last executing test programs: 18.250812158s ago: executing program 2 (id=1765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)=ANY=[@ANYBLOB='\n\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000013"], 0x2c}}, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) 6.094856968s ago: executing program 4 (id=1806): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) flock(r0, 0x1) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="05", 0x1, 0xffffffffffffffff) keyctl$update(0x2, r1, &(0x7f0000000600)="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", 0x5c9) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7bf64bfd100001040000000000005375b1f50000", @ANYRES32=0x0, @ANYRES64], 0x50}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x21, 0x3, 0x580, 0x11, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b0, 0xffffffff, 0xffffffff, 0x4b0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'sit0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x8, 0x5}}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth1\x00'}, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote}, {@ipv6=@dev, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@ipv4=@multicast2, [], @ipv6=@loopback}, {@ipv6=@rand_addr=' \x01\x00', [], @ipv4=@local}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 5.876235853s ago: executing program 4 (id=1807): write(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000380)=[{0x0}], 0x1) 5.414933886s ago: executing program 4 (id=1809): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000181000/0xf000)=nil, 0xf000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2b}, 0xa00, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket(0xa, 0x3, 0x4) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3, 0xe7, 0x3, 0x7, 0x0, 0x80000000000, 0x0, 0xc636}, &(0x7f0000000300)={0x0, 0x989680}, 0x0) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffe000/0x2000)=nil) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x8e80) socket$netlink(0x10, 0x3, 0x0) 4.228645832s ago: executing program 0 (id=1813): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r3 = eventfd2(0x0, 0x0) io_getevents(r2, 0x1fff, 0x7fffeb3, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x11}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x40, &(0x7f0000000080)=0x0) eventfd2(0x0, 0x0) io_pgetevents(r8, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbf, 0xa9, 0xd4, 0x8, 0x44f, 0xa01c, 0xbb13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x14, 0x9, 0x9f, 0x0, [], [{{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x6f}]}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) dup2(r10, r9) r11 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r11, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r11, 0x3) r12 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r12, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r11, 0x0, 0x0, 0x0) 4.226524498s ago: executing program 1 (id=1814): mknod(0x0, 0x8000, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x0, 0x0, 0x0, 0xe4}]}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="8ab6a1a3d9397116c2485dd1a366cd6571a551cf06329df827e60f11f1f7cef32034a69b60add1376d93fe6890e681463944a96a524609fe5d6ae5517e09f20bc6c7928b25f724f6cbaa9e9971453b74752998416bae4dab27b838242c06dcd03a7baa5a48bc9726bcbfaeb743a0afe5a9504a54b1f5492d3ee153ff87ea44cce35929c5ac965debe7cbdfd46b0057392f1f98f8ce6bdfdf3ab6dc024d7489ad23999617c87b615ae0", 0xa9) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x51, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 3.377243276s ago: executing program 2 (id=1782): socket$inet6_sctp(0xa, 0x5, 0x84) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600)=0x0) timer_settime(r0, 0x0, &(0x7f0000000640)={{}, {0x77359400}}, 0x0) syz_emit_vhci(0x0, 0x22) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac3"], 0xd) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040f0003c80000000000000000000000000000021f9d8468d3476bba1ac232b66d958d964bb0010c0519c2cef5916b2b1f1ba449edc4f2b4d96765b1e7d397cf7389b40fd463071abfa7bd3b82a4f8d7a1d72703afdd7a0541c381cd2a8876115ff5ac24072d1664e42269084dcc0c12a1aa85fbe9c55b89a3f58631ffa08a63e16e25647f03f4c3d5e2739b10ad31ff8f8c9a0bf2907e98b985ad115b043c6dc394cb42ad1fce"], 0x14) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000fc0)={'#! ', './file0', [{0x20, '\xba[\xc1\x8f\n\'\xf90\xf7k\x96K,\xe4\xfa*\xfb)\x17\xc1\x0fs\xd3sV9xE\xef\xe6+\xc1\x85\xd3W\xd0M\x81\xf0\a7\xd2\x14\xf6\xf7.\x1d)L\x9eE >\xd3\xf9C\xf6\xcb*;^h\xd5A\x12`\xa1*\xfb\xfb\xff\x14\xe0'}, {0x20, ' \x01\x00\x02\x00'/16}, {0x20, '\x00\xf5Ir\xfc\xea\xd3\'|\x91\xa5\'Oso\xd7\xe9\xf1\xd6\xf2Kq\x8c0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r7, 0x0, {}, 0xff}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.198914726s ago: executing program 4 (id=1819): r0 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mremap(&(0x7f0000349000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000635000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x10000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gre0\x00', 0x0}) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}, {&(0x7f0000000040)="dc812b8dbb489522cf252b02a8bc8dcc", 0x10}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2161, 0x0) 2.129709514s ago: executing program 1 (id=1820): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c) 2.010778423s ago: executing program 3 (id=1821): bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.918859013s ago: executing program 1 (id=1822): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c110fc80000000000"], 0x14) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000b80)) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000001500)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0xe729, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffc, 0x5, 0x0, 0x0, 0x67, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(0xffffffffffffffff, 