575041][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.586789][ T5290] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 489.602556][ T5290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.611245][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.625510][T11306] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 489.641188][ T5290] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 489.650811][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.681985][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.727814][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.762468][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.775043][T11037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.825697][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.832939][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 489.923957][T11127] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 489.974668][T11127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 490.000943][ T9786] usb 5-1: USB disconnect, device number 35 [ 490.068126][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.115938][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.133570][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.144749][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.162088][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.203258][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.214103][T11037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.234064][T11037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.254308][T11037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.294911][T11127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.331058][T11127] veth0_vlan: entered promiscuous mode [ 490.343244][T11127] veth1_vlan: entered promiscuous mode [ 490.368259][T11127] veth0_macvtap: entered promiscuous mode [ 490.379418][T11127] veth1_macvtap: entered promiscuous mode [ 490.393622][T11037] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.407224][T11037] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.416050][T11037] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.426773][T11037] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.463076][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.523156][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.553451][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.574756][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.623950][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.644751][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.675210][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.707654][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.746758][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.776276][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.828053][T11127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.852291][T11330] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 490.977868][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.002620][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.029979][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.062118][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.110350][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.141998][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.152695][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.166334][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.177451][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.188799][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.218290][T11127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.371610][T11127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.393868][T11127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.426523][T11127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.455567][T11127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.612546][T11002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.642028][T11002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.731498][T11007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.807161][T11007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.875262][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.922559][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.071385][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.087988][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.316770][ T9786] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 492.604023][ T9786] usb 5-1: Using ep0 maxpacket: 32 [ 492.780165][T11380] ip6_vti0: entered promiscuous mode [ 492.786158][T11380] vlan2: entered promiscuous mode [ 492.887076][T11380] ip6_vti0: left promiscuous mode [ 492.922567][ T9786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.933727][ T9786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 492.943557][ T9786] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.245274][ T9786] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.264138][ T9786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.272407][ T9786] usb 5-1: Product: syz [ 493.276887][ T9786] usb 5-1: Manufacturer: syz [ 493.281579][ T9786] usb 5-1: SerialNumber: syz [ 493.339443][ T9786] cdc_ncm 5-1:1.0: skipping garbage [ 493.348010][ T9786] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 493.354872][ T9786] cdc_ncm 5-1:1.0: bind() failure [ 493.584776][ T937] usb 5-1: USB disconnect, device number 36 [ 494.306415][ T5299] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 494.476919][ T5299] usb 3-1: Using ep0 maxpacket: 16 [ 494.496419][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.524612][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.545199][ T5299] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 494.576476][ T5299] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 494.610218][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.671427][ T5299] usb 3-1: config 0 descriptor?? [ 494.941326][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.006452][ T5291] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 495.096917][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.166477][ T5291] usb 2-1: Using ep0 maxpacket: 16 [ 495.208283][T11422] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 495.241302][T11411] vlan2: entered promiscuous mode [ 495.303362][T11411] batadv0: entered promiscuous mode [ 495.347138][ T5291] usb 2-1: New USB device found, idVendor=10d2, idProduct=1175, bcdDevice=f4.c2 [ 495.387613][T11411] team0: Port device vlan2 added [ 495.400147][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.454870][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.964'. [ 495.474465][ T5299] usbhid 3-1:0.0: can't add hid device: -71 [ 495.482352][ T5299] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 495.500766][ T5291] usb 2-1: Product: syz [ 495.522002][ T5291] usb 2-1: Manufacturer: syz [ 495.532514][ T5299] usb 3-1: USB disconnect, device number 29 [ 495.543244][ T5291] usb 2-1: SerialNumber: syz [ 495.600029][ T5291] usb 2-1: config 0 descriptor?? [ 495.653909][ T5291] usblcd 2-1:0.0: USBLCD model not supported. [ 495.776737][ T29] audit: type=1326 audit(1727916564.555:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 495.895019][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.900644][ T29] audit: type=1326 audit(1727916564.605:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 495.994863][ T51] usb 2-1: USB disconnect, device number 27 [ 496.028133][ T29] audit: type=1326 audit(1727916564.635:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.158383][ T29] audit: type=1326 audit(1727916564.635:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.197655][ T5299] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 496.285585][ T29] audit: type=1326 audit(1727916564.635:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.307895][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.396452][ T5299] usb 5-1: Using ep0 maxpacket: 16 [ 496.417831][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.456864][ T29] audit: type=1326 audit(1727916564.635:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.482590][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.496356][ T51] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 496.524684][ T5299] usb 5-1: New USB device found, idVendor=05ac, idProduct=8240, bcdDevice= 0.00 [ 496.545487][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.563896][ T29] audit: type=1326 audit(1727916564.635:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.586267][ T29] audit: type=1326 audit(1727916564.635:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.612775][ T29] audit: type=1326 audit(1727916564.635:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.636642][ T29] audit: type=1326 audit(1727916564.635:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11439 comm="syz.4.965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x7ffc0000 [ 496.768922][ T5299] usb 5-1: config 0 descriptor?? [ 496.897080][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1855, setting to 1024 [ 496.899630][T11436] bridge_slave_0 (unregistering): left allmulticast mode [ 496.936399][ T51] usb 3-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 496.959806][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.972667][T11436] bridge_slave_0 (unregistering): left promiscuous mode [ 496.984892][ T51] usb 3-1: config 0 descriptor?? [ 496.992232][T11447] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 497.130837][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.394362][ T5299] input: HID 05ac:8240 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8240.000D/input/input25 [ 497.519002][ T5299] appleir 0003:05AC:8240.000D: input,hiddev0,hidraw0: USB HID v0.20 Device [HID 05ac:8240] on usb-dummy_hcd.4-1/input0 [ 497.560879][ T5299] usb 5-1: USB disconnect, device number 37 [ 497.766401][ T51] usbhid 3-1:0.0: can't add hid device: -71 [ 497.772950][ T51] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 497.792271][ T51] usb 3-1: USB disconnect, device number 30 [ 497.890728][T11467] netlink: 52 bytes leftover after parsing attributes in process `syz.1.968'. [ 497.933484][T11467] unsupported nlmsg_type 40 [ 499.096382][ T51] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 499.267317][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 499.280968][ T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.311443][ T51] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.357886][ T51] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 499.396497][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 499.426140][ T51] usb 3-1: SerialNumber: syz [ 499.453882][ T51] usb 3-1: bad CDC descriptors [ 499.473606][ T51] usb-storage 3-1:1.0: USB Mass Storage device detected [ 499.502436][ T5299] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 499.538218][ T51] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 499.715359][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.736304][ T5299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.753501][ T5299] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 499.774465][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.830529][ T5299] usb 5-1: config 0 descriptor?? [ 500.264238][ T5299] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 500.272008][ T5299] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 500.288744][ T5299] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 500.319456][ T5299] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 500.344975][ T5299] cm6533_jd 0003:0D8C:0022.000E: unknown main item tag 0x0 [ 500.367394][ T5299] cm6533_jd 0003:0D8C:0022.000E: No inputs registered, leaving [ 500.384814][ T5299] cm6533_jd 0003:0D8C:0022.