last executing test programs: 29.871994819s ago: executing program 1 (id=1725): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfd, 0x3}) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xe1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, 0x0) unshare(0x2040600) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0007030000", @ANYRES32=r3, @ANYBLOB="bff685cb0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 27.766727268s ago: executing program 1 (id=1729): socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) syz_emit_ethernet(0x42, &(0x7f0000000400)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x4}]}}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @loopback}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/96}], 0x1e, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r4, &(0x7f0000001b00)=""/194, 0xc2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000"], 0x48}}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6579, 0x1, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r6, 0xc00464b4, &(0x7f0000000240)={r7}) socket$nl_route(0x10, 0x3, 0x0) 24.617654818s ago: executing program 1 (id=1732): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000009c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x11c) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x6, 0xfd, 0x3}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x7) r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x1000}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r9}) close_range(r1, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0x2) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) exit(0x0) write$UHID_DESTROY(r0, &(0x7f0000000180)={0xe}, 0xfee6) write$P9_RFSYNC(r8, &(0x7f0000000140)={0x7, 0x33, 0x2}, 0x7) 23.329552125s ago: executing program 1 (id=1738): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfd, 0x3}) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xe1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, 0x0) unshare(0x2040600) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c0007030000", @ANYRES32=r3, @ANYBLOB="bff685cb0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 21.310684213s ago: executing program 1 (id=1743): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'netdevsim0\x00'}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000003c0), 0x200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2, 0x1, 0x106) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r5 = dup(r4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3b80000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r5, 0x0) 12.113886387s ago: executing program 2 (id=1758): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfd, 0x3}) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xe1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, 0x0) unshare(0x2040600) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="850000002e000000350000000000ba000700000008000000950000000000000064f1c09faf5d6806f8a1572b41a141d524581835d80532cb457f454698165b61a3cf5fc6dd8442230e35230163cf094949fc8b0a9114f43d1b6538f5976be4adc07e8c97d76b1895c322a1ef1f83dd6c1023158a1086f7d0f9dce435554bc34e6b8e6fa045e4eb32d7ad1087c697acd9a7ab696922c9e35f0aee6156c599c7b297de0019b27d67bfb3fe241454a04080bf7f8ce021879c820f9b80fe04be5b11cc7bf16c8a029df573db051357c71be1f5e8ce8db0f96ee1d8a312e9671e652bd6f32c7a458f129a8d8bc9a5d905441c0785d333135a04001bb4cd5b295bb4dd7a0247cada056be3a9e29f9d4b57ddd4130ccbbb8d6e000000000000004102d74c391acc0880312cc8a8c51c80ddd3698f620a69f46984c2a2e742fadecf0e18c91f1715450ff0e09b7e52fd66a7c81b7e62ca8c3572c3dc46dc7579c10001"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070300000000000000000700", @ANYRES32=r3, @ANYBLOB="bff685cb0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 11.178362581s ago: executing program 3 (id=1763): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @dev}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f0000000080)) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x33565348}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r4, 0x4b4a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') r5 = creat(&(0x7f0000001040)='./file0\x00', 0x0) socket$alg(0x26, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000180)={r7, 0xf86}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={r8, 0x3, r6, 0x5}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x10000}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={r9}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x34}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000d5000000000014000300626f6e645f736c6176655f300000000008000a"], 0x3c}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x1e}, 0x1}) 10.015965409s ago: executing program 2 (id=1767): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4003, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000700000000000000000008000b4000000001050001000700000011000300686100023a69702c6d61726b0000000005000400020000000900020073797a3100000000050005"], 0x60}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4c, &(0x7f00000006c0)=ANY=[]) r6 = socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) syz_clone(0x0, 0x0, 0x3f, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)={0x68, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xeaa}]}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x68}}, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r9, &(0x7f0000000000)=""/74, 0x4a) 9.67466624s ago: executing program 3 (id=1769): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r5 = timerfd_create(0x1, 0x0) timerfd_settime(r5, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7]) socket$kcm(0x29, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r8, &(0x7f0000000040)=""/172, 0xac, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r8) 8.779260733s ago: executing program 3 (id=1773): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0xa2a}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) write$binfmt_script(r4, &(0x7f0000000300)={'#! ', './file0', [{0x20, '$%()('}, {0x20, '/dev/kvm\x00'}], 0xa, "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"}, 0x101b) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) statx(0xffffffffffffffff, &(0x7f0000001340)='./file0\x00', 0x100, 0x40, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001480)='./file0/file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0xa000, &(0x7f0000001540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x1}}], [{@smackfshat={'smackfshat', 0x3d, '*'}}, {@subj_user}]}}, 0x0, 0x0, &(0x7f0000001600)="3c677acb98be2ecf60d8f66637fdc7ebc77bfece7b133e791f17f445a06604481c1895fb78661a9b62677109faee9b67a36d30c0ab64a17f05624521411085bf739cdc02321eea652711f241f39595c0ab3667534015540b2c813fa81753ba8b6e0592587ba962bbc934608ab5db7cae6935c17901bd67825de7f14ba52ea83d3f9d7f166a41195ba2b7508108fda9e8b9965347702e487dbee36951be7a31d08029fd98c70ae68f56cbcddfa21ed3b81c4b5d") getsockopt$bt_hci(r6, 0x84, 0x72, &(0x7f0000003140)=""/4095, &(0x7f0000000000)=0xfff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000004c80)=""/83, 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDCTL_DSP_GETOPTR(r10, 0x800c5012, &(0x7f00000016c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0x200000, 0x0, 0x28011, r10, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000880)={0x630081}, 0x18) ioctl$KVM_SET_MSRS(r5, 0x4018aee1, &(0x7f0000000040)={0x5, 0x0, [{0x85a, 0x0, 0x401}, {0x25c, 0x0, 0xffffffffffffffff}, {0xbaa, 0x0, 0x2}, {0x90e, 0x0, 0x6}, {0x999, 0x0, 0x200000000}]}) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, [0xfffffffd, 0x2900]}}) 8.387397s ago: executing program 2 (id=1774): open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x24) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cba002000000000000004c00000008000300", @ANYRES32=r2], 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff864e26dd6043009300103a00fe80003dc13318a84de7f05d6b242efd0a000000000000000000000000aaff0200000000000000000000018600907800"/83], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) 8.024197398s ago: executing program 0 (id=1776): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfd, 0x3}) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xe1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, 0x0) unshare(0x2040600) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070300000000000000000700", @ANYRES32=r3, @ANYBLOB="bff685cb0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 7.364883057s ago: executing program 3 (id=1777): r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x3c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}]}, 0x3c}}, 0x0) syz_emit_ethernet(0xb6, &(0x7f0000000940)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000a85eb564170021907800000000ffffffff050090780a010102430000000000000000000000ac1e00ffffffffffffffff0044100000000000000000000000000002440841dc3d53a45fecdc6e2f54779a000000000000442c0001ffffffff00000000ac1414aa00"/136], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000bfac820b4040210e29c0102030109021b0001000000000904000001b3f8d4000000000000"], 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x65, 0x103800) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x41) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000400)=ANY=[@ANYBLOB="00003d000000c71a4713f6bbc5d1a81ef3bc1746d73024fcaed5992753fa"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x2}}) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'vlan0\x00'}}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xbb, 0x2]}, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000200)=""/195, 0xc3) 7.202019532s ago: executing program 4 (id=1778): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x68, 0x2}, [@ldst={0x0, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80), r1) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c40)={&(0x7f0000000c00)='rpcgss_seqno\x00', r0}, 0x10) write(r1, &(0x7f0000000000)="1c0000001a009b8a14000000bb9b301f00"/28, 0x1c) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x4237, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000001c0)) r3 = io_uring_setup(0x34d, &(0x7f0000000300)) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x1b, 0x20000000, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x38, 0x7, 0x4, 0x5, 0x6, 0x7, 0x6, 0xa}, &(0x7f0000000440)={0x3, 0xed0, 0x2b9c, 0x200, 0xf, 0x6, 0x1ff, 0x7}, &(0x7f0000000480)={0xd39f, 0x5, 0x6, 0x8, 0x4, 0x1, 0x81, 0x7}, &(0x7f0000000580)={r6, r7+60000000}, &(0x7f0000000600)={&(0x7f00000005c0)={[0x2]}, 0x8}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) r9 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) writev(r9, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379ffea00000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000214e224e0000", 0x58}], 0x1) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) r10 = socket$kcm(0x10, 0x3, 0x4) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee29bca1b1f0000000004c00e72f750375ed08a563b1dbf48d79268c48c0000000000a5880c406a90033a0093b837dc6cc01e32efaec8c7a6ec00120c0001400b080c00bdad01409bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9234751", 0x89}], 0x1}, 0x0) 6.755235402s ago: executing program 4 (id=1779): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300070a0000000000000000deffff0200060000000e000a"], 0x50}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a9", 0x17}], 0x1, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32=0x0], 0x60}], 0x1, 0x8001) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x14}}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast2, [], "1e520b14fc1ee52e"}}}}}}}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3a, &(0x7f0000000000)=0xc, 0x4) recvmmsg(r2, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) read$char_usb(r1, &(0x7f0000001840)=""/4090, 0xffa) 6.459411021s ago: executing program 0 (id=1780): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) r1 = io_uring_setup(0x497c, &(0x7f00000001c0)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000340)={0x400003e, 0x2}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x600002, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[], 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000280)=0x8) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x141102, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 5.986347477s ago: executing program 4 (id=1781): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) pipe2$9p(&(0x7f0000000240), 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000019640)=""/102400, 0x19000}, {&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000000100)=""/23, 0x17}], 0x3, 0x4, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[], 0x3b) setgroups(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x14, &(0x7f0000000140)={@broadcast, @local, @val={@void, {0x8100, 0x0, 0x1}}, {@generic={0x6001, "fcdd"}}}, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x77c21000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$netlink(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.44344688s ago: executing program 4 (id=1782): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x274, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x1d0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x4}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x1b8, 0x6, [@m_ife={0x188, 0x0, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}, @TCA_IFE_PARMS={0x1c}]}, {0x112, 0x6, "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"}, {0xc}, {0xc}}}, @m_nat={0x2c, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x274}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x680}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$inet(0x2, 0x4000000805, 0x0) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, &(0x7f0000008640), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000008440)=""/102392, 0x18ff8}], 0x1, 0xfffffe01, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x18, 0x84, 0x0, "10"}], 0x18}}], 0x2, 0x0) 4.943139408s ago: executing program 2 (id=1783): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') write$cgroup_subtree(r0, 0x0, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f000001b180)=ANY=[@ANYBLOB="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"], 0x6cc}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x5, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = memfd_secret(0x80000) ioctl$FICLONE(r1, 0x40049409, r3) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f00000002c0)) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x13, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300000007000000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000020000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x8) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r4, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fca", 0x85}], 0x1}}, {{&(0x7f0000000200)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000440)}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="4a2cbab0ec60febe59b7b4148f35f1e8043bc7e3706d916fdcd3e9ad319e0d71da94ad5fab4709fad14eebddbe35077387fb577bcc69c4d64f", 0x39}, {&(0x7f00000007c0)}, {0x0}, {&(0x7f0000000940)="4f3d83d7ff4e82228e5748158abbbdcbc2c472338937b9838160de3622d4f6b7e6bdce656681b72ad4b649057cfead01d6ed0737890e7585252f095629873a6f6bad3f84ec7c692368ff0b04317882efbb3d9d2ee067e41eed282ab81be77bd6668c4741", 0x64}, {&(0x7f00000005c0)="c38bf18ff1f92bc056da9dc8aea80dc61ad83686b7581e5f1596c8cc8b05ddaac3fad17e0fae4b158ff9766b", 0x2c}, {&(0x7f00000009c0)="9e303c5958f1f6563841d1536785c9368620b5a42899aa2c1a44aff730316bd263c9ddfb5b8922b1b5590962b47b6cadea14867a976ea22f35c44be7cf1673470a8f2a8fec47920228b990aadd31e17001347a94ca6a474b589e5a9e2c1b99d69efc65f7cd99906298df6076250a35459a74d0e8df053fb444de9d609987b5bc129d8e507ec28bbda3da8b39bf8ac8e4d198ecced23b146eed116cc4d7ba57a1fdb53b310721278fbd3a5d8de5e3947d66ef343589c266a59006cf3f8d6468ca6c8c8845918723f6749c3b644ddfb94d8979fb13206bde801bb06c95cbf26c160785bc47d9483edd2eb548fd4b68880c8b1234e6f71dcc99", 0xf8}, {&(0x7f00000008c0)="4ced0f39bcdabbd6ba39b145f1c38b6c27c41b449d8f41b735410cdaef007645e65ff9b9f060f213f9", 0x29}], 0x7, &(0x7f0000000ec0)=[@ip_retopts={{0x90, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x5a, 0x0, 0x8}, @cipso={0x86, 0x1e, 0x0, [{0x2, 0xc, "2799c8bd266d6c724175"}, {0x7, 0xa, "02bc8cf09aed9a70"}, {0x5, 0x2}]}, @rr={0x7, 0x13, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @remote, @broadcast]}, @timestamp={0x44, 0x14, 0x8f, 0x0, 0xf, [0x3, 0x9, 0x5, 0xffffffff]}, @cipso={0x86, 0x35, 0x4c61a8bf680523b1, [{0x1, 0x3, "1e"}, {0x6, 0xd, "f25384720c9966f413285d"}, {0x5, 0x10, "baad2d2d1fbcc42c16db227f31e1"}, {0x0, 0xf, "404c15f8e915b4869334e180c8"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_int={{0x10}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @multicast1, @remote}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@generic={0x89, 0xd, "19255562599b7232db39e9"}]}}}], 0xe4}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f000001b600)="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", 0xf00}, {0x0}], 0x2}}], 0x4, 0x4000040) 4.884910013s ago: executing program 3 (id=1784): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f18b3d106d04b2085980010203010902120001000020060904"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102373, 0x18fe5}], 0x1, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000007c0)=[0x1, 0x3], 0x2) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="fcdc1604205e8cbbcefaad894e19dd76e431f2acbdc43e180a716aa978260bb201846ad8e0653a2e9eb529c15826987a813ae0cc1fd310a4495968bdb7ed03db0ca60249aef7cfd4e54da42edf35ea4f7131faa56dc3046d7592b94fb5454f7ebf573000b19bb4f82b2908a4c5", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf250f0000000c00990001000000010000000500a2000300000008007e000100000010001b80040003000500010020000000640017800500030010000000000000000500030011000000000000000c000400dbc664a68095ac70050006000900000000000000050006000700000000000000050002001400000000000000050003000f000000000000000500030012000000000000000a00340001010101010100000500a200040000000800a10001000000080026006c0900000800a10021850000080026006c09000008007e00010000001c00a6800a00060008021100000000000a000600ff"], 