last executing test programs: 10.423028752s ago: executing program 4 (id=553): syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) syz_io_uring_setup(0x1911, 0x0, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$caif_stream(0x25, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') socket$nl_netfilter(0x10, 0x3, 0xc) getpid() ptrace(0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x400452c8, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000280)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010d02290001000000000904840000142eb500052400000005240000000d240f01030000007f80ff0f0e446d69a9bf9e82b9928879cdaa227bd1249b0c327f6f94a96eb57fc35c40da1f6372e2d98e63ae7275cdd33b535eb661271d6bc173be8ca616aa53538c8f6815f22f615afca9fa21a97d25d57c0cf2b43fa1"], 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x20) r1 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000b80)={&(0x7f0000000ac0)=[{0x0, 0x401, 0x47, &(0x7f0000000780)="27d77f27453d9777401ac69c331ee7c31c61c1a19f584e3aacb769fd7a641e0162f038b128a1fe7553935d212eb65126d629df0bc1c009cc5350a6c83c86710db1708794fbf7c5"}, {0x0, 0x0, 0x0, 0x0}], 0x2}) 9.88718237s ago: executing program 0 (id=554): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) pipe(0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x677c, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000000c0)={0xfffffffffffffff8, 0x4, 0x2, 0x5, 0x5}) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xff2e) syz_emit_ethernet(0x5e, &(0x7f0000000380)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x28, 0x3a, 0xff, @remote={0xfe, 0xc0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @empty}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f030200", @ANYRES32], 0x38}, 0x1, 0x200000000000000}, 0x0) 9.446935202s ago: executing program 1 (id=557): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0) gettid() socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000000e4b9b6d763a805d78fff0357f214f1714f17a19db11b4331ff7a888ba4a54b0002b841d44f6fca5e22b4c65c0ee916894b867176ae95fad1"], 0x8) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e20"], 0x48}}, 0x0) 8.960183253s ago: executing program 4 (id=559): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newsa={0x120, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote}, {@in=@empty, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, [@XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8}, @coaddr={0x14, 0xe, @in=@dev}, @mark={0xc}]}, 0x120}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0xfffffffffffffd2e}, 0x68) 8.807360311s ago: executing program 0 (id=560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@empty, @in=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast2, {}, {}, {}, 0x0, 0x0, 0x0, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x154}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1300000043001f00030300f9002304000a04d6", 0x13) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r4, &(0x7f0000000440)="6a379cac91626040e3ec4766b13383fd6b4a100f5d88581721029d"}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x160, 0x10, 0x713, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x12}, @in6=@mcast2, 0x0, 0xfffc}, {@in6=@empty, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @XFRMA_SET_MARK={0x8}, @extra_flags={0x8}, @coaddr={0x14, 0xe, @in6=@empty}]}, 0x160}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000760800", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c2d1b120d105021061c5e101030109023400010000000009049b00022128e400090503000000000009080bcc0ded7a0589090500000000000004080b"], 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x81, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000080), &(0x7f0000000200)=r0}, 0x20) 8.688041712s ago: executing program 4 (id=562): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0xfff) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x9, 0x0, 0x0, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x6c}, 0x0, @in6=@rand_addr=' \x01\x00'}]}]}, 0xfc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000840)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x2d, 0xfffffffffffffff9) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x22, 0x7, {[@main=@item_012={0x2, 0x0, 0xa, '\t\t'}, @main=@item_012={0x2, 0x0, 0xc, "b608"}, @global]}}, 0x0}, 0x0) 6.990692055s ago: executing program 0 (id=567): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='oom_adj\x00') pread64(r1, 0x0, 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(0xffffffffffffffff, 0x3b80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r4, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="888303263a9e1cd1b50fc2efc626709c96bcab98beeaa9077149fd4ffeb7b7859b0a68c39e8881cab4fdf65d791358ed734acb07149c487b4f50c5f917139e9ddd44ad39181491d09461f20f51503283b41f6018eb59e878178075bbae9936080a53e68b3cabbb85ca082bf489fa6b1abd74c346ff049623fa21722d20463695f81a234de702e58d0b7a3fcd183be373c73e607e8cfe2b65abd2cc3b97daca65b674bbd651de2ace292d1db665ae1bd9575bfd33675399566e7c5c56d3d7232a307b496f311ca8d3d15ec4c824ed0f4a672c6855c86e0d8d2ec8291a82a3f15e2cce9e", 0xe3}, {&(0x7f0000000200)="c0ce26486d164b431db4444094be80f5dfee9ba9a65a4d50b8f83f2a9024e5586a614f02b063595a8172c55e67c5d085c9bf44d4ac2cb536f9dd56007c79", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000006c0)="9de6d3750349c2f3847fa4a05f94adb3d21fc68c161aea97b382463136de885846c0513c1d9af3f721cad5a7a753816b79e9af459a7719536932401f194b7c3cdd1b9f5b281e875b96304c31f9aa021642552f18aa7d269bceb614a8895c589cebc5deea722bc9efaf97ab2f098d99b96210c991e8496eae1a0558cc759f3886cc735c0cea5119c10be69068addbd4986f7a7b503ff93af91dd3d173d20ea095e56d3b9bf62b6d547efc4b5cf94bd633ef418ece871a5bdb42ffb27661c222754bbb333c1e65ec05855be1243417f27d30c5e7", 0xd8}, {&(0x7f00000002c0)="468acdb4e4cf0427161e4b334f4c94ebd825850e7c132a1217aa3b5547f1dcc73efdc575d16f90985e478231fe76ee24fcfe9799497db0cbe5954acded7a24622c2463bae7529c05a6c81e33ee93869fd7c57feff17c9cd809b1be241edcede17e4643efc8c2baed1e2442f3a236fe60e4685d2971077e625dce6f0b6c216ffcebecd763c39e87eb641e7046dd68949acc02", 0x88}, {&(0x7f0000000880)="52a67f4b2e3245fb", 0xfffffee6}, {&(0x7f00000008c0)="910173d811a77377207b361dd63bd456ea8e58a1e55699c4fd0206e27161045d62989959f8fa93a3437f4a33e558ce924e3be64fd73c92b733b2c178599b60cf9f37b97362210516665be1e110544d2a87c7750450a6a73dea6172b7d97667050fb8309ed2a18f0b5f4895684e", 0x6d}, {&(0x7f0000001500)="cd07e85142f8ead499f3ef72f2227c53dd9255de4766b5f33ef218a7c39a97bbd4f8385f1852a08a0e900c7f9183f6c74e7e3407bac0d64f2fe763278fbc7ea1e7111be746ae2748fc96288a8b288a6d1baf35514905bee7b70175dd6a5b1b43735e06d236ee53c79aa6f817e833618ba7321afdf30656589fb5d92a67f70e2cb1dd98e48ff65bb2569a258f78bca3682750e0584ea00629c67c6411cd532d62be01f143fe9ce39012147357e8abe37baa6cfad28b949c343c17567015b2811ea8dfd577749855bcc1cbdae064318ac83c505129a407543c355a4e902e6d43e92cf7d4a538400b7741304b9179bc8357b82081d7141a388f8659108dbd3142dca4483efd112eae795c780aa14fde5d3ad8a29f57cbbe4929ced3ec0c45c4964e627d283b4c8302ab1eac4796a40ff79106ab2b28a1a72028a56a6b4e7e44f9578970f37fc3edfdf4b51bece98270e1b3b8da8f4bad2d38d0d04220f53e70f88f9431cd8184995253d38f27fbece66f45558a0941277de0308ed8a3bd8cbaa2f12406458086f37d447d9cb471c3b075bef79673e3b27d707f1483be8949600e9259a4edb962ff5e2a47a369468814971d2a81bbdf6222dfd7334912d33b51080cecb1eb5ca9ee573abc277b75e15b8fe9b242abd74ea74a4f83bd96e3b1ae924d927bb45a7b4b879f6a689f4977d0dbd4eaa0cfe64dacb82cf3784e21cd4e136ee610c2672eaedf35918d3c82eec28ea5753ea137f8a5d2f2f8a7aceffa1d71ac75bef177945d757ddc904c46a8a69336861cf08a5c51996807008e58ebf23a7e597bb07cce48e40b8a172144c4e649090fba0ec62152f85c3c4b843bde0f6eafbaa12bd1449801d2c4bfb51317bbc4d521ea1015e73a8c9146eb37eb9583a2443d8eea2293c808efc19a5735408281f16f590e00415c43ac2ce1c3432d41525dd0137eb991d9c56c163c0d4ab2d4ce2a418ff537bf20e6152bbd81d4a2a3570a7c3053f2ceb5e9797d2c60fb069cdcb03e06aedf63ff47f7ef9551e26cf08740c74b273bcda959a1e9a84c0fa05416b99d73d402fb81754e1ccf796d9da53399d6dce3ce83303ccb4166cf36ccb0c9bddbe0e34dfbcae31b4ce8fe513570e036844ab516cf4d6293bdd388112084e6aefcc6e7967fe99aabd72a207bb4ec8fc02d5bc229ca68c9db99529208146f49f29fda53c49707d76a649aa5df7607c3ee514eb820f4d0cc55d547ecd3193c4946525af9f68f8ec2d0a6b0ccfbd8ae0a265249255c98e9e6ab3d8d82dbfb8c15a8ef69b78cc9b4f0ad5a2ce9d6793ada0b6163d9d1ed3e50f9c819ca46b40ff40b375f5e2ce6caa996af36324cbbaa63635b0e107ad01174baa553b86dba12e8ad9586727a70aee6785121e9edb5a98e01b7848734d3e044c494a4061493e1ae7fd73a2ed9b83d286e24a732966faee7705d8a2d360159acbdf18616028134c25d1a92bb45f06207701454390b87d5bcb66ec73d8c3c53049f42c85de0acc45a9379302203be199ce55154b739bfb3d27929b12163e2078905137774974b90c07960fd410fd58394bc53e7745f5627de2f0361418173763c69f8a11d93a104ad382cf385b0c6c7c3c5fc8236e6f18ae9be0543d28d54050b9e60f2f774a16be4904243d482ad3252edaccce56dcd350b6e249fe686d5adc07bc57c71aebdc243eac56f29fa24e69b8d444c54a95522beafac6230a3c4e89c6d55654a4a077f7f854d6b24f8b45da2baa5dc3e4df15c56263c7fa80642789ea712a9562a70379afe5ac584c891178d71a558e73456e53e7f9256f4c0b27daa3eab32f1e56b3dd9280053c1ec57e86fd87a725ab9a5d93e3f8e6e848afbdadb859c744f40a86486fbbd1da6a18c834bf43594aac9d0340521dea06befad18bb868e9e63578ed66c70ecfeb31ce55755a5d48de4113c7e29975643cbc53f114ed522231e410f1fe4b910e6af3d4b56918952f7f25204813b3283e20a54fd285a80988494576bd738e685edda5177eeb0e2c9816dac60302b12ec046c9feb770dec403fd4fadd1628aa4978647e8dac1825166a5be8b580b195387d901ecbf03b70d4301f6de69f691009a659c03186b8431e226022f811a6d2ce73c8bce19b09e04728b739da06054690f30c71bb3326f8d4fc80cf654a42fc6134967206e110558a6f9e9c434bf175def183da8a5c135975dd7eac8fcea1343710cd92fdcba2152b32e014cb8e87d3c500e8f439e1522da6866105e937663d8044527982d147df983ca83eaa7fb4dd5c0c79232dd687e02dc135d3067547cafb1934b5769114472beb906646ffdc44291289bc27478262295c2fa517ccd553804e73eb9150f5d451afd79f175e14b563a5e6c86e9a0eacd450be530a3e506297a751bc5800f3c45a3e18b93c21aa8c0f2d144122803361d4b59e2a21bb462c0b8bf9d8f4c91610c633fefced62b8de88bd2e56e58eb538f30b1710f8cf5e6e54db33adc53d2519351696028edda2e915a3f575ee3488b6ac2d96856fe5742ae57679e11e7baeeb7446aa3d92a834086b8b2eba58a16e54a2df19f4be02fb9ed80f9547c327ca69bfc027852c0f54eea05b0982f0a08548f16a80d17121b5c3536d072b6dd78965d7fcb1d13d8435c003050de3900f43ec378070ff24e9fe463451cd2ca1d81532121fa6a010df9e471dbd068c9de5698eb986a43640843e6ab2ae9c849603cc1ed6799cd80a9dc8937127ef006edd442b68fc79a7d31d80f255ce9593e12a219d4a38a84c2a77ae3c604ac33614aea6c8523e4f553866b801cfdbf3545370555685f2f6ae4a05745713bac8452e86536807b986037d28953cc093122c7e400f4ebd876282e831b5e45c2e2dab9c7620ef9aa3c3f733baef8eee8242e0edfc20c9f58127739c978fbda24af4068e36a0c556cf2e60be433e6c86fcaafaab94124385c14dff932713044432cfc6ce7c6ae88c1fe32097d2e223616818eb1df981cd70a9a35ad7776745b660dec25e93cf5d6157cc161b808097f49a7713c5a164cd5cd61cb44b155edd38b72c5788b5328a1090cc366fb114d658eb4f045740fa95c19a9b6fc4c758036b9ba3d566e93073a5387f850f70db48d7c4a071d2b6bcdc67113b242688fbddffcff2c369680a4f5e7f0bafc27241a95695ff39c828f5d2b4e2a5955414aae21358971a9bd5d27fb3b4980d7a2058f5a686a65a95245aa418df589d6191ddf8e2a75b80c78dece49e7cdb6dc038944c8badeb86ab903a7a2db35cff18dd46ffbc02c36461205df47e93ab492ee2c49b489c22e9d0a44766f855cc1bc37622c72ab452908860cc054e9cd245cef29667e078e09403f395a0ff222272fd39bcf8c657de071fa6b02efb062e133f4ca14dbc3041fc3d0d7f44a30c955fbe5088ec222355d0b533f506ac75cadbb646b437eccdffef7f521ff14b3716f945c3a0b532616e3fa4dd88ecff416b0c91798aac7072c610adef4e076f5609bc0a4431de4de4a7318115a3f45dd7105f0d25cf2f2eccfb949b7e9b1c6f051f1c8f61b95f665c219d1f32b7af585818e51a937f5d90b0dd2d1e68f4a9f94f8da2ab42b3c91c95871537d94fc2a191862cbbe28433c7773a3dabe82a371c47c905e46f74f4964fe4ff3551588cb97d089465d1df16daaf5617d5b677e2e77541f64ea33ad75611e1516f230d4f207f58494458b3e25a3ce1d1d098ae8a8db11fbb7783d6f3960e237c0a24e33043c21a552cedc8aa7a0838cb034070a5af237acaaacf0a4398b036cf32ddd2d614d26c53a3fdbd0fe8cd1e0064c8777ac8f9755e02ca4bf869bc94cd6bea3bab112f57aecc27e6011d4b4c8c3926abf995a39b4384f9bf410c4e3525a47d4db05f3c6c253c8adb2678c5f86dd2e5e3ffca798b5b756c0207e65a248449cd09abad3b3b8fcda337124bb66079dd1ac77949f3c8ddac7396eaf8348544164edb99e178d59c13878b8b8dbd0759cbf4b6b6d3dcb5adb4b6bf8402b93aa4a6b53789b627f68b772618cb8a9689ad282a230d6e5e125da910b4f26f72caf1eca8362b977f83bc16a798e05dfc6c7675cac8262e781db9db2250958ab6bda85ebd7c4d06681ee0f30bd062a08294ce0d459e10e3a0c2323373ec84ac3e6d99ec6134ee395b6ca8ad6e6a53dfba9a07747944cb2be0ed2fcac5c4e7c43a5da76031cec5169b3f445099322b704a5198c1018a3bce33a155e7881fac59fc526c32e954a700c4b6db8f25467b714d4b723224c1f1bcf59b2b75c577fe4acd95aea1c8ec9075945442a129a3efd5e64aa3d668be55e3c43580526e596a74baf605576606c7bab5005957371f075dbe44333465564af0eb35dfe14465d87035ee896e6fe8138ee43bc2d383e6ee51fe4ed62341d2a68ed64385ec31867f28ab33a8e0e0da7c6587432df0286d44a24ca0e85ae151307a24222fffc971b476e412a450c58d69b7b4a5d89c5f55170dc5f3689089f49894cf6d034f680067b28582ca2066d2578dec3528041289c7340355425064441b647a51bb4be746c165c10c0a2a82c8644a832a32877ea81e24a50c2e3f0fbc5b763656b6c7278cc83a94c65bbca431cefde888cd42b03299b591c756aca38f03ca7a8f61aa9a69de2ca81d7e5005fbd6c328493e2833d45fcb68cdfa761842b48aebf3570cec220dab6ab3b58e1214cf843b7201a8387077b5c1462f2b025f9c6a56f8", 0xd0b}], 0x5}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r5, r3}) write(r4, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 6.583175215s ago: executing program 4 (id=569): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="00000700000007007673ed26b029a925ac675bd612d8ab87f051a10ee74893f24ccd9ce3e96e268eef4b1368"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r1}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000600)={r2, r1, 0x4}, 0x10) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000500)) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) write$hidraw(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$hidraw(0x0, 0x0, 0x0) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, 0x0) syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000000)={0x0, "1cf250d2528722061e2daedcbbf930dedf4904d8f9e64f62c3d0e156e87ed3dbfac38f0c1faada797532454dd344c00c8a007369f5d86fe64007aa38577e4db7"}) syz_open_dev$hidraw(&(0x7f0000000080), 0x5, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) write$hidraw(0xffffffffffffffff, 0x0, 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) ioctl$HIDIOCGRDESC(r3, 0x4030582a, &(0x7f0000000240)={0xc700}) syz_open_dev$hidraw(0x0, 0x8001, 0x200) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$hidraw(0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000740)={0x7f, 0x0, 0x0, 0x7}, 0x10) 5.815226732s ago: executing program 1 (id=570): io_setup(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xbe, 0x3) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r2 = signalfd(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000180)) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x121, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x206}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x4, 0x10000}}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x40084) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000100)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x2c}}, 0x0) writev(r4, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) 5.731554092s ago: executing program 3 (id=571): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000fa8a04"]) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000140)=0x5, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000240)={0x20, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.843397162s ago: executing program 3 (id=572): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0xfffffffffffffd2e}, 0x68) 4.653198963s ago: executing program 3 (id=573): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000180)) 4.598161733s ago: executing program 1 (id=574): r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x6, 0x6, 0xd, 0x10001, 0xc, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x8, 0x80, 0x6}}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000400)={{{@in=@private=0xa010100, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e23, 0x0, 0x4e23, 0x7ff, 0xa, 0x80, 0x80, 0x2, r3, 0xee00}, {0xffffffffffffffff, 0x200, 0x7ff, 0x777, 0x2, 0x0, 0x7ff, 0xfffffffffffffffa}, {0x7, 0xffffffffffffffff, 0x9, 0x2}, 0x6, 0x6e6bb8, 0x1, 0x0, 0x1, 0x1}, {{@in=@rand_addr=0x64010100, 0x4d4, 0x32}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3500, 0x3, 0x2, 0x3, 0x83, 0x160}}, 0xe8) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, r4, &(0x7f0000000180)) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1000000000}, 0x18) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000001440)={{}, {}, 0x40, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x309, {0x0, 0xc, 0x5c, "e003639cc708159e585d61d48d39c82ba47b40708fcd8291c6c8af35cff65bddae5fc09b9d81fa33054e587e83f4d4ef53f198d26297788902b5432600161054f6388c5be43d705f40061958d3305e31f82ec7a88c5d889cb9fc2744", 0x2a0, "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"}, 0x20, "ab3ec0d72f432ca5e1fb797fc10c0427ab39892f23e4e1d87d0cee79616270ad"}, 0x335}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000006c0)={0x0, 0x9}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000740)={r5}, 0x8) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newtaction={0x44, 0x30, 0x0, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c0004800800034000000000080005400c00000008"], 0x3c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180"], 0x78}}, 0x0) 4.36953584s ago: executing program 3 (id=575): prctl$PR_CAPBSET_DROP(0x1c, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x4040014) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x8040080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000180), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 4.054194546s ago: executing program 1 (id=576): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000d00), 0x4) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd', @ANYRESHEX], 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000092000040"]) sendmmsg$inet(r0, &(0x7f0000007780)=[{{&(0x7f0000000980)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @rand_addr=0x64010102}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff7}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x1c, 