last executing test programs: 47.79570495s ago: executing program 0 (id=1078): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = inotify_init1(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000380)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x2000000, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="1100000000000000004003001100000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f020c000000", @ANYRES32=0x0, @ANYBLOB="a005000000000000000000002400000000000000840000000700000094040000441000000000000000000000000000000000000011000000000000000000013f5b7a20998cf190160100"/84], 0x98}, 0x4dc) 47.543477162s ago: executing program 0 (id=1080): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup(0xffffffffffffffff) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000000000008c04"]) (async, rerun: 64) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x7, {0x7, 0x0, "a7ea3163fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) 47.130883042s ago: executing program 3 (id=1082): syz_emit_ethernet(0x2c8, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r2) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r5, 0x9) add_key$keyring(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r3) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x8) add_key$keyring(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$get_persistent(0x16, 0x0, r3) read$watch_queue(r4, &(0x7f0000000200)=""/88, 0x58) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f000039f000/0x3000)=nil, 0x3000}}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000280), 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_clone(0x14820a00, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$GIO_CMAP(r6, 0x4b70, &(0x7f0000000000)) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) renameat2(0xffffffffffffffff, 0x0, r7, &(0x7f0000000980)='./file0\x00', 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000000140)={@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e23, @remote}, 0x1, 0x3, 0x3, 0x4}}, {&(0x7f0000000000)=""/223, 0xdf}, &(0x7f0000000100), 0x27}, 0xa0) 45.676079715s ago: executing program 3 (id=1092): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f0000000340), 0x0, 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000140)={r4}) io_uring_setup(0x66b, &(0x7f0000000240)) r5 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r8 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r8) 44.596345087s ago: executing program 3 (id=1094): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @loopback, @remote, 0x0, 0x40, 0x0, 0x40000000, 0x0, 0x40100042, r3}) 44.349579579s ago: executing program 0 (id=1096): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000023000b03d25a806f8c6394e21f24fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001680)={0x0, 0x0, 0x0}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_vhci(0x0, 0x22) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) syz_emit_ethernet(0x38, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000008004900002a004000000000907800000000ffffffff"], 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000280)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91d13ee8db164c6e4b4e00d96070000001ea89de2b7fb0a0100000000000080000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r3) io_uring_setup(0x168e, 0x0) syz_usb_connect(0x6, 0x49, &(0x7f0000000280)=ANY=[], 0x0) 44.13079205s ago: executing program 3 (id=1097): r0 = socket$netlink(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) timer_create(0x5, &(0x7f0000000680)={0x0, 0x2}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) capset(&(0x7f0000000140)={0x19980330}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c18800aac0f000300", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa8b, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x5]}}]}]}, 0x64}}, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00392100a3251a2786a3bd943117171c02bf12c36376e84e8cfa07000000000000006c76acf0ec"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0xb, 0x46, 0x1, {0x22, 0xb71}}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000480)={0x0, 0xa, 0x1, 0xfb}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)=ANY=[@ANYBLOB="2001e50000000579294a742c877f4373cf579c9289c86379c601937f054208c51b45516c0b03d40a3a1d79f9c0b7e5a2236f9c19a1972283e3f3acd6fd423cf691ca9ba1af56bcbc37fc1d1265c46ee01e25c42bac69a858f12bda544af4ad3f0f23ef7bab797719d6b334e4c663efe9b806aecd52d737741e4ac1a9b96a97280a2e81580bed57d2cd553dc4e802802ebea7a488cb7fa241acfaea6566b85b9570890cfe9231727b16da1ae67ad9be269c177c5d2fbc32ad8026d63f7477c62237b21ae4b2feb452aa108541b23ea74337610c6437407e080ec743a074dd6b3b2b"], &(0x7f0000000600)={0x20, 0x3, 0x1}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x227245e}}, 0x50) 41.951432443s ago: executing program 3 (id=1106): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000380)=0xf, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000500)="1adfdb41a047b81f537c2c73d727bd503bd9010f8ae31d19ae252d3af5c141cbb791d95b96dce157ab1e15146120c9cff8104b024b2d9cefcf9e308f205e5299920ee44ba4667a011ac2fef5b9fa6e9eae4632bc12a3ae6bd37a680e20b3ca11e6f8b861d9dd5dc4994c760a6018dec01e66810ff9", 0x75}, {&(0x7f0000000100)="6b32b2919d351533088d3c1975a3731ee0edf127f1f7817de36935ca951f21512a96e7974e1949c77893891c181b9d4a3b5b7338d2be1f9f847b404fc6605d0ea0a2", 0x42}], 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup2(r1, r1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000046000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = io_uring_setup(0x1698, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0) r4 = syz_open_procfs(0x0, 0x0) munmap(&(0x7f00001a2000/0x1000)=nil, 0x1000) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0xffffffff, 0x0, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x1, 0x1000, 0x2000, &(0x7f00007f5000/0x2000)=nil}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000680)={'#! ', './file0', [], 0xa, "fec40dca19266f3418cad768dc2bd9772328716201356bfeb0f0d7"}, 0x26) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc048aeca, &(0x7f0000005580)={{0x0, 0x0, 0x80}}) syz_open_dev$evdev(&(0x7f0000000000), 0xffffffffffffffff, 0x1) socket(0x11, 0x800000003, 0x0) 41.480025759s ago: executing program 3 (id=1109): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358448fddf894c0cdfa9115adbe5b19bc912fcbc8aac7719b649b1ff1267491da", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x5d, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYRES8=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x13eb9, 0x0, 0x0, 0x0, 0x0) 40.79687396s ago: executing program 0 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(r1, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) unshare(0x22020400) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r3 = open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) sendfile(r3, r2, 0x0, 0x80000000) syz_usb_connect(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32=0x0], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) 39.915929515s ago: executing program 0 (id=1116): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtaction={0x1b0, 0x30, 0x100, 0x0, 0x0, {0x9}, [{0x19c, 0x1, [@m_skbmod={0x198, 0x19, 0x0, 0x0, {{0xb}, {0x88, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="7941df87448b"}, @TCA_SKBMOD_PARMS={0x46, 0x2, {{0x9, 0x0, 0x6, 0xfffffffa, 0x4}, 0xc}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0xae0, 0x4, 0x3, 0x7}, 0x5}}]}, {0xe8, 0x6, "5901c6b4a72682ac3858bc636826ea6006e10d9fea1426ad894cfe5b82986777f6253a450fa9544d0bccdf578c72636da09a99798e0f0b66d04cd682b30f37915390d06c66d50c8360e257a460aa9cd1cc28132af634bdf4404085abcb2e0746f68b37bd59ff2a27630b2c9dbb97379d5bb86f10c32189e34871dff1572c34bd0747a10b2c52d28f025130c2a05b1c7eba95bd8c89b236389c03ec07ede4f26825d9c7fd7b957c0bcaf5b31e5850c834b0dac1c914224f2bff49dfea97c4d35ec1ef9d748d08e2595b537cb132c932cff3a0bd6eedf983bb6e61209ec8b1c3e3b0188fd2"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x1b0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0xfffffff2, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) inotify_init1(0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000001c0)={0x80, 0x0, 0x5}) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x100000001]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000240)) r4 = inotify_init1(0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x58}}, 0x0) r6 = inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x10000a0) inotify_rm_watch(r4, r6) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x300, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000100)={0x0, 0x1001}, 0x0) ioctl$TIOCGPTPEER(r7, 0x5441, 0x400000000000003) inotify_rm_watch(r3, r6) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x4000, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$FICLONE(r8, 0x40049409, r8) 37.015668362s ago: executing program 0 (id=1122): unshare(0x4020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000bcc000/0x4000)=nil, 0x4000}, 0xc24ab3ddb8e567fc}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000080)={0x0, "d2c4924d5e89213dc64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f00000002c0)={0x0, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"0000080000e4e9edb6e7f4f15fbe000000497161e900", r5, 0xffffffffffffffff}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r8, 0x8) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff06f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}]}}}}}}}}, 0x0) ioctl$SYNC_IOC_FILE_INFO(r6, 0x541b, 0x0) r9 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, &(0x7f0000000200)) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000004c0)={0x1, 0x69, "2a05122a7700c1e84752aeba6bd09af31f828e045f94d64198dde884db6094a2f346dee6a49dd6a52a295938c19f17f9c2a618712120166e6105e8c359771168b2493cf9cc8d5cc8ffb1787c5785fbd527aaa3bb03e1351946504bc33a5352b3814f1f363e8fc50233"}) syz_io_uring_setup(0x1868, &(0x7f0000000440)={0x0, 0xffffffff, 0x400, 0x4, 0x1ae, 0x0, r9}, &(0x7f0000000000)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r11, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) r12 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x60, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x2f}, 0x90) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r12, 0x40045532, &(0x7f0000000100)) 22.821040226s ago: executing program 1 (id=1150): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000020000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/36, 0x24}, {&(0x7f0000000040)=""/214, 0xd6}], 0x2, 0x4, 0xffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_pidfd_open(r0, 0x0) setns(r3, 0x6000000) 21.640145963s ago: executing program 1 (id=1152): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f000000010902"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000240)={{&(0x7f0000f9b000/0x1000)=nil, 0x1000}, 0x3}) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040)) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000000c0)=0x100000) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{0x0}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r4) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r5, 0x0) 17.699864409s ago: executing program 1 (id=1159): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="08000000200000714e1fb33ef60a24b2b6089496bbab41a6a4b3c368b8855d012cbd7000fcdbdf259aa6ffffffffffff1a000000140001000000011400ab63fe80000000000000009059fa2555fe48bdfd80df9ffcd7b6da55ff8187ad3de0363612763ac5193f0cdb801e298be26a28042fa57086240613f6bf4d862d677b8ae2b505bfc2f323d784b3e3497c1a72aeefbcaf0897a54e2211bfef77af0859efd1db5d710b05538aa2e29f86bf28532e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c083}, 0x24009010) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x6ce) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x5, 0xd00, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x2}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) ppoll(&(0x7f0000000040)=[{r2, 0x700}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 16.699114651s ago: executing program 1 (id=1163): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f0000000340), 0x0, 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000140)={r4}) io_uring_setup(0x66b, &(0x7f0000000240)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r7) 15.61703892s ago: executing program 1 (id=1165): syz_emit_ethernet(0xf01, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xecb, 0x0, 0x0, @dev, @mcast2, {[@routing], "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"}}}}}, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0x20) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22dc2ffb420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 15.006983781s ago: executing program 1 (id=1167): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2}, 0x18) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000340)) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffdbf, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESOCT=r2], 0x20}, 0x1, 0x3000000, 0x0, 0x24000840}, 0x11) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd601d104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54cd000090780000"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$kcm(0x2, 0x3, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$inet6(r7, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001140)="99", 0x1}, {&(0x7f0000002980)="f555c15b70", 0x5}], 0x2}}], 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000a00)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000004580)=""/4093, 0xffd}, {&(0x7f0000000140)=""/4092, 0xffc}, {&(0x7f0000001380)=""/118, 0x76}, {&(0x7f00000012c0)=""/102, 0x66}], 0x4}, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) dup(r9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.980792377s ago: executing program 2 (id=1178): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000001c0)="07fc8e67a3cf5c12783c72b848f753dde6c5bfff9b94aedf3ca75b42b65f4fed10c7d4a13b5ca72c7a7e8862c22ef2b0454692ae96", 0x0}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000001c0)="07fc8e67a3cf5c12783c72b848f753dde6c5bfff9b94aedf3ca75b42b65f4fed10c7d4a13b5ca72c7a7e8862c22ef2b0454692ae96", 0x0}, 0x20) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002d40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000000180)={0xa, 0x4e24, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="3cb7e9e5c30a05c41dd519ab070a9833851847c82c6d026f7b4ee0b1c320fdc6d96ca36805a6391803b3e8fc3368d09ad63ac641a01725d74c5ca1cc0c1bf15de37053461a3ce71085f4ee0119de596804b8a7908ab12870b18c494d7da9f493e4ddaaa3c7641dd3c6912d2e8cf1b05caa92589c36", 0x75}, {&(0x7f0000000080)="5a41ebd572f5d2d8ff3f72a27e21ca5f626c6118ec44809695db36876af41f72d59306ac536b9e44ae12f2079d7fb9a3865be89fea7f04a69cd89fd1cd01035ec20ebc3a2a662003fbb18fecc516288f27dddd8f53c9e3b57dcdb68661f27a881f49a8efbddff5f764ca77", 0x6b}, {&(0x7f0000000100)="40d72697eacc6b6e8a3b669390114c4a3d1fff31e1ac2c47161964f66d8eaccc5366651ad4c14bcf6f4e4f91", 0x2c}, {&(0x7f0000000280)="2d81b55d8ee6c037950ce2822e4359884a81a8512e8b0e63a897869f2fc405", 0x1f}, {&(0x7f0000000340)="57dfab5de4657b19eff9c8e57d754f2810dc4b9ff90c7da5c263d9138e21d609291049aec73902b0cac36fc3", 0x2c}, {&(0x7f0000000400)="73a3c4e08c6d4ee388f5b0d1238b9b4a50212a7a085d2c8eb455a5793b6aff9e4854d1dba289a304716d243eeb096c4ded35eda78afac8cf90faa514d51fac8404c9466536f4bdf77555659bdba9af542011fec55fa116a32207f7de28bc7401a95d01c32baafda134b8031c0b4aa938089acf3b298bf8b3f6bf65ad8673e1970c878afa2447db430a3f0c1912d263696d5b52780ade3e034584950c", 0x9c}, {&(0x7f0000000700)="b286663aac94cbcf25e4df5b2ef2fb87f4b9020e543f98da4863b10d40bbd8e1e757820a9111e8ced914b1905005d41b4c6a8eae4624c9853238100863c223ff6e72e4098505be600a290f610e4022f92ab97a00aab07fb407e59d83ebe2c8eb66b7d8110df891e0fa01f1b6bfb88b799bb97d01664e499d2b6fbebe96040970e33e", 0x82}, {&(0x7f00000022c0)="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", 0x8b4}], 0x8}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r2, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) fcntl$setown(r2, 0x8, 0xffffffffffffffff) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) sendmsg$inet(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)='z', 0x1}], 0x1}, 0x4080081) (async) sendmsg$inet(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)='z', 0x1}], 0x1}, 0x4080081) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="71664f304f41b0853ccc8d5f1cc93eb7f59ad5bf0b0c94d051253818a9991950a7791c8439c1429d48833586050c7ca64f78fdeaf4cd644281efeec95a419eb3f81db0ec45f202ded3506ee118a673fff58ce01630b9ba7417f53d7379e567c24c7535e4b4067a6956f40db0ae19256c491505d1b87be7eebaeb92a95af171cc8bc127ec34631e2ce09cbc2aa9eb6382c8ad3aad", 0x94}, {&(0x7f0000000380)="87d0d0da002dc65420288eab422a715a0e30b8ec591756665af1f26c4b17576695bb8e4065dfe476bbc2b388672f88cccc4bddc7454c50702863", 0x3a}], 0x2, &(0x7f0000000580)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x48}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@generic={0x83, 0xc, "8382dc644956b9746353"}, @rr={0x7, 0xf, 0xfd, [@loopback, @dev={0xac, 0x14, 0x14, 0x2c}, @local]}]}}}], 0xb0}, 0x40010) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/vlan0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 5.929927504s ago: executing program 4 (id=1179): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x200, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3, 0x0, 0x0, 0x1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) timerfd_gettime(0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_io_uring_setup(0x1f86, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0xa5}, 