0xfc}, 0x1, 0x0, 0x0, 0x24008851}, 0x20044001) socket$inet(0x2, 0x3, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') read$FUSE(r2, &(0x7f0000001c00)={0x2020}, 0x2020) preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000000)=""/142, 0x8e}], 0x1, 0x0, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) read(r2, &(0x7f0000001b00)=""/194, 0xc2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r1, 0x0, 0x40000) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000091050000d23b2482d70ea62800", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c000280050003000c000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004016}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 4.124912447s ago: executing program 4 (id=1785): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0xfd6c66aa8fb487cd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000)=0x49, 0x4) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_1\x00'}) r2 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2015}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x6a, 0x2}, @cond}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000000180)={0x1, 0x68, &(0x7f0000000100)="f13b8716bcfdcca0c8af3538908cd9249f533b44e0242eab855e96f55b9ffada39f62d8b23dd050e4bd47c6e12e3bd98840d9ae70008ed417a94f6c6b2fccb3a3bcb625653302c9301e4fe75a70cdee4c457f97a50895e6577df2340fb458bd55be572ac782da8b5"}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.628718756s ago: executing program 0 (id=1786): sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r2, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xc, 0x0, 0x14000, 0x0, [{0x0, 0x3ff}, {0x3, 0x6}, {0x72e8798d, 0x9, 0x6}, {0xffffffff, 0xfffffff8, 0x3}, {0x0, 0x3, 0x2}, {0x0, 0x9, 0x2}, {0xf9, 0x9}, {0x0, 0x0, 0x8}, {0x696c, 0x0, 0xc42e}, {0x1000, 0x9, 0x7fff}, {0x0, 0x6, 0xed}, {0x10001, 0x3, 0x40}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000001ec0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) unshare(0x400) openat(0xffffffffffffff9c, 0x0, 0x1817c1, 0x0) syz_io_uring_setup(0x2c60, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x0, 0x11}, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3.467439719s ago: executing program 0 (id=1787): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r5 = timerfd_create(0x1, 0x0) timerfd_settime(r5, 0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020600) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r6, 0x29, 0x19, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_ALLOC_STREAMS(r7, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYRESOCT=r7]) socket$kcm(0x29, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) pread64(r8, &(0x7f0000000040)=""/172, 0xac, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r8) 3.212921334s ago: executing program 2 (id=1788): r0 = socket$inet(0x2, 0x3, 0x800000000000a) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x198, [0x0, 0x0, 0x0, 0x0, 0x200005e0], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x1dc) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f00000000c0)=0x50f, 0x24) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x49, 0x1}, &(0x7f0000000140)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x2000000000000145, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfe68, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcd) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000040)="9c", 0x1}], 0x1) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x40d, 0x4}, 0x20}}, 0x4008040) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0) getpid() syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000700)={0x2c, &(0x7f0000000540)={0x40, 0x21, 0x7b, {0x7b, 0x24, "0a5097ccf6015a6932806b3275520179189617f3518a2486ed73f81bf29c017bfd0cab6c3d598396c6c693dd1175f69c50a90e990648322bae846e079c63d0fd350b5de8c544d16b56414b0047641f22aab27a73dfdb14c547dc3a6d86eade33020563da0fc605a5533ac0b8f30d905c3c3bb8515cea778599"}}, &(0x7f0000000600)=ANY=[@ANYBLOB="e7020400000004030928"], &(0x7f0000000640)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000ec0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x80, 0xcf, 0x3, "1387a668", "d45caed7"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xff, 0x2, 0x2, 0x6, 0x1, 0x6, 0x9}}}, &(0x7f0000000dc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20059f0000009db73eecaade449a1bdb471bf177c5b1b9bd728f20ceb96c3c04e5d4c48dbe439fe1aba0f57a75f0833f51a81d0fdc637346fd5de966134ec14ef81e28091bbfae64c4541958bdd2f93948e3316c74c704c992599785b117956372ebe845512d090d2c391b497d1f64871cd1e3f5cd7bcb9477fc373f0a2ba73ac2a2225b7eb905ccaacc83725140e677a4561459e949ee0d3a347e94f6c6ac3ac54a9976dd"], &(0x7f0000000e80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0xa1}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xfff0]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000940)={0x40, 0x9, 0x1}, &(0x7f0000000980)={0x40, 0xb, 0x2, "b319"}, &(0x7f0000000840)={0x40, 0xf, 0x2, 0x80}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @random="b1c865b2f5df"}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "e384"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0xb0e9}, &(0x7f0000000b00)={0x40, 0x1c, 0x1, 0xf9}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x6f}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0xb3}}) 2.179786196s ago: executing program 0 (id=1789): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x0, 0xfd, 0x3}) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/239, 0xe1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000180)) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc0106442, 0x0) unshare(0x2040600) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x4, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00070300000000000000000700", @ANYRES32=r3, @ANYBLOB="bff685cb0a000200aaaaaaaaaa0c"], 0x28}}, 0x0) 1.579427193s ago: executing program 3 (id=1790): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000080)) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000100), 0xf) r7 = dup(r6) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000890000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCGSKNS(r3, 0x894c, &(0x7f0000000140)={'bridge_slave_0\x00', 0x200}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b00"]) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r8, 0x0, 0x0) 1.240330952s ago: executing program 4 (id=1791): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioprio_set$pid(0x1, 0x0, 0x4007) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f00000000c0)) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) splice(r5, 0x0, r4, 0x0, 0x7ffff000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f0000000040)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) socket$inet(0x2, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r8, &(0x7f0000000400)={0x2020}, 0x2020) 685.052203ms ago: executing program 1 (id=1762): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) io_uring_setup(0x19ad, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) write$dsp(r2, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) close(r2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0x1}], 0xf, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bind$inet(0xffffffffffffffff, 0x0, 0x0) 636.710374ms ago: executing program 2 (id=1792): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x2c, 0x21, 0x100, 0x70bd2e, 0x25dfdbfe, {0x2, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_DST={0x8, 0x1, @remote}, @FRA_DST={0x8, 0x1, @multicast1}]}, 0x2c}}, 0x0) epoll_create1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000380)=0xcd, 0x4) r2 = socket$inet6(0xa, 0x3, 0xe2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) r4 = dup(r3) write$FUSE_INIT(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) socket(0x29, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xf87, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x6, "03aea2e9dd8227baf6c1a8a4de52bc9539d84ff109710109340406f51cb9e552"}) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) read$FUSE(r6, &(0x7f0000000a00)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x434, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x36c, 0x238, 0x238, 0x36c, 0x238, 0x3, 0x0, {[{{@ipv6={@loopback, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x20c, 0x274, 0x0, {}, [@common=@inet=@ecn={{0x24}, {0x0, 0x50}}, @common=@inet=@sctp={{0x144}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xd4, 0xf8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SYNPROXY={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x490) 0s ago: executing program 0 (id=1793): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={@local, 0x0, r0}) r2 = socket$unix(0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000000080)="81ca2a61b04eb939c826c324509f1387f7c1e85848adabd0b1fa394a363f00f20576843dea466cbf7d0bb02aa3e10a0bcc01e6cd19617b90880ed5a88d1f2334ad1f2be8d84699e67feb68aa4e16b8c1d8d4ca1f60e8381f", 0x58}, {&(0x7f0000000240)="580b9febdff5839a1329a6b80353fa85ce6e7b50988b991893c06b97b73311cb4d9ec544ee5f182da1ad13fa03f8d9c61a7b5b0446caec006f5082d54c8ee3dbf1618f46dd66551c287e103e7ba25690f71592f3791af78cf989e665498b6b85558b74c2100aeb8d71123ea94a6f5c2074f50631f5cbad8560328a029a7799b8bda4f8a8", 0x84}, {&(0x7f00000001c0)="99429422359df5094e823ae675ac93f94b3a2bbe98deddc4", 0x18}, {&(0x7f0000000300)="9fd727ccd435a80aa249d6de1287d258d3473c82844bfda41b1cee109c958d8f37539340c8c86bebfb75860040a92123ee8448b4930e7852ace0747b4dbbd5906fe23dee454c0d6bae08589a37f1f50c284b58cee331acbd1b2135110863989a23ca636c9d48358a694405c10adc83134e09081bb3ea862fc6fc4b19705c92ba3d81cc73ab95218657f32e3190b9a0b88f21ac46e4e6dbc72ac8a263003214c5d1dae6de286c952f8f0edb7f72539c", 0xaf}, {&(0x7f0000001e80)="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", 0x1000}, {&(0x7f00000003c0)="ca1227fcaa76784b0a5b3604056e9c1a434d06b540d4bcce700a22ec9fa282bc21053320099df736beae6f64c3ab846769286bc05aea1b136d8348b912fece353faba77eb9ed9e53810909f020ed5fd9b89b3b0a27ecdec230d7a2258299e7595ef3f1e20f173484ea0fa8828ca889853b51ed1038fab28bc61951187c9f50bae19ca97850590ba69c46b41f5f2573fce7cfe9adf8cff53bf8839dde7a8b9840a3f87ad7bfd2203e49b71d8393d7c2bb0c4004afe20e8103a4725b286c51ad6302fbfd94fb1db6c090c158cac1d58ad15af5479cb0a77bb3692e3ec57f047bd7f8c03be9eca76e15432432", 0xeb}, {&(0x7f00000004c0)="5282f1f94b0e6f1721f49a6f83841eb3f033b6a34179a5ef141933cb7ff65b3b75dfd7", 0x23}, {&(0x7f0000000500)="2cd9ff93b58d60c67d8986599982cc9e32807d4784cc0f1cf4731205163babbde4e62337a2481a854b4f2c0dfd0408af1c91394b4f6d0c3426", 0x39}, {&(0x7f0000000540)="b6e964901191cac993ecdf73ccb4c3b9f0346bf774c6946866b3b251e8d7a4ceea9b205897ce03c1cab2301e9246da152974361d95ec6b8a1ff9d8b750b0ba8d2ee2b5d61851c1bc3dde4bce20f4fedc48353f9b0d5f78dd5a63b33ad2e3e9a053978ecac2042fbe41814199ae4ec8e7585863e8ef40487087248fab8dc2315240cf321bd292247d1e2c4a0cd540093cd2b7dcd56b03ff8c36994c16fc543bcd4cc0375c86a3", 0xa6}], 0xa) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x41, &(0x7f0000000000)=0x7f, 0x4) r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r9, 0x0) ftruncate(r8, 0x800) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r10 = syz_usb_connect$cdc_ecm(0x2, 0x7b, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x1, 0x7, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xa, 0x3, 0x2, 0x6, 0x0, 0x6, {{0xb, 0x24, 0x6, 0x0, 0x0, "b5e0bef50a5b"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8001, 0x8, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0xb9, 0x40}, @obex={0x5, 0x24, 0x15, 0x6e0e}, @mbim={0xc, 0x24, 0x1b, 0x1, 0x4, 0x3, 0x9, 0x100, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x72, 0x6, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0xe, 0xfa, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x5, 0x10}}}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x310, 0x69, 0x5, 0x0, 0x20, 0x1a}, 0x123, &(0x7f0000000740)={0x5, 0xf, 0x123, 0x6, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x37, 0xff0f, 0x2, [0x0, 0x0, 0x0, 0x0, 0xf, 0xc000]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x140, 0x6, 0x5, 0x8, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0xb, 0x7}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1f, 0x5, 0x8, 0x8001, 0xa}, @generic={0xda, 0x10, 0xb, "6672008e80372fa5ba9c217f39beebe37bb42e1b54895c674d710d788827e3b39c126ce4b953ccfe0896141b4efe796e63fe884d2ceb0862908cbc056bacf5a4c060d4369a76a010a06c9f302484264b5672341d3e995bc30e4aaa8c34e87754905afb5e662360915650f0b4fa5472cbc30ed07b5c336b76f40b12a137fa7509ba18fe979d807c46f161c95b8dd5177574c8fa88bfa2813a4ae3efc9f026a941a9b8d1f3e874573ca1d46884f58ee0a4af4bbc243cf37660d4e3c655f7467c936a0988557656ce4cbe7d9ca8a629fd0bf5ceca67c513b4"}]}, 0x7, [{0xbd, &(0x7f0000000900)=@string={0xbd, 0x3, "b2d4b1cb8976db2153d3f4afd820ca4703b07ba6e980b29626facf5988ead45674f6d28bee6b01fcfabf0f55822acbccfb7e7ac9ac6cfcdd64a5011f8a9c05f0863fb6d68f47e5c31fc712fcba41dca13e5c45a0dd91a172a6298ee4f1d1adc35f8c93aeff6caf88263a53ba4e46aba2fea48256128416797960bc6f7c5cec6de79c0866b3de5e57c6f395e4f9e204e8d4c82cf1f271528578340d655f9789c5b9339adb67a6af9c8ae60ba8823ee890b426e4bd8b2ff538596253"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4}}, {0x47, &(0x7f0000000a80)=@string={0x47, 0x3, "3980cf76fa01ec7884a8b6ec4138d85fb3d23832f8df8de7649e5e69fe34e237686b243bf4b044c880fccde5c2ffde29eaa4723b5ad510ce9e083fc85a037e01354fb3469b"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x380a}}, {0xa7, &(0x7f0000000b80)=@string={0xa7, 0x3, "6177d650ed82b9fc3b5cba6a48b8b6a3b17bc83a067921970a717284a6cb0a7e01c5c0252d9d09c09293dc9673196fc72b908ef805c85a0f134cf2bc915dddf04ab89081464b4c40dc2040edaa6819afb34e4635c7d170a8d3d80021aeacd76d55f094b439713fe142e9c9121396b1a805760c9edc262cd380831be1fab2e0225be356075a8d0fb87cc8035f560bd8453316fc74b3d7c332a2fddaeff4dc8892489b353f43"}}]}) syz_usb_control_io$cdc_ecm(r10, &(0x7f0000000dc0)={0xc, &(0x7f0000000cc0)={0x0, 0xa, 0x7d, {0x7d, 0x7, "73e4e7f07f3768d2db928445ab78ad6d1f0a7d9c3436c5d733ca8849cf42e2b8102a2c0c045e939bd79b30ffc3e5007b72d79fdafe76c76b21b92cbb9f6b5b7420b43c23fe07c0d7d1ee917f07654972f0fecc9bcadaad24b2bf034c3fd5e31099a0eba7778e84ab2d04865f8f90fdbf9d2a757afbd91c21d9cac0"}}, &(0x7f0000000d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000003fc0)={0x10, &(0x7f0000002e80)={0x40, 0x5fb02261f77ff864, 0xc0, "23453ac7ff56b89c0bda9dc2cddee531d19f22d85bc84afcc8e6c5a1f283d163e8093c381b8b3cc84233c143021ea86be6c3d71b608035f0baabef56c5ef773cb2c88f13128e6366e2a910cb01a41979f21e162432a998ea5458595aa5d1fd34672925e7a937126456e1a16a89771b16db4d96e2e1e142f7bf00dd2934d9e0f06b69ef5022fe3c6b92d997c64ed6fd5c68c08c6649934d759911fcefefb9affae5982920d294fc1552eb91d3bca0e879a7801e6ee85499265f3063ced036cf29"}, &(0x7f0000000e00)={0x0, 0xa, 0x1}, &(0x7f0000003f80)={0x0, 0x8, 0x1, 0x4}}) recvmmsg(r7, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000880)=""/127, 0x7f}], 0x1, &(0x7f0000002f80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_IOC_SETTIMEOUT(r2, 0x80049367, &(0x7f0000004000)=0x86e) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@mcast2, @dev, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022, r0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) kernel console output (not intermixed with test programs): T12204] veth1_vlan: entered promiscuous mode [ 555.233635][T12204] veth0_macvtap: entered promiscuous mode [ 555.241820][T12363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1509'. [ 555.255375][T12204] veth1_macvtap: entered promiscuous mode [ 555.355556][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.441329][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.519202][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.569404][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.598589][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 555.612331][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.627446][T12204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 555.654313][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.666563][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.682989][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.693999][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.702104][ T29] audit: type=1800 audit(1726510380.287:124): pid=12375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1513" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 555.739518][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.773000][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 555.848778][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 555.918579][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.013486][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.058464][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.126861][T12204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.160739][T12204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.186560][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 556.209576][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 556.222603][T12204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.224090][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 556.234047][T12204] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.248472][T12204] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.261489][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 556.270060][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 556.277705][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 556.295647][T12204] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.358107][T12204] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.922589][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1512'. [ 557.087023][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.098564][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.273895][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.295249][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.390374][ T1863] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 557.411697][T12392] chnl_net:caif_netlink_parms(): no params data found [ 557.580984][ T1863] usb 3-1: Using ep0 maxpacket: 32 [ 557.590489][ T1863] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 557.600350][ T1863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.618460][ T1863] usb 3-1: config 0 descriptor?? [ 557.662078][ T1863] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 557.880387][ T1863] gspca_nw80x: reg_w err -71 [ 557.888461][ T1863] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 557.922913][ T1863] usb 3-1: USB disconnect, device number 81 [ 558.022457][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.073559][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.116637][T12392] bridge_slave_0: entered allmulticast mode [ 558.123995][T12392] bridge_slave_0: entered promiscuous mode [ 558.155461][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.162834][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.196793][T12392] bridge_slave_1: entered allmulticast mode [ 558.253218][T12392] bridge_slave_1: entered promiscuous mode [ 558.319413][ T5285] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 558.341048][ T5244] Bluetooth: hci7: command tx timeout [ 558.397947][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.417267][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.494707][T12392] team0: Port device team_slave_0 added [ 558.539455][ T5285] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 558.558360][T12392] team0: Port device team_slave_1 added [ 558.599489][ T5285] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 558.607403][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.702778][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.702799][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.702826][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.715505][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.715520][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.715535][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.750586][ C0] vkms_vblank_simulate: vblank timer overrun [ 558.932359][T12392] hsr_slave_0: entered promiscuous mode [ 558.933079][T12392] hsr_slave_1: entered promiscuous mode [ 558.933536][T12392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.933560][T12392] Cannot create hsr debugfs directory [ 559.004879][ T5285] usb 4-1: USB disconnect, device number 80 [ 559.314735][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 559.330641][T12435] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1521'. [ 559.613394][T12392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.716860][T12441] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1524'. [ 559.732889][T12441] openvswitch: netlink: Actions may not be safe on all matching packets [ 559.741426][ T29] audit: type=1800 audit(1726510384.317:125): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1523" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 559.913770][T12392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.158508][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1527'. [ 560.216741][T12392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.252753][T12450] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 560.392507][T12392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.419604][ T5244] Bluetooth: hci7: command tx timeout [ 560.452314][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 560.649175][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 560.685293][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 560.707681][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 560.722890][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 560.731177][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 560.739037][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.994824][T12455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1528'. [ 561.034787][T12458] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1530'. [ 561.179211][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 561.189705][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 561.228168][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 561.304049][T12392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 561.335833][T12392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 561.365816][T12392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 561.377584][T12392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 561.427909][T12456] chnl_net:caif_netlink_parms(): no params data found [ 561.599543][ T5288] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 561.662551][T12456] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.685345][T12456] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.709649][T12456] bridge_slave_0: entered allmulticast mode [ 561.716544][T12456] bridge_slave_0: entered promiscuous mode [ 561.748742][T12456] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.770473][T12456] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.777953][T12456] bridge_slave_1: entered allmulticast mode [ 561.787034][T12456] bridge_slave_1: entered promiscuous mode [ 561.805506][ T5288] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 561.837757][ T5288] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 561.874113][ T5288] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 561.906272][T12456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.911472][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.959587][ T5244] Bluetooth: to_multiplier 42238 > 3200 [ 561.979934][T12456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.012133][T12463] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 562.063827][ T5288] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 562.265942][T12456] team0: Port device team_slave_0 added [ 562.292655][T12456] team0: Port device team_slave_1 added [ 562.346962][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.400447][ T46] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 562.436408][T12456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.444237][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.499813][ T5244] Bluetooth: hci7: command tx timeout [ 562.508781][T12456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.547392][T12456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.555783][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.583924][T12456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.613119][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.624773][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.637182][ T46] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 562.654296][ T5289] usb 5-1: USB disconnect, device number 93 [ 562.663306][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.702608][ T46] usb 3-1: config 0 descriptor?? [ 562.707620][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.820717][ T5244] Bluetooth: hci0: command tx timeout [ 562.832852][T12456] hsr_slave_0: entered promiscuous mode [ 562.842818][T12456] hsr_slave_1: entered promiscuous mode [ 562.857277][T12456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.877688][T12456] Cannot create hsr debugfs directory [ 562.897404][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.904662][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.019119][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.026449][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.183473][ T46] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 563.219999][ T46] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 563.242840][ T46] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 563.254774][ T46] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 563.267049][ T46] hid-thrustmaster 0003:044F:B65D.000F: unknown main item tag 0x0 [ 563.318935][ T46] hid-thrustmaster 0003:044F:B65D.000F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 563.340102][ T46] hid-thrustmaster 0003:044F:B65D.000F: Wrong number of endpoints? [ 563.382787][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.391298][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.497728][T12456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.554078][ C1] hid-thrustmaster 0003:044F:B65D.000F: URB to get model id failed with error -71 [ 563.554508][ T8] usb 3-1: USB disconnect, device number 82 [ 563.656675][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.767576][T12456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.966182][T12456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.022814][ T5244] Bluetooth: hci3: command 0x0405 tx timeout [ 564.055927][T12392] veth0_vlan: entered promiscuous mode [ 564.104257][T12456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.191824][T12392] veth1_vlan: entered promiscuous mode [ 564.232935][T12392] veth0_macvtap: entered promiscuous mode [ 564.260413][T12392] veth1_macvtap: entered promiscuous mode [ 564.396365][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.416210][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.428218][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.441824][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.453465][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.466365][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.488055][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.500830][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.513378][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.552465][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.580484][ T5244] Bluetooth: hci7: command tx timeout [ 564.589039][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.632044][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.688236][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.712061][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.727992][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.746813][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.759068][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.774896][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.785750][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.827764][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 564.878660][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.899964][ T5244] Bluetooth: hci0: command tx timeout [ 564.969508][T12392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.026497][T12392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.048335][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.105478][T12456] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 565.131698][T12392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.142573][T12392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.153861][T12392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.170569][T12392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.209502][ T46] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 565.229417][T12456] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 565.288059][T12456] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 565.335591][T12456] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 565.440942][ T46] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 565.500623][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 565.569574][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.762439][T12503] bridge_slave_1: left allmulticast mode [ 565.774982][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 565.788981][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.811273][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.878376][ T5289] usb 3-1: USB disconnect, device number 83 [ 565.964738][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.022813][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.060133][T12503] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 566.092584][T12456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.113177][T12503] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1õ›' [ 566.133972][T12456] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.165367][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.172543][T11466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.186243][T12503] ALSA: mixer_oss: invalid OSS volume 'DõhRQ—Ãd-û²Î›r*MÕg wx¸©' [ 566.225558][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.232902][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.501207][T12456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.742021][T12456] veth0_vlan: entered promiscuous mode [ 566.795275][T12456] veth1_vlan: entered promiscuous mode [ 566.840137][T12512] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 566.846722][T12512] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 566.859628][T12512] vhci_hcd vhci_hcd.0: Device attached [ 566.876523][T12456] veth0_macvtap: entered promiscuous mode [ 566.903206][T12456] veth1_macvtap: entered promiscuous mode [ 566.924432][T12513] usbip_core: unknown command [ 566.924896][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.940936][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.951026][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.961592][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.972311][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.984186][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.996084][ T5244] Bluetooth: hci0: command tx timeout [ 567.002868][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.013618][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.024115][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.035559][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.049085][T12456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.061642][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.067404][T12513] vhci_hcd: unknown pdu 3020988904 [ 567.072196][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.087703][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.101618][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.111428][ T5288] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 567.230457][ T5282] usb 10-1: SetAddress Request (2) to port 0 [ 567.236661][ T5282] usb 10-1: new SuperSpeed USB device number 2 using vhci_hcd [ 567.241753][T12513] usbip_core: unknown command [ 567.287772][ T2943] vhci_hcd: stop threads [ 567.318194][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.328884][ T5288] usb 5-1: Using ep0 maxpacket: 16 [ 567.330494][ T2943] vhci_hcd: release socket [ 567.371429][ T5288] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 567.372389][T12524] QAT: failed to copy from user cfg_data. [ 567.381028][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.395743][ T5288] usb 5-1: Product: syz [ 567.395936][ T2943] vhci_hcd: disconnect device [ 567.401638][ T5288] usb 5-1: Manufacturer: syz [ 567.412785][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.414187][ T5288] usb 5-1: SerialNumber: syz [ 567.434772][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.440247][ T5288] usb 5-1: config 0 descriptor?? [ 567.446586][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.469458][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.480757][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.491245][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.506657][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.516868][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.527675][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.537943][T12456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 567.549185][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.564662][T12456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.580152][ T5288] as10x_usb: device has been detected [ 567.607485][ T5288] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 567.618793][T12456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.641668][T12456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.651021][T12456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.660589][T12456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.666732][ T5288] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 567.758801][T12528] syz.2.1546 uses obsolete (PF_INET,SOCK_PACKET) [ 567.765407][ T5288] as10x_usb: error during firmware upload part1 [ 567.765965][ T5288] Registered device PCTV Systems picoStick (74e) [ 567.782324][T12511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1543'. [ 567.852269][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.862182][T12511] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1543'. [ 567.895495][T12529] loop5: detected capacity change from 0 to 16384 [ 567.920932][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.940807][ T5244] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 567.941151][ T8] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 567.950069][ T5244] Bluetooth: hci5: Injecting HCI hardware error event [ 567.967385][ T5230] Bluetooth: hci5: hardware error 0x00 [ 568.077581][ T1863] usb 5-1: USB disconnect, device number 94 [ 568.147084][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.156845][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.202964][ T1863] Unregistered device PCTV Systems picoStick (74e) [ 568.208708][ T1863] as10x_usb: device has been disconnected [ 568.209601][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 568.242897][ T8] usb 4-1: config index 0 descriptor too short (expected 65280, got 92) [ 568.251913][ T8] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 568.263520][ T8] usb 4-1: config 255 has an invalid descriptor of length 255, skipping remainder of the config [ 568.275728][ T8] usb 4-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 568.295415][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 568.382615][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.432325][ T8] usb 4-1: Product: syz [ 568.468259][ T8] usb 4-1: Manufacturer: syz [ 568.522512][T12531] fuse: Unknown parameter 'fºÔ0x0000000000000005' [ 568.532042][ T8] usb 4-1: SerialNumber: syz [ 568.881704][T12524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.903929][T12524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.979509][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 569.059598][ T5244] Bluetooth: hci0: command tx timeout [ 569.084506][ T5288] IPVS: starting estimator thread 0... [ 569.130893][ T5228] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 569.199558][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 569.209431][T12543] IPVS: using max 20 ests per chain, 48000 per kthread [ 569.235013][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.259175][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 569.279072][ T9] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 569.291515][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.339657][ T9] usb 5-1: Product: syz [ 569.357516][ T9] usb 5-1: Manufacturer: syz [ 569.364665][ T9] usb 5-1: SerialNumber: syz [ 569.377336][ T9] usb 5-1: config 0 descriptor?? [ 569.399475][ T5228] usb 3-1: Using ep0 maxpacket: 8 [ 569.444770][ T5228] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 569.461016][ T5228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.469126][ T5228] usb 3-1: Product: syz [ 569.473903][ T5228] usb 3-1: Manufacturer: syz [ 569.478553][ T5228] usb 3-1: SerialNumber: syz [ 569.486401][ T5228] usb 3-1: config 0 descriptor?? [ 569.606272][T12535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.630268][T12547] hsr0: entered promiscuous mode [ 569.636508][T12547] macsec1: entered promiscuous mode [ 569.649823][T12547] macsec1: entered allmulticast mode [ 569.657130][T12547] hsr0: entered allmulticast mode [ 569.664247][T12547] hsr_slave_0: entered allmulticast mode [ 569.673777][T12547] hsr_slave_1: entered allmulticast mode [ 569.701901][T12535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.806455][ T25] usb 5-1: USB disconnect, device number 95 [ 569.823933][ T5228] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 570.019904][ T5230] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 570.247025][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 570.305363][T12554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1553'. [ 570.431961][ T8] usb 4-1: USB disconnect, device number 81 [ 570.531419][T12558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1554'. [ 570.786735][T12566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.355775][T12579] fuse: Unknown parameter 'fºÔ0x0000000000000005' [ 571.449645][ T1863] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 571.510204][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 571.639414][ T1863] usb 5-1: Using ep0 maxpacket: 16 [ 571.646831][ T1863] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 571.664793][ T1863] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 571.674153][ T1863] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.682270][ T1863] usb 5-1: Product: syz [ 571.686459][ T1863] usb 5-1: Manufacturer: syz [ 571.691638][ T1863] usb 5-1: SerialNumber: syz [ 571.706432][ T1863] usb 5-1: config 0 descriptor?? [ 571.723614][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 571.756892][ T9] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 571.769576][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.780584][ T9] usb 1-1: Product: syz [ 571.785451][ T9] usb 1-1: Manufacturer: syz [ 571.793281][ T9] usb 1-1: SerialNumber: syz [ 571.809497][ T5289] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 571.815146][ T9] usb 1-1: config 0 descriptor?? [ 571.830789][ T9] as10x_usb: device has been detected [ 571.838072][ T9] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 571.857573][ T9] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 571.872717][ T9] as10x_usb: error during firmware upload part1 [ 571.880736][ T9] Registered device PCTV Systems picoStick (74e) [ 572.022659][ T9] usb 5-1: USB disconnect, device number 96 [ 572.055031][ T5289] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 572.084866][T12577] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1559'. [ 572.090346][ T5289] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 572.095040][T12577] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1559'. [ 572.135197][ T8] usb 1-1: USB disconnect, device number 88 [ 572.159832][ T5289] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 572.168779][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 572.182165][ T8] Unregistered device PCTV Systems picoStick (74e) [ 572.195080][ T8] as10x_usb: device has been disconnected [ 572.196738][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 572.243929][ T5289] usb 4-1: string descriptor 0 read error: -22 [ 572.261309][ T5289] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 572.273175][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.284603][ T5289] usb 4-1: config 0 descriptor?? [ 572.304647][ T5289] hub 4-1:0.0: bad descriptor, ignoring hub [ 572.322191][ T5289] hub 4-1:0.0: probe with driver hub failed with error -5 [ 572.338888][ T5289] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input57 [ 572.387447][ T5289] input: failed to attach handler mousedev to device input57, error: -5 [ 572.421329][ T5282] usb 10-1: device descriptor read/8, error -110 [ 572.533970][ T5228] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 572.557714][ T5228] usb 3-1: USB disconnect, device number 84 [ 572.567097][ T5289] usb 4-1: USB disconnect, device number 82 [ 572.860974][ T5282] usb usb10-port1: attempt power cycle [ 572.965663][ T5289] IPVS: starting estimator thread 0... [ 573.060093][T12593] IPVS: using max 22 ests per chain, 52800 per kthread [ 573.199537][ T1863] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 573.411478][ T1863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.458374][T12608] syz.3.1567: attempt to access beyond end of device [ 573.458374][T12608] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 573.471782][ T1863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.484931][ T1863] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 573.495139][ T1863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.506429][ T1863] usb 1-1: config 0 descriptor?? [ 573.540645][ T5282] usb usb10-port1: unable to enumerate USB device [ 573.958886][ T1863] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 573.966551][ T1863] cm6533_jd 0003:0D8C:0022.0010: item fetching failed at offset 4/5 [ 573.976265][ T1863] cm6533_jd 0003:0D8C:0022.0010: parse failed [ 573.983005][ T1863] cm6533_jd 0003:0D8C:0022.0010: probe with driver cm6533_jd failed with error -22 [ 574.018378][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1570'. [ 574.322511][ T8] usb 1-1: USB disconnect, device number 89 [ 574.341780][T12619] fuse: Unknown parameter 'fºÔ0x0000000000000005' [ 574.710456][ T29] audit: type=1326 audit(1726510399.307:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.1576" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 574.765483][T12628] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1572'. [ 574.939488][ T25] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 575.140295][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 575.158876][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 575.202910][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 575.223690][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 575.232953][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.243282][ T25] usb 5-1: config 0 descriptor?? [ 575.249531][ T5228] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 575.481400][ T5228] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 575.494287][ T5228] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 575.508913][ T5228] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 575.532849][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 575.552541][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 575.567746][ T5228] usb 4-1: string descriptor 0 read error: -22 [ 575.581846][ T5228] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 575.595999][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.608296][ T5228] usb 4-1: config 0 descriptor?? [ 575.624028][ T5228] hub 4-1:0.0: bad descriptor, ignoring hub [ 575.638681][ T5228] hub 4-1:0.0: probe with driver hub failed with error -5 [ 575.659529][ T5228] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input58 [ 575.729166][ T5228] input: failed to attach handler mousedev to device input58, error: -5 [ 575.844364][ T9851] usb 4-1: USB disconnect, device number 83 [ 575.880877][T12621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.940468][T12621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.009125][ T25] hid-generic 0003:0158:0100.0011: unknown main item tag 0x1 [ 576.050482][ T25] hid-generic 0003:0158:0100.0011: unexpected long global item [ 576.070382][ T25] hid-generic 0003:0158:0100.0011: probe with driver hid-generic failed with error -22 [ 576.116451][T12651] fuse: Unknown parameter 'fºÔ0x0000000000000005' [ 576.246709][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 576.304863][ T5228] usb 5-1: USB disconnect, device number 97 [ 576.580357][T12661] hsr0: entered promiscuous mode [ 576.588866][T12661] macsec1: entered promiscuous mode [ 576.599433][ T25] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 576.624869][T12661] macsec1: entered allmulticast mode [ 576.629615][ T5289] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 576.651917][T12661] hsr0: entered allmulticast mode [ 576.657738][T12661] hsr_slave_0: entered allmulticast mode [ 576.679398][T12661] hsr_slave_1: entered allmulticast mode [ 576.825804][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 576.835565][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 576.846979][ T5289] usb 3-1: Using ep0 maxpacket: 32 [ 576.876946][ T5289] usb 3-1: config 4 has an invalid interface number: 42 but max is 0 [ 576.889562][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 576.910607][ T5289] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 576.929918][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 576.941599][ T5289] usb 3-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 576.950909][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 576.964493][ T5289] usb 3-1: config 4 has no interface number 0 [ 576.971189][ T5289] usb 3-1: config 4 interface 42 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 576.981882][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 576.991447][ T5289] usb 3-1: config 4 interface 42 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 577.002357][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.010611][ T5289] usb 3-1: config 4 interface 42 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 577.022980][ T5289] usb 3-1: config 4 interface 42 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 577.039372][ T5289] usb 3-1: config 4 interface 42 altsetting 1 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 577.050452][ T5289] usb 3-1: config 4 interface 42 altsetting 1 endpoint 0x1 has an invalid bInterval 122, changing to 10 [ 577.062247][ T5289] usb 3-1: config 4 interface 42 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 577.074944][ T5289] usb 3-1: config 4 interface 42 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 577.096586][ T5289] usb 3-1: config 4 interface 42 has no altsetting 0 [ 577.115289][ T5289] usb 3-1: New USB device found, idVendor=1199, idProduct=9005, bcdDevice=db.aa [ 577.126136][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.137798][ T5289] usb 3-1: Product: ࡃ [ 577.145061][ T5289] usb 3-1: Manufacturer: á°‰ [ 577.150024][ T5289] usb 3-1: SerialNumber: Ñ [ 577.158375][T12656] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 577.277640][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 577.283540][ T25] usbtmc 2-1:16.0: can't read capabilities [ 577.325770][T12677] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1590'. [ 577.347873][T12674] pim6reg0: tun_chr_ioctl cmd 1342215182 [ 577.485326][ T25] usb 2-1: USB disconnect, device number 86 [ 577.583252][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1585'. [ 577.637823][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1585'. [ 578.444990][ T5289] usb 3-1: USB disconnect, device number 85 [ 578.531317][T12690] syzkaller0: entered promiscuous mode [ 578.537440][T12690] syzkaller0: entered allmulticast mode [ 578.619507][ T9851] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 578.839454][ T9851] usb 1-1: Using ep0 maxpacket: 32 [ 578.851736][ T9851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.867457][ T9851] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 578.954693][ T9851] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 578.964441][ T9851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.988012][ T9851] usb 1-1: Product: syz [ 578.995986][ T9851] usb 1-1: Manufacturer: syz [ 579.002796][ T9851] usb 1-1: SerialNumber: syz [ 579.022675][ T9851] usb 1-1: config 0 descriptor?? [ 579.112583][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 579.318393][T12692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.389641][T12692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.428001][ T9851] usb 1-1: USB disconnect, device number 90 [ 579.609164][ T5228] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 579.855611][ T5228] usb 4-1: Using ep0 maxpacket: 16 [ 579.880630][T12718] fuse: Bad value for 'fd' [ 579.891508][ T5228] usb 4-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 579.912918][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.012442][ T5228] usb 4-1: Product: syz [ 580.052680][ T5228] usb 4-1: Manufacturer: syz [ 580.080926][ T5228] usb 4-1: SerialNumber: syz [ 580.138370][ T5228] usb 4-1: config 0 descriptor?? [ 580.216599][ T5228] as10x_usb: device has been detected [ 580.223930][ T5228] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 580.261294][ T5228] usb 4-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 580.289154][ T5228] as10x_usb: error during firmware upload part1 [ 580.324857][ T5228] Registered device PCTV Systems picoStick (74e) [ 580.524578][T12711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1599'. [ 580.555354][T12711] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1599'. [ 581.064073][T12729] dlm: no locking on control device [ 583.966341][T12719] hsr0: entered promiscuous mode [ 583.973131][T12719] macsec1: entered promiscuous mode [ 583.985107][T12719] macsec1: entered allmulticast mode [ 583.994374][ T5289] usb 4-1: USB disconnect, device number 84 [ 584.009879][T12719] hsr0: entered allmulticast mode [ 584.020696][T12719] hsr_slave_0: entered allmulticast mode [ 584.029629][T12719] hsr_slave_1: entered allmulticast mode [ 584.036578][ T5289] Unregistered device PCTV Systems picoStick (74e) [ 584.045488][ T5289] as10x_usb: device has been disconnected [ 584.108882][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1603'. [ 584.170266][T12729] netlink: 'syz.2.1605': attribute type 4 has an invalid length. [ 584.734953][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'. [ 584.754301][T12755] syz.4.1611: attempt to access beyond end of device [ 584.754301][T12755] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 584.795648][ T5289] IPVS: starting estimator thread 0... [ 584.795644][T12754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1613'. [ 584.916804][T12757] IPVS: using max 19 ests per chain, 45600 per kthread [ 585.499412][ T5289] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 585.699559][ T9851] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 585.707789][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 585.715646][ T5289] usb 4-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 585.726376][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 585.739152][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 585.749655][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 585.764659][ T5289] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 585.774229][ T5289] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 585.783205][ T5289] usb 4-1: Manufacturer: syz [ 585.795684][ T5289] usb 4-1: config 0 descriptor?? [ 585.899673][ T9851] usb 3-1: Using ep0 maxpacket: 16 [ 585.915402][ T9851] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 585.927435][ T9851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.941238][ T9851] usb 3-1: Product: syz [ 585.946590][ T9851] usb 3-1: Manufacturer: syz [ 585.953645][ T9851] usb 3-1: SerialNumber: syz [ 585.963809][ T9851] usb 3-1: config 0 descriptor?? [ 585.982208][ T9851] as10x_usb: device has been detected [ 585.988545][ T9851] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 586.021838][ T9851] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 586.053714][ T9851] as10x_usb: error during firmware upload part1 [ 586.060685][ T9851] Registered device PCTV Systems picoStick (74e) [ 586.204067][T12770] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1617'. [ 586.219753][ T5289] rc_core: IR keymap rc-hauppauge not found [ 586.225638][ T5289] Registered IR keymap rc-empty [ 586.242584][T12770] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1617'. [ 586.245094][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.281582][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.301762][ T9851] usb 3-1: USB disconnect, device number 86 [ 586.319103][ T5289] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 586.341821][ T9851] Unregistered device PCTV Systems picoStick (74e) [ 586.342816][ T9851] as10x_usb: device has been disconnected [ 586.358752][ T5289] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59 [ 586.389144][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.398669][T12767] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1616'. [ 586.441110][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.499852][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.542390][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.590923][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.655560][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.709675][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.740701][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.780664][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.816667][ T5289] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 586.864185][ T5289] mceusb 4-1:0.0: Registered Ø‹ with mce emulator interface version 1 [ 586.884447][ T5289] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 586.924492][ T5289] usb 4-1: USB disconnect, device number 85 [ 587.356615][T12792] hsr0: entered promiscuous mode [ 587.363011][T12792] macsec1: entered promiscuous mode [ 587.377605][T12792] macsec1: entered allmulticast mode [ 587.389786][T12792] hsr0: entered allmulticast mode [ 587.399125][T12792] hsr_slave_0: entered allmulticast mode [ 587.405673][T12792] hsr_slave_1: entered allmulticast mode [ 587.761704][T12796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1620'. [ 588.174999][T12806] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 588.181585][T12806] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 588.231615][T12806] vhci_hcd vhci_hcd.0: Device attached [ 588.539412][ T5289] usb 14-1: SetAddress Request (2) to port 0 [ 588.545491][ T5289] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 588.654983][T12807] vhci_hcd: connection reset by peer [ 588.676827][T11466] vhci_hcd: stop threads [ 588.682550][T11466] vhci_hcd: release socket [ 588.687250][T11466] vhci_hcd: disconnect device [ 589.537187][ T5285] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 589.599486][ T46] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 589.668076][T12836] input: syz0 as /devices/virtual/input/input60 [ 589.759424][ T5285] usb 2-1: Using ep0 maxpacket: 16 [ 589.773809][ T5285] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 589.785368][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.789543][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 589.793856][ T5285] usb 2-1: Product: syz [ 589.802873][ T5285] usb 2-1: Manufacturer: syz [ 589.808411][ T5285] usb 2-1: SerialNumber: syz [ 589.815400][ T5285] usb 2-1: config 0 descriptor?? [ 589.833598][ T5285] as10x_usb: device has been detected [ 589.841322][ T5285] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 589.856853][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 589.863643][ T5285] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 589.919228][ T5285] as10x_usb: error during firmware upload part1 [ 589.921872][ T46] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 589.926166][ T5285] Registered device PCTV Systems picoStick (74e) [ 589.984848][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.073469][ T46] usb 3-1: Product: syz [ 590.078719][ T46] usb 3-1: Manufacturer: syz [ 590.084078][ T46] usb 3-1: SerialNumber: syz [ 590.091928][T12828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1629'. [ 590.134247][ T46] usb 3-1: config 0 descriptor?? [ 590.151245][T12828] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1629'. [ 590.169958][ T5228] usb 2-1: USB disconnect, device number 87 [ 590.180701][T12831] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 590.192133][ T5228] Unregistered device PCTV Systems picoStick (74e) [ 590.195000][ T5228] as10x_usb: device has been disconnected [ 590.242840][ T46] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 590.524357][ T5282] usb 3-1: USB disconnect, device number 87 [ 590.824762][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.001619][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.285525][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.445482][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.604541][T12851] hsr0: entered promiscuous mode [ 591.620696][ T46] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 591.641108][T12851] macsec1: entered promiscuous mode [ 591.659868][T12851] macsec1: entered allmulticast mode [ 591.675488][T12851] hsr0: entered allmulticast mode [ 591.682838][T12851] hsr_slave_0: entered allmulticast mode [ 591.699755][T12851] hsr_slave_1: entered allmulticast mode [ 591.744320][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 591.759949][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 591.777209][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 591.791060][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 591.808130][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 591.823030][ T46] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 591.838167][ T46] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 591.855628][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 591.882989][ T46] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 591.894510][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 591.904931][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 591.918708][ T46] usb 3-1: string descriptor 0 read error: -22 [ 591.939541][ T46] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 591.952944][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.964068][ T46] usb 3-1: config 0 descriptor?? [ 591.971293][ T46] hub 3-1:0.0: bad descriptor, ignoring hub [ 591.989513][ T46] hub 3-1:0.0: probe with driver hub failed with error -5 [ 592.017762][ T46] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input61 [ 592.130129][ T77] bridge_slave_1: left allmulticast mode [ 592.167643][ T77] bridge_slave_1: left promiscuous mode [ 592.176815][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.245948][ T46] input: failed to attach handler mousedev to device input61, error: -5 [ 592.246744][ T77] bridge_slave_0: left allmulticast mode [ 592.291974][ T46] usb 3-1: USB disconnect, device number 88 [ 592.298098][ T77] bridge_slave_0: left promiscuous mode [ 592.304464][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.096258][T12868] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.273546][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.294103][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.312860][ T77] bond0 (unregistering): Released all slaves [ 593.620852][ T5289] usb 14-1: device descriptor read/8, error -110 [ 593.642773][ T29] audit: type=1326 audit(1726510418.237:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12874 comm="syz.1.1644" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f37579 code=0x0 [ 593.940039][ T5230] Bluetooth: hci7: command tx timeout [ 594.052315][ T5289] usb usb14-port1: attempt power cycle [ 594.088102][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.140449][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.184771][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.214186][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.302468][ T77] hsr0: left allmulticast mode [ 594.321000][ T77] veth1_macvtap: left promiscuous mode [ 594.348120][ T77] veth0_macvtap: left promiscuous mode [ 594.370475][ T77] veth1_vlan: left promiscuous mode [ 594.387927][ T77] veth0_vlan: left promiscuous mode [ 594.608579][ T29] audit: type=1326 audit(1726510419.207:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12896 comm="syz.2.1649" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 594.730591][ T5289] usb usb14-port1: unable to enumerate USB device [ 594.859460][ T5285] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 595.071996][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.097397][ T5285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.117641][ T5285] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 595.148619][ T5285] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 595.170630][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.181940][ T5285] usb 2-1: config 0 descriptor?? [ 596.022395][ T5230] Bluetooth: hci7: command tx timeout [ 596.322591][ T77] team0 (unregistering): Port device team_slave_1 removed [ 596.404226][ T77] team0 (unregistering): Port device team_slave_0 removed [ 596.991848][T12922] fuse: Bad value for 'fd' [ 597.546534][ T25] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 597.757233][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 597.767434][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.778781][ T25] usb 5-1: config 0 descriptor?? [ 597.983870][ T5285] usbhid 2-1:0.0: can't add hid device: -71 [ 598.010101][ T5285] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 598.023288][ T5285] usb 2-1: USB disconnect, device number 88 [ 598.109938][ T5230] Bluetooth: hci7: command tx timeout [ 598.249069][T12930] trusted_key: syz.1.1657 sent an empty control message without MSG_MORE. [ 598.561950][ T25] ath6kl: Failed to submit usb control message: -71 [ 598.590841][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 598.617960][ T25] ath6kl: Unable to send get target info: -71 [ 598.675097][ T25] ath6kl: Failed to init ath6kl core: -71 [ 598.686920][ T25] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 598.719485][ T25] usb 5-1: USB disconnect, device number 98 [ 598.737834][T12854] chnl_net:caif_netlink_parms(): no params data found [ 599.254290][T12854] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.278017][T12854] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.288870][T12854] bridge_slave_0: entered allmulticast mode [ 599.297937][T12854] bridge_slave_0: entered promiscuous mode [ 599.309417][ T25] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 599.320113][T12854] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.330120][T12854] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.339720][T12854] bridge_slave_1: entered allmulticast mode [ 599.410430][T12854] bridge_slave_1: entered promiscuous mode [ 599.512033][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 599.539230][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 599.597099][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 599.666258][T12854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.687479][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.742947][ T25] usb 4-1: config 0 descriptor?? [ 599.768194][T12854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.820826][ T25] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input62 [ 600.105726][T12972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.142138][T12972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.179786][ T5230] Bluetooth: hci7: command tx timeout [ 600.345140][T12854] team0: Port device team_slave_0 added [ 600.385357][T12854] team0: Port device team_slave_1 added [ 600.397769][ T4670] bcm5974 4-1:0.0: could not read from device [ 600.491658][ T25] usb 4-1: USB disconnect, device number 86 [ 600.539677][T12947] bcm5974 4-1:0.0: could not read from device [ 600.643433][T12854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.684601][T12854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.779462][T12854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.855667][T12854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 600.890744][T12854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.965982][T12854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 601.083605][T12854] hsr_slave_0: entered promiscuous mode [ 601.105880][T12854] hsr_slave_1: entered promiscuous mode [ 601.118352][T12854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 601.141432][T12854] Cannot create hsr debugfs directory [ 601.150669][ T5228] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 601.204100][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'. [ 601.360966][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.361042][ T5228] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 601.361068][ T5228] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 601.361111][ T5228] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 601.361136][ T5228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.363698][ T5228] usb 2-1: config 0 descriptor?? [ 602.049461][ T5228] usbhid 2-1:0.0: can't add hid device: -71 [ 602.091158][ T5228] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 602.109662][ T5228] usb 2-1: USB disconnect, device number 89 [ 602.574682][ T29] audit: type=1326 audit(1726510427.167:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13012 comm="syz.3.1673" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 603.141796][ T2911] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.425828][ T2911] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.611269][ T5244] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 603.623924][ T5244] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 603.632732][ T5244] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 603.648053][ T5244] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 603.661898][ T5244] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 603.669749][ T5244] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 603.775863][ T2911] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.887361][T12854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 604.004929][ T2911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.039428][ T25] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 604.081390][T12854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 604.103733][T12854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 604.156016][T12854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 604.230586][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 604.268531][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.324864][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 604.420244][ T25] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 604.469888][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.478049][ T25] usb 4-1: Product: syz [ 604.494558][ T25] usb 4-1: Manufacturer: syz [ 604.506729][ T25] usb 4-1: SerialNumber: syz [ 604.537027][ T25] usb 4-1: config 0 descriptor?? [ 604.693740][ T2911] bridge_slave_0: left allmulticast mode [ 604.703338][ T2911] bridge_slave_0: left promiscuous mode [ 604.709165][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.839914][T13028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.910631][T13028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.943566][ T25] usb 4-1: USB disconnect, device number 87 [ 605.790425][ T5244] Bluetooth: hci6: command tx timeout [ 606.041576][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.071143][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.159539][ T2911] bond0 (unregistering): Released all slaves [ 606.240422][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1679'. [ 607.248798][T12854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.314473][T13029] chnl_net:caif_netlink_parms(): no params data found [ 607.366187][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.374688][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.388125][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.412183][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.452834][ T2911] hsr0: left allmulticast mode [ 607.458008][ T2911] veth1_macvtap: left promiscuous mode [ 607.533788][ T2911] veth0_macvtap: left promiscuous mode [ 607.809596][ T5228] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 607.859754][ T5244] Bluetooth: hci6: command tx timeout [ 608.059456][ T5228] usb 4-1: Using ep0 maxpacket: 16 [ 608.091185][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 608.122429][ T5228] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 608.134765][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.143945][ T5228] usb 4-1: Product: syz [ 608.148261][ T5228] usb 4-1: Manufacturer: syz [ 608.153644][ T5228] usb 4-1: SerialNumber: syz [ 608.172543][ T5228] usb 4-1: config 0 descriptor?? [ 608.684875][ T5289] usb 4-1: USB disconnect, device number 88 [ 608.765542][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 608.838876][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 609.553254][T12854] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.649652][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.656825][T11466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.680321][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.687632][T11466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.749419][ T5289] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 609.856428][T12854] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 609.867273][T12854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 609.939705][ T5244] Bluetooth: hci6: command tx timeout [ 609.994796][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 610.024972][ T5289] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.083100][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 610.132520][ T5289] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 610.149495][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.159669][ T5289] usb 4-1: Product: syz [ 610.163878][ T5289] usb 4-1: Manufacturer: syz [ 610.168483][ T5289] usb 4-1: SerialNumber: syz [ 610.200061][ T5289] usb 4-1: config 0 descriptor?? [ 610.235156][T13029] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.294113][T13029] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.324088][T13029] bridge_slave_0: entered allmulticast mode [ 610.365025][T13029] bridge_slave_0: entered promiscuous mode [ 610.429972][T13029] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.437294][T13029] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.464228][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.510830][T13029] bridge_slave_1: entered allmulticast mode [ 610.549847][T13029] bridge_slave_1: entered promiscuous mode [ 610.608526][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.742936][ T5228] usb 4-1: USB disconnect, device number 89 [ 610.791814][T12854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.843869][T13029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 610.867221][ T2911] IPVS: stop unused estimator thread 0... [ 610.883237][T13029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.162416][T13029] team0: Port device team_slave_0 added [ 611.242589][T13029] team0: Port device team_slave_1 added [ 611.259074][T13167] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'. [ 611.422453][T13029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.445500][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.479655][ T29] audit: type=1326 audit(1726510436.047:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13170 comm="syz.3.1694" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 