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 500.723946][T11524] xt_TCPMSS: Only works on TCP SYN packets [ 500.754547][ T51] usb 5-1: USB disconnect, device number 38 [ 500.917071][ T5299] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 501.101958][ T5299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.128785][ T5299] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 501.151017][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.171434][ T5299] usb 2-1: config 0 descriptor?? [ 501.190263][ T5299] pwc: Askey VC010 type 2 USB webcam detected. [ 501.629673][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.637791][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.695487][ T5288] usb 3-1: USB disconnect, device number 31 [ 501.922983][ T5299] pwc: recv_control_msg error -71 req 02 val 2700 [ 501.970398][ T5299] pwc: recv_control_msg error -71 req 02 val 2c00 [ 501.995317][ T5299] pwc: recv_control_msg error -71 req 04 val 1000 [ 502.015102][ T5299] pwc: recv_control_msg error -71 req 04 val 1300 [ 502.031871][ T5299] pwc: recv_control_msg error -71 req 04 val 1400 [ 502.043445][ T5299] pwc: recv_control_msg error -71 req 02 val 2000 [ 502.068555][ T5299] pwc: recv_control_msg error -71 req 02 val 2100 [ 502.088749][ T5299] pwc: recv_control_msg error -71 req 04 val 1500 [ 502.111707][ T5299] pwc: recv_control_msg error -71 req 02 val 2500 [ 502.132078][ T5299] pwc: recv_control_msg error -71 req 02 val 2400 [ 502.162550][ T5299] pwc: recv_control_msg error -71 req 02 val 2600 [ 502.179007][ T5299] pwc: recv_control_msg error -71 req 02 val 2900 [ 502.196911][ T5299] pwc: recv_control_msg error -71 req 02 val 2800 [ 502.203939][ T5299] pwc: recv_control_msg error -71 req 04 val 1100 [ 502.213317][ T5299] pwc: recv_control_msg error -71 req 04 val 1200 [ 502.226539][ T5299] pwc: Registered as video71. [ 502.238646][ T5299] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input26 [ 502.320238][ T5299] usb 2-1: USB disconnect, device number 28 [ 502.987237][ T5288] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 503.196361][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 503.225687][ T5288] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 503.246441][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.263536][ T5288] usb 5-1: Product: syz [ 503.274234][ T5288] usb 5-1: Manufacturer: syz [ 503.285940][ T5288] usb 5-1: SerialNumber: syz [ 503.303803][ T5288] usb 5-1: config 0 descriptor?? [ 503.326625][ T5288] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 503.542297][ T5288] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 503.572094][ T5288] usb 5-1: USB disconnect, device number 39 [ 504.262767][T11560] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 504.776361][ T5299] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 504.929877][ T5299] usb 5-1: Using ep0 maxpacket: 32 [ 504.939042][ T5299] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 504.950851][ T5299] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 504.985823][ T5299] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 505.025694][ T5299] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 505.049129][ T5299] usb 5-1: config 0 interface 0 has no altsetting 0 [ 505.062363][ T5299] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 505.082656][ T5299] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 505.099821][ T5299] usb 5-1: Product: syz [ 505.104108][ T5299] usb 5-1: Manufacturer: syz [ 505.110803][ T5299] usb 5-1: SerialNumber: syz [ 505.134501][ T5299] usb 5-1: config 0 descriptor?? [ 505.165998][ T5299] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 505.202995][ T5299] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 505.392120][ T5299] usb 5-1: USB disconnect, device number 40 [ 505.398191][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 505.411768][ T5299] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 505.656556][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 505.656572][ T29] audit: type=1326 audit(1727916574.405:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11562 comm="syz.4.993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab1797dff9 code=0x0 [ 507.266540][ T5289] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 507.360937][T11595] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 507.396426][T11595] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 507.475220][T11618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1005'. [ 507.485922][ T5289] usb 2-1: Using ep0 maxpacket: 8 [ 507.521503][ T5289] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 507.546151][ T5289] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 507.573380][ T29] audit: type=1326 audit(1727916576.345:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca17dff9 code=0x7ffc0000 [ 507.620144][ T5289] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 507.668167][ T5289] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 507.711891][ T29] audit: type=1326 audit(1727916576.345:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7ff9ca17dff9 code=0x7ffc0000 [ 507.757567][ T5289] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 507.783463][ T5289] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.826487][ T29] audit: type=1326 audit(1727916576.345:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca17dff9 code=0x7ffc0000 [ 507.934717][ T29] audit: type=1326 audit(1727916576.405:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11617 comm="syz.3.1005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ca17dff9 code=0x7ffc0000 [ 508.011968][T11595] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 508.043511][T11595] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 508.083034][ T5289] usb 2-1: usb_control_msg returned -32 [ 508.092146][ T5289] usbtmc 2-1:16.0: can't read capabilities [ 508.139775][T11595] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 508.176931][ T5289] usb 2-1: USB disconnect, device number 29 [ 508.198117][T11595] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 508.261274][ T5235] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 508.298912][T11595] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 508.306110][T11595] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 508.440547][ T5235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.476007][ T5235] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 508.511463][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.527927][ T5235] usb 5-1: config 0 descriptor?? [ 508.552922][ T5235] pwc: Askey VC010 type 2 USB webcam detected. [ 508.628447][T11636] kvm: kvm [11635]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x15e00000000 [ 508.636682][ T5299] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 508.746577][ T5235] pwc: send_video_command error -71 [ 508.751847][ T5235] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 508.780629][ T5235] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 508.796617][ T5299] usb 1-1: Using ep0 maxpacket: 16 [ 508.821104][ T5235] usb 5-1: USB disconnect, device number 41 [ 508.843047][ T5299] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 508.856304][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.884215][ T5299] usb 1-1: config 0 descriptor?? [ 508.899510][ T5299] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 508.996026][T11656] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1011'. [ 509.336964][ T5235] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 509.545837][ T5235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.596631][ T5235] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 509.606272][ T5235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.635610][ T5235] usb 5-1: config 0 descriptor?? [ 509.649349][ T5235] pwc: Askey VC010 type 2 USB webcam detected. [ 510.054194][ T5235] pwc: recv_control_msg error -32 req 02 val 2b00 [ 510.070716][ T5235] pwc: recv_control_msg error -32 req 02 val 2700 [ 510.091934][ T5235] pwc: recv_control_msg error -32 req 02 val 2c00 [ 510.116972][ T5235] pwc: recv_control_msg error -32 req 04 val 1000 [ 510.144460][ T5235] pwc: recv_control_msg error -32 req 04 val 1300 [ 510.153027][ T5235] pwc: recv_control_msg error -32 req 04 val 1400 [ 510.173074][ T5235] pwc: recv_control_msg error -32 req 02 val 2000 [ 510.185367][ T5235] pwc: recv_control_msg error -32 req 02 val 2100 [ 510.203989][ T5235] pwc: recv_control_msg error -32 req 04 val 1500 [ 510.216344][ T5287] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 510.224787][ T5235] pwc: recv_control_msg error -32 req 02 val 2500 [ 510.244917][ T5235] pwc: recv_control_msg error -32 req 02 val 2400 [ 510.254621][ T5235] pwc: recv_control_msg error -32 req 02 val 2600 [ 510.388515][ T5287] usb 4-1: Using ep0 maxpacket: 8 [ 510.433286][ T5287] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 510.473856][ T5235] pwc: recv_control_msg error -71 req 02 val 2800 [ 510.499162][ T5287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.543934][ T5235] pwc: recv_control_msg error -71 req 04 val 1100 [ 510.562930][ T5287] usb 4-1: Product: syz [ 510.579331][ T5235] pwc: recv_control_msg error -71 req 04 val 1200 [ 510.590128][ T5287] usb 4-1: Manufacturer: syz [ 510.612844][ T5287] usb 4-1: SerialNumber: syz [ 510.662363][ T5235] pwc: Registered as video71. [ 510.688589][ T5235] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 510.719051][ T5287] usb 4-1: config 0 descriptor?? [ 510.755051][ T5235] usb 5-1: USB disconnect, device number 42 [ 511.034318][ T5287] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 511.044494][ T5287] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 511.081384][ T5287] usb 4-1: USB disconnect, device number 40 [ 511.458272][T11714] net_ratelimit: 43 callbacks suppressed [ 511.458294][T11714] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 512.017243][ T5299] input: sonixj as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 512.027388][ T5288] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 512.226401][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 512.246396][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.293058][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.305890][ T5235] usb 1-1: USB disconnect, device number 23 [ 512.335215][ T5288] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 512.381766][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.423497][ T5288] usb 3-1: config 0 descriptor?? [ 512.682331][T11724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 513.017273][ T5288] saitek 0003:06A3:0CCD.000F: unknown main item tag 0x0 [ 513.070825][ T5288] saitek 0003:06A3:0CCD.000F: unknown main item tag 0x0 [ 513.114077][ T5288] saitek 0003:06A3:0CCD.000F: unknown main item tag 0x0 [ 513.137445][ T5288] saitek 0003:06A3:0CCD.000F: unbalanced collection at end of report description [ 513.172955][ T5288] saitek 0003:06A3:0CCD.000F: parse failed [ 513.205548][ T5288] saitek 0003:06A3:0CCD.000F: probe with driver saitek failed with error -22 [ 513.249181][ T5288] usb 3-1: USB disconnect, device number 32 [ 513.704873][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.172078][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.183292][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.192112][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.276041][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.299558][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 514.307566][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.342792][T10186] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 514.373023][T10186] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 514.381048][T10186] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 514.393909][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.659780][T10186] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 514.683483][T10186] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 514.718767][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.737502][T10186] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 514.851659][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.346409][ T52] bridge_slave_1: left allmulticast mode [ 515.352156][ T52] bridge_slave_1: left promiscuous mode [ 515.366930][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.432799][ T52] bridge_slave_0: left allmulticast mode [ 515.461224][ T52] bridge_slave_0: left promiscuous mode [ 515.496575][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.325981][T11788] netlink: 'syz.4.1039': attribute type 20 has an invalid length. [ 516.761890][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.776998][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.789059][ T52] bond0 (unregistering): Released