0x0, 0x0) unshare(0x400) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x40000000, 0x0, 0x0, 0xf0, 0x7, 0x0, 0xfffffffffffffffe, 0x2}, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)}, 0x4004805) 5.260041416s ago: executing program 4 (id=1180): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="08000000200000714e1fb33ef60a24b2b6089496bbab41a6a4b3c368b8855d012cbd7000fcdbdf259aa6ffffffffffff1a000000140001000000011400ab63fe80000000000000009059fa2555fe48bdfd80df9ffcd7b6da55ff8187ad3de0363612763ac5193f0cdb801e298be26a28042fa57086240613f6bf4d862d677b8ae2b505bfc2f323d784b3e3497c1a72aeefbcaf0897a54e2211bfef77af0859efd1db5d710b05538aa2e29f86bf28532e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c083}, 0x24009010) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x6ce) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x5, 0xd00, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x2}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) ppoll(&(0x7f0000000040)=[{r2, 0x700}], 0x1, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) 5.247386976s ago: executing program 2 (id=1181): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x2, @empty, 'veth1_to_bridge\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x0, @private}, 0xc4}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)=ANY=[@ANYBLOB="4000000010000100"/20, @ANYRES32=r5, @ANYBLOB="352b00000000000008000d00100000001800168014"], 0x40}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r6, 0x0) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @empty, 'veth1_to_bond\x00'}}, 0x1e) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r9, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2b, 0x0, 0xffffffffffffff40) socket$nl_netfilter(0x10, 0x3, 0xc) 4.159206083s ago: executing program 4 (id=1183): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="868f54b1bb"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000c80)="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", 0x34000, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300), 0xc) shutdown(r0, 0x1) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x0) close(0x3) 3.691762994s ago: executing program 2 (id=1184): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000040)=""/86, 0x56, 0x0, &(0x7f0000000280)=""/217, 0xd9}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x30, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote, 0x8}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast1, 0x7}, {@private=0xa010101}, {@rand_addr=0x64010101, 0xba}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @end]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) r6 = mmap$binder(&(0x7f0000aa6000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x1000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x80, 0x0, &(0x7f0000000480)=[@exit_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000003c0)={@flat=@binder={0x73622a85, 0x102, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f00000005c0)=""/4096, 0x1000, 0x0, 0xf}}, &(0x7f0000000440)={0x0, 0x18, 0x38}}, 0x40}, @decrefs={0x40046307, 0x1}, @increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x1}, @free_buffer={0x40086303, r6}, @register_looper], 0x52, 0x0, &(0x7f00000015c0)="e5db00cb22d59c0f2f99ebb6027b746a9cef877b3fa1cff60293160181384c1118af265df6d6e598e47e77efa383dfd2e32f7be97e9974b9a1a21d1ed6f3b665553b0f081421aa9dd38e813e32b42f4116b9"}) ioctl$FIOCLEX(r3, 0x5451) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(0xffffffffffffffff, &(0x7f0000004ac0)=[{&(0x7f0000002980)="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", 0x681}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r0}, 0x90) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001640)='/proc/sysvipc/sem\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r7, 0x0, 0x31, 0x0, &(0x7f0000002d00)="5c71f91b05c413550230b4c817a6284f597c529dd6d7ae6201c0a7c8484fc757c32e53ea7d406d8f4d06c6f8cb149cc28c", 0x0, 0x8, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x50) 2.328573613s ago: executing program 2 (id=1185): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) syz_io_uring_setup(0x47b8, &(0x7f0000000480)={0x0, 0xfffffffc, 0x40, 0x1}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x8e}]}}, 0x0, 0x2a}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='vegas\x00', 0x6) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=@gettaction={0xcc, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x3fff, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xcc}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$igmp(0x2, 0x3, 0x2) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r6, 0x0, 0xd0, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000b40)={0x29, 0x4, 0x0, {0x2, 0x2, 0x1, 0x0, [0x0]}}, 0x29) io_setup(0x9, &(0x7f0000000000)) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) r7 = open(&(0x7f0000000040)='./file0\x00', 0x147042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000140)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000002c0)='Y', 0x1}], 0x1, 0x0, 0x0, 0x12) 1.876847391s ago: executing program 4 (id=1186): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={@remote, @loopback, @remote, 0x0, 0x40, 0x0, 0x0, 0x40000000, 0x40100042, r3}) 1.544032311s ago: executing program 4 (id=1187): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r2, &(0x7f0000000340), 0x0, 0x0, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000180)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r3, 0xc01464a6, &(0x7f0000000140)={r4}) io_uring_setup(0x66b, &(0x7f0000000240)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r7) 1.497818102s ago: executing program 2 (id=1188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map, 0xffffffffffffffff, 0x18, 0xc, 0x0, @link_fd=r1}, 0x20) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f00000002c0)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r4, &(0x7f0000000000), 0x10) listen(r4, 0x0) r6 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a02, 0x0) capset(0x0, &(0x7f00000000c0)) r9 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x4, 0x10100, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff56}) io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0) r12 = syz_pidfd_open(r6, 0x0) process_mrelease(r12, 0x700000000000000) syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="e3eb000000008200200012800b000100697036746e7a0000100002800800140f1f00000004001300"], 0x40}}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000280), &(0x7f00000001c0)=0xffffffffffffff7a) 561.605543ms ago: executing program 4 (id=1189): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = open(&(0x7f0000002000)='./bus\x00', 0x14f942, 0x0) utimes(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000380)={{}, {0x0, 0x2710}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x1f) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @empty}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f00000003c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x2, 0x1, 0x0, "a330"}, @global=@item_012={0x2, 0x1, 0x4, 'gn'}, @global=@item_012={0x0, 0x1, 0x3}]}}, 0x0}, 0x0) 0s ago: executing program 2 (id=1190): r0 = memfd_create(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="08000000200000714e1fb33ef60a24b2b6089496bbab41a6a4b3c368b8855d012cbd7000fcdbdf259aa6ffffffffffff1a000000140001000000011400ab63fe80000000000000009059fa2555fe48bdfd80df9ffcd7b6da55ff8187ad3de0363612763ac5193f0cdb801e298be26a28042fa57086240613f6bf4d862d677b8ae2b505bfc2f323d784b3e3497c1a72aeefbcaf0897a54e2211bfef77af0859efd1db5d710b05538aa2e29f86bf28532e"], 0x4c}, 0x1, 0x0, 0x0, 0x400c083}, 0x24009010) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03000000110000000d60390170f74f9ef4"], 0xd8) write$binfmt_elf64(r0, &(0x7f00000005c0)=ANY=[], 0x6ce) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x5, 0xd00, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3, 0x2}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r3, 0x4, 0x2400) ppoll(&(0x7f0000000040)=[{r3, 0x700}], 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) kernel console output (not intermixed with test programs): te [ 322.417065][ T8704] bridge_slave_1: entered allmulticast mode [ 322.527806][ T8704] bridge_slave_1: entered promiscuous mode [ 322.828589][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.832749][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.833571][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.834983][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.836011][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 322.838127][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.943117][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.965137][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.166013][ T8704] team0: Port device team_slave_0 added [ 323.182098][ T8704] team0: Port device team_slave_1 added [ 323.314401][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.352190][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.513923][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.516898][ T25] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 323.648219][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.655226][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.751223][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.806848][ T25] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=c7.7e [ 323.816040][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.840183][ T8832] loop0: detected capacity change from 0 to 7 [ 323.867022][ T8832] Dev loop0: unable to read RDB block 7 [ 323.872616][ T8832] loop0: AHDI p4 [ 323.886787][ T8832] loop0: partition table partially beyond EOD, truncated [ 323.946423][ T25] usb 5-1: Product: syz [ 323.950658][ T25] usb 5-1: Manufacturer: syz [ 323.956290][ T25] usb 5-1: SerialNumber: syz [ 324.006046][ T25] usb 5-1: config 0 descriptor?? [ 324.178632][ T25] mvusb_mdio 5-1:0.0: probe with driver mvusb_mdio failed with error -5 [ 324.257139][ T8818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.271516][ T8704] hsr_slave_0: entered promiscuous mode [ 324.291886][ T8818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.351314][ T8704] hsr_slave_1: entered promiscuous mode [ 324.356571][ T25] usb 5-1: USB disconnect, device number 56 [ 324.508713][ T8843] netlink: 32 bytes leftover after parsing attributes in process `syz.2.762'. [ 324.876769][ T5237] Bluetooth: hci5: command tx timeout [ 325.227395][ T8817] chnl_net:caif_netlink_parms(): no params data found [ 326.706888][ T8817] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.748018][ T8817] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.770246][ T8817] bridge_slave_0: entered allmulticast mode [ 326.797612][ T8817] bridge_slave_0: entered promiscuous mode [ 326.868530][ T8817] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.887765][ T8817] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.913409][ T8817] bridge_slave_1: entered allmulticast mode [ 326.956782][ T5237] Bluetooth: hci5: command tx timeout [ 326.982049][ T8817] bridge_slave_1: entered promiscuous mode [ 327.217865][ T8817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.339155][ T8817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.755181][ T8817] team0: Port device team_slave_0 added [ 327.801469][ T8817] team0: Port device team_slave_1 added [ 327.854692][ T8881] loop0: detected capacity change from 0 to 7 [ 327.882531][ T8881] Dev loop0: unable to read RDB block 7 [ 327.908002][ T8881] loop0: AHDI p4 [ 327.911726][ T8881] loop0: partition table partially beyond EOD, truncated [ 328.119603][ T8883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.768'. [ 328.149380][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.178226][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.271304][ T8817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.313708][ T8817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.341405][ T8817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.445348][ T8817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.475178][ T8704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 328.557629][ T8704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 328.658256][ T8704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 328.900225][ T8704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 328.975001][ T8817] hsr_slave_0: entered promiscuous mode [ 329.036447][ T5237] Bluetooth: hci5: command tx timeout [ 329.056260][ T8817] hsr_slave_1: entered promiscuous mode [ 329.106397][ T8817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.114020][ T8817] Cannot create hsr debugfs directory [ 329.832973][ T8904] loop0: detected capacity change from 0 to 7 [ 329.858220][ T8904] Dev loop0: unable to read RDB block 7 [ 329.901863][ T8904] loop0: unable to read partition table [ 329.957652][ T8904] loop0: partition table beyond EOD, truncated [ 329.996695][ T8904] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 329.996695][ T8904] ) failed (rc=-5) [ 330.191890][ T8817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.256922][ T8817] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.365914][ T8912] netlink: 32 bytes leftover after parsing attributes in process `syz.2.776'. [ 330.520981][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.776'. [ 330.564549][ T8817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.564623][ T8817] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.610578][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.840504][ T8817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 330.840549][ T8817] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.946207][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.075180][ T8817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 331.075212][ T8817] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.116635][ T5237] Bluetooth: hci5: command tx timeout [ 331.148268][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.148352][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.195608][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.195692][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.383772][ T8704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.383803][ T8704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.692795][ T8925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.779'. [ 331.961140][ T8817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.001637][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.024394][ T8817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.060752][ T8817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.103838][ T8817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 332.454115][ T8704] veth0_vlan: entered promiscuous mode [ 332.603347][ T8704] veth1_vlan: entered promiscuous mode [ 333.003502][ T8704] veth0_macvtap: entered promiscuous mode [ 333.075979][ T8704] veth1_macvtap: entered promiscuous mode [ 333.146466][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.194919][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.221313][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.266458][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.266812][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.266836][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.266855][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 333.266871][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.298068][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.379250][ T8817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.383808][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.383827][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.383837][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.383848][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.383858][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.383869][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.383878][ T8704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.383889][ T8704] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.388726][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.403094][ T8704] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.403137][ T8704] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.403170][ T8704] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.403202][ T8704] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.559355][ T8817] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.584174][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.584309][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.641397][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.641513][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.860238][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.860262][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.040940][ T2552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.040968][ T2552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.232565][ T8817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.362133][ T8980] loop2: detected capacity change from 0 to 7 [ 334.440137][ T8980] Dev loop2: unable to read RDB block 7 [ 334.467012][ T8980] loop2: AHDI p1 p3 [ 334.472360][ T8980] loop2: partition table partially beyond EOD, truncated [ 334.506646][ T8980] loop2: p1 start 2048 is beyond EOD, truncated [ 334.616451][ T8976] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 334.854399][ T8993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.790'. [ 