0x1b, 0x1, 0x5, [{@remote, 0x2}, {@private=0xa010100, 0x8007}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @generic={0x88, 0x3, 'A'}, @rr={0x7, 0xf, 0xf0, [@private=0xa010102, @multicast1, @multicast1]}, @ssrr={0x89, 0xb, 0xad, [@multicast2, @rand_addr=0x64010102]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3f}}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp={0x44, 0x20, 0xa7, 0x0, 0x1, [0x2, 0x7b8f5d3a, 0x5, 0x7, 0x5fbce4d9, 0x5, 0xca]}, @lsrr={0x83, 0xb, 0x60, [@rand_addr=0x5, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0xc, 0x25, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @end, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x20}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@cipso={0x86, 0x14, 0x3, [{0x5, 0x2}, {0x5, 0xc, "00079088fea626a9009d"}]}, @timestamp={0x44, 0x8, 0xf2, 0x0, 0x6, [0x0]}]}}}], 0x188}}, {{&(0x7f0000000dc0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000003640)=[{&(0x7f00000047c0)="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", 0xf80}, {&(0x7f0000000e00)="002521f740646d53d2b61f29f43fe29021f61e012d2c40a8897b56", 0x1b}, {&(0x7f0000000e40)="825b4ba0af82aa3d5a1a6761b4b1bfb375cc5611b08677e077e5130a574db01550a73a8fe20005feb09b47fa5d3acf995d3099acc9fdffd1d8929a927bef04dc082a9570d792f20e061f4890e666f10ab614c358c8ee05824d8284814391a354622741377200aa3a033b99a1b6bdab55b6bcbeab977998504b9214b5775e636735fbe6855df715597612875940db373fd63ef958e33c11e3b357d7b5f56bc0ed670671879869f727fb83b30dd6ea9fa5", 0xb0}, {&(0x7f0000000f00)}, {&(0x7f00000031c0)="e8b0dff4012896dd23be8e979af167633f71f04e18d04b3e165b7608d3e2ed40e43b49ca50a89424fd0e121a47b3ac98d72f9e333c140fd6d3e27d24b27bdcaaea426a0c671a3bcb4f32b880b31b3f941bd6f7b99ca033a627475bacdab4475d655090986f549256531a60363bd151bdb959fae59028e13dc50f4a700084d0c4daf63f1135d43eba176840a2bc5336967e2eef9b9eadfecb2128eac06adf502d9608778cab8aec2a1f4d81c0d1b86e222eaf8b0c36beefb8ce9ece15174cbe1fd4757b9246c21959cd5e71767c4e23400c4c90a68526b687b8a5c4509419c05e31d1befe9733d3d9a74e6a0e8971df", 0xef}, {&(0x7f00000032c0)="484440acf6c65362b8ca307d95ed48a83f5c018e38f260da926851e4d974ba9146d78e7f7f9407501f19e7880d6789616931b286241ef435856b48b6720e37023c77f790511da0535628cbc90ef73886b14870962e773888933dd7274832bb9bc8e2eddfff4fd5a680689603c27a24fed7fdb74c3b7aa084812a4538e4e1092e4e906948e62de9cf0a651344fbe72d90ecedf497472aceac763c7bb699941da2e544938257c23b5bfae4f61e7b77cdf12e99d6a2", 0xb4}, {&(0x7f0000003400)="a7a165acd176110e7a0654ed8ab877b8b28c75fa19f00fc2c93264e45595c8a4b588ce81aa69948f8f64f542692cfd70f39b0a890de1cad051e6530432a3bb2c47fa0eac68e4327c0f80246e2a701b63e0117837e5fb696eaa17eef6b6094e8a630ee6a765f3c142f1fe92e1e5a9b8e547fd2ff407c4e23e35718f7aabf70ba4ae8104b69150dd1735ae52", 0x8b}, {&(0x7f00000034c0)="f9293517947c21970283a7ea997b1730e29b8fc90a84bd220e643e1a59fd6702ec144cefce028a51d6178c540c3278c81c53f99e39fe6ce43bfbe95218bfdcd316cc", 0x42}, {&(0x7f0000003540)="4bd028b7576083d688af4d5f", 0xc}, {&(0x7f0000003580)="f5f3dcadff35b2974ec4aacb390a4810dfc783c1495d7e016068c6f1646f4d6f1b40cde7b579c46daea27137c947ea96865c7f7a8a24b264afb6c9e760b4b43059506585869b7ad3c3b7405436cd4ccb927e50", 0x53}], 0xa}}, {{&(0x7f0000003700)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000006900)=[{&(0x7f00000057c0)="36a6cd6e817295ecf9cf73f0d1c229731e488a19c4732d7d26a26665f1645545ff75f2217f875b82d40b7f41b0cb59caf12f8a1c0d379223b41c27b71559c81534bf307ba5a39f89a850008a1c1e9e6a9c2c5f1f244c755b72b1c2b0d79525c261177584e99460f2c9f92d3f8730aef82f394b9c363e25a5e02bb160f2fe9a8f", 0x80}, {&(0x7f0000005880)="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", 0xf00}, {&(0x7f0000006880)="1708ed8aee3279125b2ff660209a6b3459f2c329e94ef73ef274515fc58ef3bf06f17cd2a8baa9b70fa7b9f04d82928f26f1f7b6ef60cf87be09e09f6041ad593ef2b340116e874fbff301c6ebb45857209c4dbfd935dd46020e314542e79ebc9cc6443c748208413f788ceb0ae5985318182fd0375a80d37b", 0x79}], 0x3, &(0x7f0000006940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}], 0x20}}, {{&(0x7f0000006980)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000006bc0), 0x0, &(0x7f0000007200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_ttl={{0x14}}], 0x48}}, {{&(0x7f0000006c40)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000006ec0)=[{&(0x7f0000006c80)="ecbdf0b0876813aedc413331d62a30f9", 0x10}, {&(0x7f0000006cc0)="1e33c1ad836c836b27b03692", 0xc}, {&(0x7f0000006d00)="e92bc5d985331b07fc852bc0", 0xc}, {&(0x7f0000006d40)="e07d2cf3b5fa39201b1a9257dafdbae49dd69ae0dbe2cc70a9218467877fe2a0888543de186d2c897743e7d5674b57808b4db83f36257d2acafb48c6b431b06689a5a7df1af165617d22ab6a73492d1914e33fd863489e1719ee359f939fc7673059c047f58e70106ca9fdafdb09afd7a1db7439d688a8f6d13941e57321ccc344b3649d7c30574a8bd800f22bda720f616c9a2779533e8cbb44fe8168154f2642b8e901fbd3a9d664f489a15c993f91b1d57e7bc5876260ab495d511565747a60a1643910b54eb2e4039bd427848ddf7b5bea2be9c9e88dcd8ddaf9ce2e91c160", 0xe1}], 0x4, &(0x7f0000006f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x33}}}}], 0x20}}, {{&(0x7f0000006f80)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000006fc0), 0x0, &(0x7f0000007000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffe1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xd8}}, {{&(0x7f0000007100)={0x2, 0x4e23, @dev}, 0x10, &(0x7f0000007400)=[{&(0x7f0000007140)="d8140ab05aa81e143b58", 0xa}, {&(0x7f0000007180)="0bfd17bf76cb880dbdb04255f0f5a401cabc2a047e1081b979a124c5987ad576982cf7ffffffffffffff2a889b062fefed63337e3df33e209607dad8fea7ef083940cd3392b8afb95787cb3808dc2b42d31588b15e463157", 0x58}, {&(0x7f0000007280)="5b8182f687241903f0cc6a9b8a9c1b84625e4c010d5cc8a687ea609ca200750507bdc5823dae2727ab659d3b75b6b0ebe9166269f5509a0fa34842c30e2649644316fd0c00a5cfb5258a8c106ae05c2945b4deaacc9d9dbf8f911cdde183f5d84f21e80ed242e1ee5b5d1debcc64b4e57f09a4aec74a6c50dc7819971fed4dda3a94aa7613105b6974fbd744deaff0fe591e16ff763f9f0742244997e09b023e75ed1466b74c79490ec5ad0788d5a3e7d6babd", 0xb3}, {&(0x7f0000007340)="bdff41ed7a062e29ed5b89b1e233dc2fe6b989536d3be748df9c1b772fbbc0ab0b1c9c938075fbb54953c9a2b991d72916081ee1a14a5499c5b696717b5aa43e69ef9737d9cf4a672490919910d7c3b2408ebbaed31ef029869bdd6aa56382f0baa365fc1a68d6ae8867342af6c24ca463e4fe8a5342d0e70980d050ecdcbf6d58d7aa00e1331f02c6c1222f9fbed18afbe11e9e41a6c1b54c8fa4148390", 0x9e}], 0x4, &(0x7f0000007480)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14}}], 0x30}}, {{&(0x7f0000007500)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000075c0)=[{&(0x7f0000007540)="adc3a6c3a2672655664b5e19fda10009b36f0fdad790a09a043781189be2c3d4c8e93096a7a0b7e2d515503db59b6abc53e1da14db54", 0x36}], 0x1, &(0x7f0000007980)=ANY=[@ANYRES16, @ANYRESHEX, @ANYBLOB="cf690000ac1e0001000000001100000000000000540000000100000009000000000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="64010102ac1414aa0000000014000000000000000000000001000000050000000000000084000000000000000000000007000000440c08b1ffffffff00000003832bca0a01010064010100ac1414bb64010102e0000002ac1414aae00000017f00000164010102ffffffff0717c80000000000000000ffffffff0a010102ac14140b0089099af1daa3cfa20d01861a00f8ffff0009a32e3e5993c99e050b6d2981ff1fa2d3ea7f0000000000140000000000000000000000010000000080000000000000"], 0x110}}], 0x8, 0x4080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xfc, r5, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xe0, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xaf}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x100}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff696}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x736}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x73}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xee}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5a0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3ff}]}]}]}, 0xfc}}, 0x4000) 3.616227186s ago: executing program 0 (id=577): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[@ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, &(0x7f0000000000)) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) setresuid(0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo\x00') fchdir(r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x16}]}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = memfd_create(&(0x7f0000002280)='\xcaB\x89O\xb4\x80[\xe2`@', 0x0) write(r5, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d2246", 0x1d) syz_io_uring_setup(0x3b, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x92, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000200)) 3.389479884s ago: executing program 2 (id=578): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x25, 0x0, 0x3, "b43d3f54060000000000804324a500", 0x3131354f}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x2e4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x35, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x16}}, {@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private, @remote]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6}, 0x8) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r8}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, r8, 0x0, &(0x7f0000400000/0xc00000)=nil, 0xc00000}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e20, 0x4fa910bb, @mcast2, 0xf4}}}, &(0x7f0000000180)=0x84) 3.239884655s ago: executing program 4 (id=579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="d00000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0001000000200000b0001a8004006931d0e7c4b46844ea6deb6f16761c0004001c00200002801c00018008001b00490e000008001f000800000008001400040000000400070074000a80050008000f000000050008004000000014000700000000000000000000002f0000000000050008000600000014000700ff020000000000000000000000000001050008000e000048e1000700fe8000000000000000000000000000b914000700ff01000000000000000000000000000104001c0004001c0004000700"], 0xd0}}, 0x24040091) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x0}, 0x10, 0x81000) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x3, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000300)={0x0, 0xd, 0xd, "a3fc58d42c678e558d206c95a4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000540)={0x20, 0xa, 0xb5, "22c8def8fe32c86e4c302704a78581f6a35058b169c9689337f14774b123db62363babe68d25daeb45d3bc7b549e1ba60b79ffbe56650e8afe9abe7370a1d2f161826f75d0c2a37fc2d2793a1d1d74c6aa820b31a6f5959bae5df3c791b171d02aac51ea015c698503225b24800620f11813b7095152361cec4ff4e1dcc34413510a0db26ed15440ff0863c76e7278407ed7805c13bd4845bdbd439c07cf8252cc00d7a4b295bf848607c4aa97f1be60eb73fc87bc"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xbd}, &(0x7f0000000680)={0x20, 0x0, 0x80, {0x7e, "5a8eca83dfb976481480cb213b25338cb89b9c152c69c63b9e01f805a3f899c3db6fe7ab1d79d44612b620efbdcb1b856027d7d007c44c57230a864255839cc2a8847a408a287fdf7a8df829345bc4c64f1dba0353a89034d27a60d377556b8d09342f3d9abe05a89b4c964cd4fc78f4791934e347f6922da0a3cac40f3a"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x9}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x80, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6}]}, 0x80}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 3.239039265s ago: executing program 0 (id=580): chdir(0x0) sync() r0 = socket(0x1, 0x800, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0xa40c00, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000100)) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xfffffffffffffff5}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0xfffffffc}]}) openat$snapshot(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xec}}, 0x0) 2.6469801s ago: executing program 1 (id=581): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newsa={0x120, 0x10, 0xeac0e19b6999623b, 0x0, 0x0, {{@in6=@remote, @in=@remote}, {@in=@empty, 0x0, 0x2b}, @in=@private, {}, {}, {}, 0x0, 0x0, 0x2}, [@XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8}, @coaddr={0x14, 0xe, @in=@dev}, @mark={0xc}]}, 0x120}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0xfffffffffffffd2e}, 0x68) 2.299742684s ago: executing program 1 (id=582): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f90e24fc60", 0x14}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendmsg$TIPC_NL_MON_GET(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x240, r7, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffbff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x91d}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @empty, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xd6, @mcast2, 0xff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "cd49819838dc055f10746c59119b71c7e90e6a3e6861280fa93016d6b8cf"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2a}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xe342}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2a}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20000845}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = io_uring_setup(0x63d6, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS2(r9, 0x14, &(0x7f0000003480)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x20) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00', 0x20}) ioctl$UI_DEV_CREATE(r0, 0x5501) 2.076169382s ago: executing program 0 (id=583): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e"], 0x0) io_setup(0x589, &(0x7f0000000000)=0x0) io_submit(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) epoll_create(0x7) r5 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r5, &(0x7f00000000c0)) preadv(0xffffffffffffffff, &(0x7f0000001240)=[{&(0x7f0000000040)=""/18, 0x12}], 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004805}, 0x24000804) openat$vcsa(0xffffffffffffff9c, 0x0, 0x300, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x57c3, 0x80}) io_pgetevents(0x0, 0x4, 0x0, &(0x7f0000000280), 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.817651737s ago: executing program 2 (id=584): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0xfffffffffffffd2e}, 0x68) 1.690927407s ago: executing program 2 (id=585): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x0, 0x0}) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000180)) 1.586406826s ago: executing program 2 (id=586): shutdown(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1) syz_io_uring_setup(0x4cc4, &(0x7f0000000380)={0x0, 0xb16c, 0x0, 0xfffffffd, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000180)) socket$tipc(0x1e, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mmap(&(0x7f00007fd000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x8031, r0, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240), 0x208e24b) r3 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) 391.750004ms ago: executing program 2 (id=587): socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) 388.277066ms ago: executing program 4 (id=588): prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x400) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000), 0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x4c}}, 0x0) fsopen(&(0x7f0000000040)='proc\x00', 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 374.296406ms ago: executing program 3 (id=589): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0xb0, &(0x7f0000000200)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) fchdir(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f0000020540)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r3, &(0x7f00008c9fc4), 0x0, 0xfffffffffffffff7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000040)) r4 = dup3(r1, r3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000300)={0x200f}) get_mempolicy(0x0, 0x0, 0x9, &(0x7f0000ffd000/0x1000)=nil, 0xf) 247.576957ms ago: executing program 2 (id=590): syz_open_procfs(0x0, &(0x7f0000001080)='net/protocols\x00') socket$rds(0x15, 0x5, 0x0) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0xd5f, 0xffffffff, 0x8001, 0x2000, 0x1, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x1, 0xd, @void, @value, @void, @value}, 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) socket(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000080)=@known='user.incfs.size\x00') 0s ago: executing program 3 (id=591): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = io_uring_setup(0x3055, &(0x7f00000001c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfce1) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000300)) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000001840)="fd92", 0x2}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040341a02080000000000190902"], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 59864][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 231.336405][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 231.385598][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.419741][ T8] usb 4-1: Product: syz [ 231.435905][ T8] usb 4-1: Manufacturer: syz [ 231.440916][ T8] usb 4-1: SerialNumber: syz [ 231.829010][ T1113] hsr_slave_0: left promiscuous mode [ 231.840997][ T5282] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 231.861916][ T1113] hsr_slave_1: left promiscuous mode [ 231.878196][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.895272][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.949487][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.978954][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.019622][ T1113] veth1_macvtap: left promiscuous mode [ 232.036418][ T5282] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 232.051506][ T1113] veth0_macvtap: left promiscuous mode [ 232.057162][ T1113] veth1_vlan: left promiscuous mode [ 232.074843][ T5282] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 232.094418][ T1113] veth0_vlan: left promiscuous mode [ 232.103586][ T5282] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 232.113595][ T5282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.174420][ T5282] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 232.198424][ T5282] usb 3-1: invalid MIDI out EP 0 [ 232.308521][ T5237] udevd[5237]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.349495][ T5282] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 232.874841][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.372'. [ 233.115618][ T5241] Bluetooth: hci4: command tx timeout [ 233.343213][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 233.407482][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 233.678785][ T7597] syz.3.368 (7597) used greatest stack depth: 18896 bytes left [ 234.000440][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 234.089386][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 234.164279][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 234.201082][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.213663][ T8] cdc_ncm 4-1:1.0: bind() failure [ 234.225382][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 234.234408][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.257140][ T8] cdc_ncm 4-1:1.1: bind() failure [ 234.264323][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.292784][ T8] usb 4-1: USB disconnect, device number 24 [ 234.299170][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.321580][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.332569][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.389335][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.410361][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.425764][ T7548] bridge_slave_0: entered allmulticast mode [ 234.439803][ T7548] bridge_slave_0: entered promiscuous mode [ 234.458018][ T7395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.467785][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.498811][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.519929][ T7548] bridge_slave_1: entered allmulticast mode [ 234.546929][ T7548] bridge_slave_1: entered promiscuous mode [ 234.563959][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 234.576483][ T9] usbtmc 5-1:16.0: can't read capabilities [ 234.635781][ T9] usb 3-1: USB disconnect, device number 15 [ 234.758109][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.775237][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 234.805234][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.827459][ T8] usb 5-1: USB disconnect, device number 20 [ 234.984974][ T7548] team0: Port device team_slave_0 added [ 235.028625][ T7548] team0: Port device team_slave_1 added [ 235.059546][ T7395] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.160393][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 235.189895][ T5241] Bluetooth: hci4: command tx timeout [ 235.278644][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.285891][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.308767][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.315975][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.391925][ T9] usb 3-1: config 2 has an invalid interface number: 75 but max is 0 [ 235.425437][ T9] usb 3-1: config 2 has an invalid interface number: 76 but max is 0 [ 235.430691][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.450127][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.456093][ T9] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 235.525056][ T9] usb 3-1: config 2 has no interface number 0 [ 235.563774][ T7548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.579795][ T9] usb 3-1: config 2 has no interface number 1 [ 235.586317][ T7681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 235.595264][ T9] usb 3-1: config 2 interface 75 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 235.608308][ T7395] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.608335][ T7395] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.617942][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.617965][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.617995][ T7548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.709372][ T7685] netlink: 148 bytes leftover after parsing attributes in process `syz.4.378'. [ 235.749681][ T9] usb 3-1: config 2 interface 75 altsetting 2 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 235.769739][ T9] usb 3-1: config 2 interface 75 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 235.867275][ T9] usb 3-1: config 2 interface 75 altsetting 2 has 6 endpoint descriptors, different from the interface descriptor's value: 13 [ 235.893868][ T7395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.917363][ T9] usb 3-1: too many endpoints for config 2 interface 76 altsetting 209: 33, using maximum allowed: 30 [ 235.934899][ T7681] netlink: 'syz.4.378': attribute type 29 has an invalid length. [ 235.944397][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 235.994238][ T9] usb 3-1: config 2 interface 76 altsetting 209 has a duplicate endpoint with address 0x9, skipping [ 236.045846][ T9] usb 3-1: config 2 interface 76 altsetting 209 endpoint 0xF has an invalid bInterval 152, changing to 7 [ 236.063249][ T7548] hsr_slave_0: entered promiscuous mode [ 236.093302][ T7548] hsr_slave_1: entered promiscuous mode [ 236.112739][ T7548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.130027][ T7548] Cannot create hsr debugfs directory [ 236.190656][ T9] usb 3-1: config 2 interface 76 altsetting 209 has a duplicate endpoint with address 0x8, skipping [ 236.228100][ T9] usb 3-1: config 2 interface 76 altsetting 209 has 5 endpoint descriptors, different from the interface descriptor's value: 33 [ 236.269565][ T9] usb 3-1: config 2 interface 75 has no altsetting 0 [ 236.279366][ T9] usb 3-1: config 2 interface 76 has no altsetting 0 [ 236.310835][ T9] usb 3-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice= d.89 [ 236.330911][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.354668][ T9] usb 3-1: Product: à Š [ 236.358883][ T9] usb 3-1: Manufacturer: ௔å•ë‡ŽáŒ¥ä¹‡æ½§âº“ᦈïºì©±ä³ê¡¬ã¢Ÿè›¥à¹¡ì©“æ㉯ാ㡱ܞ뤧㠜뎒鹱뗃х讙è‰í‹“ᶀá·ä­´ë€â«¦ë„‰à­¾ä½¾æ«¦ê®£á¡ê˜¶á–µç®å´¼ç¯œã¿¾î©¸êˆšé™»î‚妃ﶚﳲìšä‘爥륨å˜êˆ•è• [ 236.400039][ T9] usb 3-1: SerialNumber: ≠[ 236.472157][ T7395] veth0_vlan: entered promiscuous mode [ 236.574419][ T7395] veth1_vlan: entered promiscuous mode [ 236.756641][ T7395] veth0_macvtap: entered promiscuous mode [ 236.842789][ T7395] veth1_macvtap: entered promiscuous mode [ 236.877982][ T5232] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 236.888195][ T7671] loop2: detected capacity change from 0 to 7 [ 236.903703][ T7671] Dev loop2: unable to read RDB block 7 [ 236.909478][ T7671] loop2: AHDI p1 p3 p4 [ 236.920342][ T7671] loop2: partition table partially beyond EOD, truncated [ 236.930900][ T7671] loop2: p1 start 2048 is beyond EOD, truncated [ 236.937276][ T7671] loop2: p3 size 16779293 extends beyond EOD, truncated [ 236.998467][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.048326][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.081924][ T5232] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.104821][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.148041][ T5232] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49199, setting to 1024 [ 237.177436][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.224144][ T5232] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 237.236859][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.254262][ T5232] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.269842][ T5241] Bluetooth: hci4: command tx timeout [ 237.273827][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.292083][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.323541][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.350839][ T7689] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 237.409442][ T5232] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 237.506262][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.551764][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.616752][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.748312][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.802191][ T7395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.829196][ T7395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.886481][ T7395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.075314][ T7395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.136024][ T7395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.162097][ T7395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.171138][ T7395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.183160][ T5232] usb 5-1: USB disconnect, device number 21 [ 238.228155][ T9] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 238.273055][ T9] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 238.314401][ T9] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 238.627679][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.652425][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.767646][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.817600][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.893439][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.903894][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.028390][ T7731] netlink: 112 bytes leftover after parsing attributes in process `syz.2.385'. [ 239.051252][ T7548] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.142228][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.159736][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.208152][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.216404][ T7548] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.227004][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.263918][ T7548] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.297784][ T52] bond0: (slave netdevsim0): Releasing backup interface [ 239.309199][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.321635][ T5232] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 239.325939][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.355056][ T7548] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.367572][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.377027][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.386841][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.401260][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.412811][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.423093][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 239.532452][ T5232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.593131][ T5232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.604486][ T5232] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 239.625780][ T5232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.700809][ T5232] usb 5-1: config 0 descriptor?? [ 239.717498][ T52] bridge_slave_1: left allmulticast mode [ 239.739780][ T52] bridge_slave_1: left promiscuous mode [ 239.751824][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.771362][ T52] bridge_slave_0: left allmulticast mode [ 239.777100][ T52] bridge_slave_0: left promiscuous mode [ 239.790104][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.122012][ T5232] usbhid 5-1:0.0: can't add hid device: -32 [ 240.130499][ T7730] input: syz1 as /devices/virtual/input/input12 [ 240.151939][ T5232] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 240.253987][ T5232] usb 5-1: USB disconnect, device number 22 [ 240.448655][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.467460][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.491313][ T52] bond0 (unregistering): Released all slaves [ 240.726842][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.936833][ T52] hsr_slave_0: left promiscuous mode [ 240.954679][ T52] hsr_slave_1: left promiscuous mode [ 241.011818][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.019390][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.068178][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.126925][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.155166][ T52] veth1_macvtap: left promiscuous mode [ 241.172195][ T52] veth0_macvtap: left promiscuous mode [ 241.179350][ T52] veth1_vlan: left promiscuous mode [ 241.209721][ T1849] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 241.220658][ T52] veth0_vlan: left promiscuous mode [ 241.369856][ T1849] usb 2-1: Using ep0 maxpacket: 8 [ 241.389536][ T1849] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.414078][ T1849] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.434724][ T1849] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31016, setting to 1024 [ 241.449758][ T1849] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 241.479722][ T1849] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.516033][ T5228] Bluetooth: hci2: command tx timeout [ 241.529009][ T1849] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 241.539403][ T1849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.789504][ T1849] usb 2-1: GET_CAPABILITIES returned 0 [ 241.796344][ T1849] usbtmc 2-1:16.0: can't read capabilities [ 242.062833][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.072049][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.081632][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.114924][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.126271][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.135383][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.144473][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.153562][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.170436][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.179579][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.190265][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.199377][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.208555][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.218738][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.227855][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.236941][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 242.791972][ T7783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.392'. [ 242.841454][ T52] team0 (unregistering): Port device team_slave_1 removed [ 242.945463][ T52] team0 (unregistering): Port device team_slave_0 removed [ 243.191309][ T5228] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 243.202306][ T5228] Bluetooth: hci0: Injecting HCI hardware error event [ 243.209293][ T5282] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 243.222674][ T5241] Bluetooth: hci0: hardware error 0x00 [ 243.443641][ T5282] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 243.453769][ T5282] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.510445][ T5282] usb 5-1: config 0 descriptor?? [ 243.595162][ T5228] Bluetooth: hci2: command tx timeout [ 243.750850][ T7786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.770943][ T7782] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 243.803408][ T7737] chnl_net:caif_netlink_parms(): no params data found [ 243.880063][ T7786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.911670][ T5281] usb 2-1: USB disconnect, device number 12 [ 243.939543][ T7785] netlink: 'syz.4.393': attribute type 1 has an invalid length. [ 244.008856][ T7548] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.168443][ T7785] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 244.212458][ T7785] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 244.417895][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.425305][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.487780][ T7786] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 244.549886][ T7786] bond1 (unregistering): Released all slaves [ 244.564681][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 244.575723][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 244.603634][ T7737] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.635414][ T7737] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.650008][ T7737] bridge_slave_0: entered allmulticast mode [ 244.660730][ T5282] mxuport 5-1:0.