all slaves [ 516.826465][ T54] Bluetooth: hci3: command tx timeout [ 517.017562][T11771] chnl_net:caif_netlink_parms(): no params data found [ 517.282518][T11807] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 517.986505][ T52] hsr_slave_0: left promiscuous mode [ 518.064711][ T52] hsr_slave_1: left promiscuous mode [ 518.126384][ T51] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 518.162034][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.169931][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.249194][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.272063][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.296318][ T51] usb 3-1: Using ep0 maxpacket: 8 [ 518.344967][ T51] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 518.386442][ T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.421785][ T51] usb 3-1: Product: syz [ 518.428960][ T52] veth1_macvtap: left promiscuous mode [ 518.444548][ T51] usb 3-1: Manufacturer: syz [ 518.458782][ T51] usb 3-1: SerialNumber: syz [ 518.459320][ T52] veth0_macvtap: left promiscuous mode [ 518.489436][ T51] usb 3-1: config 0 descriptor?? [ 518.502867][ T52] veth1_vlan: left promiscuous mode [ 518.510791][T10186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.526509][T10186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.538378][T10186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.551151][T10186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.559885][T10186] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 518.566640][ T51] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 518.574382][ T52] veth0_vlan: left promiscuous mode [ 518.574562][T10186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 518.906877][T10186] Bluetooth: hci3: command tx timeout [ 519.119804][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 519.161659][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1052'. [ 519.476425][ T5288] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 519.646378][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 519.675385][ T5288] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 519.704992][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.725507][ T5288] usb 1-1: Product: syz [ 519.730481][ T5288] usb 1-1: Manufacturer: syz [ 519.735155][ T5288] usb 1-1: SerialNumber: syz [ 519.747217][ T5288] usb 1-1: config 0 descriptor?? [ 519.989828][ T5291] usb 1-1: USB disconnect, device number 24 [ 520.423790][ T52] team0 (unregistering): Port device team_slave_1 removed [ 520.541509][ T52] team0 (unregistering): Port device team_slave_0 removed [ 520.666367][T10186] Bluetooth: hci2: command tx timeout [ 520.996417][T10186] Bluetooth: hci3: command tx timeout [ 522.059685][ T51] gspca_sonixj: reg_w1 err -71 [ 522.064568][ T51] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 522.093647][ T51] usb 3-1: USB disconnect, device number 33 [ 522.340597][T11771] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.353496][T11771] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.365734][T11771] bridge_slave_0: entered allmulticast mode [ 522.409031][T11771] bridge_slave_0: entered promiscuous mode [ 522.458164][T11771] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.465409][T11771] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.499238][T11771] bridge_slave_1: entered allmulticast mode [ 522.513246][T11771] bridge_slave_1: entered promiscuous mode [ 522.664604][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1056'. [ 522.717714][ T29] audit: type=1326 audit(1727916591.495:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 522.747791][T10186] Bluetooth: hci2: command tx timeout [ 522.753601][ T29] audit: type=1326 audit(1727916591.495:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 522.778570][ T29] audit: type=1326 audit(1727916591.495:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 522.851586][T11771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.861039][ T29] audit: type=1326 audit(1727916591.495:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 522.892297][T11771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.964283][ T29] audit: type=1326 audit(1727916591.495:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 523.045821][T11771] team0: Port device team_slave_0 added [ 523.075691][T10186] Bluetooth: hci3: command tx timeout [ 523.082157][ T29] audit: type=1326 audit(1727916591.495:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 523.107916][T11771] team0: Port device team_slave_1 added [ 523.155584][T11771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.191101][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.228719][ T29] audit: type=1326 audit(1727916591.495:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 523.305899][ T29] audit: type=1326 audit(1727916591.495:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 523.380741][ T29] audit: type=1326 audit(1727916591.495:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 523.403287][T11771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.437740][T11771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.475738][T11771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 523.539882][ T29] audit: type=1326 audit(1727916591.495:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11872 comm="syz.2.1057" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99cb7dff9 code=0x7ffc0000 [ 523.542766][T11771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.620057][T11852] chnl_net:caif_netlink_parms(): no params data found [ 523.785646][T11771] hsr_slave_0: entered promiscuous mode [ 523.789369][T11771] hsr_slave_1: entered promiscuous mode [ 523.790039][T11771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.790065][T11771] Cannot create hsr debugfs directory [ 523.981789][T11852] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.030826][T11852] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.058902][T11852] bridge_slave_0: entered allmulticast mode [ 524.082676][T11852] bridge_slave_0: entered promiscuous mode [ 524.234283][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.333399][T11852] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.346174][T11852] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.371661][T11852] bridge_slave_1: entered allmulticast mode [ 524.381203][T11852] bridge_slave_1: entered promiscuous mode [ 524.396977][T11902] geneve2: entered promiscuous mode [ 524.420067][T11902] geneve2: entered allmulticast mode [ 524.566471][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.593523][T11904] netlink: 'syz.0.1061': attribute type 4 has an invalid length. [ 524.692894][T11901] netlink: 'syz.0.1061': attribute type 4 has an invalid length. [ 524.826682][T10186] Bluetooth: hci2: command tx timeout [ 524.899820][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.989800][T11852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.106559][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.349462][T11852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.423939][T11852] team0: Port device team_slave_0 added [ 525.496615][ T5287] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 525.607930][T11852] team0: Port device team_slave_1 added [ 525.659700][ T5287] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 525.676364][ T5287] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 525.694409][ T5287] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 525.704498][ T5287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.741628][T11913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.815764][ T5287] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 525.830327][T11852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.841825][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.969692][T11852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.309342][T11852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.350672][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.484661][T11852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.601116][ T51] usb 1-1: USB disconnect, device number 25 [ 526.656359][ T5299] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 526.814051][ T52] bridge_slave_1: left allmulticast mode [ 526.823771][ T52] bridge_slave_1: left promiscuous mode [ 526.830046][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.846380][ T5299] usb 5-1: Using ep0 maxpacket: 8 [ 526.854562][ T52] bridge_slave_0: left allmulticast mode [ 526.860184][ T5299] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 526.871980][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.877565][ T52] bridge_slave_0: left promiscuous mode [ 526.890488][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.906720][T10186] Bluetooth: hci2: command tx timeout [ 526.916892][ T5299] usb 5-1: Product: syz [ 526.933642][ T5299] usb 5-1: Manufacturer: syz [ 526.951337][ T5299] usb 5-1: SerialNumber: syz [ 526.965915][ T5299] usb 5-1: config 0 descriptor?? [ 527.180384][ T5299] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 527.925808][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.961662][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.994875][ T52] bond0 (unregistering): Released all slaves [ 528.026653][T11852] hsr_slave_0: entered promiscuous mode [ 528.046097][T11852] hsr_slave_1: entered promiscuous mode [ 528.062133][T11852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.097733][T11852] Cannot create hsr debugfs directory [ 528.402556][T11938] ptrace attach of ""[11939] was attempted by "./syz-executor exec"[11938] [ 528.661077][ T52] hsr_slave_0: left promiscuous mode [ 528.690290][ T52] hsr_slave_1: left promiscuous mode [ 528.706844][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.714300][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.737453][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.744919][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.810429][ T52] veth1_macvtap: left promiscuous mode [ 528.820649][ T52] veth0_macvtap: left promiscuous mode [ 528.828562][ T52] veth1_vlan: left promiscuous mode [ 528.834319][ T5299] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 528.866447][ T52] veth0_vlan: left promiscuous mode [ 528.882400][ T5299] usb 5-1: USB disconnect, device number 43 [ 528.896430][ T5288] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 529.084848][ T5288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.114340][ T5288] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 529.126292][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.208763][ T5288] usb 1-1: config 0 descriptor?? [ 529.241197][ T5288] pwc: Askey VC010 type 2 USB webcam detected. [ 529.422162][ T5288] pwc: send_video_command error -71 [ 529.436907][ T5288] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 529.444794][ T5288] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 529.496748][ T5288] usb 1-1: USB disconnect, device number 26 [ 530.016465][ T937] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 530.051810][ T52] team0 (unregistering): Port device team_slave_1 removed [ 530.113505][ T52] team0 (unregistering): Port device team_slave_0 removed [ 530.169201][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.195592][ T937] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 530.224154][ T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.292471][ T937] usb 1-1: config 0 descriptor?? [ 530.310915][ T937] pwc: Askey VC010 type 2 USB webcam detected. [ 530.722643][ T937] pwc: recv_control_msg error -32 req 02 val 2b00 [ 530.730809][ T937] pwc: recv_control_msg error -32 req 02 val 2700 [ 530.743458][ T937] pwc: recv_control_msg error -32 req 02 val 2c00 [ 530.751076][ T937] pwc: recv_control_msg error -32 req 04 val 1000 [ 530.767354][ T937] pwc: recv_control_msg error -32 req 04 val 1300 [ 530.781422][ T937] pwc: recv_control_msg error -32 req 04 val 1400 [ 530.790271][ T937] pwc: recv_control_msg error -32 req 02 val 2000 [ 530.810021][ T937] pwc: recv_control_msg error -32 req 02 val 2100 [ 530.825521][ T937] pwc: recv_control_msg error -32 req 04 val 1500 [ 530.837949][ T937] pwc: recv_control_msg error -32 req 02 val 2500 [ 530.845259][ T937] pwc: recv_control_msg error -32 req 02 val 2400 [ 531.062554][ T937] pwc: recv_control_msg error -71 req 02 val 2900 [ 531.076625][ T937] pwc: recv_control_msg error -71 req 02 val 2800 [ 531.102089][ T937] pwc: recv_control_msg error -71 req 04 val 1100 [ 531.108813][T11771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 531.125931][ T937] pwc: recv_control_msg error -71 req 04 val 1200 [ 531.176480][ T937] pwc: Registered as video71. [ 531.185466][ T937] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 531.216414][ T5299] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 531.217315][T11944] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1069'. [ 531.261117][ T937] usb 1-1: USB disconnect, device number 27 [ 531.285839][T11771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.396156][T11771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.407175][ T9662] udevd[9662]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 531.423603][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 531.449355][T11771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.459676][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 531.488583][ T5299] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 531.501676][ T5299] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 531.517612][ T5299] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.586563][ T5299] usb 3-1: config 0 descriptor?? [ 531.941413][T11964] sctp: [Deprecated]: syz.4.1075 (pid 11964) Use of struct sctp_assoc_value in delayed_ack socket option. [ 531.941413][T11964] Use struct sctp_sack_info instead [ 531.984402][T11966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.015280][T11966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.138008][ T5235] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 532.150329][T11771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.250395][T11771] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.283788][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.291043][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.326641][ T5235] usb 1-1: Using ep0 maxpacket: 16 [ 532.368186][ T5235] usb 1-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 532.378817][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.385961][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.396785][ T5235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.417629][ T5235] usb 1-1: Product: syz [ 532.430940][ T5235] usb 1-1: Manufacturer: syz [ 532.450549][ T5235] usb 1-1: SerialNumber: syz [ 532.491401][ T5235] usb 1-1: config 0 descriptor?? [ 532.621074][T11852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 532.660809][T11852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 532.718998][T11852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 532.760532][T11852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 532.778942][ T9661] udevd[9661]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.900384][T11963] bond0: entered promiscuous mode [ 532.932437][T11963] bond_slave_0: entered promiscuous mode [ 532.957291][T11963] bond_slave_1: entered promiscuous mode [ 532.996086][T11963] dummy0: entered promiscuous mode [ 533.031825][T11771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.046840][ T5235] usb 1-1: USB disconnect, device number 28 [ 533.351086][T11771] veth0_vlan: entered promiscuous mode [ 533.412668][T11771] veth1_vlan: entered promiscuous mode [ 533.459547][T11852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.541341][T11852] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.649293][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.656579][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.761568][T11002] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.768760][T11002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.811703][T11771] veth0_macvtap: entered promiscuous mode [ 533.890966][T11771] veth1_macvtap: entered promiscuous mode [ 534.016555][ T5291] usb 3-1: USB disconnect, device number 34 [ 534.022313][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.056252][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.066127][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.086385][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.102433][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.116381][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.132425][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 534.144430][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.165525][T11771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.231059][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.252050][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.266679][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.286381][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.314240][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.340947][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.362096][T11771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 534.383883][T11771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.425431][T11771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.464594][T11771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.479470][T11771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.489221][T11771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.499227][T11771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.755819][T11002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.802510][T11002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.822961][T12022] sctp: [Deprecated]: syz.0.1081 (pid 12022) Use of int in max_burst socket option deprecated. [ 534.822961][T12022] Use struct sctp_assoc_value instead [ 534.841684][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.884279][T11009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.908420][T11009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.975157][T11852] veth0_vlan: entered promiscuous mode [ 535.016347][T12027] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_1, syncid = 3, id = 0 [ 535.039149][T11852] veth1_vlan: entered promiscuous mode [ 535.046312][ T5235] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 535.119861][T11852] veth0_macvtap: entered promiscuous mode [ 535.150079][T11852] veth1_macvtap: entered promiscuous mode [ 535.228261][ T5235] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 535.231323][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.254439][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 535.269927][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.278661][ T5235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 51028, setting to 1024 [ 535.288449][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.307461][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.307681][ T5235] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 535.327851][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.334434][ T5235] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 535.346870][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.346900][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.346921][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.384492][ T5235] usb 5-1: Manufacturer: syz [ 535.389919][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.408146][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.410737][ T5235] usb 5-1: config 0 descriptor?? [ 535.444180][T12018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 535.458023][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.462591][ T5235] igorplugusb 5-1:0.0: endpoint incorrect [ 535.487668][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.508437][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.524866][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.554232][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.588028][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.617773][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.643503][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.671963][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.689131][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.704867][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.728302][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.803196][T11852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.832485][T11852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.854857][T11852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.884281][T11852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.906331][ T9786] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 535.934778][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1087'. [ 535.945534][ T5235] usb 5-1: USB disconnect, device number 44 [ 536.096562][ T9786] usb 3-1: Using ep0 maxpacket: 32 [ 536.117291][ T9786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.162271][ T9786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 536.165643][T11002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.176400][ T9786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.207345][T11002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.221368][ T9786] usb 3-1: Product: syz [ 536.225603][ T9786] usb 3-1: Manufacturer: syz [ 536.246391][ T9786] usb 3-1: SerialNumber: syz [ 536.259051][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.286283][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.386121][T12070] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.1088'. [ 536.404118][T12070] openvswitch: netlink: IP tunnel dst address not specified [ 536.704873][T12048] input: syz0 as /devices/virtual/input/input30 [ 537.328782][T12073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.617084][ T937] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 537.815978][ T937] usb 2-1: Using ep0 maxpacket: 32 [ 537.823884][ T937] usb 2-1: config 0 has an invalid interface number: 144 but max is 0 [ 537.845041][ T9786] cdc_ncm 3-1:1.0: failed to get mac address [ 537.856378][ T937] usb 2-1: config 0 has no interface number 0 [ 537.862695][ T9786] cdc_ncm 3-1:1.0: bind() failure [ 537.881922][ T937] usb 2-1: New USB device found, idVendor=0923, idProduct=010f, bcdDevice=a0.fe [ 537.896939][ T9786] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 537.911812][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.921460][ T9786] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 537.936424][ T937] usb 2-1: Product: syz [ 537.940644][ T937] usb 2-1: Manufacturer: syz [ 537.947885][ T937] usb 2-1: SerialNumber: syz [ 537.952653][ T9786] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 537.964902][ T937] usb 2-1: config 0 descriptor?? [ 537.975236][ T9786] usb 3-1: USB disconnect, device number 35 [ 537.984778][ T937] gspca_main: tv8532-2.14.0 probing 0923:010f [ 538.066449][ T5235] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 538.246462][ T5235] usb 4-1: Using ep0 maxpacket: 8 [ 538.258838][ T5235] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 538.276396][ T5235] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 538.295171][ T5235] usb 4-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 538.311753][ T937] usb 2-1: USB disconnect, device number 30 [ 538.325669][ T5235] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 538.339890][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.730925][ T5286] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 538.886411][ T5286] usb 1-1: Using ep0 maxpacket: 8 [ 538.924883][ T5286] usb 1-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 538.947080][ T5286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.955293][ T5286] usb 1-1: Product: syz [ 538.960599][ T5286] usb 1-1: Manufacturer: syz [ 538.965463][ T5286] usb 1-1: SerialNumber: syz [ 538.982931][ T5286] usb 1-1: config 0 descriptor?? [ 538.998420][ T5286] usb 1-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 539.094975][T12124] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1100'. [ 539.148700][ T5286] usb 1-1: reset high-speed USB device number 29 using dummy_hcd [ 539.516649][ T9786] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 539.721934][T12144] netlink: 'syz.3.1093': attribute type 4 has an invalid length. [ 539.726528][ T9786] usb 5-1: Using ep0 maxpacket: 8 [ 539.741828][ T9786] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 539.768261][ T9786] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 539.798461][ T9786] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.816506][ T9786] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.825866][ T9786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.865302][ T9786] usbtmc 5-1:16.0: bulk endpoints not found [ 540.216292][ T5286] usb 1-1: [UEAGLE-ATM] interface 1 not found [ 540.242895][ T5286] ueagle-atm 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 540.253521][ T5286] usb 1-1: USB disconnect, device number 29 [ 540.457434][T12131] bond_slave_0: entered promiscuous mode [ 540.463681][T12131] bond_slave_1: entered promiscuous mode [ 540.487111][T12131] vlan2: entered promiscuous mode [ 540.515496][T12131] bond0: entered promiscuous mode [ 540.526599][T12131] vlan2: entered allmulticast mode [ 540.531816][T12131] bond0: entered allmulticast mode [ 540.537078][T12131] bond_slave_0: entered allmulticast mode [ 540.542868][T12131] bond_slave_1: entered allmulticast mode [ 540.568805][T12131] bond0: left allmulticast mode [ 540.573756][T12131] bond_slave_0: left allmulticast mode [ 540.579569][T12131] bond_slave_1: left allmulticast mode [ 540.585110][T12131] bond0: left promiscuous mode [ 540.596726][T12131] bond_slave_0: left promiscuous mode [ 540.602326][T12131] bond_slave_1: left promiscuous mode [ 540.808714][ T5291] usb 5-1: USB disconnect, device number 45 [ 540.827902][ T9786] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 540.945952][ T51] usb 4-1: USB disconnect, device number 41 [ 541.046359][ T9786] usb 2-1: Using ep0 maxpacket: 8 [ 541.082551][ T9786] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.116988][ T9786] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 541.135356][ T9786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.149359][ T9786] usb 2-1: config 0 descriptor?? [ 541.173991][ T9786] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 541.213978][T12156] kvm: kvm [12155]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xa00000000 [ 541.242779][T12156] kvm: kvm [12155]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x2c00000800 [ 541.661127][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 541.836562][ T5286] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 542.018426][ T5286] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.040901][ T5286] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 542.079237][ T5286] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.115593][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.136101][T12171] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 542.171432][ T5286] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.196553][ T9786] gspca_vc032x: reg_r err -110 [ 542.201487][ T9786] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 542.400174][T12169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 542.440043][ T51] usb 5-1: USB disconnect, device number 46 [ 542.511599][ T5291] usb 2-1: USB disconnect, device number 31 [ 542.596330][ T5288] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 542.761461][ T5288] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 542.780984][ T5288] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 542.800993][ T5288] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 542.814455][ T5288] usb 1-1: config 0 has no interface number 0 [ 542.824701][ T5288] usb 1-1: config 0 interface 112 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 542.841444][ T5288] usb 1-1: config 0 interface 112 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.852835][ T5288] usb 1-1: config 0 interface 112 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 542.870349][ T5288] usb 1-1: config 0 interface 112 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 542.889885][ T5288] usb 1-1: config 0 interface 112 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 542.902846][ T5288] usb 1-1: config 0 interface 112 altsetting 0 has an endpoint descriptor with address 0x4E, changing to 0xE [ 542.921349][ T5288] usb 1-1: config 0 interface 112 altsetting 0 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 542.933074][ T5288] usb 1-1: config 0 interface 112 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 542.949875][ T5288] usb 1-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 542.963565][ T5288] usb 1-1: config 0 interface 112 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 542.983262][ T5288] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 543.008330][ T5288] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.032192][ T5288] usb 1-1: Product: syz [ 543.045812][ T5288] usb 1-1: Manufacturer: syz [ 543.061467][ T5288] usb 1-1: SerialNumber: syz [ 543.081576][ T5288] usb 1-1: config 0 descriptor?? [ 543.100854][T12186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 543.115972][T12186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 543.132443][T12186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 543.162441][T12186] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 543.303425][ T5288] mvusb_mdio 1-1:0.112: probe with driver mvusb_mdio failed with error -5 [ 543.544224][T12186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.639844][T12186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.678589][ T5286] usb 1-1: USB disconnect, device number 30 [ 543.816821][T12207] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 543.823377][T12207] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.896405][ T9786] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 544.056522][ T9786] usb 4-1: Using ep0 maxpacket: 8 [ 544.067544][ T9786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.083053][ T5235] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 544.090847][ T9786] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 544.100254][ T9786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.111844][ T9786] usb 4-1: config 0 descriptor?? [ 544.277989][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.309848][ T5235] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 544.319348][ T5235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.342512][ T9786] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 544.355289][ T5235] usb 2-1: Product: syz [ 544.363677][ T5235] usb 2-1: Manufacturer: syz [ 544.372803][ T5235] usb 2-1: SerialNumber: syz [ 544.388572][ T5235] usb 2-1: config 0 descriptor?? [ 544.398285][ T5235] ch341 2-1:0.0: ch341-uart converter detected [ 544.664521][ T5235] usb 2-1: failed to receive control message: -71 [ 544.668327][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.671624][ T5235] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 544.682209][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.708208][ T5235] usb 2-1: USB disconnect, device number 32 [ 544.715403][ T5235] ch341 2-1:0.0: device disconnected [ 544.724833][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.746627][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.764000][ T9786] usb 4-1: USB disconnect, device number 42 [ 544.770227][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 544.785852][ T9786] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 544.794353][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.820774][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 544.828276][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.841930][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.973739][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.109171][T12221] chnl_net:caif_netlink_parms(): no params data found [ 545.162337][ T11] bridge_slave_1: left allmulticast mode [ 545.168261][ T5291] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 545.177255][ T11] bridge_slave_1: left promiscuous mode [ 545.183137][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.198539][ T11] bridge_slave_0: left allmulticast mode [ 545.204516][ T11] bridge_slave_0: left promiscuous mode [ 545.216230][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.326498][ T5291] usb 3-1: Using ep0 maxpacket: 8 [ 545.346826][ T5291] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 545.374726][ T5291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.396637][ T5291] usb 3-1: Product: syz [ 545.400980][ T5291] usb 3-1: Manufacturer: syz [ 545.405595][ T5291] usb 3-1: SerialNumber: syz [ 545.415183][ T5291] usb 3-1: config 0 descriptor?? [ 545.453844][ T5291] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 545.634965][ T5291] usb 3-1: USB disconnect, device number 36 [ 545.904855][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 545.923427][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 545.935291][ T11] bond0 (unregistering): Released all slaves [ 546.071002][ T2970] syzkaller0: tun_net_xmit 76 [ 546.076755][ T2970] syzkaller0: tun_net_xmit 48 [ 546.096923][ T51] syzkaller0: tun_net_xmit 76 [ 546.176540][ T9786] syzkaller0: tun_net_xmit 76 [ 546.776284][T10186] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 546.792633][T10186] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 546.808369][T10186] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 546.825550][T10186] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 546.841745][T10186] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 546.849549][T10186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.906745][ T54] Bluetooth: hci0: command tx timeout [ 546.993634][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 546.993655][ T29] audit: type=1326 audit(1727916615.765:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12246 comm="syz.3.1133" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68f737dff9 code=0x0 [ 547.156589][ T9786] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 547.346347][ T9786] usb 3-1: Using ep0 maxpacket: 8 [ 547.358313][ T9786] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 547.369878][ T9786] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 547.379334][ T9786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.387733][ T9786] usb 3-1: Product: syz [ 547.415815][ T9786] usb 3-1: Manufacturer: syz [ 547.421926][ T9786] usb 3-1: SerialNumber: syz [ 547.439079][ T9786] usb 3-1: config 0 descriptor?? [ 547.450981][ T9786] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 547.946355][ T5291] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 548.119339][ T5291] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.130710][ T5291] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 548.140873][ T5291] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 548.154343][ T5291] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 548.163581][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.171746][ T5291] usb 4-1: Product: syz [ 548.175951][ T5291] usb 4-1: Manufacturer: syz [ 548.180675][ T5291] usb 4-1: SerialNumber: syz [ 548.849108][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.873753][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.913710][ T54] Bluetooth: hci1: command tx timeout [ 548.988426][ T54] Bluetooth: hci0: command tx timeout [ 549.294024][ T5291] cdc_ncm 4-1:1.0: bind() failure [ 549.321137][ T5291] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 549.342017][ T5291] cdc_ncm 4-1:1.1: bind() failure [ 549.508738][ T5291] usb 4-1: USB disconnect, device number 43 [ 549.822693][T12221] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.844493][T12221] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.857435][T12221] bridge_slave_0: entered allmulticast mode [ 549.881661][T12221] bridge_slave_0: entered promiscuous mode [ 550.030415][T12221] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.042967][T12221] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.070744][T12221] bridge_slave_1: entered allmulticast mode [ 550.097865][T12221] bridge_slave_1: entered promiscuous mode [ 550.302399][T12271] netlink: 'syz.1.1138': attribute type 3 has an invalid length. [ 550.335439][ T11] hsr_slave_0: left promiscuous mode [ 550.346572][T12271] netlink: 'syz.1.1138': attribute type 3 has an invalid length. [ 550.393424][ T11] hsr_slave_1: left promiscuous mode [ 550.403474][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 