334.913815][ T8993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 334.961791][ T8817] veth0_vlan: entered promiscuous mode [ 334.992861][ T8817] veth1_vlan: entered promiscuous mode [ 335.123624][ T8817] veth0_macvtap: entered promiscuous mode [ 335.162924][ T8817] veth1_macvtap: entered promiscuous mode [ 335.284283][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.311223][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.339240][ T5232] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 335.363419][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.395579][ T9001] loop0: detected capacity change from 0 to 7 [ 335.435433][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.456455][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.467458][ T9001] Dev loop0: unable to read RDB block 7 [ 335.476906][ T9001] loop0: unable to read partition table [ 335.525007][ T9001] loop0: partition table beyond EOD, truncated [ 335.566472][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.579259][ T5232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.611740][ T9001] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 335.611740][ T9001] ) failed (rc=-5) [ 335.630409][ T5232] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.650594][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.657904][ T5232] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.700962][ T5232] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 335.751312][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.792307][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.813885][ T5232] usb 2-1: config 0 descriptor?? [ 335.889208][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.947793][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.021546][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.051347][ T9004] netlink: 108 bytes leftover after parsing attributes in process `syz.4.792'. [ 336.115727][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.152199][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.163306][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.176675][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.188924][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.203530][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.224451][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.244352][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.255982][ T8817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 336.268908][ T8817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.311050][ T8817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.392671][ T8817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.486495][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 336.508040][ T8817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.644290][ T8817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.681863][ T8817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.779497][ T9] usb 3-1: config 0 has no interfaces? [ 336.844815][ T9] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 336.950027][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.014117][ T9] usb 3-1: config 0 descriptor?? [ 337.062409][ T9025] misc userio: Invalid payload size [ 337.509435][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.581353][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.870258][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.923649][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.208952][ T5232] usbhid 2-1:0.0: can't add hid device: -71 [ 338.244546][ T5232] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 338.305445][ T5232] usb 2-1: USB disconnect, device number 38 [ 338.408269][ T9037] loop2: detected capacity change from 0 to 7 [ 338.446566][ T9037] Dev loop2: unable to read RDB block 7 [ 338.452198][ T9037] loop2: AHDI p1 p3 [ 338.470395][ T9037] loop2: partition table partially beyond EOD, truncated [ 338.536718][ T9037] loop2: p1 start 2048 is beyond EOD, truncated [ 339.057453][ T5232] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 339.296514][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 339.299223][ T5232] usb 2-1: config 0 has no interfaces? [ 339.299253][ T5232] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 339.299272][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.307970][ T5232] usb 2-1: config 0 descriptor?? [ 339.665097][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 339.675442][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 339.684139][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.715086][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.730804][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.767069][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.056219][ T9] usb 3-1: USB disconnect, device number 41 [ 340.132836][ T9063] loop0: detected capacity change from 0 to 7 [ 340.195723][ T9063] Dev loop0: unable to read RDB block 7 [ 340.224326][ T9063] loop0: unable to read partition table [ 340.245534][ T9066] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.803'. [ 340.269171][ T9063] loop0: partition table beyond EOD, truncated [ 340.328208][ T9063] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 340.328208][ T9063] ) failed (rc=-5) [ 340.764573][ T9061] chnl_net:caif_netlink_parms(): no params data found [ 341.094782][ T9061] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.135213][ T9061] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.167849][ T9061] bridge_slave_0: entered allmulticast mode [ 341.182689][ T9061] bridge_slave_0: entered promiscuous mode [ 341.209112][ T9061] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.266186][ T9061] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.291695][ T9061] bridge_slave_1: entered allmulticast mode [ 341.309618][ T9061] bridge_slave_1: entered promiscuous mode [ 341.460970][ T9061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.545236][ T9061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.591370][ T5286] usb 2-1: USB disconnect, device number 39 [ 341.836689][ T5237] Bluetooth: hci1: command tx timeout [ 341.991498][ T9061] team0: Port device team_slave_0 added [ 342.035006][ T9061] team0: Port device team_slave_1 added [ 342.126973][ T5281] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 342.147227][ T9111] fuse: Unknown parameter 'grt-nW]oup_id' [ 342.239681][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.256544][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.326187][ T9061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.350416][ T5281] usb 3-1: config 0 has an invalid interface number: 46 but max is 0 [ 342.363109][ T9061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.376549][ T9061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.416494][ T5281] usb 3-1: config 0 has no interface number 0 [ 342.442009][ T5281] usb 3-1: too many endpoints for config 0 interface 46 altsetting 120: 35, using maximum allowed: 30 [ 342.483438][ T5281] usb 3-1: config 0 interface 46 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 35 [ 342.508681][ T9061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.509999][ T5281] usb 3-1: config 0 interface 46 has no altsetting 0 [ 342.537748][ T5281] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 342.547375][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.566540][ T5281] usb 3-1: config 0 descriptor?? [ 342.576751][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 342.740861][ T9061] hsr_slave_0: entered promiscuous mode [ 342.789982][ T9061] hsr_slave_1: entered promiscuous mode [ 342.848704][ T9061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.856915][ T5281] usb 3-1: string descriptor 0 read error: -32 [ 342.877533][ T9061] Cannot create hsr debugfs directory [ 342.905463][ T5281] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 342.939606][ T5281] usb 3-1: USB disconnect, device number 42 [ 343.179581][ T9118] netlink: 80 bytes leftover after parsing attributes in process `syz.3.811'. [ 343.471162][ T9061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.885417][ T9061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.918259][ T5237] Bluetooth: hci1: command tx timeout [ 344.181422][ T9061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.447345][ T9135] loop2: detected capacity change from 0 to 7 [ 344.491715][ T9135] Dev loop2: unable to read RDB block 7 [ 344.508747][ T9061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.546619][ T9135] loop2: AHDI p1 p3 [ 344.560184][ T9135] loop2: partition table partially beyond EOD, truncated [ 344.596662][ T9135] loop2: p1 start 2048 is beyond EOD, truncated [ 345.050485][ T9061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 345.101606][ T9061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 345.216920][ T9061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 345.265057][ T9061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 345.971647][ T9061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.998902][ T5237] Bluetooth: hci1: command tx timeout [ 346.123076][ T9061] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.178058][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.185254][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.270913][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.278277][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.773367][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.005481][ T9061] veth0_vlan: entered promiscuous mode [ 347.074621][ T9061] veth1_vlan: entered promiscuous mode [ 347.244244][ T9061] veth0_macvtap: entered promiscuous mode [ 347.302773][ T9061] veth1_macvtap: entered promiscuous mode [ 347.395452][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.443787][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.443861][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.443884][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.443902][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.443919][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.443937][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.443953][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.443972][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.443987][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.444005][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 347.444021][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.445992][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.480532][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.491293][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.491317][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.491338][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.491356][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.491373][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.491390][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.491407][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.491426][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.491442][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.491459][ T9061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.491476][ T9061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.493153][ T9061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.511923][ T9061] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.511965][ T9061] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.511997][ T9061] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.512029][ T9061] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.907578][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.916116][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.918252][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.920186][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.920920][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 347.921264][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.079629][ T5237] Bluetooth: hci1: command tx timeout [ 348.114492][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.114517][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.343595][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.343621][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.854164][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 349.250259][ T25] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 349.253225][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.267018][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.267370][ T9157] bridge_slave_0: entered allmulticast mode [ 349.269717][ T9157] bridge_slave_0: entered promiscuous mode [ 349.284272][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.284356][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.284513][ T9157] bridge_slave_1: entered allmulticast mode [ 349.328117][ T9157] bridge_slave_1: entered promiscuous mode [ 349.451878][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 349.455849][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 349.470553][ T25] usb 5-1: config 253 has an invalid interface number: 202 but max is 0 [ 349.470576][ T25] usb 5-1: config 253 has an invalid descriptor of length 100, skipping remainder of the config [ 349.470592][ T25] usb 5-1: config 253 has no interface number 0 [ 349.470623][ T25] usb 5-1: config 253 interface 202 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3 [ 349.470643][ T25] usb 5-1: config 253 interface 202 altsetting 0 endpoint 0x3 has an invalid bInterval 109, changing to 7 [ 349.470670][ T25] usb 5-1: config 253 interface 202 altsetting 0 endpoint 0x3 has invalid maxpacket 1647, setting to 1024 [ 349.481832][ T25] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 349.481858][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.481874][ T25] usb 5-1: Product: syz [ 349.481885][ T25] usb 5-1: Manufacturer: syz [ 349.481898][ T25] usb 5-1: SerialNumber: syz [ 349.495192][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.509775][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.698740][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 349.773564][ T25] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 349.775605][ T2578] usb 5-1: Failed to submit usb control message: -71 [ 349.775672][ T2578] usb 5-1: unable to send the bmi data to the device: -71 [ 349.775687][ T2578] usb 5-1: unable to get target info from device [ 349.775699][ T2578] usb 5-1: could not get target info (-71) [ 349.775731][ T2578] usb 5-1: could not probe fw (-71) [ 349.799891][ T25] usb 5-1: USB disconnect, device number 57 [ 349.815605][ T9157] team0: Port device team_slave_0 added [ 349.840037][ T9157] team0: Port device team_slave_1 added [ 349.996958][ T5237] Bluetooth: hci4: command tx timeout [ 350.041140][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.041164][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.041194][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.043546][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.043564][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.043591][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.244802][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.830'. [ 350.426866][ T9157] hsr_slave_0: entered promiscuous mode [ 350.501871][ T9157] hsr_slave_1: entered promiscuous mode [ 350.521840][ T9157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.521930][ T9157] Cannot create hsr debugfs directory [ 350.956828][ T5281] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 351.148230][ T5281] usb 2-1: config 0 has no interfaces? [ 351.148278][ T5281] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 351.148309][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.151010][ T5281] usb 2-1: config 0 descriptor?? [ 351.373642][ T9157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.471465][ T5281] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 351.641872][ T9157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.656782][ T5281] usb 3-1: Using ep0 maxpacket: 32 [ 351.659042][ T5281] usb 3-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 352.034107][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.046193][ T5284] usb 2-1: USB disconnect, device number 40 [ 352.077068][ T5237] Bluetooth: hci4: command tx timeout [ 352.165756][ T5281] usb 3-1: config 0 descriptor?? [ 352.194905][ T5281] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 352.209843][ T9157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.465955][ T9157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.503202][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 352.503223][ T29] audit: type=1326 audit(1724884509.562:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9206 comm="syz.4.836" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11b5f79ef9 code=0x0 [ 352.744889][ T9210] tipc: Can't bind to reserved service type 0 [ 352.916850][ T5281] gspca_sunplus: reg_w_riv err -110 [ 352.942531][ T5281] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 353.047284][ T9157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 353.112371][ T9157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 353.230122][ T9157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 353.285270][ T9157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 353.418810][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.493422][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.619308][ T9216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.634675][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.657626][ T9216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.685775][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.714409][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.721618][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.783726][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.791011][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.997233][ T5237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 354.007812][ T5237] Bluetooth: hci2: Injecting HCI hardware error event [ 354.016129][ T5237] Bluetooth: hci2: hardware error 0x00 [ 354.070590][ T9157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.158045][ T5230] Bluetooth: hci4: command tx timeout [ 354.232910][ T9157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.366626][ T5281] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 354.480208][ T9157] veth0_vlan: entered promiscuous mode [ 354.586718][ T5281] usb 2-1: Using ep0 maxpacket: 32 [ 354.602367][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 91, changing to 10 [ 354.620045][ T9157] veth1_vlan: entered promiscuous mode [ 354.637653][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9216, setting to 1024 [ 354.694080][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 354.740840][ T5281] usb 2-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 354.760751][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.773261][ T9157] veth0_macvtap: entered promiscuous mode [ 354.793981][ T5281] usb 2-1: config 0 descriptor?? [ 354.825229][ T9157] veth1_macvtap: entered promiscuous mode [ 354.911635][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.930013][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.952170][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.974852][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.002272][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.021284][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.041687][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.054252][ T9225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.070632][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.094247][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.118914][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.135514][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.156596][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.175853][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.189193][ T25] usb 3-1: USB disconnect, device number 43 [ 355.257209][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.284271][ T9225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.299993][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.325694][ T5281] usbhid 2-1:0.0: can't add hid device: -71 [ 355.332694][ T5281] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 355.366179][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.386589][ T5281] usb 2-1: USB disconnect, device number 41 [ 355.424447][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.446504][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.483350][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.507945][ T9236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.529826][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.554253][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.574870][ T9238] netlink: 32 bytes leftover after parsing attributes in process `syz.2.846'. [ 355.584517][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.620948][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.637176][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.670235][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.682098][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.846'. [ 355.691937][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.705370][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.715643][ T9157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.727420][ T9157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.738317][ T9236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.753884][ T9157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.775308][ C1] Unknown status report in ack skb [ 355.797498][ T9157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.850089][ T9157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.899678][ T9157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.926376][ T9157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.079621][ T5237] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 356.242855][ T5237] Bluetooth: hci4: command tx timeout [ 356.497239][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.576620][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.657572][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.677664][ T25] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 356.687546][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.881055][ T5237] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 356.890100][ T5237] Bluetooth: hci5: Injecting HCI hardware error event [ 356.895092][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.905372][ T5237] Bluetooth: hci5: hardware error 0x00 [ 356.917155][ T25] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 356.929696][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.938903][ T25] usb 3-1: Product: syz [ 356.943111][ T25] usb 3-1: Manufacturer: syz [ 356.947895][ T25] usb 3-1: SerialNumber: syz [ 356.958444][ T25] usb 3-1: config 0 descriptor?? [ 357.202882][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.213826][ T9254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.409113][ T9254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.586621][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.742403][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.518093][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.631559][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.687486][ T25] usb 3-1: non-Atmel transceiver xxxx1bb6 [ 358.792290][ T9283] loop0: detected capacity change from 0 to 7 [ 358.800732][ T9283] Dev loop0: unable to read RDB block 7 [ 358.817445][ T9283] loop0: AHDI p4 [ 358.821240][ T9283] loop0: partition table partially beyond EOD, truncated [ 358.890350][ T25] usb 3-1: Firmware version (0.0) predates our first public release. [ 358.900282][ T9252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.926431][ T25] usb 3-1: Please update to version 0.2 or newer [ 358.937882][ T25] usb 3-1: atusb_probe: initialization failed, error = -19 [ 358.988383][ T9252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.013449][ T9290] netlink: 32 bytes leftover after parsing attributes in process `syz.0.858'. [ 359.046957][ T5286] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 359.066480][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.858'. [ 359.149090][ T5283] usb 3-1: USB disconnect, device number 44 [ 359.226555][ T5286] usb 2-1: device descriptor read/64, error -71 [ 359.277638][ T5237] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 359.303946][ T9293] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 359.556460][ T5286] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 359.726441][ T5286] usb 2-1: device descriptor read/64, error -71 [ 359.860268][ T5286] usb usb2-port1: attempt power cycle [ 360.327343][ T5286] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 360.388294][ T5286] usb 2-1: device descriptor read/8, error -71 [ 360.633743][ T9334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 360.686540][ T5286] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 360.756099][ T5286] usb 2-1: device descriptor read/8, error -71 [ 360.901064][ T5286] usb usb2-port1: unable to enumerate USB device [ 361.079860][ T9339] loop0: detected capacity change from 0 to 7 [ 361.107569][ T9339] Dev loop0: unable to read RDB block 7 [ 361.117136][ T9339] loop0: AHDI p4 [ 361.121057][ T9339] loop0: partition table partially beyond EOD, truncated [ 361.234083][ T9343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.871'. [ 361.249746][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 361.259337][ C0] Unknown status report in ack skb [ 361.270502][ T9342] loop0: detected capacity change from 0 to 7 [ 361.281071][ T9342] Dev loop0: unable to read RDB block 7 [ 361.287341][ T9342] loop0: unable to read partition table [ 361.293612][ T9342] loop0: partition table beyond EOD, truncated [ 361.316477][ T9342] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 361.316477][ T9342] ) failed (rc=-5) [ 361.616672][ T5286] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 362.080088][ T9360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.137343][ T9360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.456440][ T5226] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 362.648498][ T5226] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.693805][ T5226] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 362.731823][ T5226] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 362.764878][ T5226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.791434][ T5226] usb 2-1: config 0 descriptor?? [ 362.818212][ T5226] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 362.840796][ T9368] netlink: 32 bytes leftover after parsing attributes in process `syz.3.878'. [ 362.854667][ T5226] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 362.884292][ T5226] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 363.037718][ T5226] usb 2-1: USB disconnect, device number 46 [ 363.385802][ T9370] netlink: 32 bytes leftover after parsing attributes in process `syz.0.879'. [ 363.491023][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.879'. [ 364.006801][ T5284] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 364.023502][ T9381] loop0: detected capacity change from 0 to 7 [ 364.054523][ T9381] Dev loop0: unable to read RDB block 7 [ 364.119116][ T9381] loop0: AHDI p4 [ 364.130413][ T9381] loop0: partition table partially beyond EOD, truncated [ 364.146645][ T1762] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 364.336392][ T1762] usb 2-1: Using ep0 maxpacket: 16 [ 364.336583][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 364.360826][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.396197][ T5284] usb 3-1: config 0 has an invalid descriptor of length 152, skipping remainder of the config [ 364.456542][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.467847][ T5284] usb 3-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 364.512865][ T1762] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 364.531210][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.572228][ T1762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.577871][ T5286] usb 5-1: unable to get BOS descriptor or descriptor too short [ 364.598898][ T5284] usb 3-1: config 0 descriptor?? [ 364.612983][ T5286] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 364.672828][ T5286] usb 5-1: can't read configurations, error -71 [ 364.673973][ T1762] usb 2-1: config 0 descriptor?? [ 365.191609][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.291200][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.421855][ T1762] playstation 0003:054C:05C4.000B: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.1-1/input0 [ 366.520742][ T5284] usb 3-1: string descriptor 0 read error: -71 [ 366.598268][ T5284] usb 3-1: USB disconnect, device number 46 [ 366.929086][ T1762] playstation 0003:054C:05C4.000B: Failed to retrieve feature with reportID 18: -71 [ 366.956961][ T1762] playstation 0003:054C:05C4.000B: Failed to retrieve DualShock4 pairing info: -71 [ 366.990913][ T1762] playstation 0003:054C:05C4.000B: Failed to get MAC address from DualShock4 [ 367.019923][ T1762] playstation 0003:054C:05C4.000B: Failed to create dualshock4. [ 367.081807][ T1762] playstation 0003:054C:05C4.000B: probe with driver playstation failed with error -71 [ 367.113144][ T1762] usb 2-1: USB disconnect, device number 47 [ 367.166927][ T5284] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 367.297859][ T9402] loop0: detected capacity change from 0 to 7 [ 367.344333][ T9402] Dev loop0: unable to read RDB block 7 [ 367.373760][ T9402] loop0: unable to read partition table [ 367.388228][ T9402] loop0: partition table beyond EOD, truncated [ 367.396410][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 367.405006][ T9402] loop_reread_partitions: partition scan of loop0 (被xd) failed (rc=-5) [ 367.406152][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.481396][ T5284] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.491197][ T9388] loop2: detected capacity change from 0 to 7 [ 367.505754][ T9388] Dev loop2: unable to read RDB block 7 [ 367.515387][ T9388] loop2: AHDI p2 p3 [ 367.519911][ T9388] loop2: partition table partially beyond EOD, truncated [ 367.534781][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 367.605100][ T4680] Dev loop0: unable to read RDB block 7 [ 367.620646][ T5284] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 367.632169][ T4680] loop0: unable to read partition table [ 367.656785][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.669272][ T4680] loop0: partition table beyond EOD, truncated [ 367.702426][ T5284] usb 3-1: config 0 descriptor?? [ 367.732145][ T29] audit: type=1326 audit(1724884524.792:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9410 comm="syz.0.892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe4f579ef9 code=0x0 [ 368.161994][ T5284] shield 0003:0955:7214.000C: unknown main item tag 0x4 [ 368.216606][ T5284] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 368.223637][ T5284] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 368.265369][ T5284] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 368.306080][ T5284] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 368.363149][ T5284] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 368.481102][ T5284] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 368.547850][ T5284] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 368.712348][ T8] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 368.725293][ T5284] usb 3-1: USB disconnect, device number 47 [ 368.757432][ T8] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 368.869974][ T8] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 369.013623][ T8] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 372.049677][ T1762] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 372.296612][ T1762] usb 5-1: Using ep0 maxpacket: 32 [ 372.312426][ T1762] usb 5-1: config index 0 descriptor too short (expected 8484, got 36) [ 372.355436][ T1762] usb 5-1: config 0 has an invalid descriptor of length 29, skipping remainder of the config [ 372.389611][ T1762] usb 5-1: config 0 has no interfaces? [ 372.416067][ T1762] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 372.451431][ T1762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.559310][ T1762] usb 5-1: config 0 descriptor?? [ 372.879541][ T9445] FAULT_INJECTION: forcing a failure. [ 372.879541][ T9445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.974436][ T9445] CPU: 1 UID: 0 PID: 9445 Comm: syz.2.901 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 372.985090][ T9445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 372.995181][ T9445] Call Trace: [ 372.998476][ T9445] [ 373.001430][ T9445] dump_stack_lvl+0x241/0x360 [ 373.006148][ T9445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.011375][ T9445] ? __pfx__printk+0x10/0x10 [ 373.015990][ T9445] ? __pfx_lock_release+0x10/0x10 [ 373.021041][ T9445] should_fail_ex+0x3b0/0x4e0 [ 373.025737][ T9445] _copy_from_iter+0x1f6/0x1960 [ 373.030608][ T9445] ? __virt_addr_valid+0x183/0x530 [ 373.035728][ T9445] ? __pfx_lock_release+0x10/0x10 [ 373.040775][ T9445] ? __alloc_skb+0x28f/0x440 [ 373.045373][ T9445] ? __pfx__copy_from_iter+0x10/0x10 [ 373.050675][ T9445] ? __virt_addr_valid+0x183/0x530 [ 373.055789][ T9445] ? __virt_addr_valid+0x183/0x530 [ 373.060904][ T9445] ? __virt_addr_valid+0x45f/0x530 [ 373.066024][ T9445] ? __check_object_size+0x49c/0x900 [ 373.071319][ T9445] netlink_sendmsg+0x73d/0xcb0 [ 373.076101][ T9445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.081400][ T9445] ? __import_iovec+0x536/0x820 [ 373.086265][ T9445] ? aa_sock_msg_perm+0x91/0x160 [ 373.091221][ T9445] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 373.096520][ T9445] ? security_socket_sendmsg+0x87/0xb0 [ 373.101999][ T9445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.107299][ T9445] __sock_sendmsg+0x221/0x270 [ 373.112027][ T9445] ____sys_sendmsg+0x525/0x7d0 [ 373.116811][ T9445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.122122][ T9445] __sys_sendmsg+0x2b0/0x3a0 [ 373.126733][ T9445] ? __pfx___sys_sendmsg+0x10/0x10 [ 373.131865][ T9445] ? vfs_write+0x7c4/0xc90 [ 373.136336][ T9445] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.142680][ T9445] ? do_syscall_64+0x100/0x230 [ 373.147459][ T9445] ? do_syscall_64+0xb6/0x230 [ 373.152144][ T9445] do_syscall_64+0xf3/0x230 [ 373.156655][ T9445] ? clear_bhb_loop+0x35/0x90 [ 373.161343][ T9445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.167248][ T9445] RIP: 0033:0x7f99d0779ef9 [ 373.171671][ T9445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.191283][ T9445] RSP: 002b:00007f99d01ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.199719][ T9445] RAX: ffffffffffffffda RBX: 00007f99d0915f80 RCX: 00007f99d0779ef9 [ 