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 244.673913][ T7737] bridge_slave_0: entered promiscuous mode [ 244.680539][ T5282] mxuport 5-1:0.0: probe with driver mxuport failed with error -5 [ 244.694809][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.701975][ T6149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.713157][ T5282] usb 5-1: USB disconnect, device number 23 [ 244.736733][ T7737] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.750977][ T7737] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.768827][ T7737] bridge_slave_1: entered allmulticast mode [ 244.790415][ T7737] bridge_slave_1: entered promiscuous mode [ 244.874835][ T7737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.895579][ T7737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.159029][ T7737] team0: Port device team_slave_0 added [ 245.213696][ T7737] team0: Port device team_slave_1 added [ 245.350202][ T5241] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 245.383763][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.414788][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.482217][ T7737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.513907][ T7737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.531041][ T7737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.574949][ T7737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.591847][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.398'. [ 245.670606][ T5241] Bluetooth: hci2: command tx timeout [ 245.712477][ T7737] hsr_slave_0: entered promiscuous mode [ 245.721792][ T7737] hsr_slave_1: entered promiscuous mode [ 245.739408][ T7737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.750681][ T7737] Cannot create hsr debugfs directory [ 245.772973][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.029847][ T5232] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 246.080495][ T7833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.135287][ T7548] veth0_vlan: entered promiscuous mode [ 246.207277][ T5232] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 246.237239][ T5232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.256056][ T5232] usb 5-1: Product: syz [ 246.261249][ T5232] usb 5-1: Manufacturer: syz [ 246.265936][ T5232] usb 5-1: SerialNumber: syz [ 246.284562][ T7548] veth1_vlan: entered promiscuous mode [ 246.300964][ T5232] usb 5-1: config 0 descriptor?? [ 246.661458][ T7548] veth0_macvtap: entered promiscuous mode [ 246.682263][ T7548] veth1_macvtap: entered promiscuous mode [ 246.747562][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.770111][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.799794][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.819862][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.846924][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.871871][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.891424][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.936365][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.941064][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.970098][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.999857][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.031096][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.041891][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.052742][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.080912][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.081428][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.173087][ T7548] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.208534][ T7548] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.233267][ T7548] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.252084][ T7548] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.408045][ T7737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.495881][ T7737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.565565][ T7737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.586257][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.610687][ T7737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.617546][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.718180][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.727355][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.750714][ T5241] Bluetooth: hci2: command tx timeout [ 247.757473][ T5232] usb 5-1: Firmware version (0.0) predates our first public release. [ 247.807183][ T5232] usb 5-1: Please update to version 0.2 or newer [ 247.913862][ T5232] usb 5-1: USB disconnect, device number 24 [ 248.251263][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 248.279827][ T7865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 248.337905][ T7865] sit1: entered allmulticast mode [ 248.370337][ T7737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.952988][ T7737] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.409931][ T747] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.417120][ T747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.448408][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.455626][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.712608][ T5285] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 249.780570][ T7737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.869998][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 249.876999][ T5285] usb 1-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice=47.b7 [ 249.906929][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.937211][ T7737] veth0_vlan: entered promiscuous mode [ 249.951109][ T5285] usb 1-1: config 0 descriptor?? [ 249.975364][ T5285] usb 1-1: selecting invalid altsetting 1 [ 249.996435][ T7737] veth1_vlan: entered promiscuous mode [ 250.003021][ T5285] snd-usb-caiaq 1-1:0.0: can't set alt interface. [ 250.029531][ T5285] usb 1-1: unable to init card! (ret=-5) [ 250.050078][ T938] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 250.057855][ T5285] snd-usb-caiaq 1-1:0.0: probe with driver snd-usb-caiaq failed with error -5 [ 250.137550][ T7737] veth0_macvtap: entered promiscuous mode [ 250.157672][ T7737] veth1_macvtap: entered promiscuous mode [ 250.215145][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.241783][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.257259][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.260460][ T938] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 250.278025][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.305656][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.322317][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.334291][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.359050][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.386894][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.439056][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.470753][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.489800][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.518504][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 250.518627][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.546718][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.559060][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.574888][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.596352][ T7737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.609199][ T7737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.634070][ T7737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.658908][ T7737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.689308][ T7737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.712810][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 250.733211][ T7737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.748897][ T7737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.787565][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 250.851915][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 250.923702][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 250.993209][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 251.077533][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.099811][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.125711][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.142949][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.202141][ T6149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.205681][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 251.227911][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 251.241454][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.250646][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.260442][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 251.265546][ T6149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.283343][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 251.378449][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.413421][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.438535][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 251.438975][ T5282] usb 1-1: USB disconnect, device number 14 [ 251.523103][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 251.577078][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.619828][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.660096][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 251.698287][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 251.708294][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 251.814569][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.862995][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 251.881344][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 251.893513][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 251.949968][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.978543][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 252.007433][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 48, changing to 9 [ 252.033671][ T938] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 8326, setting to 1024 [ 252.089089][ T938] usb 2-1: config 0 interface 0 has no altsetting 0 [ 252.118615][ T938] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 252.153457][ T938] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 252.185769][ T938] usb 2-1: Product: syz [ 252.204740][ T938] usb 2-1: Manufacturer: syz [ 252.226044][ T938] usb 2-1: SerialNumber: syz [ 252.278679][ T938] usb 2-1: config 0 descriptor?? [ 252.346527][ T938] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 252.928542][ T7942] netlink: 18 bytes leftover after parsing attributes in process `syz.1.408'. [ 252.986338][ T7942] bridge0: entered promiscuous mode [ 253.020420][ T7942] bridge0: left promiscuous mode [ 253.050327][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 253.060439][ T5232] usb 2-1: USB disconnect, device number 13 [ 253.074189][ T5232] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 253.809777][ T5282] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 253.969722][ T5282] usb 4-1: Using ep0 maxpacket: 16 [ 253.982670][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.008438][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.036200][ T5282] usb 4-1: New USB device found, idVendor=2087, idProduct=0a01, bcdDevice= 0.00 [ 254.058205][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.086678][ T5282] usb 4-1: config 0 descriptor?? [ 254.188107][ T7976] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 254.849347][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.4.424'. [ 254.877844][ T8002] loop2: detected capacity change from 0 to 7 [ 254.907651][ T8002] Dev loop2: unable to read RDB block 7 [ 254.954214][ T8002] loop2: unable to read partition table [ 254.997338][ T8007] netlink: 'syz.2.426': attribute type 30 has an invalid length. [ 255.038070][ T8002] loop2: partition table beyond EOD, truncated [ 255.087606][ T8007] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 255.130810][ T8002] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 255.203874][ T8007] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 255.382088][ T8013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.426'. [ 255.440685][ T8013] netlink: 'syz.2.426': attribute type 30 has an invalid length. [ 255.992179][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.999469][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.582757][ T5282] usbhid 4-1:0.0: can't add hid device: -71 [ 256.599362][ T5282] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 256.632557][ T5282] usb 4-1: USB disconnect, device number 25 [ 256.763701][ T8051] netlink: 'syz.3.432': attribute type 12 has an invalid length. [ 256.886034][ T8056] block device autoloading is deprecated and will be removed. [ 256.901904][ T8056] syz.4.433: attempt to access beyond end of device [ 256.901904][ T8056] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 256.933870][ T5281] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 256.940349][ T8058] netlink: 132 bytes leftover after parsing attributes in process `syz.0.434'. [ 257.089776][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 257.099392][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 257.115977][ T5281] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 257.125913][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.145634][ T5281] usb 2-1: config 0 descriptor?? [ 257.157519][ T5281] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 257.622325][ T29] audit: type=1326 audit(1727085702.496:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.653173][ T29] audit: type=1326 audit(1727085702.496:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.683305][ T29] audit: type=1326 audit(1727085702.516:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.713814][ T29] audit: type=1326 audit(1727085702.516:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.739072][ T29] audit: type=1326 audit(1727085702.516:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.798955][ T29] audit: type=1326 audit(1727085702.516:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.841059][ T29] audit: type=1326 audit(1727085702.516:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.865807][ T29] audit: type=1326 audit(1727085702.516:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.898872][ T29] audit: type=1326 audit(1727085702.516:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 257.933669][ T29] audit: type=1326 audit(1727085702.516:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8076 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb89f7def9 code=0x7ffc0000 [ 258.110451][ T1113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.252328][ T1113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.447511][ T1113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.623557][ T1113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.708566][ T5228] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.725391][ T5228] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.735958][ T5228] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.744204][ T5228] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.768205][ T5228] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.780214][ T5228] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.103877][ T1113] bridge_slave_1: left allmulticast mode [ 259.134892][ T1113] bridge_slave_1: left promiscuous mode [ 259.156624][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.183429][ T1113] bridge_slave_0: left allmulticast mode [ 259.191110][ T1113] bridge_slave_0: left promiscuous mode [ 259.196883][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.535513][ T46] usb 2-1: USB disconnect, device number 14 [ 259.607829][ T8088] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 259.620079][ T8088] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 259.880870][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.908459][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.937973][ T1113] bond0 (unregistering): Released all slaves [ 260.369396][ T8101] netlink: 'syz.4.446': attribute type 4 has an invalid length. [ 260.799787][ T8118] netlink: 64 bytes leftover after parsing attributes in process `syz.1.449'. [ 260.889084][ T5228] Bluetooth: hci2: command tx timeout [ 260.941268][ T8085] chnl_net:caif_netlink_parms(): no params data found [ 261.032195][ T8118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 261.349991][ T1113] hsr_slave_0: left promiscuous mode [ 261.386756][ T1113] hsr_slave_1: left promiscuous mode [ 261.392626][ T5294] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 261.432103][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.451121][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.467459][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.483918][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.497885][ T5241] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 261.509799][ T5241] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 261.517700][ T5241] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 261.525769][ T5241] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 261.532813][ T1113] veth1_macvtap: left promiscuous mode [ 261.532885][ T1113] veth0_macvtap: left promiscuous mode [ 261.533022][ T1113] veth1_vlan: left promiscuous mode [ 261.533138][ T1113] veth0_vlan: left promiscuous mode [ 261.564019][ T5241] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 261.572292][ T5241] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 261.580333][ T5294] usb 5-1: Using ep0 maxpacket: 32 [ 261.587312][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.629986][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.648077][ T5294] usb 5-1: New USB device found, idVendor=046d, idProduct=c714, bcdDevice= 0.00 [ 261.660053][ T5281] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 261.666550][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.710462][ T5294] usb 5-1: config 0 descriptor?? [ 261.821389][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 261.830275][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.849187][ T5281] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 261.858634][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.875832][ T5281] usb 1-1: config 0 descriptor?? [ 261.884578][ T5281] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 262.016068][ T5294] usbhid 5-1:0.0: can't add hid device: -71 [ 262.022874][ T5294] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 262.041900][ T5294] usb 5-1: USB disconnect, device number 25 [ 262.232323][ T8141] trusted_key: encrypted_key: insufficient parameters specified [ 262.431438][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 262.546790][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 262.602371][ T5281] gspca_vc032x: reg_w err -110 [ 262.627681][ T5281] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 262.949970][ T5228] Bluetooth: hci2: command tx timeout [ 263.624779][ T8141] netlink: 3 bytes leftover after parsing attributes in process `syz.1.456'. [ 263.643502][ T8141] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 263.660386][ T8141] macsec1: entered allmulticast mode [ 263.665937][ T8141] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 263.685918][ T8141] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 263.698753][ T8141] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 263.706114][ T5228] Bluetooth: hci0: command tx timeout [ 263.816306][ T8085] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.847517][ T8085] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.886717][ T8085] bridge_slave_0: entered allmulticast mode [ 263.922428][ T8085] bridge_slave_0: entered promiscuous mode [ 263.988997][ T8085] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.044624][ T8085] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.072736][ T8085] bridge_slave_1: entered allmulticast mode [ 264.102306][ T8085] bridge_slave_1: entered promiscuous mode [ 264.292445][ T8085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.348664][ T8085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.668388][ T5232] usb 1-1: USB disconnect, device number 15 [ 264.707254][ T8085] team0: Port device team_slave_0 added [ 264.926524][ T8085] team0: Port device team_slave_1 added [ 265.040752][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.059773][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.060673][ T5228] Bluetooth: hci2: command tx timeout [ 265.243459][ T8085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.342808][ T8182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.425123][ T8085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.456726][ T8182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.470671][ T8085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.542981][ T8085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.753784][ T5228] Bluetooth: hci0: command tx timeout [ 265.935760][ T1113] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.056934][ T8138] chnl_net:caif_netlink_parms(): no params data found [ 266.161254][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 266.207744][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 266.259888][ T8192] tc_dump_action: action bad kind [ 266.415129][ T1113] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.586444][ T8085] hsr_slave_0: entered promiscuous mode [ 266.620627][ T8085] hsr_slave_1: entered promiscuous mode [ 266.641501][ T5285] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 266.655066][ T8085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.692430][ T8085] Cannot create hsr debugfs directory [ 266.864382][ T5285] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 266.896026][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.917987][ T1113] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.949894][ T5285] usb 1-1: config 0 descriptor?? [ 266.970035][ T5285] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 267.189904][ T5228] Bluetooth: hci2: command tx timeout [ 267.383744][ T5285] gp8psk: usb in 128 operation failed. [ 267.394553][ T5285] gp8psk: usb in 137 operation failed. [ 267.402605][ T5285] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 267.423618][ T5285] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 267.480701][ T1113] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.520238][ T5285] usb 1-1: USB disconnect, device number 16 [ 267.784978][ T8203] dvmrp0: entered allmulticast mode [ 267.821130][ T8204] dvmrp1: entered allmulticast mode [ 267.829956][ T5228] Bluetooth: hci0: command tx timeout [ 268.033882][ T8138] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.047899][ T8138] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.088782][ T8138] bridge_slave_0: entered allmulticast mode [ 268.101036][ T8138] bridge_slave_0: entered promiscuous mode [ 268.167305][ T8138] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.181206][ T5232] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 268.229051][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.269982][ T8138] bridge_slave_1: entered allmulticast mode [ 268.282063][ T8138] bridge_slave_1: entered promiscuous mode [ 268.368797][ T5232] usb 5-1: config index 0 descriptor too short (expected 4114, got 18) [ 268.453599][ T5232] usb 5-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 268.496734][ T5232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.521815][ T8138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.532364][ T5232] usb 5-1: Product: syz [ 268.556599][ T5232] usb 5-1: Manufacturer: syz [ 268.589715][ T5232] usb 5-1: SerialNumber: syz [ 268.615948][ T5232] usb 5-1: config 0 descriptor?? [ 268.708047][ T8138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.144202][ T8200] dvmrp0: left allmulticast mode [ 269.149487][ T8200] dvmrp1: left allmulticast mode [ 269.488459][ T8138] team0: Port device team_slave_0 added [ 269.734568][ T1113] bridge_slave_1: left allmulticast mode [ 269.743349][ T1113] bridge_slave_1: left promiscuous mode [ 269.782029][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.831831][ T1113] bridge_slave_0: left allmulticast mode [ 269.848566][ T1113] bridge_slave_0: left promiscuous mode [ 269.867305][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.910578][ T5228] Bluetooth: hci0: command tx timeout [ 270.005476][ T8217] delete_channel: no stack [ 270.584844][ T5232] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 270.651199][ T5232] asix 5-1:0.0: probe with driver asix failed with error -71 [ 270.718027][ T5232] usb 5-1: USB disconnect, device number 26 [ 271.158889][ T1113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.175840][ T1113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.187603][ T1113] bond0 (unregistering): Released all slaves [ 271.211299][ T8138] team0: Port device team_slave_1 added [ 271.573095][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.618902][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.675898][ T8138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.706742][ T8138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.721325][ T8245] kvm: kvm [8244]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 271.726864][ T8138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.766260][ T8138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.062677][ T1113] hsr_slave_0: left promiscuous mode [ 272.085666][ T1113] hsr_slave_1: left promiscuous mode [ 272.113469][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.131475][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.171197][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.199913][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.267710][ T1113] veth1_macvtap: left promiscuous mode [ 272.305947][ T8261] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 272.319742][ T1113] veth0_macvtap: left promiscuous mode [ 272.334234][ T1113] veth1_vlan: left promiscuous mode [ 272.364319][ T1113] veth0_vlan: left promiscuous mode [ 272.469787][ T46] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 272.680838][ T46] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 272.732422][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.798208][ T46] usb 2-1: Product: syz [ 272.819211][ T46] usb 2-1: Manufacturer: syz [ 272.824864][ T46] usb 2-1: SerialNumber: syz [ 272.845725][ T46] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 272.873816][ T5285] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 273.670678][ T8283] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 273.729365][ T8283] kvm: pic: level sensitive irq not supported [ 273.729910][ T8283] kvm: pic: non byte read [ 273.756466][ T8283] kvm: pic: level sensitive irq not supported [ 273.756618][ T8283] kvm: pic: non byte read [ 273.768585][ T8283] kvm: pic: level sensitive irq not supported [ 273.768832][ T8283] kvm: pic: non byte read [ 273.989841][ T5285] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 274.038096][ T1113] team0 (unregistering): Port device team_slave_1 removed [ 274.060613][ T5285] ath9k_htc: Failed to initialize the device [ 274.157378][ T5285] usb 2-1: ath9k_htc: USB layer deinitialized [ 274.220554][ T1113] team0 (unregistering): Port device team_slave_0 removed [ 275.153914][ T5232] usb 2-1: USB disconnect, device number 15 [ 275.399499][ T8138] hsr_slave_0: entered promiscuous mode [ 275.430347][ T8138] hsr_slave_1: entered promiscuous mode [ 275.446767][ T8138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.455215][ T8138] Cannot create hsr debugfs directory [ 275.565011][ T8296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.579765][ T8296] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.711232][ T8296] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.756248][ T8296] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.768784][ T8296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.783970][ T8304] fuse: Bad value for 'fd' [ 275.787696][ T8085] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 275.802419][ T8085] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 275.861978][ T8296] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 275.894924][ T8085] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 275.902446][ T8296] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 275.910554][ T8296] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.913318][ T8085] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 275.967094][ T8296] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 275.980548][ T8296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.986813][ T8296] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 276.078158][ T8296] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 276.125884][ T8296] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 276.132889][ T8296] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 276.155916][ T8296] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 276.348089][ T8085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.408342][ T8085] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.419807][ T5281] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 276.419887][ T5232] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 276.453887][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.461194][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.547727][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.554977][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.570836][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 276.578119][ T5281] usb 1-1: unable to get BOS descriptor or descriptor too short [ 276.589078][ T5281] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 276.599804][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 276.602563][ T5281] usb 1-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config [ 276.632703][ T5232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.648626][ T5232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.667663][ T5281] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 276.679335][ T5232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.711119][ T5281] usb 1-1: config 1 has no interface number 1 [ 276.729266][ T5281] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 276.735130][ T5232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.774959][ T5281] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.816322][ T5281] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.819641][ T5232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.836485][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.861741][ T8138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.879260][ T5281] usb 1-1: Product: syz [ 276.885768][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.895646][ T5281] usb 1-1: Manufacturer: syz [ 276.904101][ T8138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.929250][ T5281] usb 1-1: SerialNumber: syz [ 276.934656][ T8138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.972872][ T8138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 277.029256][ T8085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.140868][ T5232] usb 2-1: GET_CAPABILITIES returned 0 [ 277.146511][ T5232] usbtmc 2-1:16.0: can't read capabilities [ 277.244638][ T5281] usb 1-1: USB disconnect, device number 17 [ 277.297300][ T5248] udevd[5248]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.316302][ T8085] veth0_vlan: entered promiscuous mode [ 277.375304][ T1849] usb 2-1: USB disconnect, device number 16 [ 277.432424][ T8085] veth1_vlan: entered promiscuous mode [ 277.505141][ T8138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.558227][ T8138] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.587427][ T8085] veth0_macvtap: entered promiscuous mode [ 277.593400][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 277.602897][ T5228] Bluetooth: hci3: Opcode 0x2046 failed: -110 [ 277.635496][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.642636][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.671794][ T8085] veth1_macvtap: entered promiscuous mode [ 277.687512][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.694644][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.792248][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.806610][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.829911][ T5228] Bluetooth: hci1: command 0x0c1a tx timeout [ 277.839981][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.864318][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.906666][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.917627][ T5228] Bluetooth: hci4: command 0x0c1a tx timeout [ 277.984209][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.994287][ T5228] Bluetooth: hci2: command 0x0c1a tx timeout [ 278.057684][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.149465][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.160147][ T5228] Bluetooth: hci0: command 0x0c1a tx timeout [ 278.175200][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.190965][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.202347][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.203319][ T8085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.203661][ T8085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.205830][ T8085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.225498][ T8085] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.225535][ T8085] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.225563][ T8085] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.225589][ T8085] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.243626][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 278.249892][ T5281] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 278.332964][ T8138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.427243][ T8138] veth0_vlan: entered promiscuous mode [ 278.441529][ T8138] veth1_vlan: entered promiscuous mode [ 278.451630][ T5281] usb 1-1: config 0 has an invalid interface number: 213 but max is 0 [ 278.466633][ T5281] usb 1-1: config 0 has no interface number 0 [ 278.471441][ T8138] veth0_macvtap: entered promiscuous mode [ 278.482848][ T8138] veth1_macvtap: entered promiscuous mode [ 278.487029][ T5281] usb 1-1: config 0 interface 213 altsetting 255 bulk endpoint 0x6 has invalid maxpacket 1023 [ 278.500601][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.511133][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.521168][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.531983][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.542355][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.553103][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.559954][ T5281] usb 1-1: config 0 interface 213 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 32 [ 278.563379][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.584510][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.596072][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.607307][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.614645][ T5281] usb 1-1: config 0 interface 213 has no altsetting 0 [ 278.617806][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.634839][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.645507][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.656116][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.666984][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.677271][ T8138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.688166][ T8138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.693102][ T5281] usb 1-1: New USB device found, idVendor=10c4, idProduct=8066, bcdDevice=ed.0c [ 278.699616][ T8138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.743012][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.797718][ T8138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.825839][ T5281] usb 1-1: Product: syz [ 278.828318][ T8138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.855658][ T5281] usb 1-1: Manufacturer: syz [ 278.865061][ T5281] usb 1-1: SerialNumber: syz [ 278.870720][ T8138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.879469][ T8138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.887106][ T5281] usb 1-1: config 0 descriptor?? [ 278.896171][ T8325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.912712][ T8325] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 279.002189][ T5281] cp210x 1-1:0.213: cp210x converter detected [ 279.068846][ T6149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.151165][ T6149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.162412][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.275322][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.314518][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.324737][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.345060][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.378679][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.421064][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.436299][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.491956][ T8325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.520244][ T8325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.558406][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.588413][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.611850][ T5294] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 279.621564][ T5281] cp210x 1-1:0.213: failed to get vendor val 0x370b size 1: -71 [ 279.629298][ T5281] cp210x 1-1:0.213: querying part number failed [ 279.646324][ T5281] usb 1-1: cp210x converter now attached to ttyUSB0 [ 279.681375][ T5228] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.687745][ T5281] usb 1-1: USB disconnect, device number 18 [ 279.716171][ T5281] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.733113][ T5281] cp210x 1-1:0.213: device disconnected [ 279.819825][ T5294] usb 2-1: Using ep0 maxpacket: 32 [ 279.836480][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.886169][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.909807][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.916000][ T5294] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 279.925610][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.941015][ T5294] usb 2-1: config 0 descriptor?? [ 279.971603][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.452'. [ 