550.413186][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.421437][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 550.430495][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.492105][ T11] veth1_macvtap: left promiscuous mode [ 550.497970][ T11] veth0_macvtap: left promiscuous mode [ 550.504037][ T11] veth1_vlan: left promiscuous mode [ 550.509797][ T11] veth0_vlan: left promiscuous mode [ 550.996498][ T54] Bluetooth: hci1: command tx timeout [ 551.066522][ T54] Bluetooth: hci0: command tx timeout [ 551.196828][ T9786] gspca_zc3xx: reg_r err -71 [ 551.202309][ T9786] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 551.235229][ T9786] usb 3-1: USB disconnect, device number 37 [ 551.601676][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 552.004678][ T11] team0 (unregistering): Port device team_slave_1 removed [ 552.007112][ T9786] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 552.153072][ T11] team0 (unregistering): Port device team_slave_0 removed [ 552.196694][ T5235] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 552.204373][ T9786] usb 2-1: Using ep0 maxpacket: 8 [ 552.263022][ T9786] usb 2-1: config 0 has no interfaces? [ 552.276303][ T9786] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 552.285511][ T9786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.333960][ T9786] usb 2-1: config 0 descriptor?? [ 552.416984][ T5235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.475593][ T5235] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 552.554112][ T5235] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 552.693111][ T5235] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.705817][ T5235] usb 3-1: config 0 descriptor?? [ 552.928201][ T5288] usb 2-1: USB disconnect, device number 33 [ 553.077436][ T54] Bluetooth: hci1: command tx timeout [ 553.150887][ T5235] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 553.158711][ T54] Bluetooth: hci0: command tx timeout [ 553.164767][ T5235] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 553.175808][ T5235] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 553.453259][T12221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.530651][T12221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.569424][ T9786] usb 3-1: USB disconnect, device number 38 [ 553.646926][ T5288] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 553.779169][T12221] team0: Port device team_slave_0 added [ 553.788402][T12221] team0: Port device team_slave_1 added [ 553.806456][ T5288] usb 4-1: Using ep0 maxpacket: 8 [ 553.824328][ T5288] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 553.843813][ T5288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.853297][ T5288] usb 4-1: Product: syz [ 553.854720][T12221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.872421][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.903782][T12221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.905319][ T5288] usb 4-1: Manufacturer: syz [ 553.921837][ T5288] usb 4-1: SerialNumber: syz [ 553.925686][T12254] chnl_net:caif_netlink_parms(): no params data found [ 553.939038][ T5288] usb 4-1: config 0 descriptor?? [ 553.947240][T12221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.954231][T12221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.957802][ T5288] gspca_main: spca500-2.14.0 probing 046d:0900 [ 553.980235][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.994448][T12221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.142805][T12221] hsr_slave_0: entered promiscuous mode [ 554.162791][T12221] hsr_slave_1: entered promiscuous mode [ 554.169478][ T5235] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 554.187782][ T5235] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 554.188628][T12318] loop4: detected capacity change from 0 to 7 [ 554.215502][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.234203][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.242509][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.263688][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.285881][T12254] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.301783][T12254] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.311580][T12254] bridge_slave_0: entered allmulticast mode [ 554.321692][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.336497][T12254] bridge_slave_0: entered promiscuous mode [ 554.353531][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.381029][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.396042][T12318] ldm_validate_partition_table(): Disk read failed. [ 554.409581][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.442964][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.459983][T12318] Buffer I/O error on dev loop4, logical block 0, async page read [ 554.481165][T12318] Dev loop4: unable to read RDB block 0 [ 554.487447][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.496868][ T5288] gspca_spca500: reg write: error -32 [ 554.506978][T12318] loop4: unable to read partition table [ 554.516778][T12318] loop4: partition table beyond EOD, truncated [ 554.524486][ T5288] gspca_spca500: reg write: error -32 [ 554.533328][T12318] loop_reread_partitions: partition scan of loop4 (被xڬdƤݡ [ 554.533328][T12318] ) failed (rc=-5) [ 554.544431][ T5288] gspca_spca500: reg write: error -32 [ 554.555008][ T5288] gspca_spca500: reg write: error -32 [ 554.561751][T12254] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.572464][ T5288] gspca_spca500: reg write: error -32 [ 554.577098][T12254] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.594507][T12254] bridge_slave_1: entered allmulticast mode [ 554.606398][ T5288] gspca_spca500: reg write: error -32 [ 554.622507][ T5288] gspca_spca500: reg write: error -32 [ 554.636169][T12254] bridge_slave_1: entered promiscuous mode [ 554.648318][ T5288] gspca_spca500: reg write: error -32 [ 554.676953][ T5288] gspca_spca500: reg write: error -71 [ 554.707847][ T5288] gspca_spca500: reg write: error -71 [ 554.745911][ T5288] gspca_spca500: reg write: error -71 [ 554.766346][ T5288] gspca_spca500: reg write: error -71 [ 554.777750][ T5288] gspca_spca500: reg write: error -71 [ 554.813466][ T5288] gspca_spca500: reg write: error -71 [ 554.864317][ T5288] usb 4-1: USB disconnect, device number 44 [ 555.018468][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.156809][ T54] Bluetooth: hci1: command tx timeout [ 555.224026][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.281676][T12254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.421224][ T11] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.442145][T12254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.591809][T12254] team0: Port device team_slave_0 added [ 555.618454][T12254] team0: Port device team_slave_1 added [ 555.836469][T12254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.854419][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.881613][ C0] vkms_vblank_simulate: vblank timer overrun [ 555.905631][T12254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.030948][T12254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.056071][T12254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.082244][ C0] vkms_vblank_simulate: vblank timer overrun [ 556.131558][T12254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.246647][ T51] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 556.447311][ T51] usb 3-1: Using ep0 maxpacket: 16 [ 556.490342][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.494501][T12254] hsr_slave_0: entered promiscuous mode [ 556.526103][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.553547][T12254] hsr_slave_1: entered promiscuous mode [ 556.560167][ T51] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 556.594476][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.639221][ T51] usb 3-1: config 0 descriptor?? [ 556.657649][T12254] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 556.727410][T12254] Cannot create hsr debugfs directory [ 556.733992][ T11] bridge_slave_1: left allmulticast mode [ 556.755560][ T11] bridge_slave_1: left promiscuous mode [ 556.763544][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.077958][ T51] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 557.087999][ T51] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 557.107826][ T51] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 557.136728][ T51] aquacomputer_d5next 0003:0C70:F00D.0012: unknown main item tag 0x0 [ 557.163759][ T51] aquacomputer_d5next 0003:0C70:F00D.0012: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 557.282455][ T51] usb 3-1: USB disconnect, device number 39 [ 557.780000][ T11] bond0 (unregistering): left promiscuous mode [ 557.786690][ T11] bond_slave_0: left promiscuous mode [ 557.792207][ T11] bond_slave_1: left promiscuous mode [ 557.826667][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.844988][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.864070][ T11] bond0 (unregistering): Released all slaves [ 558.130348][ T11] tipc: Left network mode [ 558.232820][ T11] IPVS: stopping master sync thread 12027 ... [ 558.276932][ T937] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 558.471526][ T937] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 558.510608][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.556167][ T937] usb 3-1: config 0 descriptor?? [ 558.821896][ T11] dummy0: left promiscuous mode [ 558.858709][ T11] hsr_slave_0: left promiscuous mode [ 558.875032][ T11] hsr_slave_1: left promiscuous mode [ 558.903228][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.936500][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.948167][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.955667][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.037264][ T11] veth1_macvtap: left promiscuous mode [ 559.051044][ T11] veth0_macvtap: left promiscuous mode [ 559.061172][ T11] veth1_vlan: left promiscuous mode [ 559.085697][ T11] veth0_vlan: left promiscuous mode [ 560.202646][ T11] team0 (unregistering): Port device team_slave_1 removed [ 560.271006][ T11] team0 (unregistering): Port device team_slave_0 removed [ 561.327799][T12221] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 561.462859][T12221] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 561.499966][T12221] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 561.523718][T12221] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 561.875735][T12221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.960412][T12221] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.046066][ T29] audit: type=1326 audit(1727916630.815:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.070285][ T937] usb 3-1: applying rev.C fixup [ 562.084220][T11003] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.091495][T11003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.103452][ T5235] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 562.103462][ T29] audit: type=1326 audit(1727916630.815:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.130073][T12254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 562.142465][ T29] audit: type=1326 audit(1727916630.915:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.183494][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.190708][T11007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.204075][ T29] audit: type=1326 audit(1727916630.945:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.240220][T12254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 562.253271][ T29] audit: type=1326 audit(1727916630.945:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.295766][ T29] audit: type=1326 audit(1727916630.945:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.319363][T12254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.327296][ T5235] usb 4-1: Using ep0 maxpacket: 8 [ 562.327662][ T29] audit: type=1326 audit(1727916630.945:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.338676][ T5235] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 562.358964][ T29] audit: type=1326 audit(1727916630.945:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.375845][ T5235] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 562.395115][ T937] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -22 [ 562.410467][T12254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 562.415894][ T29] audit: type=1326 audit(1727916630.945:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.429731][ T5235] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 562.443157][ T29] audit: type=1326 audit(1727916630.955:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12411 comm="syz.1.1159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15ef77dff9 code=0x7ffc0000 [ 562.462821][ T937] usb 3-1: USB disconnect, device number 40 [ 562.478987][T12411] [ 562.481361][T12411] ===================================================== [ 562.488319][T12411] WARNING: SOFTIRQ-READ-safe -> SOFTIRQ-READ-unsafe lock order detected [ 562.496671][T12411] 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 Not tainted [ 562.498740][ T5235] usb 4-1: config 250 has no interface number 0 [ 562.503783][T12411] ----------------------------------------------------- [ 562.503797][T12411] syz.1.1159/12411 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire: [ 562.516291][ T5235] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 562.516947][T12411] ffff8880679e0e10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 562.524659][ T5235] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 562.536269][T12411] (&ppp->rlock){+...