373.207708][ T9445] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 373.215699][ T9445] RBP: 00007f99d01ff090 R08: 0000000000000000 R09: 0000000000000000 [ 373.223691][ T9445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.231676][ T9445] R13: 0000000000000000 R14: 00007f99d0915f80 R15: 00007f99d0a3fa28 [ 373.239711][ T9445] [ 373.983919][ T9470] dvmrp0: entered allmulticast mode [ 374.010182][ T9471] dvmrp0: left allmulticast mode [ 374.223879][ T9474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.298758][ T9474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.491709][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 374.665172][ T9481] loop0: detected capacity change from 0 to 7 [ 374.677337][ T9481] Dev loop0: unable to read RDB block 7 [ 374.694369][ T9481] loop0: AHDI p4 [ 374.702133][ T9481] loop0: partition table partially beyond EOD, truncated [ 374.930114][ T1762] usb 5-1: USB disconnect, device number 60 [ 374.966761][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 375.226652][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 375.262371][ T9] usb 2-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=94.d7 [ 375.295794][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.305277][ T9] usb 2-1: Product: syz [ 375.326135][ T9] usb 2-1: Manufacturer: syz [ 375.352367][ T9] usb 2-1: SerialNumber: syz [ 375.382855][ T9] usb 2-1: config 0 descriptor?? [ 375.393456][ T9] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 375.478576][ T1762] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 375.676720][ T1762] usb 5-1: device descriptor read/64, error -71 [ 375.966716][ T1762] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 376.129216][ T9] usb 2-1: USB disconnect, device number 48 [ 376.138064][ T1762] usb 5-1: device descriptor read/64, error -71 [ 376.281271][ T1762] usb usb5-port1: attempt power cycle [ 376.505396][ T9513] loop0: detected capacity change from 0 to 7 [ 376.523790][ T9513] Dev loop0: unable to read RDB block 7 [ 376.539955][ T9513] loop0: AHDI p4 [ 376.560272][ T9513] loop0: partition table partially beyond EOD, truncated [ 376.706877][ T1762] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 376.767315][ T1762] usb 5-1: device descriptor read/8, error -71 [ 377.078634][ T1762] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 377.096418][ T5232] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 377.150640][ T1762] usb 5-1: device descriptor read/8, error -71 [ 377.286954][ T1762] usb usb5-port1: unable to enumerate USB device [ 377.293346][ T5232] usb 3-1: device descriptor read/64, error -71 [ 377.592561][ T5232] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 377.769217][ T5232] usb 3-1: device descriptor read/64, error -71 [ 377.857924][ T9511] loop2: detected capacity change from 0 to 7 [ 377.895955][ T9511] Dev loop2: unable to read RDB block 7 [ 377.901946][ T9511] loop2: AHDI p2 p3 [ 377.907132][ T9511] loop2: partition table partially beyond EOD, truncated [ 377.917808][ T5232] usb usb3-port1: attempt power cycle [ 378.346663][ T5232] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 378.406721][ T5232] usb 3-1: device descriptor read/8, error -71 [ 378.726558][ T5232] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 378.795232][ T5232] usb 3-1: device descriptor read/8, error -71 [ 378.939847][ T5232] usb usb3-port1: unable to enumerate USB device [ 378.972605][ T9541] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.930'. [ 379.421224][ T5226] IPVS: starting estimator thread 0... [ 379.439922][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.446409][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.589401][ T9548] IPVS: using max 21 ests per chain, 50400 per kthread [ 379.622663][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804bdcbc00: rx timeout, send abort [ 379.631568][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804bdcbc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 379.969915][ T4680] Dev loop2: unable to read RDB block 7 [ 379.995653][ T4680] loop2: AHDI p2 p3 [ 380.015547][ T4680] loop2: partition table partially beyond EOD, truncated [ 380.096722][ T9561] netlink: 'syz.2.934': attribute type 5 has an invalid length. [ 380.287227][ T5283] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 380.406766][ T9569] loop0: detected capacity change from 0 to 7 [ 380.424069][ T9569] Dev loop0: unable to read RDB block 7 [ 380.435863][ T9569] loop0: AHDI p4 [ 380.448029][ T9569] loop0: partition table partially beyond EOD, truncated [ 380.486487][ T5284] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 380.516458][ T5283] usb 5-1: config 0 interface 0 has no altsetting 0 [ 380.523415][ T5283] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 380.555972][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.613105][ T5283] usb 5-1: config 0 descriptor?? [ 380.686588][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 380.698670][ T5284] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 380.738115][ T5284] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 380.778779][ T5284] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.862639][ T5284] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.909738][ T5284] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 380.986518][ T5284] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 381.046381][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.096728][ T5284] usbtmc 2-1:16.0: bulk endpoints not found [ 381.514374][ T9550] netlink: 'syz.4.931': attribute type 10 has an invalid length. [ 381.523168][ T9550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.542053][ T9550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 381.596074][ T9585] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 381.602656][ T9585] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 381.613307][ T9550] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 381.658855][ T9585] vhci_hcd vhci_hcd.0: Device attached [ 381.716708][ T5284] usb 2-1: USB disconnect, device number 49 [ 381.760810][ T9587] vhci_hcd: connection closed [ 381.766561][ T5226] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 381.767423][ T35] vhci_hcd: stop threads [ 381.818269][ T35] vhci_hcd: release socket [ 381.840784][ T35] vhci_hcd: disconnect device [ 381.859730][ T5232] vhci_hcd: vhci_device speed not set [ 381.938593][ T5226] usb 3-1: device descriptor read/64, error -71 [ 381.984272][ T5283] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 382.004184][ T9596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.066869][ T9596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.221709][ T9550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.230457][ T5226] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 382.274038][ T9550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.301398][ T5283] usb 5-1: USB disconnect, device number 65 [ 382.403605][ T5226] usb 3-1: device descriptor read/64, error -71 [ 382.527792][ T5226] usb usb3-port1: attempt power cycle [ 382.976667][ T5226] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 383.038140][ T5226] usb 3-1: device descriptor read/8, error -71 [ 383.306571][ T5226] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 383.397165][ T5226] usb 3-1: device descriptor read/8, error -71 [ 383.526885][ T5226] usb usb3-port1: unable to enumerate USB device [ 384.700754][ T9605] loop2: detected capacity change from 0 to 7 [ 384.719940][ T9605] Dev loop2: unable to read RDB block 7 [ 384.730315][ T9605] loop2: AHDI p2 p3 [ 384.734315][ T9605] loop2: partition table partially beyond EOD, truncated [ 385.472549][ T9628] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 385.705905][ T4680] Dev loop2: unable to read RDB block 7 [ 385.716459][ T4680] loop2: AHDI p2 p3 [ 385.720395][ T4680] loop2: partition table partially beyond EOD, truncated [ 386.078308][ T5226] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 386.257602][ T5226] usb 3-1: device descriptor read/64, error -71 [ 386.537027][ T5226] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 386.738394][ T5226] usb 3-1: device descriptor read/64, error -71 [ 386.897095][ T5226] usb usb3-port1: attempt power cycle [ 387.336459][ T5226] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 387.371915][ T9652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.958'. [ 387.396506][ T5226] usb 3-1: device descriptor read/8, error -71 [ 387.424928][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.958'. [ 387.510767][ T9656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.590136][ T9656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.608838][ T9656] usb usb8: usbfs: process 9656 (syz.3.959) did not claim interface 0 before use [ 387.676867][ T5226] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 387.748570][ T5226] usb 3-1: device descriptor read/8, error -71 [ 387.866858][ T5226] usb usb3-port1: unable to enumerate USB device [ 388.133984][ T5284] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 388.229736][ T9673] netlink: 28 bytes leftover after parsing attributes in process `syz.0.963'. [ 388.359165][ T5284] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 388.428939][ T5284] usb 5-1: config 0 has no interface number 0 [ 388.522815][ T5284] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 388.676033][ T5284] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 388.726277][ T5284] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 388.753582][ T5284] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 388.764790][ T5284] usb 5-1: Product: syz [ 388.773209][ T5284] usb 5-1: Manufacturer: syz [ 388.778706][ T5284] usb 5-1: SerialNumber: syz [ 388.807633][ T5284] usb 5-1: config 0 descriptor?? [ 388.816228][ T5284] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 388.843141][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 388.890476][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 388.940026][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 388.969665][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 389.034485][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 389.092989][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 389.128491][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 389.156179][ T5284] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 389.208472][ T5284] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 389.294725][ T5284] usb 5-1: USB disconnect, device number 66 [ 389.335582][ T5284] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 389.432485][ T5284] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 389.483933][ T5284] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 389.521465][ T5284] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 389.543417][ T5284] keyspan 5-1:0.107: device disconnected [ 389.617173][ T9701] netlink: 32 bytes leftover after parsing attributes in process `syz.3.971'. [ 389.783431][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.971'. [ 390.003986][ T9712] delete_channel: no stack [ 390.380371][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.536686][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.794940][ T5226] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 391.060729][ T5226] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 391.102739][ T5226] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 391.133801][ T5226] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 391.186444][ T5226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.241920][ T9718] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 391.262958][ T5226] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 391.540846][ T5284] usb 5-1: USB disconnect, device number 67 [ 391.569406][ T9744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.600694][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.984'. [ 391.635634][ T9744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.985905][ T9751] netlink: 32 bytes leftover after parsing attributes in process `syz.1.986'. [ 392.023908][ T9751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 392.410516][ T9761] loop0: detected capacity change from 0 to 7 [ 392.436563][ T9761] Dev loop0: unable to read RDB block 7 [ 392.450933][ T9761] loop0: AHDI p4 [ 392.464451][ T9761] loop0: partition table partially beyond EOD, truncated [ 393.196494][ T5237] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 393.206771][ T5237] Bluetooth: hci0: Injecting HCI hardware error event [ 393.215801][ T5237] Bluetooth: hci0: hardware error 0x00 [ 393.642522][ T9774] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 393.920883][ T9782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 394.749652][ T9792] netlink: 32 bytes leftover after parsing attributes in process `syz.1.998'. [ 394.842334][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.998'. [ 395.276442][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 395.478300][ T9802] netlink: 20 bytes leftover after parsing attributes in process `syz.3.999'. [ 395.716510][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.787068][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.964440][ T9814] loop2: detected capacity change from 0 to 7 [ 395.991817][ T9814] Dev loop2: unable to read RDB block 7 [ 396.006438][ T9814] loop2: AHDI p1 p3 [ 396.011474][ T9814] loop2: partition table partially beyond EOD, truncated [ 396.032613][ T9814] loop2: p1 start 2048 is beyond EOD, truncated [ 396.053904][ T9815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 396.197048][ T48] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 396.415971][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 396.437052][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.517488][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 396.568719][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 396.607508][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.668907][ T48] usb 2-1: config 0 descriptor?? [ 396.698124][ T48] hub 2-1:0.0: USB hub found [ 396.906549][ T48] hub 2-1:0.0: 1 port detected [ 397.319199][ T48] hub 2-1:0.0: activate --> -90 [ 397.617839][ T48] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 397.656805][ T48] usb 2-1: USB disconnect, device number 50 [ 398.706666][ T9850] delete_channel: no stack [ 399.247607][ T9857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1016'. [ 399.286785][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.359171][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.568011][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.618687][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.845000][ T9878] vivid-000: disconnect [ 399.854292][ T9878] vivid-000: reconnect [ 401.535704][ T9898] Cannot find add_set index 0 as target [ 401.579400][ T9898] Cannot find add_set index 0 as target [ 402.415914][ T9911] delete_channel: no stack [ 402.583690][ T9913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 402.707306][ T8] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 402.919156][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 402.949213][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.976269][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.026529][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 403.085220][ T9921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1032'. [ 403.103473][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 403.144439][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1032'. [ 403.146111][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.164438][ C1] Unknown status report in ack skb [ 403.184783][ T8] usb 5-1: config 0 descriptor?? [ 403.614897][ T8] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 403.652076][ T8] microsoft 0003:045E:07DA.000D: unknown main item tag 0x0 [ 403.666509][ T5226] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 403.692015][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.000D/input/input21 [ 403.891198][ T8] input input21: event field not found [ 403.908803][ T5226] usb 2-1: Using ep0 maxpacket: 32 [ 403.937938][ T5226] usb 2-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 403.968802][ T5226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.051844][ T8] microsoft 0003:045E:07DA.000D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 404.066573][ T5226] usb 2-1: Product: syz [ 404.100924][ T5226] usb 2-1: Manufacturer: syz [ 404.115966][ T5226] usb 2-1: SerialNumber: syz [ 404.126743][ T8] usb 5-1: USB disconnect, device number 68 [ 404.213963][ T8] input input21: event field not found [ 404.217590][ T5226] usb 2-1: config 0 descriptor?? [ 404.275852][ T5226] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 404.304310][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87 [ 404.331994][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 404.351343][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 404.370877][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 404.380815][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 404.396249][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 404.460658][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 404.482779][ T9929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.530664][ T5226] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 404.573374][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 404.600859][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 404.622267][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 404.628319][ T9929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.641024][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 404.672529][ T5226] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 404.754425][ T5226] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 404.810865][ T5226] usb 2-1: USB disconnect, device number 51 [ 404.875621][ T5226] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 404.988375][ T5226] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 405.050188][ T5226] keyspan 2-1:0.0: device disconnected [ 405.356580][ T9956] delete_channel: no stack [ 405.436886][ T5226] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 405.640583][ T9959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 405.657260][ T5226] usb 2-1: Using ep0 maxpacket: 8 [ 405.696491][ T5226] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 405.704643][ T5226] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.793505][ T5226] usb 2-1: config 0 has no interface number 0 [ 405.810520][ T5226] usb 2-1: config 0 interface 52 has no altsetting 0 [ 405.851086][ T5226] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 405.862192][ T5226] usb 2-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 405.875240][ T5226] usb 2-1: Product: syz [ 405.882682][ T5226] usb 2-1: Manufacturer: syz [ 405.907985][ T5226] usb 2-1: SerialNumber: syz [ 405.949886][ T5226] usb 2-1: config 0 descriptor?? [ 406.273550][ T9977] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1048'. [ 406.392279][ T9929] Context (ID=0x0) not attached to queue pair (handle=0x1:0x0) [ 406.404200][ T9977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1048'. [ 406.439159][ T5226] usb 2-1: USB disconnect, device number 52 [ 406.756773][ T5237] Bluetooth: to_multiplier 0 < 10 [ 407.374175][ T9973] loop2: detected capacity change from 0 to 7 [ 407.405572][ T9973] Dev loop2: unable to read RDB block 7 [ 407.424863][ T9973] loop2: AHDI p2 p3 [ 407.438577][ T9973] loop2: partition table partially beyond EOD, truncated [ 407.622296][ T9998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1051'. [ 407.814385][T10000] delete_channel: no stack [ 408.806498][ T5237] Bluetooth: hci4: command tx timeout [ 408.858868][T10009] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1056'. [ 409.476665][ T48] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 409.505070][T10022] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1059'. [ 409.525895][ T4680] Dev loop2: unable to read RDB block 7 [ 409.544060][ T4680] loop2: AHDI p2 p3 [ 409.573444][ T4680] loop2: partition table partially beyond EOD, truncated [ 409.706647][ T48] usb 2-1: Using ep0 maxpacket: 8 [ 409.720374][ T48] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 409.753905][ T48] usb 2-1: config 1 interface 0 has no altsetting 0 [ 409.783482][ T48] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.40 [ 409.807198][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.840310][ T48] usb 2-1: Product: syz [ 409.880443][ T48] usb 2-1: Manufacturer: syz [ 409.909400][ T48] usb 2-1: SerialNumber: syz [ 409.931053][T10024] random: crng reseeded on system resumption [ 411.173384][T10041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.205262][T10041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.218270][T10042] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1064'. [ 411.456742][ T5283] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 411.551523][T10047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1068'. [ 411.656569][ T5283] usb 3-1: device descriptor read/64, error -71 [ 411.967805][ T5283] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 412.166755][ T5283] usb 3-1: device descriptor read/64, error -71 [ 412.347196][ T5283] usb usb3-port1: attempt power cycle [ 412.378222][ T48] usbhid 2-1:1.0: can't add hid device: -71 [ 412.406673][ T48] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 412.494987][ T48] usb 2-1: USB disconnect, device number 53 [ 412.642453][ T29] audit: type=1400 audit(1724884569.702:467): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=381CD2A12F2F pid=10061 comm="syz.1.1072" [ 412.698048][T10067] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1071'. [ 412.787055][ T5283] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 412.841612][ T5283] usb 3-1: device descriptor read/8, error -71 [ 412.881609][T10067] : entered promiscuous mode [ 412.901801][T10068] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1073'. [ 413.086567][ T48] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 413.127078][ T5283] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 413.193182][ T5283] usb 3-1: device descriptor read/8, error -71 [ 413.300177][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 413.322824][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59391, setting to 1024 [ 413.345952][ T48] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 413.368536][ T5283] usb usb3-port1: unable to enumerate USB device [ 413.389687][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.409601][ T48] usb 2-1: config 0 descriptor?? [ 413.427286][T10066] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 413.444502][ T48] gspca_main: spca561-2.14.0 probing abcd:cdee [ 413.666787][T10066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.705651][T10066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.801881][T10081] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1076'. [ 413.934949][T10081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1076'. [ 413.978103][ T48] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 414.003822][ T48] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 414.011549][T10085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1077'. [ 414.021600][ T48] usb 2-1: MIDIStreaming interface descriptor not found [ 414.705298][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1079'. [ 415.042334][T10098] loop2: detected capacity change from 0 to 7 [ 415.051430][T10098] Dev loop2: unable to read RDB block 7 [ 415.060343][T10098] loop2: AHDI p1 p3 [ 415.066963][T10098] loop2: partition table partially beyond EOD, truncated [ 415.082643][T10098] loop2: p1 start 2048 is beyond EOD, truncated [ 415.548528][T10112] fuse: Bad value for 'group_id' [ 415.564594][T10112] fuse: Bad value for 'group_id' [ 415.598948][ T1762] usb 2-1: USB disconnect, device number 54 [ 416.256682][ T1762] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 416.266470][ T8] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 416.462426][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 416.469937][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=b0.23 [ 416.503108][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.513141][T10129] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1092'. [ 416.532235][ T8] usb 5-1: config 0 descriptor?? [ 416.539981][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.545707][ T8] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 416.591610][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.612148][ T1762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 416.669503][ T1762] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.689557][ T1762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.716253][ T1762] usb 2-1: config 0 descriptor?? [ 416.753642][T10121] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1090'. [ 416.785601][T10121] netem: invalid attributes len -16 [ 416.798374][T10121] netem: change failed [ 416.901058][ T4665] bcm5974 5-1:0.0: could not read from device [ 416.941920][ T4665] bcm5974 5-1:0.0: could not read from device [ 416.959396][ T8] usb 5-1: USB disconnect, device number 69 [ 416.975279][ T4665] bcm5974 5-1:0.0: could not read from device [ 417.022753][ T5806] udevd[5806]: Error opening device "/dev/input/event4": No such file or directory [ 417.066491][ T5806] udevd[5806]: Unable to EVIOCGABS device "/dev/input/event4" [ 417.084481][ T5806] udevd[5806]: Unable to EVIOCGABS device "/dev/input/event4" [ 417.101590][ T5806] udevd[5806]: Unable to EVIOCGABS device "/dev/input/event4" [ 417.126610][ T5806] udevd[5806]: Unable to EVIOCGABS device "/dev/input/event4" [ 417.160248][ T1762] plantronics 0003:047F:FFFF.000E: item fetching failed at offset 5/15 [ 417.193228][ T1762] plantronics 0003:047F:FFFF.000E: parse failed [ 417.240309][ T1762] plantronics 0003:047F:FFFF.000E: probe with driver plantronics failed with error -22 [ 417.434988][T10116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.490407][T10116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.710146][ T5286] usb 2-1: USB disconnect, device number 55 [ 417.798374][T10141] loop0: detected capacity change from 0 to 7 [ 417.828887][T10141] Dev loop0: unable to read RDB block 7 [ 417.857997][T10141] loop0: unable to read partition table [ 417.876784][T10141] loop0: partition table beyond EOD, truncated [ 417.954391][T10141] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 417.954391][T10141] ) failed (rc=-5) [ 418.014502][T10133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.025625][T10147] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1097'. [ 418.143676][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.198789][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.443569][T10147] netlink: 'syz.3.1097': attribute type 10 has an invalid length. [ 418.456445][T10147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1097'. [ 418.538067][T10147] bridge0: port 3(hsr_slave_1) entered blocking state [ 418.575648][T10147] bridge0: port 3(hsr_slave_1) entered disabled state [ 418.668828][T10147] hsr_slave_1: entered allmulticast mode [ 418.696037][T10144] loop2: detected capacity change from 0 to 7 [ 418.727217][T10144] Dev loop2: unable to read RDB block 7 [ 418.746822][T10147] hsr_slave_1: left allmulticast mode [ 418.752811][T10147] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 418.772179][T10144] loop2: AHDI p2 p3 [ 418.780756][T10144] loop2: partition table partially beyond EOD, truncated [ 419.362229][T10172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1104'. [ 419.718184][ T4680] Dev loop2: unable to read RDB block 7 [ 419.756503][ T4680] loop2: AHDI p2 p3 [ 419.777719][ T4680] loop2: partition table partially beyond EOD, truncated [ 420.666863][T10184] loop0: detected capacity change from 0 to 7 [ 420.738050][T10184] Dev loop0: unable to read RDB block 7 [ 420.769144][T10187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.779954][T10184] loop0: unable to read partition table [ 420.811778][T10184] loop0: partition table beyond EOD, truncated [ 420.812043][ T4680] Dev loop2: unable to read RDB block 7 [ 420.855065][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.865977][ T4680] loop2: AHDI p2 p3 [ 420.875857][T10184] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 420.875857][T10184] ) failed (rc=-5) [ 420.894142][T10187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.933805][ T4680] loop2: partition table partially beyond EOD, truncated [ 421.059324][ T48] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 421.171608][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.306708][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 421.360177][ T48] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 421.376825][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.396580][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.433491][ T48] usb 5-1: Product: syz [ 421.447746][ T48] usb 5-1: Manufacturer: syz [ 421.466365][ T48] usb 5-1: SerialNumber: syz [ 421.587054][ T48] usb 5-1: config 0 descriptor?? [ 421.645634][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.736468][ T1762] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 421.803558][ T48] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 421.803589][ T48] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 421.829289][ T48] usb 5-1: USB disconnect, device number 70 [ 421.927990][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.928020][ T1762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 421.928037][ T1762] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 421.928070][ T1762] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 421.928089][ T1762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.933226][ T1762] usb 2-1: config 0 descriptor?? [ 422.199117][ T9771] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.204676][ T9771] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.204803][ T12] bridge_slave_1: left allmulticast mode [ 422.204827][ T12] bridge_slave_1: left promiscuous mode [ 422.205029][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.208480][ T9771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.212937][ T9771] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.213897][ T9771] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 422.214349][ T9771] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 422.219466][ T12] bridge_slave_0: left allmulticast mode [ 422.219494][ T12] bridge_slave_0: left promiscuous mode [ 422.219716][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.349446][ T1762] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 422.410845][ T1762] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 424.316699][ T5237] Bluetooth: hci5: command tx timeout [ 424.366591][ T29] audit: type=1326 audit(1724884581.422:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.424521][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.442506][ T29] audit: type=1326 audit(1724884581.452:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.478976][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.499811][ T12] bond0 (unregistering): Released all slaves [ 424.510283][ T29] audit: type=1326 audit(1724884581.462:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.546623][ T29] audit: type=1326 audit(1724884581.462:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.569622][ T29] audit: type=1326 audit(1724884581.462:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.628931][ T29] audit: type=1326 audit(1724884581.462:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.688154][ T29] audit: type=1326 audit(1724884581.462:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.766540][ T29] audit: type=1326 audit(1724884581.462:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.788971][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.831231][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 424.861743][ T29] audit: type=1326 audit(1724884581.462:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.898259][ T29] audit: type=1326 audit(1724884581.462:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10232 comm="syz.2.1120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 424.920657][ C1] vkms_vblank_simulate: vblank timer overrun [ 424.951896][T10195] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1113'. [ 425.053644][ T12] : left promiscuous mode [ 425.221150][ T9] usb 2-1: USB disconnect, device number 56 [ 426.404690][ T5237] Bluetooth: hci5: command tx timeout [ 426.593669][T10242] loop2: detected capacity change from 0 to 7 [ 426.634858][T10242] Dev loop2: unable to read RDB block 7 [ 426.652691][T10242] loop2: AHDI p2 p3 [ 426.657102][T10242] loop2: partition table partially beyond EOD, truncated [ 426.746609][ T25] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 426.957837][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 426.996139][ T25] usb 2-1: config 0 has no interfaces? [ 427.018465][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 427.070249][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.137211][ T25] usb 2-1: config 0 descriptor?? [ 427.233585][ T9771] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 427.246946][ T9771] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 427.256925][ T9771] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 427.269423][ T9771] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 427.280192][ T9771] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 427.290624][ T9771] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 427.423699][ T4680] Dev loop2: unable to read RDB block 7 [ 427.451393][ T4680] loop2: AHDI p2 p3 [ 427.469239][ T4680] loop2: partition table partially beyond EOD, truncated [ 427.603916][ T12] hsr_slave_0: left promiscuous mode [ 427.690483][ T12] hsr_slave_1: left promiscuous mode [ 427.780831][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.821121][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.884546][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.924684][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.082774][ T12] veth1_macvtap: left promiscuous mode [ 428.106061][ T12] veth0_macvtap: left promiscuous mode [ 428.122487][ T12] veth1_vlan: left promiscuous mode [ 428.143724][ T12] veth0_vlan: left promiscuous mode [ 428.476631][ T5237] Bluetooth: hci5: command tx timeout [ 429.356738][ T5237] Bluetooth: hci4: command tx timeout [ 430.047534][ T12] team0 (unregistering): Port device team_slave_1 removed [ 430.314371][ T12] team0 (unregistering): Port device team_slave_0 removed [ 430.556659][ T5237] Bluetooth: hci5: command tx timeout [ 431.247106][T10294] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1129'. [ 431.436584][ T5237] Bluetooth: hci4: command tx timeout [ 431.852651][T10203] chnl_net:caif_netlink_parms(): no params data found [ 432.179666][ T9] usb 2-1: USB disconnect, device number 57 [ 432.497521][T10304] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1131'. [ 