279.993720][ T5241] Bluetooth: hci4: command 0x0c1a tx timeout [ 280.069976][ T5241] Bluetooth: hci2: command 0x0c1a tx timeout [ 280.081771][ T8354] random: crng reseeded on system resumption [ 280.229861][ T5241] Bluetooth: hci0: command 0x0c1a tx timeout [ 280.369618][ T5294] kye 0003:0458:4018.0006: item fetching failed at offset 0/2 [ 280.388924][ T5294] kye 0003:0458:4018.0006: parse failed [ 280.411375][ T5294] kye 0003:0458:4018.0006: probe with driver kye failed with error -22 [ 280.617075][ T5285] usb 2-1: USB disconnect, device number 17 [ 281.301331][ T8354] kAFS: unparsable volume name [ 281.310785][ T8386] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 281.317522][ T8386] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.330398][ T8386] vhci_hcd vhci_hcd.0: Device attached [ 281.569806][ T5285] usb 17-1: new low-speed USB device number 2 using vhci_hcd [ 281.619825][ T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 281.709700][ T938] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 281.749743][ T5241] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.785868][ T46] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 281.815710][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.860357][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 281.871051][ T938] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 281.886782][ T46] usb 5-1: Product: syz [ 281.890691][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.900150][ T46] usb 5-1: Manufacturer: syz [ 281.915099][ T938] usb 2-1: Product: syz [ 281.915817][ T46] usb 5-1: SerialNumber: syz [ 281.930124][ T938] usb 2-1: Manufacturer: syz [ 281.942794][ T938] usb 2-1: SerialNumber: syz [ 281.973149][ T46] usb 5-1: config 0 descriptor?? [ 281.990201][ T5241] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.996637][ T938] usb 2-1: config 0 descriptor?? [ 282.065971][ T46] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 027 [ 282.080575][ T5241] Bluetooth: hci4: command 0x0c1a tx timeout [ 282.149989][ T5241] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.218828][ T938] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 282.320311][ T5241] Bluetooth: hci0: command 0x0c1a tx timeout [ 282.354149][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.400743][ T5241] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 282.580524][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.788316][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.955475][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.981088][ T46] (null): failure setting delay to 10us [ 282.986910][ T46] i2c-tiny-usb 5-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 283.023445][ T46] usb 5-1: USB disconnect, device number 27 [ 283.125366][ T8387] vhci_hcd: connection reset by peer [ 283.149449][ T747] vhci_hcd: stop threads [ 283.165073][ T747] vhci_hcd: release socket [ 283.195403][ T747] vhci_hcd: disconnect device [ 283.352014][ T52] bridge_slave_1: left allmulticast mode [ 283.357777][ T52] bridge_slave_1: left promiscuous mode [ 283.384996][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.429308][ T52] bridge_slave_0: left allmulticast mode [ 283.455903][ T52] bridge_slave_0: left promiscuous mode [ 283.474955][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.567236][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.579287][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.596405][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.612018][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.619951][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.627323][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.042432][ T938] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 284.076229][ T938] usb 2-1: USB disconnect, device number 18 [ 284.649414][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.741901][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.800886][ T52] bond0 (unregistering): Released all slaves [ 285.078617][ T8423] chnl_net:caif_netlink_parms(): no params data found [ 285.128392][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 285.128411][ T29] audit: type=1326 audit(1727085729.996:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.173922][ T29] audit: type=1326 audit(1727085729.996:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.233522][ T29] audit: type=1326 audit(1727085729.996:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.255465][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.262229][ T29] audit: type=1326 audit(1727085729.996:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.288307][ T29] audit: type=1326 audit(1727085729.996:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.310389][ T29] audit: type=1326 audit(1727085729.996:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.333033][ T29] audit: type=1326 audit(1727085729.996:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.354943][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.361744][ T29] audit: type=1326 audit(1727085729.996:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.383782][ T29] audit: type=1326 audit(1727085729.996:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.405672][ C0] vkms_vblank_simulate: vblank timer overrun [ 285.412001][ T29] audit: type=1326 audit(1727085729.996:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.1.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdc17def9 code=0x50000 [ 285.679872][ T5241] Bluetooth: hci0: command tx timeout [ 285.909147][ T8423] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.931807][ T8423] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.017506][ T8423] bridge_slave_0: entered allmulticast mode [ 286.049676][ T8423] bridge_slave_0: entered promiscuous mode [ 286.091064][ T8423] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.108337][ T8423] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.115791][ T8423] bridge_slave_1: entered allmulticast mode [ 286.122966][ T8423] bridge_slave_1: entered promiscuous mode [ 286.265403][ T8423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.279190][ T8423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.362825][ T52] hsr_slave_0: left promiscuous mode [ 286.372083][ T52] hsr_slave_1: left promiscuous mode [ 286.379109][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.387959][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.409778][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.417214][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.506076][ T52] veth1_macvtap: left promiscuous mode [ 286.572834][ T52] veth0_macvtap: left promiscuous mode [ 286.578505][ T52] veth1_vlan: left promiscuous mode [ 286.586372][ T5241] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 286.595196][ T5241] Bluetooth: hci3: Injecting HCI hardware error event [ 286.604372][ T5241] Bluetooth: hci3: hardware error 0x00 [ 286.609810][ T52] veth0_vlan: left promiscuous mode [ 286.699783][ T5285] vhci_hcd: vhci_device speed not set [ 287.749738][ T5228] Bluetooth: hci0: command tx timeout [ 288.017202][ T52] team0 (unregistering): Port device team_slave_1 removed [ 288.040403][ T8491] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 288.145710][ T52] team0 (unregistering): Port device team_slave_0 removed [ 288.160698][ T8489] kvm: pic: level sensitive irq not supported [ 288.160761][ T8489] kvm: pic: non byte read [ 288.184940][ T8489] kvm: pic: level sensitive irq not supported [ 288.185085][ T8489] kvm: pic: non byte read [ 288.237157][ T8489] kvm: pic: level sensitive irq not supported [ 288.239130][ T8489] kvm: pic: non byte read [ 288.353961][ T8489] kvm: pic: level sensitive irq not supported [ 288.354941][ T8489] kvm: pic: non byte read [ 288.420150][ T8489] kvm: pic: level sensitive irq not supported [ 288.421100][ T8489] kvm: pic: non byte read [ 288.640645][ T5241] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 289.300145][ T8503] netlink: 16 bytes leftover after parsing attributes in process `syz.1.504'. [ 289.689905][ T8] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 289.829820][ T5228] Bluetooth: hci0: command tx timeout [ 289.932494][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 289.961293][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 290.015455][ T8] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 290.057318][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.080327][ T8] usb 5-1: Product: syz [ 290.084548][ T8] usb 5-1: Manufacturer: syz [ 290.089173][ T8] usb 5-1: SerialNumber: syz [ 290.158548][ T8] usb 5-1: config 0 descriptor?? [ 290.185336][ T8423] team0: Port device team_slave_0 added [ 290.197080][ T8] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 290.286463][ T8423] team0: Port device team_slave_1 added [ 290.421273][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.430500][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.434502][ T5285] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 290.497829][ T8423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.524552][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 290.534218][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 290.539341][ T8423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.553380][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 290.562904][ T8423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.588852][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.596356][ T8423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.611004][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 290.618753][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 290.629862][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 290.689682][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 290.708269][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 290.726602][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 290.750912][ T5285] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff51, bcdDevice=a9.fa [ 290.769633][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.777831][ T5285] usb 2-1: Product: syz [ 290.821714][ T5285] usb 2-1: Manufacturer: syz [ 290.826361][ T5285] usb 2-1: SerialNumber: syz [ 290.878085][ T5285] usb 2-1: config 0 descriptor?? [ 290.893600][ T5285] option 2-1:0.0: GSM modem (1-port) converter detected [ 291.017175][ T8423] hsr_slave_0: entered promiscuous mode [ 291.052718][ T8423] hsr_slave_1: entered promiscuous mode [ 291.094304][ T8423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.133066][ T8520] netlink: 'syz.1.507': attribute type 3 has an invalid length. [ 291.168565][ T8] usb 2-1: USB disconnect, device number 19 [ 291.179735][ T8] option 2-1:0.0: device disconnected [ 291.200806][ T8423] Cannot create hsr debugfs directory [ 291.272061][ T62] usb 5-1: Failed to submit usb control message: -110 [ 291.303697][ T62] usb 5-1: unable to send the bmi data to the device: -110 [ 291.324134][ T62] usb 5-1: unable to get target info from device [ 291.335733][ T62] usb 5-1: could not get target info (-110) [ 291.350283][ T62] usb 5-1: could not probe fw (-110) [ 291.427708][ T5228] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 291.446109][ T5228] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 291.456036][ T5228] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 291.468119][ T5228] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 291.477698][ T5228] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 291.490891][ T5228] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 291.901184][ T8527] chnl_net:caif_netlink_parms(): no params data found [ 291.913722][ T5228] Bluetooth: hci0: command tx timeout [ 292.273583][ T5317] usb 5-1: USB disconnect, device number 28 [ 292.313582][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.623729][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.711229][ T5228] Bluetooth: hci5: command tx timeout [ 292.853728][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.890829][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.1.509'. [ 292.934328][ T8552] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 293.026029][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.087319][ T8527] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.101557][ T8527] bridge_slave_0: entered allmulticast mode [ 293.141999][ T8527] bridge_slave_0: entered promiscuous mode [ 293.151410][ T8527] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.176935][ T8527] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.188048][ T8527] bridge_slave_1: entered allmulticast mode [ 293.197679][ T8527] bridge_slave_1: entered promiscuous mode [ 293.210995][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.1.509'. [ 293.299962][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.454355][ T8536] chnl_net:caif_netlink_parms(): no params data found [ 293.505094][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.511'. [ 293.523115][ T5228] Bluetooth: hci6: command tx timeout [ 293.586091][ T8527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.643368][ T8527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.827052][ T8527] team0: Port device team_slave_0 added [ 293.841779][ T938] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 293.909876][ T8527] team0: Port device team_slave_1 added [ 293.957760][ T8423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.967837][ T8423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 294.019941][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 294.029088][ T938] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 294.038008][ T938] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 294.048094][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 294.059080][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.069373][ T938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 294.092358][ T938] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.114652][ T938] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 294.127141][ T8423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 294.136996][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.168580][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.184122][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.184823][ T938] usb 2-1: config 0 descriptor?? [ 294.220420][ T8527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.256414][ T8527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.277270][ T8527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.313162][ T8527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.335208][ T8585] xt_l2tp: invalid flags combination: c [ 294.347377][ T52] bridge_slave_1: left allmulticast mode [ 294.354901][ T52] bridge_slave_1: left promiscuous mode [ 294.368520][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.387924][ T52] bridge_slave_0: left allmulticast mode [ 294.397046][ T52] bridge_slave_0: left promiscuous mode [ 294.407788][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.448495][ T938] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 294.509164][ T938] usb 2-1: USB disconnect, device number 20 [ 294.542582][ T938] usblp0: removed [ 294.790363][ T5228] Bluetooth: hci5: command tx timeout [ 295.009774][ T938] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 295.084969][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.097545][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.123301][ T52] bond0 (unregistering): Released all slaves [ 295.158063][ T8423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.191067][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 295.216895][ T938] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 295.241297][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.276885][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.286978][ T938] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 295.312215][ T8536] bridge_slave_0: entered allmulticast mode [ 295.319009][ T8536] bridge_slave_0: entered promiscuous mode [ 295.326827][ T938] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 295.338199][ T938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 295.355274][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.365613][ T938] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 295.378297][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.386467][ T8536] bridge_slave_1: entered allmulticast mode [ 295.392586][ T938] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 295.407945][ T8536] bridge_slave_1: entered promiscuous mode [ 295.431944][ T938] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 295.447207][ T938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.478820][ T938] usb 2-1: config 0 descriptor?? [ 295.529965][ T5294] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 295.590030][ T5228] Bluetooth: hci6: command tx timeout [ 295.639137][ T8536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.658423][ T8536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.688289][ T938] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 295.710701][ T5294] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 295.736323][ T8527] hsr_slave_0: entered promiscuous mode [ 295.751150][ T5294] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 295.769857][ T5294] usb 5-1: Manufacturer: syz [ 295.777216][ T8527] hsr_slave_1: entered promiscuous mode [ 295.779007][ T5294] usb 5-1: config 0 descriptor?? [ 295.801796][ T8527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 295.809432][ T8527] Cannot create hsr debugfs directory [ 295.946854][ C0] usblp0: nonzero read bulk status received: -71 [ 295.953495][ T1849] usb 2-1: USB disconnect, device number 21 [ 295.962234][ T8574] usblp0: error -71 reading from printer [ 295.986589][ T1849] usblp0: removed [ 296.042980][ T52] hsr_slave_0: left promiscuous mode [ 296.061088][ T52] hsr_slave_1: left promiscuous mode [ 296.067353][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.078500][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.087250][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.095134][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.121934][ T52] veth1_macvtap: left promiscuous mode [ 296.127521][ T52] veth0_macvtap: left promiscuous mode [ 296.134842][ T52] veth0_vlan: left promiscuous mode [ 296.242653][ T5294] gs_usb 5-1:0.0: Configuring for 149 interfaces [ 296.252759][ T5294] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 296.267746][ T5294] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 296.699123][ T52] team0 (unregistering): Port device team_slave_1 removed [ 296.745014][ T52] team0 (unregistering): Port device team_slave_0 removed [ 296.874440][ T5228] Bluetooth: hci5: command tx timeout [ 297.253353][ T8536] team0: Port device team_slave_0 added [ 297.289263][ T1849] usb 5-1: USB disconnect, device number 29 [ 297.302493][ T8536] team0: Port device team_slave_1 added [ 297.456243][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.481531][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.518093][ T8536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.532809][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.540307][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.599877][ T8536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.672123][ T5228] Bluetooth: hci6: command tx timeout [ 297.966942][ T8527] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.035359][ T8536] hsr_slave_0: entered promiscuous mode [ 298.050517][ T8536] hsr_slave_1: entered promiscuous mode [ 298.072120][ T8536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.081171][ T8536] Cannot create hsr debugfs directory [ 298.142833][ T8527] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.160093][ T5317] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 298.287302][ T8527] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.334872][ T5317] usb 5-1: Using ep0 maxpacket: 32 [ 298.360738][ T5317] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 298.390797][ T5317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.418959][ T5317] usb 5-1: Product: syz [ 298.429529][ T5317] usb 5-1: Manufacturer: syz [ 298.444736][ T5317] usb 5-1: SerialNumber: syz [ 298.461938][ T5317] usb 5-1: config 0 descriptor?? [ 298.477696][ T8527] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.480320][ T5317] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 298.563890][ T8423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.628082][ T8423] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.772912][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.780155][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.819203][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.826474][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.949816][ T5228] Bluetooth: hci5: command tx timeout [ 299.172245][ T8527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 299.208491][ T8527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 299.211809][ T5317] gspca_ov534_9: reg_w failed -110 [ 299.387818][ T8423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.400261][ T8527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 299.412893][ T8527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 299.532254][ T8423] veth0_vlan: entered promiscuous mode [ 299.590188][ T8423] veth1_vlan: entered promiscuous mode [ 299.659761][ T5317] gspca_ov534_9: Unknown sensor 0000 [ 299.659840][ T5317] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 299.687182][ T5317] usb 5-1: USB disconnect, device number 30 [ 299.750642][ T5228] Bluetooth: hci6: command tx timeout [ 299.804897][ T8423] veth0_macvtap: entered promiscuous mode [ 299.894557][ T8423] veth1_macvtap: entered promiscuous mode [ 299.947700][ T8536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.967840][ T8536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.011410][ T8527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.019449][ T8536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.061327][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 300.106669][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.128495][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.145719][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.172393][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.194079][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.214157][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.227300][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.238549][ T8536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.327042][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.358383][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.380710][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.392657][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.416379][ T8423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.433214][ T8423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.446365][ T8423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.491277][ T8527] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.504534][ T8423] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.524515][ T8423] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.553964][ T8423] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.568453][ T8423] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.632624][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.639909][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.765356][ T747] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.772638][ T747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.062144][ T8527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.084963][ T8527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.116947][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.178855][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.272136][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.339498][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.415267][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.494092][ T8527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.622714][ T8536] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.691924][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.699068][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.741644][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.748889][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.951435][ T8527] veth0_vlan: entered promiscuous mode [ 302.016248][ T8527] veth1_vlan: entered promiscuous mode [ 302.077015][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 302.098786][ T8536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.147936][ T8527] veth0_macvtap: entered promiscuous mode [ 302.155474][ T9] dvb_usb_az6027 3-1:2.75: probe with driver dvb_usb_az6027 failed with error -110 [ 302.196638][ T8527] veth1_macvtap: entered promiscuous mode [ 302.222281][ T9] dvb-usb: found a 'AZUREWAVE DVB-S/S2 USB2.0 (AZ6027)' in cold state, will try to load a firmware [ 302.271259][ T9] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 302.290940][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.308878][ T9] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 302.318635][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.338164][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.374614][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.416405][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.461113][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.511637][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.559228][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.601363][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.773879][ T8536] veth0_vlan: entered promiscuous mode [ 302.790259][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.801152][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.849660][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.887783][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.950222][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.986911][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.005951][ T8527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.029524][ T8527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.065089][ T8527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.152610][ T8536] veth1_vlan: entered promiscuous mode [ 303.191808][ T8527] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.228818][ T8527] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.259344][ T8527] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.290256][ T8527] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.606511][ T8536] veth0_macvtap: entered promiscuous mode [ 303.707650][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.718570][ T8536] veth1_macvtap: entered promiscuous mode [ 303.756428][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.871260][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.899955][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.913772][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.999758][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.029859][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.070609][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.119635][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.159651][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.190281][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.227410][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.251561][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.299723][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.310899][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 304.350599][ T8536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.421476][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.473286][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.531433][ T8] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 304.540882][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.561784][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.590067][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.620828][ T8] usb 2-1: config 0 descriptor?? [ 304.639928][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.650890][ T8] cp210x 2-1:0.0: cp210x converter detected [ 304.677657][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.708607][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.739686][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.776186][ T8536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.788097][ T8536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.829185][ T8536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.886392][ T8536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.927019][ T8536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.947156][ T8536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.981534][ T8536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.195276][ T8751] fuse: Unknown parameter 'user_i00000000000000000000' [ 305.202467][ T5317] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 305.259281][ T747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.284772][ T8752] netlink: 60 bytes leftover after parsing attributes in process `syz.2.528'. [ 305.327312][ T747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.355172][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.358091][ T8] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 305.364501][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.372171][ T8] cp210x 2-1:0.0: querying part number failed [ 305.383922][ T5317] usb 4-1: Using ep0 maxpacket: 16 [ 305.390272][ T8] usb 2-1: cp210x converter now attached to ttyUSB0 [ 305.407706][ T8] usb 2-1: USB disconnect, device number 22 [ 305.420677][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 305.422866][ T5317] usb 4-1: config 1 has too many interfaces: 255, using maximum allowed: 32 [ 305.428792][ T8] cp210x 2-1:0.0: device disconnected [ 305.500049][ T5317] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 255 [ 305.579470][ T5317] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 305.591070][ T5317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.601917][ T5317] usb 4-1: Product: syz [ 305.606725][ T5317] usb 4-1: Manufacturer: syz [ 305.611893][ T5317] usb 4-1: SerialNumber: syz [ 305.636267][ T5317] r8152-cfgselector 4-1: Unknown version 0x0000 [ 305.880341][ T5317] r8152-cfgselector 4-1: Unknown version 0x0070 [ 305.889956][ T5317] r8152-cfgselector 4-1: bad CDC descriptors [ 305.991125][ T5284] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 306.077315][ T8767] openvswitch: netlink: Missing valid actions attribute. [ 306.106152][ T8767] openvswitch: netlink: Actions may not be safe on all matching packets [ 306.153967][ T8767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.188028][ T5284] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 306.210428][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.242086][ T5284] usb 1-1: config 0 descriptor?? [ 306.452494][ T5284] gs_usb 1-1:0.0: Couldn't send data format (err=-71) [ 306.502409][ T5284] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 306.538047][ T5284] usb 1-1: USB disconnect, device number 19 [ 306.874329][ T8776] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.533'. [ 306.913345][ T8776] netlink: zone id is out of range [ 306.956299][ T8776] netlink: zone id is out of range [ 306.986185][ T8776] netlink: zone id is out of range [ 307.002238][ T8776] netlink: zone id is out of range [ 307.008693][ T8776] netlink: zone id is out of range [ 307.020945][ T8776] netlink: zone id is out of range [ 307.026454][ T8776] netlink: zone id is out of range [ 307.051012][ T8776] netlink: zone id is out of range [ 307.063683][ T5317] r8152-cfgselector 4-1: USB disconnect, device number 26 [ 307.531078][ T5317] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 307.559686][ T5284] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 307.712631][ T5284] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 307.749899][ T5317] usb 5-1: Using ep0 maxpacket: 32 [ 307.764213][ T5317] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.788901][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.800895][ T5317] usb 5-1: config 0 has no interfaces? [ 307.838919][ T5317] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 307.881898][ T5284] usb 2-1: config 0 descriptor?? [ 307.883273][ T5317] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.915016][ T5317] usb 5-1: Product: syz [ 307.931099][ T5317] usb 5-1: Manufacturer: syz [ 307.947491][ T5317] usb 5-1: SerialNumber: syz [ 307.971750][ T5317] usb 5-1: config 0 descriptor?? [ 308.049778][ T46] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 308.219711][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 308.244325][ T46] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 308.269646][ T46] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 308.322251][ T8786] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 308.341608][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 308.368347][ T8786] PKCS7: Only support pkcs7_signedData type [ 308.385979][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.404379][ T5284] hackrf 2-1:0.0: Board ID: 00 [ 308.435722][ T5284] hackrf 2-1:0.0: Firmware version: [ 308.488694][ T5284] hackrf 2-1:0.0: Registered as swradio16 [ 308.519400][ T5284] hackrf 2-1:0.0: Registered as swradio17 [ 308.527063][ T5284] hackrf 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 308.701464][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 309.026087][ T8811] "syz.2.542" (8811) uses obsolete ecb(arc4) skcipher [ 309.162138][ T5317] usb 2-1: USB disconnect, device number 23 [ 309.540225][ T46] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 309.720072][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 309.731704][ T46] usb 1-1: config 0 has no interfaces? [ 309.744343][ T46] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 309.770017][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.789502][ T46] usb 1-1: Product: syz [ 309.797362][ T46] usb 1-1: Manufacturer: syz [ 309.807624][ T46] usb 1-1: SerialNumber: syz [ 309.822648][ T46] usb 1-1: config 0 descriptor?? [ 309.890132][ T8819] netlink: 8 bytes leftover after parsing attributes in process `syz.2.544'. [ 310.053107][ T5284] usb 1-1: USB disconnect, device number 20 [ 310.234793][ T8] usb 5-1: USB disconnect, device number 31 [ 310.777147][ T1849] usb 4-1: USB disconnect, device number 27 [ 310.969734][ T8] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 311.132072][ T8] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 311.142192][ T8] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 311.152777][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.186505][ T8] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.199786][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.208501][ T8] usb 2-1: Product: syz [ 311.215208][ T8] usb 2-1: Manufacturer: syz [ 311.221207][ T8] usb 2-1: SerialNumber: syz [ 311.269892][ T1849] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 311.431622][ T1849] usb 4-1: config 0 interface 0 has no altsetting 0 [ 311.442797][ T1849] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 311.452492][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.470385][ T1849] usb 4-1: config 0 descriptor?? [ 312.097207][ T1849] video4linux radio32: keene_cmd_set failed (-71) [ 312.104326][ T1849] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 312.122367][ T1849] usb 4-1: USB disconnect, device number 28 [ 312.500689][ T5294] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 312.670580][ T5294] usb 5-1: Using ep0 maxpacket: 16 [ 312.682615][ T5294] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.693764][ T5294] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 312.715895][ T5294] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 312.726091][ T5294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.734856][ T5294] usb 5-1: Product: syz [ 312.741870][ T5294] usb 5-1: Manufacturer: syz [ 312.747761][ T5294] usb 5-1: SerialNumber: syz [ 312.782548][ T5294] usb 5-1: config 0 descriptor?? [ 313.039396][ T5294] usb 5-1: USB disconnect, device number 32 [ 313.104377][ T8861] xt_CT: You must specify a L4 protocol and not use inversions on it [ 313.128473][ T8] usb 2-1: 0:2 : does not exist [ 313.186460][ T8] usb 2-1: USB disconnect, device number 24 [ 313.368060][ T5248] udevd[5248]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.522877][ T8864] binder: 8862:8864 ioctl 4018620d 0 returned -22 [ 313.543947][ T8864] binder: 8862:8864 ioctl c018620c 20000000 returned -1 [ 313.933012][ T8875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'. [ 313.974048][ T8875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 314.044179][ T8875] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 314.053456][ T8875] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 314.062837][ T8875] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 314.072087][ T8875] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 314.081185][ T8875] geneve2: entered promiscuous mode [ 314.086561][ T8875] geneve2: entered allmulticast mode [ 314.262555][ T8887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.564'. [ 314.279914][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 314.299806][ T5294] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 314.469797][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 314.482304][ T8] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 314.495115][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.518334][ T8] usb 1-1: config 0 has no interface number 0 [ 314.529997][ T5317] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 314.534969][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.550727][ T8] usb 1-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.566653][ T8] usb 1-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 314.578424][ T5294] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 314.587883][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.605347][ T8] usb 1-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 314.616520][ T8] usb 1-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 314.632982][ T8] usb 1-1: Product: syz [ 314.639506][ T5294] usb 5-1: config 0 descriptor?? [ 314.685563][ T8] usb 1-1: Manufacturer: syz [ 314.698987][ T8] usb 1-1: SerialNumber: syz [ 314.722816][ T8] usb 1-1: config 0 descriptor?? [ 314.743882][ T8] ftdi_sio 1-1:0.155: FTDI USB Serial Device converter detected [ 314.758691][ T8] ftdi_sio ttyUSB0: unknown device type: 0xc561 [ 314.799724][ T5317] usb 4-1: Using ep0 maxpacket: 32 [ 314.821563][ T5317] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 314.866887][ T5317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.893522][ T5317] usb 4-1: config 0 descriptor?? [ 314.907599][ T5317] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 314.950227][ T5317] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 314.971014][ T8] usb 1-1: USB disconnect, device number 21 [ 315.010134][ T8] ftdi_sio 1-1:0.155: device disconnected [ 315.097823][ T5294] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0 [ 315.271443][ T5294] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 315.332993][ T5294] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 315.374729][ T5294] isku 0003:1E7D:319C.0007: probe with driver isku failed with error -71 [ 315.383890][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.565'. [ 315.408908][ T5294] usb 5-1: USB disconnect, device number 33 [ 316.147579][ T1849] usb 4-1: USB disconnect, device number 29 [ 316.370588][ T5294] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 316.559888][ T5294] usb 5-1: Using ep0 maxpacket: 32 [ 316.578762][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.608277][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.619499][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 316.632575][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 316.644898][ T5294] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 316.735013][ T5294] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 316.776544][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.807820][ T5294] usb 5-1: config 0 descriptor?? [ 317.014754][ T8904] lo: entered allmulticast mode [ 317.051264][ T8904] net_ratelimit: 88 callbacks suppressed [ 317.051281][ T8904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.147344][ T8906] netlink: 'syz.1.570': attribute type 17 has an invalid length. [ 317.282598][ T5294] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 317.431625][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.440812][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.287206][ T8916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.574'. [ 318.818088][ T8897] coredump: 40(syz.2.568): interrupted: fatal signal pending [ 318.829636][ T8897] coredump: 40(syz.2.568): written to core: VMAs: 39, size 97607680; core: 64837930 bytes, pos 90660864 [ 319.204900][ T8930] usb usb8: usbfs: process 8930 (syz.0.577) did not claim interface 0 before use [ 319.388750][ T5294] usb 5-1: USB disconnect, device number 34 [ 320.030147][ T5294] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 320.201661][ T5294] usb 5-1: Using ep0 maxpacket: 32 [ 320.216186][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.233861][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.259145][ T5294] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 320.329689][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.373406][ T5294] usb 5-1: config 0 descriptor?? [ 320.395401][ T5294] hub 5-1:0.0: USB hub found [ 320.588315][ T5294] hub 5-1:0.0: 1 port detected [ 320.923489][ T5232] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 320.932967][ T8952] input: syz0 as /devices/virtual/input/input14 [ 321.125070][ T5232] usb 1-1: Using ep0 maxpacket: 8 [ 321.137706][ T5232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.150732][ T5232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 321.170079][ T5232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.226377][ T5294] hub 5-1:0.0: activate --> -90 [ 321.238989][ T5232] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 321.255109][ T5232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.297668][ T5232] usb 1-1: Product: syz [ 321.305764][ T5232] usb 1-1: Manufacturer: syz [ 321.322104][ T5232] usb 1-1: SerialNumber: syz [ 321.351305][ T5232] usb 1-1: config 0 descriptor?? [ 321.359210][ T5232] radioshark2 1-1:0.0: Invalid radioSHARK2 device [ 321.368650][ T5232] radioshark2 1-1:0.0: probe with driver radioshark2 failed with error -22 [ 321.383523][ T5232] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 321.453279][ T8937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.478416][ T8937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.539919][ T5294] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 321.596983][ T5294] usb 5-1: USB disconnect, device number 35 [ 321.604041][ T5232] usb 5-1: Failed to suspend device, error -19 [ 322.071965][ T5284] usb 1-1: USB disconnect, device number 22 [ 322.675065][ C0] [ 322.677452][ C0] ======================================================== [ 322.684650][ C0] WARNING: possible irq lock inversion dependency detected [ 322.691835][ C0] 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 Not tainted [ 322.698591][ C0] -------------------------------------------------------- [ 322.705782][ C0] ksoftirqd/0/16 just changed the state of lock: [ 322.712101][ C0] ffff88805dd38e10 (&ppp->rlock){+.-.}-{2:2}, at: ppp_do_recv+0x38/0x26b0 [ 322.720758][ C0] but this lock took another, SOFTIRQ-unsafe lock in the past: [ 322.728322][ C0] (&pch->downl){+.+.}-{2:2} [ 322.728351][ C0] [ 322.728351][ C0] [ 322.728351][ C0] and interrupts could create inverse lock ordering between them. [ 322.728351][ C0] [ 322.747268][ C0] [ 322.747268][ C0] other info that might help us debug this: [ 322.755409][ C0] Possible interrupt unsafe locking scenario: [ 322.755409][ C0] [ 322.763719][ C0] CPU0 CPU1 [ 322.769088][ C0] ---- ---- [ 322.774454][ C0] lock(&pch->downl); [ 322.778519][ C0] local_irq_disable(); [ 322.785277][ C0] lock(&ppp->rlock); [ 322.791878][ C0] lock(&pch->downl); [ 322.798458][ C0] [ 322.801903][ C0] lock(&ppp->rlock); [ 322.806159][ C0] [ 322.806159][ C0] *** DEADLOCK *** [ 322.806159][ C0] [ 322.814328][ C0] 1 lock held by ksoftirqd/0/16: [ 322.819253][ C0] #0: ffff88805e48f248 (&pch->upl){++.-}-{2:2}, at: ppp_input+0x3dc/0xa10 [ 322.827878][ C0] [ 322.827878][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 322.837273][ C0] -> (&pch->downl){+.+.}-{2:2} { [ 322.842330][ C0] HARDIRQ-ON-W at: [ 322.846387][ C0] lock_acquire+0x1ed/0x550 [ 322.852715][ C0] _raw_spin_lock_bh+0x35/0x50 [ 322.859746][ C0] ppp_unregister_channel+0x7c/0x300 [ 322.866938][ C0] ppp_asynctty_close+0xf8/0x190 [ 322.873786][ C0] tty_ldisc_hangup+0x1c5/0x4d0 [ 322.880460][ C0] __tty_hangup+0x3fb/0x6b0 [ 322.886782][ C0] tty_release+0x32a/0x12c0 [ 322.893107][ C0] __fput+0x23f/0x880 [ 322.899002][ C0] task_work_run+0x24f/0x310 [ 322.905427][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 322.912902][ C0] do_syscall_64+0x100/0x230 [ 322.919328][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.927061][ C0] SOFTIRQ-ON-W at: [ 322.931155][ C0] lock_acquire+0x1ed/0x550 [ 322.937519][ C0] _raw_spin_lock+0x2e/0x40 [ 322.943875][ C0] ppp_input+0x18b/0xa10 [ 322.949966][ C0] pppoe_rcv_core+0x117/0x310 [ 322.956499][ C0] __release_sock+0x243/0x350 [ 322.963029][ C0] release_sock+0x61/0x1f0 [ 322.969304][ C0] pppoe_sendmsg+0xd5/0x750 [ 322.975662][ C0] __sock_sendmsg+0x221/0x270 [ 322.982211][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 322.988856][ C0] __sys_sendmmsg+0x3ac/0x730 [ 322.995436][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 323.002154][ C0] do_syscall_64+0xf3/0x230 [ 323.008521][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.016282][ C0] INITIAL USE at: [ 323.020291][ C0] lock_acquire+0x1ed/0x550 [ 323.026579][ C0] _raw_spin_lock_bh+0x35/0x50 [ 323.033207][ C0] ppp_unregister_channel+0x7c/0x300 [ 323.040266][ C0] ppp_asynctty_close+0xf8/0x190 [ 323.046979][ C0] tty_ldisc_hangup+0x1c5/0x4d0 [ 323.053603][ C0] __tty_hangup+0x3fb/0x6b0 [ 323.059862][ C0] tty_release+0x32a/0x12c0 [ 323.066173][ C0] __fput+0x23f/0x880 [ 323.071894][ C0] task_work_run+0x24f/0x310 [ 323.078250][ C0] syscall_exit_to_user_mode+0x168/0x370 [ 323.085626][ C0] do_syscall_64+0x100/0x230 [ 323.091972][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.099619][ C0] } [ 323.102215][ C0] ... key at: [] ppp_register_net_channel.__key.1+0x0/0x20 [ 323.111598][ C0] ... acquired at: [ 323.115482][ C0] lock_acquire+0x1ed/0x550 [ 323.120181][ C0] _raw_spin_lock_bh+0x35/0x50 [ 323.125118][ C0] ppp_connect_channel+0x194/0x650 [ 323.130406][ C0] ppp_ioctl+0xdd4/0x1cd0 [ 323.134931][ C0] __se_sys_ioctl+0xf9/0x170 [ 323.139703][ C0] do_syscall_64+0xf3/0x230 [ 323.144391][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.150473][ C0] [ 323.152808][ C0] -> (&ppp->rlock){+.-.}-{2:2} { [ 323.157763][ C0] HARDIRQ-ON-W at: [ 323.161735][ C0] lock_acquire+0x1ed/0x550 [ 323.167916][ C0] _raw_spin_lock_bh+0x35/0x50 [ 323.174334][ C0] ppp_get_stats64+0x33/0x290 [ 323.180666][ C0] dev_get_stats+0xad/0xa00 [ 323.186847][ C0] rtnl_fill_stats+0x47/0x880 [ 323.193222][ C0] rtnl_fill_ifinfo+0x18da/0x2270 [ 323.199907][ C0] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 323.207108][ C0] rtmsg_ifinfo+0x91/0x1b0 [ 323.213182][ C0] register_netdevice+0x1774/0x1b00 [ 323.220055][ C0] ppp_dev_configure+0x883/0xb10 [ 323.226645][ C0] ppp_ioctl+0x797/0x1cd0 [ 323.232642][ C0] __se_sys_ioctl+0xf9/0x170 [ 323.238885][ C0] do_syscall_64+0xf3/0x230 [ 323.245042][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.249642][ T46] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 323.252770][ C0] IN-SOFTIRQ-W at: [ 323.252789][ C0] lock_acquire+0x1ed/0x550 [ 323.270486][ C0] _raw_spin_lock_bh+0x35/0x50 [ 323.276899][ C0] ppp_do_recv+0x38/0x26b0 [ 323.282960][ C0] ppp_input+0x5de/0xa10 [ 323.288929][ C0] ppp_async_process+0x7f/0x150 [ 323.295432][ C0] tasklet_action_common+0x321/0x4d0 [ 323.302370][ C0] handle_softirqs+0x2c5/0x980 [ 323.308779][ C0] run_ksoftirqd+0xca/0x130 [ 323.314945][ C0] smpboot_thread_fn+0x544/0xa30 [ 323.321539][ C0] kthread+0x2f0/0x390 [ 323.327287][ C0] ret_from_fork+0x4b/0x80 [ 323.333441][ C0] ret_from_fork_asm+0x1a/0x30 [ 323.339854][ C0] INITIAL USE at: [ 323.343758][ C0] lock_acquire+0x1ed/0x550 [ 323.349825][ C0] _raw_spin_lock_bh+0x35/0x50 [ 323.356152][ C0] ppp_get_stats64+0x33/0x290 [ 323.362406][ C0] dev_get_stats+0xad/0xa00 [ 323.368477][ C0] rtnl_fill_stats+0x47/0x880 [ 323.374723][ C0] rtnl_fill_ifinfo+0x18da/0x2270 [ 323.381314][ C0] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 323.388251][ C0] rtmsg_ifinfo+0x91/0x1b0 [ 323.394235][ C0] register_netdevice+0x1774/0x1b00 [ 323.401016][ C0] ppp_dev_configure+0x883/0xb10 [ 323.407532][ C0] ppp_ioctl+0x797/0x1cd0 [ 323.413422][ C0] __se_sys_ioctl+0xf9/0x170 [ 323.419598][ C0] do_syscall_64+0xf3/0x230 [ 323.425685][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.433140][ C0] } [ 323.435626][ C0] ... key at: [] ppp_dev_configure.__key+0x0/0x20 [ 323.444386][ C0] ... acquired at: [ 323.448177][ C0] mark_lock+0x223/0x360 [ 323.452583][ C0] __lock_acquire+0xbf9/0x2050 [ 323.457540][ C0] lock_acquire+0x1ed/0x550 [ 323.462215][ C0] _raw_spin_lock_bh+0x35/0x50 [ 323.467150][ C0] ppp_do_recv+0x38/0x26b0 [ 323.471732][ C0] ppp_input+0x5de/0xa10 [ 323.476139][ C0] ppp_async_process+0x7f/0x150 [ 323.481159][ C0] tasklet_action_common+0x321/0x4d0 [ 323.486633][ C0] handle_softirqs+0x2c5/0x980 [ 323.491572][ C0] run_ksoftirqd+0xca/0x130 [ 323.496248][ C0] smpboot_thread_fn+0x544/0xa30 [ 323.501362][ C0] kthread+0x2f0/0x390 [ 323.505613][ C0] ret_from_fork+0x4b/0x80 [ 323.510203][ C0] ret_from_fork_asm+0x1a/0x30 [ 323.515140][ C0] [ 323.517467][ C0] [ 323.517467][ C0] stack backtrace: [ 323.523419][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.11.0-syzkaller-08833-gde5cb0dcb74c #0 [ 323.533680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 323.543745][ C0] Call Trace: [ 323.547017][ C0] [ 323.549943][ C0] dump_stack_lvl+0x241/0x360 [ 323.554623][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 323.559835][ C0] ? __pfx__printk+0x10/0x10 [ 323.564462][ C0] ? print_shortest_lock_dependencies+0xf2/0x160 [ 323.570801][ C0] print_irq_inversion_bug+0x33d/0x390 [ 323.576264][ C0] mark_lock_irq+0x80c/0xc20 [ 323.580853][ C0] ? __pfx_mark_lock_irq+0x10/0x10 [ 323.585973][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 323.591362][ C0] ? mark_lock_irq+0x8e1/0xc20 [ 323.596125][ C0] ? lockdep_lock+0x123/0x2b0 [ 323.600823][ C0] ? save_trace+0x5a/0xb50 [ 323.605272][ C0] mark_lock+0x223/0x360 [ 323.609520][ C0] __lock_acquire+0xbf9/0x2050 [ 323.614337][ C0] lock_acquire+0x1ed/0x550 [ 323.618985][ C0] ? ppp_do_recv+0x38/0x26b0 [ 323.623597][ C0] ? __lock_acquire+0x1384/0x2050 [ 323.628629][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 323.633660][ C0] ? ppp_do_recv+0x38/0x26b0 [ 323.638248][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 323.644070][ C0] ? ppp_do_recv+0x38/0x26b0 [ 323.648677][ C0] _raw_spin_lock_bh+0x35/0x50 [ 323.653440][ C0] ? ppp_do_recv+0x38/0x26b0 [ 323.658038][ C0] ppp_do_recv+0x38/0x26b0 [ 323.662457][ C0] ? ppp_input+0x55/0xa10 [ 323.666781][ C0] ? ppp_input+0x3dc/0xa10 [ 323.671194][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 323.677030][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 323.682919][ C0] ? ppp_input+0x3dc/0xa10 [ 323.687328][ C0] ? skb_push+0x97/0x100 [ 323.691566][ C0] ppp_input+0x5de/0xa10 [ 323.695803][ C0] ppp_async_process+0x7f/0x150 [ 323.700672][ C0] tasklet_action_common+0x321/0x4d0 [ 323.705959][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 323.711771][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.718101][ C0] ? __schedule+0x189d/0x4b30 [ 323.722791][ C0] ? workqueue_softirq_action+0xce/0x140 [ 323.728436][ C0] handle_softirqs+0x2c5/0x980 [ 323.733223][ C0] ? run_ksoftirqd+0xca/0x130 [ 323.737936][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 323.743332][ C0] run_ksoftirqd+0xca/0x130 [ 323.747863][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 323.752976][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 323.758699][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 323.763812][ C0] smpboot_thread_fn+0x544/0xa30 [ 323.768763][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 323.773834][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 323.779316][ C0] kthread+0x2f0/0x390 [ 323.783384][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 323.788863][ C0] ? __pfx_kthread+0x10/0x10 [ 323.793467][ C0] ret_from_fork+0x4b/0x80 [ 323.797894][ C0] ? __pfx_kthread+0x10/0x10 [ 323.802499][ C0] ret_from_fork_asm+0x1a/0x30 [ 323.807457][ C0] [ 323.887827][ T29] kauditd_printk_skb: 3448 callbacks suppressed [ 323.887846][ T29] audit: type=1326 audit(1727085768.756:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8982 comm="syz.0.592" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ecf77def9 code=0x0 [ 324.000442][ T46] usb 4-1: too many configurations: 25, using maximum allowed: 8 [ 324.024155][ T46] usb 4-1: config 0 has no interfaces? [ 324.035302][ T46] usb 4-1: config 0 has no interfaces? [ 324.048370][ T46] usb 4-1: config 0 has no interfaces? [ 324.057431][ T46] usb 4-1: config 0 has no interfaces? [ 324.065341][ T46] usb 4-1: config 0 has no interfaces? [ 324.074978][ T46] usb 4-1: config 0 has no interfaces? [ 324.083833][ T46] usb 4-1: config 0 has no interfaces? [ 324.093798][ T46] usb 4-1: config 0 has no interfaces? [ 324.099444][ T46] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 324.113299][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.123733][ T46] usb 4-1: config 0 descriptor?? [ 324.138186][ T8972] netlink: 104 bytes leftover after parsing attributes in process `syz.4.588'. [ 324.347833][ T46] usb 4-1: USB disconnect, device number 30