611.503177][T13029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.571102][T13029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.599412][T13029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.657744][T13029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.821218][T12854] veth0_vlan: entered promiscuous mode [ 611.950892][T13029] hsr_slave_0: entered promiscuous mode [ 611.995596][T13029] hsr_slave_1: entered promiscuous mode [ 612.016489][T13029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.025611][ T5244] Bluetooth: hci6: command tx timeout [ 612.055339][T13029] Cannot create hsr debugfs directory [ 612.081688][T12854] veth1_vlan: entered promiscuous mode [ 612.297504][T13180] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 612.894145][T12854] veth0_macvtap: entered promiscuous mode [ 612.910538][T12854] veth1_macvtap: entered promiscuous mode [ 613.150311][T13201] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1429 [ 613.232892][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.252074][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.263695][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.278475][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.295884][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.314593][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.329533][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.342754][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.374593][T12854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.495389][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.506565][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.516918][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.547772][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.585640][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.597795][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.609435][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.650042][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.661259][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.674266][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.689860][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.709447][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.746678][T12854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.788422][T12854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.832440][T12854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.857807][T12854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.870072][T12854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.880196][T12854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.891274][T12854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.063269][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1702'. [ 614.351921][T13029] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 614.361910][ T2998] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.374839][T13029] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 614.405928][T13029] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 614.431876][ T2998] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.473224][T13029] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.585128][T11466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.618944][T11466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 614.634072][ T29] audit: type=1326 audit(1726510439.217:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13212 comm="syz.3.1703" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x0 [ 614.839554][ T25] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 614.961101][ T1863] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 614.995099][T13029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.062983][ T25] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 615.109941][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.120474][T13029] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.159483][ T1863] usb 3-1: Using ep0 maxpacket: 32 [ 615.166372][ T25] usb 2-1: config 0 descriptor?? [ 615.177460][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.183617][ T1863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.184641][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.206811][ T1863] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 615.244848][ T1863] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 615.258564][ T1863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.272047][ T1863] usb 3-1: Product: syz [ 615.277033][ T1863] usb 3-1: Manufacturer: syz [ 615.282982][ T1863] usb 3-1: SerialNumber: syz [ 615.298393][ T1863] usb 3-1: config 0 descriptor?? [ 615.325106][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.332320][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.340967][ T46] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 615.539823][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 615.571309][ T46] usb 1-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 615.603366][T13229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.631677][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.662115][T13229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.683585][ T46] usb 1-1: Product: syz [ 615.703053][ T46] usb 1-1: Manufacturer: syz [ 615.707758][ T46] usb 1-1: SerialNumber: syz [ 615.738055][ T1863] usb 3-1: USB disconnect, device number 89 [ 615.762508][ T46] usb 1-1: config 0 descriptor?? [ 615.784155][ T46] as10x_usb: device has been detected [ 615.785852][T13029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.790856][ T46] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 615.819606][ T46] usb 1-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 615.832577][ T46] as10x_usb: error during firmware upload part1 [ 615.842205][ T46] Registered device PCTV Systems picoStick (74e) [ 615.988253][T13029] veth0_vlan: entered promiscuous mode [ 616.031973][T13236] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1647'. [ 616.058780][T13029] veth1_vlan: entered promiscuous mode [ 616.065073][T13236] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1647'. [ 616.089428][ T1863] usb 1-1: USB disconnect, device number 91 [ 616.144394][ T1863] Unregistered device PCTV Systems picoStick (74e) [ 616.149808][ T1863] as10x_usb: device has been disconnected [ 616.208551][T13029] veth0_macvtap: entered promiscuous mode [ 616.219127][ T25] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 616.270216][ T25] usb 2-1: USB disconnect, device number 90 [ 616.285103][T13029] veth1_macvtap: entered promiscuous mode [ 616.367139][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.406850][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.446519][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.477171][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.488476][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.503373][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.527719][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.540253][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.554774][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.569451][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.591608][T13029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.606928][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.619674][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.631467][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.665491][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.711523][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.749412][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.845461][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.921208][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.988336][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.130394][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.142761][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.153816][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.164374][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.178174][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.188834][T13029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.231949][T13029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.248792][T13029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.349692][ T5282] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 617.363041][T13029] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.379792][T13029] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.388941][T13029] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.401444][T13029] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.549391][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 617.581537][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 617.616034][ T5282] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 617.626455][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.640492][ T5282] usb 1-1: Product: syz [ 617.644830][ T5282] usb 1-1: Manufacturer: syz [ 617.653486][ T5282] usb 1-1: SerialNumber: syz [ 617.666365][ T5282] usb 1-1: config 0 descriptor?? [ 617.765661][T11466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.790074][T11466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.878346][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.920971][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.163396][ T1863] usb 1-1: USB disconnect, device number 92 [ 618.241704][ T5244] Bluetooth: hci3: unexpected event for opcode 0x0c7c [ 618.643285][ T77] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.903512][ T77] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.117638][ T77] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.262825][ T29] audit: type=1326 audit(1726510443.837:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13306 comm="syz.2.1722" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f13579 code=0x0 [ 619.292619][ T77] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.329383][ T25] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 619.429605][ T46] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 619.532529][ T5230] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 619.550095][ T5230] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 619.560644][ T5230] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 619.581121][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 619.592412][ T5230] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 619.609773][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 619.624996][ T5230] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 619.626758][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 619.645378][ T5230] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 619.751225][ T46] usb 2-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 619.770062][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.778499][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.803387][ T77] bridge_slave_1: left allmulticast mode [ 619.811555][ T25] usb 1-1: config 0 descriptor?? [ 619.819660][ T46] usb 2-1: Product: syz [ 619.836944][ T46] usb 2-1: Manufacturer: syz [ 619.839859][ T77] bridge_slave_1: left promiscuous mode [ 619.847289][ T46] usb 2-1: SerialNumber: syz [ 619.889092][ T46] usb 2-1: config 0 descriptor?? [ 619.898055][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.978928][ T77] bridge_slave_0: left allmulticast mode [ 619.998882][ T46] as10x_usb: device has been detected [ 620.009948][ T77] bridge_slave_0: left promiscuous mode [ 620.016143][ T46] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 620.058824][ T46] usb 2-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 620.140575][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.153345][T13304] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1720'. [ 620.172984][ T46] as10x_usb: error during firmware upload part1 [ 620.180294][ T46] Registered device PCTV Systems picoStick (74e) [ 620.277003][T13304] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1720'. [ 620.371416][T13324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1719'. [ 620.414245][ T25] (null): keene_cmd_main failed (-110) [ 620.419630][T13324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1719'. [ 620.446350][ T25] video4linux radio32: keene_cmd_main failed (-32) [ 620.508185][ T25] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 620.571596][ T5285] usb 2-1: USB disconnect, device number 91 [ 620.662324][ T5285] Unregistered device PCTV Systems picoStick (74e) [ 620.673707][ T5285] as10x_usb: device has been disconnected [ 621.702917][ T5230] Bluetooth: hci5: command tx timeout [ 621.809917][ T25] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 621.930566][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 621.952822][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 621.983065][ T77] bond0 (unregistering): Released all slaves [ 622.009458][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 622.040952][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 622.054712][ T25] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 622.064336][T13318] tipc: Enabling of bearer rejected, failed to enable media [ 622.101905][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1719'. [ 622.163615][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.206116][ T25] usb 3-1: config 0 descriptor?? [ 622.231401][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1725'. [ 622.260676][ T5230] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 622.271094][ T5230] Bluetooth: hci3: Injecting HCI hardware error event [ 622.281875][ T5244] Bluetooth: hci3: hardware error 0x00 [ 622.749444][T13341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.837796][T13341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.896284][ T25] hid (null): unknown global tag 0xc [ 622.918701][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.953271][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.992655][ T25] hid-sensor-hub 0003:0158:0100.0012: unknown main item tag 0x1 [ 623.019342][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 623.026821][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.034311][ T25] hid-sensor-hub 0003:0158:0100.0012: unexpected long global item [ 623.064950][ T25] hid-sensor-hub 0003:0158:0100.0012: parse failed [ 623.086879][ T25] hid-sensor-hub 0003:0158:0100.0012: probe with driver hid-sensor-hub failed with error -22 [ 623.272928][ T77] hsr0: left allmulticast mode [ 623.293634][ T5282] usb 1-1: USB disconnect, device number 93 [ 623.317423][ T77] veth1_macvtap: left promiscuous mode [ 623.349562][ T77] veth0_macvtap: left promiscuous mode [ 623.357484][ T77] veth1_vlan: left promiscuous mode [ 623.371826][ T77] veth0_vlan: left promiscuous mode [ 623.779874][ T5230] Bluetooth: hci5: command tx timeout [ 624.419511][ T5244] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 624.824308][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.834966][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.317132][ T77] team0 (unregistering): Port device team_slave_1 removed [ 625.417552][ T77] team0 (unregistering): Port device team_slave_0 removed [ 625.873272][ T5244] Bluetooth: hci5: command tx timeout [ 626.391662][ T5282] usb 3-1: USB disconnect, device number 90 [ 626.448346][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.467977][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.485465][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.493244][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.513753][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.579365][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.645048][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.690767][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.702839][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.710550][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.720551][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.727979][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.736642][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.736819][T13388] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1429 [ 626.744192][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.772116][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.784797][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.786123][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.787653][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.787687][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 626.963865][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.019640][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.027100][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.057879][T13311] chnl_net:caif_netlink_parms(): no params data found [ 627.099514][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.107423][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.118113][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.125642][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.133498][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.141121][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.148771][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.156278][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.164532][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.172056][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.180227][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.187703][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.239392][ T25] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 627.274363][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.319192][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.362228][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.403100][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.415816][ T77] IPVS: stop unused estimator thread 0... [ 627.429414][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 627.442744][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.459065][ T25] usb 3-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 627.467648][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.490546][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.498600][ T25] usb 3-1: Product: syz [ 627.507300][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.514158][ T25] usb 3-1: Manufacturer: syz [ 627.519983][ T25] usb 3-1: SerialNumber: syz [ 627.529447][ T1863] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 627.539995][ T25] usb 3-1: config 0 descriptor?? [ 627.559539][ T25] as10x_usb: device has been detected [ 627.561949][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.566438][ T25] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 627.611574][ T5285] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 627.620797][T13311] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.629826][T13311] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.647521][ T25] usb 3-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 627.659709][ T5285] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 627.671517][T13311] bridge_slave_0: entered allmulticast mode [ 627.676535][ T25] as10x_usb: error during firmware upload part1 [ 627.696263][T13311] bridge_slave_0: entered promiscuous mode [ 627.721992][ T1863] usb 1-1: Using ep0 maxpacket: 32 [ 627.751728][ T25] Registered device PCTV Systems picoStick (74e) [ 627.756738][ T1863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.778952][T13311] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.809797][ T1863] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 627.834727][ T1863] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 627.844654][ T1863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.848125][T13311] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.852844][ T1863] usb 1-1: Product: syz [ 627.852865][ T1863] usb 1-1: Manufacturer: syz [ 627.869301][ T1863] usb 1-1: SerialNumber: syz [ 627.880095][ T1863] usb 1-1: config 0 descriptor?? [ 627.897951][T13393] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1735'. [ 627.942013][ T5244] Bluetooth: hci5: command tx timeout [ 627.948656][T13311] bridge_slave_1: entered allmulticast mode [ 627.956119][T13393] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1735'. [ 627.981453][T13311] bridge_slave_1: entered promiscuous mode [ 628.007159][ T5282] usb 3-1: USB disconnect, device number 91 [ 628.091807][ T5282] Unregistered device PCTV Systems picoStick (74e) [ 628.099779][ T5282] as10x_usb: device has been disconnected [ 628.197617][T13399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 628.233914][T13399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 628.283085][ T9] usb 1-1: USB disconnect, device number 94 [ 628.365839][T13311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.452791][T13311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.558813][T13311] team0: Port device team_slave_0 added [ 628.598116][T13311] team0: Port device team_slave_1 added [ 628.723731][T13311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.745123][T13311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.781279][T13311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.826956][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1738'. [ 628.858875][T13311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.896897][T13311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.965565][T13311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.992724][ T29] audit: type=1326 audit(1726510453.597:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13428 comm="syz.0.1740" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 629.014223][ C0] vkms_vblank_simulate: vblank timer overrun [ 629.227303][T13311] hsr_slave_0: entered promiscuous mode [ 629.272006][T13311] hsr_slave_1: entered promiscuous mode [ 629.279472][ T5284] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 629.306134][T13311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.341192][T13311] Cannot create hsr debugfs directory [ 629.459793][ T5284] usb 3-1: Using ep0 maxpacket: 8 [ 629.472269][ T5284] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 629.516355][ T5284] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.537239][ T5284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 629.547982][ T5284] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 629.561110][ T5284] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.575434][ T5284] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 629.594977][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.820643][ T5284] usb 3-1: GET_CAPABILITIES returned 0 [ 629.836406][ T5284] usbtmc 3-1:16.0: can't read capabilities [ 630.160168][T13427] sch_tbf: peakrate 99188736 is lower than or equals to rate 609633705495981855 ! [ 630.180086][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 630.222437][ T8] usb 3-1: USB disconnect, device number 92 [ 630.286085][ T29] audit: type=1326 audit(1726510454.887:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13453 comm="syz.0.1745" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0 [ 630.421727][ T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 630.439679][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.454169][ T9] usb 2-1: config 0 descriptor?? [ 630.849855][T13459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 631.335957][T13465] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1429 [ 631.409441][ T5282] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 631.601351][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 631.642766][ T5282] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 631.660687][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.737662][ T5282] usb 1-1: Product: syz [ 631.778938][ T5282] usb 1-1: Manufacturer: syz [ 631.810793][ T5282] usb 1-1: SerialNumber: syz [ 631.838250][T13311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 631.863602][ T5282] usb 1-1: config 0 descriptor?? [ 631.922313][T13311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 631.933248][T13311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 631.948104][T13311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 632.085125][ T5282] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 632.265008][T13311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.368356][T13311] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.433843][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.440093][ T8] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 632.441271][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.481517][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.488817][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.619557][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 632.638814][ T8] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=77.71 [ 632.652144][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.661442][ T8] usb 5-1: Product: syz [ 632.665458][T13311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.665917][ T8] usb 5-1: Manufacturer: syz [ 632.683851][ T8] usb 5-1: SerialNumber: syz [ 632.701844][ T5282] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 632.715191][ T8] usb 5-1: config 0 descriptor?? [ 632.748727][ T8] as10x_usb: device has been detected [ 632.754864][ T8] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 632.785202][ T8] usb 5-1: DVB: registering adapter 1 frontend 0 (PCTV Systems picoStick (74e))... [ 632.805187][ T8] as10x_usb: error during firmware upload part1 [ 632.814715][ T8] Registered device PCTV Systems picoStick (74e) [ 632.972977][T13311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.020218][T13475] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1749'. [ 633.030381][T13475] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1749'. [ 633.048789][ T8] usb 5-1: USB disconnect, device number 99 [ 633.138156][ T8] Unregistered device PCTV Systems picoStick (74e) [ 633.156832][ T8] as10x_usb: device has been disconnected [ 633.192895][T13311] veth0_vlan: entered promiscuous mode [ 633.226218][T13311] veth1_vlan: entered promiscuous mode [ 633.290524][T13311] veth0_macvtap: entered promiscuous mode [ 633.306886][T13311] veth1_macvtap: entered promiscuous mode [ 633.343155][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.357877][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.370656][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.382128][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.393584][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.406014][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.409482][ T5284] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 633.415982][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.436668][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.449051][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.460759][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.472807][T13311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.497792][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.521927][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.532696][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.544029][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.556334][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.567038][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.577244][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.588030][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.620522][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.633290][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.639929][ T5284] usb 3-1: Using ep0 maxpacket: 32 [ 633.644253][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.662543][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.673143][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.677554][ T5284] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.683769][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.683795][T13311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 633.683835][T13311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.685775][T13311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 633.735859][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 633.762166][ T5284] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 633.789954][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.807682][T13311] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.817778][ T5284] usb 3-1: Product: syz [ 633.823585][ T5284] usb 3-1: Manufacturer: syz [ 633.830038][ T5284] usb 3-1: SerialNumber: syz [ 633.842370][ T5284] usb 3-1: config 0 descriptor?? [ 633.861851][T13311] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.887092][T13311] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.907355][T13311] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.200880][T13487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.222063][ T5284] usb 1-1: USB disconnect, device number 95 [ 634.260072][T13487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 634.305919][ T8] usb 3-1: USB disconnect, device number 93 [ 634.366043][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.451822][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 634.596088][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 634.661364][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.397362][ T8] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 635.540989][ T9] [drm] vendor descriptor length:92 data:00 00 00 00 00 00 00 00 00 00 00 [ 635.571760][ T9] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 635.605747][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 635.621382][ T8] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 635.632290][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.672225][ T8] usb 5-1: config 0 descriptor?? [ 635.695629][ T9] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 635.710342][ T9] [drm] Initialized udl on minor 2 [ 635.722691][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 635.743999][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 635.758996][ T5285] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 635.772321][ T5285] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 637.322241][ T8] pegasus 5-1:0.0: setup Pegasus II specific registers [ 637.474840][ T8] pegasus 5-1:0.0: can't locate MII phy, using default [ 637.514681][ T8] pegasus 5-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 16:e8:b6:a1:17:b7 [ 637.527453][ T8] usb 5-1: USB disconnect, device number 100 [ 638.167651][ T29] audit: type=1326 audit(1726510462.767:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13594 comm="syz.4.1755" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x0 [ 638.327497][T13602] netlink: 'syz.2.1756': attribute type 10 has an invalid length. [ 638.356244][T13604] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 638.406365][T13602] team0: Device ipvlan1 failed to register rx_handler [ 638.803524][T13608] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 640.081370][T13642] bond0: entered promiscuous mode [ 640.149382][T13642] bond_slave_0: entered promiscuous mode [ 640.235870][T13642] bond_slave_1: entered promiscuous mode [ 640.249586][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1758'. [ 640.374351][T13642] bond0: (slave bond_slave_0): Releasing backup interface [ 640.431049][T13642] bond_slave_0: left promiscuous mode [ 640.670590][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 640.687172][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 640.699079][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 640.710393][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 640.723401][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 640.734203][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 640.975616][ T29] audit: type=1326 audit(1726510465.577:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 641.058342][T13641] bond0: left promiscuous mode [ 641.060174][ T29] audit: type=1326 audit(1726510465.607:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7fc00000 [ 641.118861][T13641] bond_slave_1: left promiscuous mode [ 641.542011][T13652] chnl_net:caif_netlink_parms(): no params data found [ 641.587238][T13668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1770'. [ 641.618143][ T29] audit: type=1326 audit(1726510466.207:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.0.1766" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7fc00000 [ 642.083796][T13652] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.105245][T13652] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.181441][T13652] bridge_slave_0: entered allmulticast mode [ 642.190107][T13652] bridge_slave_0: entered promiscuous mode [ 642.208372][T13652] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.216500][T13652] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.225060][T13652] bridge_slave_1: entered allmulticast mode [ 642.233595][T13652] bridge_slave_1: entered promiscuous mode [ 642.351641][T13652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.380043][T13652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.407839][T13680] program syz.3.1773 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.603082][T13652] team0: Port device team_slave_0 added [ 642.677322][T13652] team0: Port device team_slave_1 added [ 642.834336][ T5230] Bluetooth: hci8: command tx timeout [ 642.919464][T13652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.979865][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.045011][T13652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.169565][ T5228] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 643.199594][T13652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.249401][T13652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.307103][T13652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.407495][ T5228] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 643.598776][ T5228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.615800][ T5228] usb 3-1: config 0 descriptor?? [ 643.635126][ T5228] cp210x 3-1:0.0: cp210x converter detected [ 643.674381][T13652] hsr_slave_0: entered promiscuous mode [ 643.751824][T13652] hsr_slave_1: entered promiscuous mode [ 643.768491][T13652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.803217][T13652] Cannot create hsr debugfs directory [ 643.836666][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1776'. [ 644.082244][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1774'. [ 644.330886][T13652] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.342692][ T5284] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 644.599691][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 644.613594][ T5284] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 644.629830][ T5284] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 644.645354][ T5284] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=9c.e2 [ 644.710417][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.743369][ T5284] usb 4-1: Product: syz [ 644.747995][ T5284] usb 4-1: Manufacturer: syz [ 644.756822][T13652] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.809151][ T5284] usb 4-1: SerialNumber: syz [ 644.870374][ T5284] usb 4-1: config 0 descriptor?? [ 644.899685][ T5230] Bluetooth: hci8: command tx timeout [ 644.977696][T13652] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.248626][ T5282] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 645.262073][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 645.287406][T13652] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.325132][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 645.354495][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.482268][ T8] usb 4-1: USB disconnect, device number 90 [ 645.512304][ T5282] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 645.550382][ T5282] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 645.571724][ T5282] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 645.581961][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.597420][T13701] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 645.609075][ T5282] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 645.882790][T13652] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 