432.526549][T10308] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1133'. [ 432.705531][T10203] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.776524][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.783794][T10203] bridge_slave_0: entered allmulticast mode [ 432.832408][T10203] bridge_slave_0: entered promiscuous mode [ 432.933162][T10306] IPv6: NLM_F_REPLACE set, but no existing node found! [ 432.981385][T10203] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.062829][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.128761][T10203] bridge_slave_1: entered allmulticast mode [ 433.265596][T10203] bridge_slave_1: entered promiscuous mode [ 433.371307][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.424057][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.518208][ T5237] Bluetooth: hci4: command tx timeout [ 433.839228][T10203] team0: Port device team_slave_0 added [ 433.885681][T10203] team0: Port device team_slave_1 added [ 434.213173][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.291049][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.317490][ C1] vkms_vblank_simulate: vblank timer overrun [ 434.467592][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.791631][T10351] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1139'. [ 435.036573][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.068274][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.188864][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.437199][ T25] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 435.491226][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.542308][T10329] loop2: detected capacity change from 0 to 7 [ 435.575080][T10329] Dev loop2: unable to read RDB block 7 [ 435.586072][T10329] loop2: AHDI p2 p3 [ 435.596953][ T5237] Bluetooth: hci4: command tx timeout [ 435.661278][ T25] usb 3-1: config 0 has no interfaces? [ 435.697221][T10329] loop2: partition table partially beyond EOD, truncated [ 435.710908][ T25] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 435.755492][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.828915][ T25] usb 3-1: config 0 descriptor?? [ 436.009149][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.390073][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.433887][ T25] usb 3-1: USB disconnect, device number 64 [ 436.522534][T10203] hsr_slave_0: entered promiscuous mode [ 436.619265][T10203] hsr_slave_1: entered promiscuous mode [ 436.677166][T10203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.708481][T10203] Cannot create hsr debugfs directory [ 436.736820][T10273] chnl_net:caif_netlink_parms(): no params data found [ 436.923828][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.529472][ T4680] Dev loop2: unable to read RDB block 7 [ 437.586795][ T4680] loop2: AHDI p2 p3 [ 437.597599][ T4680] loop2: partition table partially beyond EOD, truncated [ 438.241529][T10402] loop0: detected capacity change from 0 to 7 [ 438.242348][T10402] Dev loop0: unable to read RDB block 7 [ 438.242381][T10402] loop0: AHDI p4 [ 438.242412][T10402] loop0: partition table partially beyond EOD, truncated [ 438.363278][T10273] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.363400][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.363580][T10273] bridge_slave_0: entered allmulticast mode [ 438.365135][T10273] bridge_slave_0: entered promiscuous mode [ 438.555213][T10273] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.555362][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.555577][T10273] bridge_slave_1: entered allmulticast mode [ 438.566825][T10273] bridge_slave_1: entered promiscuous mode [ 439.156173][T10411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1149'. [ 439.204646][T10273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.246837][ T12] bridge_slave_1: left allmulticast mode [ 439.252542][ T12] bridge_slave_1: left promiscuous mode [ 439.314999][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.355896][ T12] bridge_slave_0: left allmulticast mode [ 439.391253][ T12] bridge_slave_0: left promiscuous mode [ 439.426608][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.499314][ T12] bridge_slave_1: left allmulticast mode [ 439.525176][ T12] bridge_slave_1: left promiscuous mode [ 439.547143][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.618698][ T12] bridge_slave_0: left allmulticast mode [ 439.630279][ T12] bridge_slave_0: left promiscuous mode [ 439.697405][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.882265][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.885361][ T5237] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 440.898325][ T25] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 440.911058][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.911082][ T5237] Bluetooth: hci1: Injecting HCI hardware error event [ 440.913800][ T5237] Bluetooth: hci1: hardware error 0x00 [ 441.202891][ T25] usb 2-1: config 0 has no interfaces? [ 441.216659][ T25] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 441.225752][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.347257][ T25] usb 2-1: config 0 descriptor?? [ 442.438036][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.473391][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.500246][ T12] bond0 (unregistering): Released all slaves [ 442.814450][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.860195][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.875149][ T12] bond0 (unregistering): Released all slaves [ 443.036607][ T5237] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 443.087067][T10273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.800504][T10439] loop0: detected capacity change from 0 to 7 [ 443.826610][T10439] Dev loop0: unable to read RDB block 7 [ 443.854763][T10439] loop0: AHDI p4 [ 443.866149][T10439] loop0: partition table partially beyond EOD, truncated [ 443.997648][T10273] team0: Port device team_slave_0 added [ 444.044800][ T25] usb 2-1: USB disconnect, device number 58 [ 444.208196][T10442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1158'. [ 444.300527][T10445] syz.4.1157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 444.438017][T10273] team0: Port device team_slave_1 added [ 444.794953][T10273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.813990][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.895503][T10273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.007214][T10273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.034744][T10273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.181205][T10273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.426665][T10470] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1163'. [ 445.644640][T10273] hsr_slave_0: entered promiscuous mode [ 445.671820][T10273] hsr_slave_1: entered promiscuous mode [ 445.703556][T10273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.775336][T10273] Cannot create hsr debugfs directory [ 446.577268][T10203] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 446.620901][T10203] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 446.647801][T10490] loop0: detected capacity change from 0 to 7 [ 446.688367][T10490] Dev loop0: unable to read RDB block 7 [ 446.726476][ T5281] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 446.740086][T10490] loop0: AHDI p4 [ 446.776580][T10490] loop0: partition table partially beyond EOD, truncated [ 446.933252][T10203] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 446.983817][ T5281] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 447.016880][ T5281] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.062264][T10203] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 447.087920][ T5281] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 447.137691][ T5281] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.229752][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 447.229770][ T29] audit: type=1326 audit(1724884604.292:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 447.258400][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.277940][ T5281] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 447.319846][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 447.396477][ T5281] usb 5-1: Product: syz [ 447.400852][ T5281] usb 5-1: Manufacturer: syz [ 447.417412][ T29] audit: type=1326 audit(1724884604.332:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 447.425534][ T5281] cdc_wdm 5-1:1.0: skipping garbage [ 447.439963][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.552592][ T29] audit: type=1326 audit(1724884604.332:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 447.574863][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.581497][ T5232] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 447.608271][ T5281] cdc_wdm 5-1:1.0: skipping garbage [ 447.629455][T10503] loop2: detected capacity change from 0 to 7 [ 447.652631][T10503] Dev loop2: unable to read RDB block 7 [ 447.654674][ T5281] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 447.676924][T10503] loop2: AHDI p1 p3 [ 447.682540][ T29] audit: type=1326 audit(1724884604.332:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 447.714867][ T12] hsr_slave_0: left promiscuous mode [ 447.729835][ T5281] cdc_wdm 5-1:1.0: Unknown control protocol [ 447.731895][T10503] loop2: partition table partially beyond EOD, truncated [ 447.757167][ T12] hsr_slave_1: left promiscuous mode [ 447.781124][ T5281] usb 5-1: USB disconnect, device number 71 [ 447.781147][T10503] loop2: p1 start 2048 is beyond EOD, [ 447.806373][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 447.818008][ T29] audit: type=1326 audit(1724884604.332:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 447.818173][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.840337][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.840910][T10503] truncated [ 447.878509][ T5232] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 447.896416][ T5232] usb 2-1: can't read configurations, error -61 [ 447.948691][ T29] audit: type=1326 audit(1724884604.332:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 447.995668][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.020341][ T29] audit: type=1326 audit(1724884604.332:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 448.042813][ C1] vkms_vblank_simulate: vblank timer overrun [ 448.057715][ T29] audit: type=1326 audit(1724884604.342:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 448.081854][ T5232] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 448.091942][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.101421][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.110368][ T29] audit: type=1326 audit(1724884604.342:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 448.208788][ T12] hsr_slave_0: left promiscuous mode [ 448.215324][ T12] hsr_slave_1: left promiscuous mode [ 448.232534][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.240775][ T29] audit: type=1326 audit(1724884604.342:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10496 comm="syz.2.1168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99d0779ef9 code=0x7ffc0000 [ 448.286449][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 448.304219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.305112][ T5232] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 448.350932][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.358466][ T5232] usb 2-1: can't read configurations, error -61 [ 448.392370][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.434657][ T5232] usb usb2-port1: attempt power cycle [ 448.543685][ T12] veth1_macvtap: left promiscuous mode [ 448.549482][ T12] veth0_macvtap: left promiscuous mode [ 448.555229][ T12] veth1_vlan: left promiscuous mode [ 448.564949][ T12] veth0_vlan: left promiscuous mode [ 448.582754][ T12] veth1_macvtap: left promiscuous mode [ 448.588487][ T12] veth0_macvtap: left promiscuous mode [ 448.594248][ T12] veth1_vlan: left promiscuous mode [ 448.603975][ T12] veth0_vlan: left promiscuous mode [ 448.686477][ T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 448.896420][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 448.925485][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.926499][ T5232] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 448.973675][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.006002][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 449.023038][ T5232] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 449.042579][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 449.056056][ T5232] usb 2-1: can't read configurations, error -61 [ 449.079091][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 449.115642][ T9] usb 3-1: Manufacturer: syz [ 449.158343][ T9] usb 3-1: config 0 descriptor?? [ 449.184144][ T9] appledisplay 3-1:0.0: Could not find int-in endpoint [ 449.215429][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 449.226462][ T5232] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 449.309395][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 449.320744][ T5232] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 449.360837][ T5232] usb 2-1: can't read configurations, error -61 [ 449.384138][ T5232] usb usb2-port1: unable to enumerate USB device [ 451.075234][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1173'. [ 451.507849][ T9] usb 3-1: USB disconnect, device number 65 [ 451.674132][ T12] team0 (unregistering): Port device team_slave_1 removed [ 451.874658][ T12] team0 (unregistering): Port device team_slave_0 removed [ 451.899943][T10522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1174'. [ 452.254518][ T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 452.458455][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 452.494397][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 452.537334][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 452.595740][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 452.623342][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.670133][ T9] usb 3-1: config 0 descriptor?? [ 452.944490][ T9] usb 3-1: USB disconnect, device number 66 [ 454.565786][ T12] team0 (unregistering): Port device team_slave_1 removed [ 454.788910][ T12] team0 (unregistering): Port device team_slave_0 removed [ 454.844295][T10529] loop0: detected capacity change from 0 to 7 [ 454.876801][T10529] Dev loop0: unable to read RDB block 7 [ 454.882468][T10529] loop0: AHDI p4 [ 454.886116][T10529] loop0: partition table partially beyond EOD, truncated [ 456.287634][ T29] audit: type=1326 audit(1724884613.352:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.374779][ T29] audit: type=1326 audit(1724884613.372:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.427849][ T29] audit: type=1326 audit(1724884613.382:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.471280][ T29] audit: type=1326 audit(1724884613.382:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.495445][ T29] audit: type=1326 audit(1724884613.382:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.518555][ T29] audit: type=1326 audit(1724884613.382:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.556135][ T29] audit: type=1326 audit(1724884613.382:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.651052][ T29] audit: type=1326 audit(1724884613.382:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.753572][ T29] audit: type=1326 audit(1724884613.392:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 456.846502][ T29] audit: type=1326 audit(1724884613.392:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10535 comm="syz.4.1179" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f11b5f79ef9 code=0x7ffc0000 [ 457.046846][T10546] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 457.055412][T10546] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 457.201634][T10546] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 457.737514][T10203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.882715][T10203] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.944275][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.951508][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.118185][ T12] IPVS: stop unused estimator thread 0... [ 458.228120][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.235290][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.356464][ T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 458.362779][T10273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.452087][T10273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.510752][T10273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.578428][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 187, changing to 11 [ 458.590966][T10273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 458.637621][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 41300, setting to 1024 [ 458.717465][ T8] usb 5-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 458.739457][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.816026][ T8] usb 5-1: config 0 descriptor?? [ 458.869850][ T8] smsusb:smsusb_probe: board id=8, interface number 0 [ 458.897995][ T8] smsusb:smsusb_probe: Device initialized with return code -19 [ 459.176625][ T9771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.216602][ T9771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.230297][ T9771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.258125][ T9771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.266984][ T9771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 459.274437][ T9771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.329894][T10203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.330274][ T25] usb 5-1: USB disconnect, device number 72 [ 459.572203][T10273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.691357][T10273] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.849183][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.856391][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.913423][T10203] veth0_vlan: entered promiscuous mode [ 460.098542][T10574] fuse: Unknown parameter '184467440737095516150x0000000000000008' [ 460.138171][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.145378][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.212384][T10203] veth1_vlan: entered promiscuous mode [ 460.513398][T10585] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1187'. [ 460.760127][T10589] ======================================================= [ 460.760127][T10589] WARNING: The mand mount option has been deprecated and [ 460.760127][T10589] and is ignored by this kernel. Remove the mand [ 460.760127][T10589] option from the mount to silence this warning. [ 460.760127][T10589] ======================================================= [ 460.872287][T10203] veth0_macvtap: entered promiscuous mode [ 460.934732][T10564] chnl_net:caif_netlink_parms(): no params data found [ 461.258282][T10203] veth1_macvtap: entered promiscuous mode [ 461.363777][ T9771] Bluetooth: hci0: command tx timeout [ 461.741273][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.768466][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.815332][T10564] bridge_slave_0: entered allmulticast mode [ 461.833897][T10564] bridge_slave_0: entered promiscuous mode [ 461.862171][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.880089][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.896416][ T5286] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 461.927023][T10564] bridge_slave_1: entered allmulticast mode [ 461.977157][T10564] bridge_slave_1: entered promiscuous mode [ 462.128450][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.161064][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.197427][ T5286] usb 5-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 462.230004][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.248870][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.269261][ T5286] usb 5-1: config 0 descriptor?? [ 462.307775][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.356417][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.386414][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.436441][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.470941][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.516441][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.546554][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 462.586224][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.622745][T10203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 462.686692][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.733851][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.796657][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.835524][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.866422][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.902442][ T5286] wacom 0003:056A:00BB.0010: Unknown device_type for 'HID 056a:00bb'. Assuming pen. [ 462.931412][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 462.963720][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 462.976939][ T5286] wacom 0003:056A:00BB.0010: hidraw0: USB HID v0.00 Device [HID 056a:00bb] on usb-dummy_hcd.4-1/input0 [ 463.002569][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.029764][ T5286] input: Wacom Intuos4 12x19 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00BB.0010/input/input23 [ 463.044087][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.077598][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.120473][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.189688][T10203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.212257][ T5286] usb 5-1: USB disconnect, device number 73 [ 463.240795][T10203] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.277545][ T30] INFO: task syz.3.738:8691 blocked for more than 143 seconds. [ 463.295995][ T30] Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 463.296362][T10203] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.346358][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 463.378561][T10203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.392084][ T30] task:syz.3.738 state:D stack:26584 pid:8691 tgid:8691 ppid:5832 flags:0x00004004 [ 463.402616][T10203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.436686][ T9771] Bluetooth: hci0: command tx timeout [ 463.452672][ T30] Call Trace: [ 463.462727][ T30] [ 463.476435][ T30] __schedule+0x1800/0x4a60 [ 463.497928][ T30] ? __pfx___schedule+0x10/0x10 [ 463.619513][ T30] ? __pfx_lock_release+0x10/0x10 [ 463.693043][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.715349][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.756171][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 463.785572][ T30] ? schedule+0x90/0x320 [ 463.793481][ T30] schedule+0x14b/0x320 [ 463.816446][ T30] ? do_exit+0x4ff/0x27f0 [ 463.820835][ T30] do_exit+0x57c/0x27f0 [ 463.825038][ T30] ? __pfx_do_exit+0x10/0x10 [ 463.876447][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 463.903456][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 463.934078][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.965784][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 463.993968][ T30] do_group_exit+0x207/0x2c0 [ 464.008872][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 464.058232][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 464.068484][ T30] get_signal+0x16a1/0x1740 [ 464.078413][ T30] ? __pfx_get_signal+0x10/0x10 [ 464.088678][ T30] arch_do_signal_or_restart+0x96/0x860 [ 464.100029][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 464.117298][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.134066][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 464.156707][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 464.175994][ T30] do_syscall_64+0x100/0x230 [ 464.190479][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.206173][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.221985][ T30] RIP: 0033:0x7f44ce779ef9 [ 464.235464][ T30] RSP: 002b:00007f44cea3fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 464.266013][ T30] RAX: fffffffffffffdfc RBX: 00007f44cea3fcb0 RCX: 00007f44ce779ef9 [ 464.295255][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f44ce91613c [ 464.304330][ T30] RBP: 00007f44ce91613c R08: 7fffffffffffffff R09: 00007f44cea3fe7f [ 464.348470][ T30] R10: 00007f44cea3fc90 R11: 0000000000000246 R12: 000000000004c9eb [ 464.406353][ T30] R13: 00007f44cea3fc90 R14: 0000000000000032 R15: 000000000004c9b9 [ 464.414609][ T30] [ 464.427116][ T30] INFO: task syz.3.738:8695 blocked for more than 144 seconds. [ 464.434678][ T30] Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 464.487209][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.518443][ T30] task:syz.3.738 state:D stack:24720 pid:8695 tgid:8691 ppid:5832 flags:0x00004006 [ 464.560130][ T30] Call Trace: [ 464.566892][ T30] [ 464.569963][ T30] __schedule+0x1800/0x4a60 [ 464.574579][ T30] ? __pfx___schedule+0x10/0x10 [ 464.617290][ T30] ? __pfx_lock_release+0x10/0x10 [ 464.622458][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.663464][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.690392][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 464.695589][ T30] ? schedule+0x90/0x320 [ 464.741265][ T30] schedule+0x14b/0x320 [ 464.760220][ T30] ? do_exit+0x4ff/0x27f0 [ 464.780292][ T30] do_exit+0x57c/0x27f0 [ 464.791332][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.810971][ T30] ? __pfx_do_exit+0x10/0x10 [ 464.819097][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 464.830250][ T30] do_group_exit+0x207/0x2c0 [ 464.842347][ T30] get_signal+0x16a1/0x1740 [ 464.850352][ T30] ? __pfx_get_signal+0x10/0x10 [ 464.864984][ T30] ? __fget_files+0x29/0x470 [ 464.876329][ T30] arch_do_signal_or_restart+0x96/0x860 [ 464.884821][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 464.899730][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 464.916334][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 464.932563][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 464.948650][ T30] do_syscall_64+0x100/0x230 [ 464.961610][ T30] ? clear_bhb_loop+0x35/0x90 [ 464.978864][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.009348][ T30] RIP: 0033:0x7f44ce779ef9 [ 465.018427][ T30] RSP: 002b:00007f44cf48b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 465.044653][ T30] RAX: 00000000000678c0 RBX: 00007f44ce916058 RCX: 00007f44ce779ef9 [ 465.067147][ T30] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 0000000000000005 [ 465.087514][ T30] RBP: 00007f44ce7e793e R08: 0000000000000000 R09: 0000000000000000 [ 465.111361][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.122160][ T30] R13: 0000000000000000 R14: 00007f44ce916058 R15: 00007f44cea3fa28 [ 465.130697][ T30] [ 465.152805][ T30] INFO: task syz.3.738:8703 blocked for more than 145 seconds. [ 465.180566][ T30] Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 465.196178][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 465.210159][ T30] task:syz.3.738 state:D stack:26080 pid:8703 tgid:8691 ppid:5832 flags:0x00004006 [ 465.227500][ T30] Call Trace: [ 465.233129][ T30] [ 465.236196][ T30] __schedule+0x1800/0x4a60 [ 465.248707][ T30] ? __pfx___schedule+0x10/0x10 [ 465.257766][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.263052][ T30] ? schedule+0x90/0x320 [ 465.271343][ T30] schedule+0x14b/0x320 [ 465.275635][ T30] schedule_timeout+0xb0/0x310 [ 465.281215][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 465.287065][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.293213][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.299631][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 465.308338][ T30] __wait_for_common+0x3ea/0x6d0 [ 465.314504][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 465.320452][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 465.326032][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 465.331790][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 465.346432][ T30] wait_for_completion_state+0x1c/0x40 [ 465.360531][ T30] do_coredump+0x984/0x2a30 [ 465.374845][ T30] ? __pfx_lock_release+0x10/0x10 [ 465.391564][ T30] ? __kasan_slab_free+0x37/0x60 [ 465.410988][ T30] ? arch_do_signal_or_restart+0x96/0x860 [ 465.420266][ T30] ? __pfx_do_coredump+0x10/0x10 [ 465.435462][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 465.451203][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 465.471482][ T30] get_signal+0x13fa/0x1740 [ 465.482904][ T30] ? __pfx_get_signal+0x10/0x10 [ 465.499760][ T30] arch_do_signal_or_restart+0x96/0x860 [ 465.515538][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 465.523220][ T9771] Bluetooth: hci0: command tx timeout [ 465.548682][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 465.556589][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 465.569680][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 465.603288][ T30] do_syscall_64+0x100/0x230 [ 465.626633][ T30] ? clear_bhb_loop+0x35/0x90 [ 465.631390][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.646807][ T30] RIP: 0033:0x7f44ce63c370 [ 465.656384][ T30] RSP: 002b:00007f44ce1feb38 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 465.664939][ T30] RAX: 0000000000000000 RBX: 00007f44ce916138 RCX: 00007f44ce779ef9 [ 465.675258][ T30] RDX: 00007f44ce1feb40 RSI: 00007f44ce1fec70 RDI: 000000000000000b [ 465.683462][ T30] RBP: 00007f44ce916130 R08: 7fffffffffffffff R09: 0000000000000000 [ 465.691637][ T30] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f44ce91613c [ 465.700922][ T30] R13: 0000000000000000 R14: 00007f44cea3f940 R15: 00007f44cea3fa28 [ 465.709139][ T30] [ 465.734538][ T30] [ 465.734538][ T30] Showing all locks held in the system: [ 465.767536][ T30] 2 locks held by kworker/1:0/25: [ 465.795459][ T30] 1 lock held by khungtaskd/30: [ 465.809072][T10273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.828633][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 465.863462][T10564] team0: Port device team_slave_0 added [ 465.873485][ T30] 2 locks held by kworker/u8:2/35: [ 465.897933][ T30] 3 locks held by kworker/u8:8/2552: [ 465.929863][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 465.952151][T10564] team0: Port device team_slave_1 added [ 465.969238][ T30] #1: ffff8880b9228948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x3a7/0x770 [ 466.010307][ T30] #2: ffffffff951b2bb0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_check_no_obj_freed+0x234/0x580 [ 466.037138][ T30] 2 locks held by getty/4987: [ 466.050510][ T30] #0: ffff88802b4b60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 466.075410][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 466.109166][ T30] 3 locks held by kworker/0:5/5284: [ 466.133440][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 466.165180][ T30] #1: ffffc90003eb7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 466.181892][ T30] #2: ffff888024f4b240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 466.209453][ T30] 1 lock held by syz-executor/10203: [ 466.222780][ T30] #0: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 466.248622][ T30] 1 lock held by syz-executor/10273: [ 466.259747][ T30] #0: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 466.284583][ T30] 2 locks held by syz-executor/10564: [ 466.310763][ T30] #0: ffffffff8fc84b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 466.346369][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 466.368634][ T30] 1 lock held by syz.2.1188/10598: [ 466.379515][ T30] 2 locks held by dhcpcd/10634: [ 466.393103][ T30] #0: ffff888078a1ac08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 466.427417][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 466.454430][ T30] [ 466.461744][ T30] ============================================= [ 466.461744][ T30] [ 466.488885][ T30] NMI backtrace for cpu 0 [ 466.493262][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 466.503801][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 466.513859][ T30] Call Trace: [ 466.517150][ T30] [ 466.520076][ T30] dump_stack_lvl+0x241/0x360 [ 466.524753][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.529951][ T30] ? __pfx__printk+0x10/0x10 [ 466.534632][ T30] ? vprintk_emit+0x667/0x7c0 [ 466.539350][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 466.544388][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 466.549342][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 466.554808][ T30] ? _printk+0xd5/0x120 [ 466.558993][ T30] ? __pfx__printk+0x10/0x10 [ 466.563599][ T30] ? __wake_up_klogd+0xcc/0x110 [ 466.568477][ T30] ? __pfx__printk+0x10/0x10 [ 466.573081][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 466.578114][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 466.584136][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 466.590135][ T30] watchdog+0xff4/0x1040 [ 466.594421][ T30] ? watchdog+0x1ea/0x1040 [ 466.598877][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.603577][ T30] kthread+0x2f0/0x390 [ 466.607746][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.612426][ T30] ? __pfx_kthread+0x10/0x10 [ 466.617044][ T30] ret_from_fork+0x4b/0x80 [ 466.621485][ T30] ? __pfx_kthread+0x10/0x10 [ 466.626079][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.630860][ T30] [ 466.634888][ T30] Sending NMI from CPU 0 to CPUs 1: [ 466.640747][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 466.727571][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 466.734475][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 466.745005][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 466.755088][ T30] Call Trace: [ 466.758396][ T30] [ 466.761375][ T30] dump_stack_lvl+0x241/0x360 [ 466.766098][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.771330][ T30] ? __pfx__printk+0x10/0x10 [ 466.775954][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 466.781962][ T30] ? vscnprintf+0x5d/0x90 [ 466.786304][ T30] panic+0x349/0x860 [ 466.790237][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 466.796428][ T30] ? __pfx_panic+0x10/0x10 [ 466.800876][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 466.806285][ T30] ? __irq_work_queue_local+0x137/0x410 [ 466.811850][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 466.817222][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 466.823399][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 466.829560][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 466.835715][ T30] watchdog+0x1033/0x1040 [ 466.840072][ T30] ? watchdog+0x1ea/0x1040 [ 466.844529][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.849241][ T30] kthread+0x2f0/0x390 [ 466.853344][ T30] ? __pfx_watchdog+0x10/0x10 [ 466.858055][ T30] ? __pfx_kthread+0x10/0x10 [ 466.862694][ T30] ret_from_fork+0x4b/0x80 [ 466.867137][ T30] ? __pfx_kthread+0x10/0x10 [ 466.871729][ T30] ret_from_fork_asm+0x1a/0x30 [ 466.876680][ T30] [ 466.879992][ T30] Kernel Offset: disabled [ 466.884320][ T30] Rebooting in 86400 seconds..