}-{2:2}, at: ppp_disconnect_channel+0x9a/0x2d0 [ 562.536334][T12411] [ 562.536334][T12411] and this task is already holding: [ 562.536342][T12411] ffff8880679e0e50 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 562.536395][T12411] which would create a new lock dependency: [ 562.536403][T12411] (&ppp->wlock){+...}-{2:2} -> (&ppp->rlock){+...}-{2:2} [ 562.536460][T12411] [ 562.536460][T12411] but this new dependency connects a SOFTIRQ-READ-irq-safe lock: [ 562.536472][T12411] (&pch->upl){++.-}-{2:2} [ 562.536492][T12411] [ 562.536492][T12411] ... which became SOFTIRQ-READ-irq-safe at: [ 562.536504][T12411] lock_acquire+0x1ed/0x550 [ 562.536535][T12411] _raw_read_lock_bh+0x3d/0x50 [ 562.536564][T12411] ppp_input+0x3dc/0xa10 [ 562.536587][T12411] ppp_async_process+0x7f/0x150 [ 562.536606][T12411] tasklet_action_common+0x321/0x4d0 [ 562.536635][T12411] handle_softirqs+0x2c5/0x980 [ 562.536662][T12411] run_ksoftirqd+0xca/0x130 [ 562.536693][T12411] smpboot_thread_fn+0x544/0xa30 [ 562.536721][T12411] kthread+0x2f0/0x390 [ 562.536739][T12411] ret_from_fork+0x4b/0x80 [ 562.536769][T12411] ret_from_fork_asm+0x1a/0x30 [ 562.663452][T12411] [ 562.663452][T12411] to a SOFTIRQ-READ-irq-unsafe lock: [ 562.670915][T12411] (&pch->downl){+.+.}-{2:2} [ 562.670948][T12411] [ 562.670948][T12411] ... which became SOFTIRQ-READ-irq-unsafe at: [ 562.684108][T12411] ... [ 562.684118][T12411] lock_acquire+0x1ed/0x550 [ 562.691406][T12411] _raw_spin_lock+0x2e/0x40 [ 562.696096][T12411] ppp_input+0x18b/0xa10 [ 562.700436][T12411] pppoe_rcv_core+0x117/0x310 [ 562.705213][T12411] __release_sock+0x243/0x350 [ 562.709988][T12411] release_sock+0x61/0x1f0 [ 562.714501][T12411] pppoe_sendmsg+0xd5/0x750 [ 562.719103][T12411] __sock_sendmsg+0x221/0x270 [ 562.723876][T12411] ____sys_sendmsg+0x52a/0x7e0 [ 562.728733][T12411] __sys_sendmmsg+0x3ab/0x730 [ 562.733588][T12411] __x64_sys_sendmmsg+0xa0/0xb0 [ 562.738536][T12411] do_syscall_64+0xf3/0x230 [ 562.743128][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.749155][T12411] [ 562.749155][T12411] other info that might help us debug this: [ 562.749155][T12411] [ 562.759474][T12411] Chain exists of: [ 562.759474][T12411] &pch->upl --> &ppp->wlock --> &pch->downl [ 562.759474][T12411] [ 562.771343][T12411] Possible interrupt unsafe locking scenario: [ 562.771343][T12411] [ 562.779664][T12411] CPU0 CPU1 [ 562.785029][T12411] ---- ---- [ 562.790402][T12411] lock(&pch->downl); [ 562.794484][T12411] local_irq_disable(); [ 562.801327][T12411] lock(&pch->upl); [ 562.807749][T12411] lock(&ppp->wlock); [ 562.814345][T12411] [ 562.817798][T12411] lock(&pch->upl); [ 562.821876][T12411] [ 562.821876][T12411] *** DEADLOCK *** [ 562.821876][T12411] [ 562.830051][T12411] 3 locks held by syz.1.1159/12411: [ 562.835249][T12411] #0: ffff88807c414a08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 562.845563][T12411] #1: ffff88805bf88258 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pppoe_release+0x59/0x820 [ 562.855080][T12411] #2: ffff8880679e0e50 (&ppp->wlock){+...}-{2:2}, at: ppp_disconnect_channel+0x88/0x2d0 [ 562.864938][T12411] [ 562.864938][T12411] the dependencies between SOFTIRQ-READ-irq-safe lock and the holding lock: [ 562.875781][T12411] -> (&pch->upl){++.-}-{2:2} { [ 562.880662][T12411] HARDIRQ-ON-W at: [ 562.884739][T12411] lock_acquire+0x1ed/0x550 [ 562.891088][T12411] _raw_write_lock_bh+0x35/0x50 [ 562.897777][T12411] ppp_bridge_channels+0x32/0x4c0 [ 562.904644][T12411] ppp_ioctl+0xe8f/0x1cd0 [ 562.910811][T12411] __se_sys_ioctl+0xf9/0x170 [ 562.917240][T12411] do_syscall_64+0xf3/0x230 [ 562.923576][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.931307][T12411] HARDIRQ-ON-R at: [ 562.935383][T12411] lock_acquire+0x1ed/0x550 [ 562.941752][T12411] _raw_read_lock_bh+0x3d/0x50 [ 562.948441][T12411] ppp_channel_push+0x2c/0x220 [ 562.955045][T12411] ppp_write+0x2b0/0x3e0 [ 562.961149][T12411] vfs_writev+0x5a9/0xba0 [ 562.967314][T12411] do_writev+0x1b1/0x350 [ 562.973392][T12411] do_syscall_64+0xf3/0x230 [ 562.979725][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.987465][T12411] IN-SOFTIRQ-R at: [ 562.991541][T12411] lock_acquire+0x1ed/0x550 [ 562.997885][T12411] _raw_read_lock_bh+0x3d/0x50 [ 563.004489][T12411] ppp_input+0x3dc/0xa10 [ 563.010565][T12411] ppp_async_process+0x7f/0x150 [ 563.017249][T12411] tasklet_action_common+0x321/0x4d0 [ 563.024377][T12411] handle_softirqs+0x2c5/0x980 [ 563.031063][T12411] run_ksoftirqd+0xca/0x130 [ 563.037413][T12411] smpboot_thread_fn+0x544/0xa30 [ 563.044196][T12411] kthread+0x2f0/0x390 [ 563.050098][T12411] ret_from_fork+0x4b/0x80 [ 563.056458][T12411] ret_from_fork_asm+0x1a/0x30 [ 563.063058][T12411] INITIAL USE at: [ 563.067042][T12411] lock_acquire+0x1ed/0x550 [ 563.073298][T12411] _raw_write_lock_bh+0x35/0x50 [ 563.079920][T12411] ppp_bridge_channels+0x32/0x4c0 [ 563.086705][T12411] ppp_ioctl+0xe8f/0x1cd0 [ 563.092798][T12411] __se_sys_ioctl+0xf9/0x170 [ 563.099174][T12411] do_syscall_64+0xf3/0x230 [ 563.105423][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.113074][T12411] INITIAL READ USE at: [ 563.117509][T12411] lock_acquire+0x1ed/0x550 [ 563.124217][T12411] _raw_read_lock_bh+0x3d/0x50 [ 563.131194][T12411] ppp_channel_push+0x2c/0x220 [ 563.138160][T12411] ppp_write+0x2b0/0x3e0 [ 563.144604][T12411] vfs_writev+0x5a9/0xba0 [ 563.151133][T12411] do_writev+0x1b1/0x350 [ 563.157567][T12411] do_syscall_64+0xf3/0x230 [ 563.164256][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.172345][T12411] } [ 563.174933][T12411] ... key at: [] ppp_register_net_channel.__key.3+0x0/0x20 [ 563.184378][T12411] -> (&ppp->wlock){+...}-{2:2} { [ 563.189370][T12411] HARDIRQ-ON-W at: [ 563.193366][T12411] lock_acquire+0x1ed/0x550 [ 563.199728][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.206181][T12411] ppp_get_stats64+0xc3/0x290 [ 563.212534][T12411] dev_get_stats+0xad/0xa00 [ 563.218784][T12411] rtnl_fill_stats+0x47/0x880 [ 563.225122][T12411] rtnl_fill_ifinfo+0x18da/0x2270 [ 563.231805][T12411] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 563.238839][T12411] rtmsg_ifinfo+0x91/0x1b0 [ 563.244918][T12411] register_netdevice+0x1774/0x1b00 [ 563.251774][T12411] ppp_dev_configure+0x883/0xb10 [ 563.258463][T12411] ppp_ioctl+0x797/0x1cd0 [ 563.264452][T12411] __se_sys_ioctl+0xf9/0x170 [ 563.270705][T12411] do_syscall_64+0xf3/0x230 [ 563.276863][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.284424][T12411] INITIAL USE at: [ 563.288329][T12411] lock_acquire+0x1ed/0x550 [ 563.294417][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.300756][T12411] ppp_get_stats64+0xc3/0x290 [ 563.307010][T12411] dev_get_stats+0xad/0xa00 [ 563.313083][T12411] rtnl_fill_stats+0x47/0x880 [ 563.319463][T12411] rtnl_fill_ifinfo+0x18da/0x2270 [ 563.326060][T12411] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 563.333006][T12411] rtmsg_ifinfo+0x91/0x1b0 [ 563.338998][T12411] register_netdevice+0x1774/0x1b00 [ 563.345788][T12411] ppp_dev_configure+0x883/0xb10 [ 563.352305][T12411] ppp_ioctl+0x797/0x1cd0 [ 563.358239][T12411] __se_sys_ioctl+0xf9/0x170 [ 563.364410][T12411] do_syscall_64+0xf3/0x230 [ 563.370482][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.377951][T12411] } [ 563.380452][T12411] ... key at: [] ppp_dev_configure.__key.67+0x0/0x20 [ 563.389222][T12411] ... acquired at: [ 563.393027][T12411] lock_acquire+0x1ed/0x550 [ 563.397721][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.402670][T12411] ppp_connect_channel+0x174/0x650 [ 563.407967][T12411] ppp_ioctl+0xdd4/0x1cd0 [ 563.412480][T12411] __se_sys_ioctl+0xf9/0x170 [ 563.417259][T12411] do_syscall_64+0xf3/0x230 [ 563.421940][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.428023][T12411] [ 563.430349][T12411] [ 563.430349][T12411] the dependencies between the lock to be acquired [ 563.430360][T12411] and SOFTIRQ-READ-irq-unsafe lock: [ 563.444337][T12411] -> (&pch->downl){+.+.}-{2:2} { [ 563.449397][T12411] HARDIRQ-ON-W at: [ 563.453470][T12411] lock_acquire+0x1ed/0x550 [ 563.459817][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.466426][T12411] ppp_unregister_channel+0x7c/0x300 [ 563.473551][T12411] ppp_asynctty_close+0xf8/0x190 [ 563.480343][T12411] tty_ldisc_kill+0xa3/0x1a0 [ 563.486796][T12411] tty_ldisc_release+0x1a1/0x200 [ 563.493657][T12411] tty_release_struct+0x2b/0xe0 [ 563.500464][T12411] tty_release+0xd06/0x12c0 [ 563.506807][T12411] __fput+0x23f/0x880 [ 563.512624][T12411] task_work_run+0x24f/0x310 [ 563.519059][T12411] syscall_exit_to_user_mode+0x168/0x370 [ 563.526547][T12411] do_syscall_64+0x100/0x230 [ 563.532970][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.540720][T12411] SOFTIRQ-ON-W at: [ 563.544821][T12411] lock_acquire+0x1ed/0x550 [ 563.551192][T12411] _raw_spin_lock+0x2e/0x40 [ 563.557534][T12411] ppp_input+0x18b/0xa10 [ 563.563701][T12411] pppoe_rcv_core+0x117/0x310 [ 563.570213][T12411] __release_sock+0x243/0x350 [ 563.576726][T12411] release_sock+0x61/0x1f0 [ 563.582977][T12411] pppoe_sendmsg+0xd5/0x750 [ 563.589328][T12411] __sock_sendmsg+0x221/0x270 [ 563.595848][T12411] ____sys_sendmsg+0x52a/0x7e0 [ 563.602475][T12411] __sys_sendmmsg+0x3ab/0x730 [ 563.609073][T12411] __x64_sys_sendmmsg+0xa0/0xb0 [ 563.615753][T12411] do_syscall_64+0xf3/0x230 [ 563.622088][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.629823][T12411] INITIAL USE at: [ 563.633818][T12411] lock_acquire+0x1ed/0x550 [ 563.640075][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.646587][T12411] ppp_unregister_channel+0x7c/0x300 [ 563.653617][T12411] ppp_asynctty_close+0xf8/0x190 [ 563.660296][T12411] tty_ldisc_kill+0xa3/0x1a0 [ 563.666727][T12411] tty_ldisc_release+0x1a1/0x200 [ 563.673426][T12411] tty_release_struct+0x2b/0xe0 [ 563.680022][T12411] tty_release+0xd06/0x12c0 [ 563.686301][T12411] __fput+0x23f/0x880 [ 563.692034][T12411] task_work_run+0x24f/0x310 [ 563.698372][T12411] syscall_exit_to_user_mode+0x168/0x370 [ 563.705755][T12411] do_syscall_64+0x100/0x230 [ 563.712191][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.719854][T12411] } [ 563.722439][T12411] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 563.731816][T12411] ... acquired at: [ 563.735706][T12411] lock_acquire+0x1ed/0x550 [ 563.740403][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.745358][T12411] ppp_connect_channel+0x194/0x650 [ 563.750664][T12411] ppp_ioctl+0xdd4/0x1cd0 [ 563.755186][T12411] __se_sys_ioctl+0xf9/0x170 [ 563.759965][T12411] do_syscall_64+0xf3/0x230 [ 563.764648][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.770730][T12411] [ 563.773056][T12411] -> (&ppp->rlock){+...