645.930686][ T5228] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 645.948527][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 645.985479][ T5228] cp210x 3-1:0.0: querying part number failed [ 645.992377][T13652] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 646.004118][ T5228] usb 3-1: cp210x converter now attached to ttyUSB0 [ 646.016266][ T5228] usb 3-1: USB disconnect, device number 94 [ 646.037836][ T5228] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 646.065698][ T5228] cp210x 3-1:0.0: device disconnected [ 646.091520][T13652] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 646.161923][T13652] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 646.209120][T13709] hub 9-0:1.0: USB hub found [ 646.237744][T13709] hub 9-0:1.0: 8 ports detected [ 646.712892][ T8] usb 1-1: USB disconnect, device number 96 [ 646.893259][T13652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.928937][T13652] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.949419][ T5228] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 646.979955][ T5230] Bluetooth: hci8: command tx timeout [ 646.997156][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.004410][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.049318][ T1115] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.056609][ T1115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 647.209497][ T5228] usb 4-1: Using ep0 maxpacket: 16 [ 647.287197][ T5228] usb 4-1: New USB device found, idVendor=046d, idProduct=08b2, bcdDevice=80.59 [ 647.329686][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.338165][ T5228] usb 4-1: Product: syz [ 647.349370][ T5228] usb 4-1: Manufacturer: syz [ 647.354613][ T5228] usb 4-1: SerialNumber: syz [ 647.449807][ T5228] usb 4-1: config 0 descriptor?? [ 647.463339][ T5228] pwc: Logitech QuickCam 4000 Pro USB webcam detected. [ 647.843757][T13652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 648.017033][ T1863] IPVS: starting estimator thread 0... [ 648.047293][T13652] veth0_vlan: entered promiscuous mode [ 648.076400][T13652] veth1_vlan: entered promiscuous mode [ 648.128257][T13652] veth0_macvtap: entered promiscuous mode [ 648.140180][T13730] IPVS: using max 27 ests per chain, 64800 per kthread [ 648.165579][T13652] veth1_macvtap: entered promiscuous mode [ 648.254932][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.277411][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.294722][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.320639][ T5289] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 648.358828][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.374257][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.388493][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.421187][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.448642][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.461308][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.498394][ T5228] pwc: Failed to set LED on/off time (-71) [ 648.525886][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.541516][ T5289] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 648.561513][ T5228] pwc: send_video_command error -71 [ 648.566801][ T5228] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 648.578867][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 648.587925][ T5228] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 648.599590][ T5289] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.626201][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.627115][ T5289] usb 3-1: config 0 descriptor?? [ 648.670294][ T5228] usb 4-1: USB disconnect, device number 91 [ 648.739928][T13652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.836250][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.879697][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.902615][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.973804][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.991721][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.007477][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.070107][ T5230] Bluetooth: hci8: command tx timeout [ 649.092039][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.124532][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.157716][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.211347][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.261145][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.314383][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.354764][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.366152][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.377604][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.388696][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.398961][T13652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 649.412041][T13652] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.426181][T13652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.444566][T13652] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.453583][T13652] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.462954][T13652] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.472055][T13652] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.692878][ T5289] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 649.786674][ T5289] usb 3-1: USB disconnect, device number 95 [ 649.910305][T13738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 650.195597][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.222896][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.274583][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.284946][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.317613][ T1863] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 650.531057][ T1863] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 650.561674][ T1863] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 650.580218][ T1863] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 650.592498][ T1863] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 650.601801][ T1863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.616185][T13735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 651.226613][ T1863] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 651.252465][ T1863] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input63 [ 651.326021][ T1863] usb 4-1: USB disconnect, device number 92 [ 651.332047][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 651.700002][ T30] INFO: task syz.4.1351:11477 blocked for more than 143 seconds. [ 651.709396][ T30] Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 651.716727][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 651.744271][ T30] task:syz.4.1351 state:D stack:26128 pid:11477 tgid:11475 ppid:10056 flags:0x20004004 [ 651.792892][ T30] Call Trace: [ 651.796340][ T30] [ 651.801314][ T30] __schedule+0x1800/0x4a60 [ 651.805991][ T30] ? __pfx___schedule+0x10/0x10 [ 651.809385][ T25] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 651.811302][ T30] ? __pfx_lock_release+0x10/0x10 [ 651.913900][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.930005][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.949378][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 651.954573][ T30] ? schedule+0x90/0x320 [ 651.958840][ T30] schedule+0x14b/0x320 [ 652.015195][ T30] ? down_read+0x6a5/0xa40 [ 652.049586][ T30] schedule_preempt_disabled+0x13/0x30 [ 652.055123][ T30] down_read+0x705/0xa40 [ 652.092475][ T30] ? __lock_acquire+0x137a/0x2040 [ 652.097721][ T30] ? __pfx_down_read+0x10/0x10 [ 652.119345][ T30] ? do_sync_mmap_readahead+0x699/0x970 [ 652.125071][ T30] page_cache_ra_unbounded+0xf7/0x7f0 [ 652.131597][ T30] ? __pfx___up_read+0x10/0x10 [ 652.136415][ T30] do_sync_mmap_readahead+0x499/0x970 [ 652.145548][ T30] ? __pfx_do_sync_mmap_readahead+0x10/0x10 [ 652.182593][ T30] ? count_memcg_event_mm+0x90/0x420 [ 652.195485][ T30] ? __filemap_get_folio+0x984/0xc10 [ 652.209373][ T30] filemap_fault+0x820/0x1750 [ 652.214131][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.229418][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 652.234690][ T30] ? pte_alloc_one+0x443/0x5d0 [ 652.241176][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 652.246383][ T30] ? validate_chain+0x11e/0x5900 [ 652.270644][ T30] ? __pfx_validate_chain+0x10/0x10 [ 652.275958][ T30] ? __pfx_validate_chain+0x10/0x10 [ 652.324144][ T30] __do_fault+0x135/0x460 [ 652.328596][ T30] handle_pte_fault+0x1176/0x6fc0 [ 652.361835][ T30] ? mark_lock+0x9a/0x350 [ 652.366282][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 652.397896][ T30] ? __lock_acquire+0x137a/0x2040 [ 652.419519][ T30] ? __thp_vma_allowable_orders+0x946/0xa10 [ 652.426181][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.437059][ T30] handle_mm_fault+0x1106/0x1bb0 [ 652.442627][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 652.447992][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.454982][ T30] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 652.461400][ T30] exc_page_fault+0x2b9/0x8c0 [ 652.466131][ T30] asm_exc_page_fault+0x26/0x30 [ 652.471107][ T30] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 652.476955][ T30] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 652.500212][ T30] RSP: 0000:ffffc9000cce7ab0 EFLAGS: 00050246 [ 652.506761][ T30] RAX: ffffffff84b38f01 RBX: 00000000200034c0 RCX: 0000000000000040 [ 652.524052][ T30] RDX: 0000000000000000 RSI: ffffc9000cce7b40 RDI: 0000000020003480 [ 652.532952][ T30] RBP: ffffc9000cce7bf0 R08: ffffc9000cce7b7f R09: 1ffff9200199cf6f [ 652.541141][ T30] R10: dffffc0000000000 R11: fffff5200199cf70 R12: 0000000000000040 [ 652.549698][ T30] R13: 0000000000001a00 R14: 0000000020003480 R15: ffffc9000cce7b40 [ 652.558139][ T30] ? _copy_from_user+0xd1/0xe0 [ 652.563490][ T30] _copy_to_user+0x86/0xb0 [ 652.567962][ T30] rng_dev_read+0x3bb/0x6d0 [ 652.573595][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 652.578672][ T30] ? common_file_perm+0x1a6/0x210 [ 652.584085][ T30] ? bpf_lsm_file_permission+0x9/0x10 [ 652.589966][ T30] ? security_file_permission+0x7f/0xa0 [ 652.598069][ T30] ? rw_verify_area+0x568/0x6f0 [ 652.603060][ T30] vfs_readv+0x6bc/0xa80 [ 652.607899][ T30] ? __pfx_rng_dev_read+0x10/0x10 [ 652.614816][ T30] ? __pfx_vfs_readv+0x10/0x10 [ 652.620199][ T30] ? __fget_files+0x29/0x470 [ 652.625249][ T30] ? __fget_files+0x29/0x470 [ 652.630387][ T30] __ia32_compat_sys_preadv+0x1db/0x2e0 [ 652.635979][ T30] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 652.642212][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 652.648836][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 652.654594][ T30] __do_fast_syscall_32+0xb4/0x110 [ 652.660646][ T30] ? exc_page_fault+0x590/0x8c0 [ 652.666081][ T30] do_fast_syscall_32+0x34/0x80 [ 652.671476][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 652.678292][ T30] RIP: 0023:0xf7f55579 [ 652.683725][ T30] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 652.692847][ T30] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020001880 [ 652.703352][ T30] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.711431][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.720359][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 652.728651][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.737193][ T30] [ 652.740939][ T30] [ 652.740939][ T30] Showing all locks held in the system: [ 652.779379][ T30] 5 locks held by kworker/1:0/25: [ 652.784470][ T30] #0: ffff88801e2f6948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 652.970050][ T30] #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 653.069729][ T30] #2: ffff888029166190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 653.078812][ T30] #3: ffff8880291a1518 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 653.144456][ T30] #4: ffff888028c87f68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 653.183398][ T30] 1 lock held by khungtaskd/30: [ 653.188344][ T30] #0: ffffffff8e938660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 653.229370][ T30] 3 locks held by kworker/u8:5/77: [ 653.234621][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 653.320941][ T30] #1: ffffc900015dfd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 653.347528][ T30] #2: ffffffff8fc8b808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 653.357104][ T30] 3 locks held by kworker/u8:7/1115: [ 653.362931][ T30] 2 locks held by kworker/1:2/1863: [ 653.368171][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 653.380518][ T30] #1: ffffc90004d77d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 653.391397][ T30] 2 locks held by getty/4985: [ 653.396589][ T30] #0: ffff8880302ed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 653.406541][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 653.423512][ T30] 1 lock held by syz.3.1304/11293: [ 653.428707][ T30] #0: ffff8880230a8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 653.440190][ T30] 1 lock held by syz.4.1351/11477: [ 653.445808][ T30] #0: ffff8880230a8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 653.457810][ T30] 2 locks held by syz-executor/12021: [ 653.463664][ T30] #0: ffffffff8fc8b808 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 653.474084][ T30] #1: ffffffff8e93da38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 653.485499][ T30] 1 lock held by syz.0.1489/12227: [ 653.491993][ T30] #0: ffff8880230a8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 653.503707][ T30] 1 lock held by syz.1.1743/13450: [ 653.509325][ T30] #0: ffff8880230a8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 653.522940][ T30] 3 locks held by syz-executor/13652: [ 653.528955][ T30] #0: ffff88806ea18d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 653.539078][ T30] #1: ffff88806ea18078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 653.557981][ T30] #2: ffffffff8fdf7fa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 653.569354][ T30] 3 locks held by syz.3.1790/13737: [ 653.574975][ T30] #0: ffff8880203a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 653.585542][ T30] #1: ffff8880203a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 653.595956][ T30] #2: ffffffff8fdf7fa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 653.607420][ T30] 3 locks held by syz.4.1791/13746: [ 653.613213][ T30] #0: ffff88805de3cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 653.627213][ T30] #1: ffff88805de3c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 653.637088][ T30] #2: ffffffff8fdf7fa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 653.647675][ T30] 3 locks held by syz.0.1793/13755: [ 653.653340][ T30] #0: ffff88805939cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 653.663503][ T30] #1: ffff88805939c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 653.673405][ T30] #2: ffffffff8fdf7fa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 653.684887][ T30] [ 653.687270][ T30] ============================================= [ 653.687270][ T30] [ 653.714175][ T30] NMI backtrace for cpu 1 [ 653.718589][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 653.728747][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 653.738814][ T30] Call Trace: [ 653.742083][ T30] [ 653.745003][ T30] dump_stack_lvl+0x241/0x360 [ 653.749675][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.754861][ T30] ? __pfx__printk+0x10/0x10 [ 653.759447][ T30] ? vprintk_emit+0x667/0x7c0 [ 653.764122][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 653.769246][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 653.774205][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 653.779734][ T30] ? _printk+0xd5/0x120 [ 653.783898][ T30] ? __pfx__printk+0x10/0x10 [ 653.788489][ T30] ? __wake_up_klogd+0xcc/0x110 [ 653.793444][ T30] ? __pfx__printk+0x10/0x10 [ 653.798039][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 653.803063][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 653.809145][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 653.815129][ T30] watchdog+0xff4/0x1040 [ 653.819401][ T30] ? watchdog+0x1ea/0x1040 [ 653.823813][ T30] ? __pfx_watchdog+0x10/0x10 [ 653.828485][ T30] kthread+0x2f0/0x390 [ 653.832547][ T30] ? __pfx_watchdog+0x10/0x10 [ 653.837215][ T30] ? __pfx_kthread+0x10/0x10 [ 653.841810][ T30] ret_from_fork+0x4b/0x80 [ 653.846236][ T30] ? __pfx_kthread+0x10/0x10 [ 653.850833][ T30] ret_from_fork_asm+0x1a/0x30 [ 653.855692][ T30] [ 653.861088][ T30] Sending NMI from CPU 1 to CPUs 0: [ 653.867593][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x21/0x30 [ 653.921482][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 653.928473][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-02520-gadfc3ded5c33 #0 [ 653.938654][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 653.948741][ T30] Call Trace: [ 653.952058][ T30] [ 653.955026][ T30] dump_stack_lvl+0x241/0x360 [ 653.959737][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.964974][ T30] ? __pfx__printk+0x10/0x10 [ 653.969605][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 653.975617][ T30] ? vscnprintf+0x5d/0x90 [ 653.979973][ T30] panic+0x349/0x860 [ 653.983889][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 653.990082][ T30] ? __pfx_panic+0x10/0x10 [ 653.994522][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 653.999924][ T30] ? __irq_work_queue_local+0x137/0x410 [ 654.005582][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 654.010997][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 654.017198][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 654.023387][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 654.029575][ T30] watchdog+0x1033/0x1040 [ 654.033942][ T30] ? watchdog+0x1ea/0x1040 [ 654.038390][ T30] ? __pfx_watchdog+0x10/0x10 [ 654.043185][ T30] kthread+0x2f0/0x390 [ 654.047379][ T30] ? __pfx_watchdog+0x10/0x10 [ 654.052084][ T30] ? __pfx_kthread+0x10/0x10 [ 654.056699][ T30] ret_from_fork+0x4b/0x80 [ 654.061214][ T30] ? __pfx_kthread+0x10/0x10 [ 654.065830][ T30] ret_from_fork_asm+0x1a/0x30 [ 654.070611][ T30] [ 654.073873][ T30] Kernel Offset: disabled [ 654.078238][ T30] Rebooting in 86400 seconds..