}-{2:2} { [ 563.778023][T12411] HARDIRQ-ON-W at: [ 563.782009][T12411] lock_acquire+0x1ed/0x550 [ 563.788177][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.794602][T12411] ppp_get_stats64+0x33/0x290 [ 563.800945][T12411] dev_get_stats+0xad/0xa00 [ 563.807109][T12411] rtnl_fill_stats+0x47/0x880 [ 563.813456][T12411] rtnl_fill_ifinfo+0x18da/0x2270 [ 563.820137][T12411] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 563.827166][T12411] rtmsg_ifinfo+0x91/0x1b0 [ 563.833242][T12411] register_netdevice+0x1774/0x1b00 [ 563.840197][T12411] ppp_dev_configure+0x883/0xb10 [ 563.846825][T12411] ppp_ioctl+0x797/0x1cd0 [ 563.852828][T12411] __se_sys_ioctl+0xf9/0x170 [ 563.859084][T12411] do_syscall_64+0xf3/0x230 [ 563.865245][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.872813][T12411] INITIAL USE at: [ 563.876716][T12411] lock_acquire+0x1ed/0x550 [ 563.882806][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.889145][T12411] ppp_get_stats64+0x33/0x290 [ 563.895402][T12411] dev_get_stats+0xad/0xa00 [ 563.901477][T12411] rtnl_fill_stats+0x47/0x880 [ 563.907819][T12411] rtnl_fill_ifinfo+0x18da/0x2270 [ 563.914498][T12411] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 563.921442][T12411] rtmsg_ifinfo+0x91/0x1b0 [ 563.927428][T12411] register_netdevice+0x1774/0x1b00 [ 563.934195][T12411] ppp_dev_configure+0x883/0xb10 [ 563.940709][T12411] ppp_ioctl+0x797/0x1cd0 [ 563.946616][T12411] __se_sys_ioctl+0xf9/0x170 [ 563.952804][T12411] do_syscall_64+0xf3/0x230 [ 563.958899][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.966472][T12411] } [ 563.968979][T12411] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 563.977514][T12411] ... acquired at: [ 563.981336][T12411] lock_acquire+0x1ed/0x550 [ 563.986049][T12411] _raw_spin_lock_bh+0x35/0x50 [ 563.991023][T12411] ppp_disconnect_channel+0x9a/0x2d0 [ 563.996528][T12411] ppp_unregister_channel+0xb9/0x300 [ 564.002012][T12411] pppox_unbind_sock+0x5c/0xb0 [ 564.006965][T12411] pppoe_release+0x16e/0x820 [ 564.011781][T12411] sock_close+0xbc/0x240 [ 564.016304][T12411] __fput+0x23f/0x880 [ 564.020473][T12411] task_work_run+0x24f/0x310 [ 564.025245][T12411] syscall_exit_to_user_mode+0x168/0x370 [ 564.031066][T12411] do_syscall_64+0x100/0x230 [ 564.035833][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.041917][T12411] [ 564.044245][T12411] [ 564.044245][T12411] stack backtrace: [ 564.050143][T12411] CPU: 1 UID: 0 PID: 12411 Comm: syz.1.1159 Not tainted 6.12.0-rc1-syzkaller-00042-gf23aa4c0761a #0 [ 564.060918][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 564.070993][T12411] Call Trace: [ 564.074283][T12411] [ 564.077221][T12411] dump_stack_lvl+0x241/0x360 [ 564.082009][T12411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.087305][T12411] ? __pfx__printk+0x10/0x10 [ 564.091916][T12411] ? print_shortest_lock_dependencies+0xf2/0x160 [ 564.098262][T12411] validate_chain+0x4ebd/0x5920 [ 564.103133][T12411] ? __pfx_validate_chain+0x10/0x10 [ 564.108347][T12411] ? __pfx_validate_chain+0x10/0x10 [ 564.113558][T12411] ? __pfx_validate_chain+0x10/0x10 [ 564.118768][T12411] ? look_up_lock_class+0x77/0x170 [ 564.123900][T12411] ? unwind_get_return_address+0x4d/0x90 [ 564.129571][T12411] ? mark_lock+0x9a/0x360 [ 564.133909][T12411] __lock_acquire+0x1384/0x2050 [ 564.138839][T12411] lock_acquire+0x1ed/0x550 [ 564.143391][T12411] ? ppp_disconnect_channel+0x9a/0x2d0 [ 564.148885][T12411] ? __pfx_lock_acquire+0x10/0x10 [ 564.154387][T12411] ? ppp_disconnect_channel+0x9a/0x2d0 [ 564.159879][T12411] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 564.165714][T12411] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 564.171134][T12411] ? ppp_disconnect_channel+0x9a/0x2d0 [ 564.176613][T12411] _raw_spin_lock_bh+0x35/0x50 [ 564.181404][T12411] ? ppp_disconnect_channel+0x9a/0x2d0 [ 564.186881][T12411] ppp_disconnect_channel+0x9a/0x2d0 [ 564.192192][T12411] ppp_unregister_channel+0xb9/0x300 [ 564.197497][T12411] pppox_unbind_sock+0x5c/0xb0 [ 564.202292][T12411] pppoe_release+0x16e/0x820 [ 564.206919][T12411] ? __pfx_down_write+0x10/0x10 [ 564.211975][T12411] sock_close+0xbc/0x240 [ 564.216331][T12411] ? __pfx_sock_close+0x10/0x10 [ 564.221220][T12411] __fput+0x23f/0x880 [ 564.225241][T12411] task_work_run+0x24f/0x310 [ 564.229857][T12411] ? __pfx_task_work_run+0x10/0x10 [ 564.235051][T12411] ? syscall_exit_to_user_mode+0xa3/0x370 [ 564.240828][T12411] syscall_exit_to_user_mode+0x168/0x370 [ 564.246485][T12411] do_syscall_64+0x100/0x230 [ 564.251178][T12411] ? clear_bhb_loop+0x35/0x90 [ 564.255884][T12411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.261824][T12411] RIP: 0033:0x7f15ef77dff9 [ 564.266258][T12411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.285891][T12411] RSP: 002b:00007f15efa5fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 564.294324][T12411] RAX: 0000000000000000 RBX: 00007f15ef937a80 RCX: 00007f15ef77dff9 [ 564.302322][T12411] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 564.310310][T12411] RBP: 00007f15ef937a80 R08: 00007f15ef922000 R09: 00007f15efa5fe7f [ 564.318542][T12411] R10: 00000000005ece14 R11: 0000000000000246 R12: 0000000000089684 [ 564.326531][T12411] R13: 00007f15efa5fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 564.334647][T12411] [ 564.352716][ T5235] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 564.363484][ T5235] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 564.377070][ T5235] usb 4-1: config 250 interface 228 has no altsetting 0 [ 564.393184][ T5235] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 564.402534][ T5235] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 564.410133][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.411230][ T5235] usb 4-1: Product: syz [ 564.417103][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.427951][ T5235] usb 4-1: SerialNumber: syz [ 565.037646][ T5235] usb 4-1: can't set config #250, error -71 [ 565.064801][ T5235] usb 4-1: USB disconnect, device number 45 [ 565.362933][T11007] bridge_slave_1: left allmulticast mode [ 565.370912][T11007] bridge_slave_1: left promiscuous mode [ 565.379493][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.393302][T11007] bridge_slave_0: left allmulticast mode [ 565.402852][T11007] bridge_slave_0: left promiscuous mode [ 565.416943][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.500729][T11007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.519089][T11007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.531450][T11007] bond0 (unregistering): Released all slaves [ 565.616681][T11007] hsr_slave_0: left promiscuous mode [ 565.629612][T11007] hsr_slave_1: left promiscuous mode [ 565.643261][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.650919][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.780144][T11007] team0 (unregistering): Port device team_slave_1 removed [ 565.824941][T11007] team0 (unregistering): Port device team_slave_0 removed [ 566.625666][T11007] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.672059][T11007] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.733254][T11007] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.792706][T11007] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.902150][T11007] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.979374][T11007] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.064840][T11007] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.121879][T11007] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.223676][T11007] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.291651][T11007] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.354219][T11007] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.421910][T11007] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.534769][T11007] bridge_slave_1: left allmulticast mode [ 567.541624][T11007] bridge_slave_1: left promiscuous mode [ 567.548275][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.559350][T11007] bridge_slave_0: left allmulticast mode [ 567.565096][T11007] bridge_slave_0: left promiscuous mode [ 567.571098][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.580252][T11007] bridge_slave_1: left allmulticast mode [ 567.586340][T11007] bridge_slave_1: left promiscuous mode [ 567.591996][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.601195][T11007] bridge_slave_0: left allmulticast mode [ 567.607547][T11007] bridge_slave_0: left promiscuous mode [ 567.613179][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.622347][T11007] bridge_slave_1: left allmulticast mode [ 567.628090][T11007] bridge_slave_1: left promiscuous mode [ 567.633754][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.642389][T11007] bridge_slave_0: left allmulticast mode [ 567.648193][T11007] bridge_slave_0: left promiscuous mode [ 567.653824][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.662768][T11007] bridge_slave_1: left allmulticast mode [ 567.668813][T11007] bridge_slave_1: left promiscuous mode [ 567.674484][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.682946][T11007] bridge_slave_0: left allmulticast mode [ 567.689116][T11007] bridge_slave_0: left promiscuous mode [ 567.694762][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.104457][T11007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.115361][T11007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.125441][T11007] bond0 (unregistering): Released all slaves [ 568.139585][T11007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.151850][T11007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.164990][T11007] bond0 (unregistering): Released all slaves [ 568.178868][T11007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.189474][T11007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.200390][T11007] bond0 (unregistering): Released all slaves [ 568.212870][T11007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.225101][T11007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 568.238869][T11007] bond0 (unregistering): Released all slaves [ 568.787971][T11007] hsr_slave_0: left promiscuous mode [ 568.793718][T11007] hsr_slave_1: left promiscuous mode [ 568.801441][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.810094][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.820133][T11007] hsr_slave_0: left promiscuous mode [ 568.825856][T11007] hsr_slave_1: left promiscuous mode [ 568.832096][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.839637][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.847597][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.855002][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.865307][T11007] hsr_slave_0: left promiscuous mode [ 568.871368][T11007] hsr_slave_1: left promiscuous mode [ 568.880520][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.888047][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.895682][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.903512][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.913431][T11007] hsr_slave_0: left promiscuous mode [ 568.920660][T11007] hsr_slave_1: left promiscuous mode [ 568.926712][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.934109][T11007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.941895][T11007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.949396][T11007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.963270][T11007] veth1_macvtap: left promiscuous mode [ 568.968832][T11007] veth0_macvtap: left promiscuous mode [ 568.974370][T11007] veth1_vlan: left promiscuous mode [ 568.979773][T11007] veth0_vlan: left promiscuous mode [ 568.985890][T11007] batadv0: left promiscuous mode [ 568.991092][T11007] veth1_macvtap: left promiscuous mode [ 568.996778][T11007] veth0_macvtap: left promiscuous mode [ 569.002316][T11007] veth1_vlan: left promiscuous mode [ 569.007715][T11007] veth0_vlan: left promiscuous mode [ 569.013729][T11007] veth1_macvtap: left promiscuous mode [ 569.019412][T11007] veth0_macvtap: left promiscuous mode [ 569.024965][T11007] veth1_vlan: left promiscuous mode [ 569.030652][T11007] veth0_vlan: left promiscuous mode [ 569.312415][T11007] team0 (unregistering): Port device team_slave_1 removed [ 569.343198][T11007] team0 (unregistering): Port device team_slave_0 removed [ 569.522620][T11007] team0 (unregistering): Port device team_slave_1 removed [ 569.550315][T11007] team0 (unregistering): Port device team_slave_0 removed [ 569.640937][T11007] team0 (unregistering): Port device vlan2 removed [ 569.752571][T11007] team0 (unregistering): Port device team_slave_1 removed [ 569.780670][T11007] team0 (unregistering): Port device team_slave_0 removed [ 569.997993][T11007] team0 (unregistering): Port device team_slave_1 removed [ 570.025918][T11007] team0 (unregistering): Port device team_slave_0 removed