0x80080401) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000200)=0x4) r5 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000180)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) syz_emit_vhci(0x0, 0xffffffffffffffc7) socket$xdp(0x2c, 0x3, 0x0) 1.880493646s ago: executing program 3 (id=1823): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x57e6, 0x10100, 0x0, 0x3b5}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r1, 0x6ed3, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x1) sendto$inet6(r0, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 1.793702522s ago: executing program 4 (id=1824): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x32, 0x4, 0x0, 0x2, 0xc8, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0x0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2, 0x7}, {@private}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x401c5820, &(0x7f0000000080)={@desc={0xd32780, 0x0, @desc2}}) 1.366849678s ago: executing program 3 (id=1825): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x60b, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x93a}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000340)="4524afffbada45869e69119ff9c8e382cf64862f373e6d354df8f9038160877e51d9b84225a8357ac48e14e9b79e81", 0xa7c, r0}, 0x38) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c2000000080045000014000000000000907800220000ffffffff"], 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r3, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x21a402, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) landlock_restrict_self(0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r7 = dup(r1) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r8, r7, 0x0, 0x8a000) setreuid(0x0, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000003bc000000000000b0000000000000500feff0000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) r9 = io_uring_setup(0x104, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0xa, &(0x7f0000000140), 0x1) r10 = syz_open_dev$ttys(0xc, 0x2, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x674a40, 0x46) readv(r10, &(0x7f0000000180)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) 999.520058ms ago: executing program 0 (id=1826): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xc8) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15e", 0xbd}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab", 0x49}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a", 0x10}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x348}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 907.455059ms ago: executing program 1 (id=1827): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) ioctl$TIOCGRS485(0xffffffffffffffff, 0x542e, &(0x7f0000000000)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cipher_null-generic)\x00'}, 0x58) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4]}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xff9c) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket(0x0, 0x0, 0x0) io_setup(0x3b, &(0x7f00000010c0)=0x0) io_pgetevents(r3, 0x1, 0x1, &(0x7f0000001100)=[{}], 0x0, &(0x7f0000001200)={&(0x7f00000011c0), 0x8}) io_destroy(r3) syz_open_procfs(0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r4 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f0000009280)=[{{&(0x7f0000000040)=@nfc_llcp, 0x80, &(0x7f00000002c0), 0x0, &(0x7f0000000300)=""/3, 0x3}, 0x6}, {{&(0x7f0000000340)=@phonet, 0x80, &(0x7f0000000680)=[{&(0x7f00000003c0)=""/156, 0x9c}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/13, 0xd}, {&(0x7f00000017c0)=""/194, 0xc2}], 0x6}, 0x81}, {{&(0x7f00000018c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000001940)=""/149, 0x95}, {&(0x7f0000001a00)=""/172, 0xac}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000003ac0)=""/57, 0x39}], 0x6, &(0x7f0000003b80)=""/16, 0x10}, 0x9}, {{&(0x7f0000003bc0)=@nfc, 0x80, &(0x7f0000005100)=[{&(0x7f0000003c40)=""/63, 0x3f}, {&(0x7f0000003c80)=""/55, 0x37}, {&(0x7f0000003cc0)=""/68, 0x44}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/238, 0xee}, {&(0x7f0000004e40)=""/235, 0xeb}, {&(0x7f0000004f40)=""/91, 0x5b}, {&(0x7f0000004fc0)=""/39, 0x27}, {&(0x7f0000005000)=""/203, 0xcb}], 0x9, &(0x7f00000051c0)=""/170, 0xaa}, 0x4}, {{&(0x7f0000005280)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000006480)=[{&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/117, 0x75}, {&(0x7f0000006380)=""/118, 0x76}, {&(0x7f0000006400)=""/115, 0x73}], 0x4, &(0x7f00000064c0)=""/252, 0xfc}, 0xfe}, {{&(0x7f00000065c0)=@nl, 0x80, &(0x7f0000006bc0)=[{&(0x7f0000006700)=""/211, 0xd3}, {&(0x7f0000009440)=""/93, 0x5d}, {&(0x7f0000006880)=""/134, 0x86}, {&(0x7f0000006940)=""/1, 0x1}, {&(0x7f0000006980)=""/136, 0x88}, {&(0x7f0000006a40)=""/238, 0xee}, {&(0x7f0000006b40)=""/86, 0x56}], 0x7, &(0x7f0000006c40)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000007c40)=@caif=@rfm, 0x80, &(0x7f0000009140)=[{&(0x7f0000007cc0)=""/168, 0xa8}, {&(0x7f0000007d80)=""/111, 0x6f}, {&(0x7f00000000c0)=""/155, 0x9b}, {&(0x7f0000007ec0)=""/42, 0x2a}, {&(0x7f0000007f00)=""/134, 0x86}, {&(0x7f0000007fc0)=""/193, 0xc1}, {&(0x7f00000080c0)=""/120, 0x78}, {&(0x7f0000008140)=""/4096, 0x1000}], 0x8, &(0x7f00000091c0)=""/169, 0xa9}, 0x1}], 0x7, 0x10123, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000300)={0x1, 0x0, {0x4, @usage, 0x0, 0xfffffffffffffffc, 0x400, 0x9, 0x7fffffff, 0x0, 0x0, @usage=0xf5, 0x0, 0x800, [0x7, 0xfffffffffffffffa, 0x3, 0x4, 0x200, 0x5]}, {0x5, @struct={0xb, 0xd2}, 0x0, 0x8, 0x2, 0x5, 0x5, 0xf4, 0x28, @struct={0x8000, 0x7}, 0x3, 0x80f, [0xffffffffffffffc0, 0xfff, 0x349f, 0x9, 0x4, 0x4]}, {0x8, @usage=0x81, 0x0, 0x8000, 0x9, 0x401, 0x7, 0x2, 0x46, @usage=0x6, 0x0, 0x1, [0x7, 0x4, 0xc2, 0x0, 0x9, 0xc3f3]}, {0xfffffffffffffcb4, 0x2}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000700)={r6, 0x0, 0x0, [0x3, 0x8000000000000001, 0x1, 0x4e, 0x200], [0x7f, 0x1, 0x9, 0xc4, 0x2486, 0x4, 0x5, 0x2400000, 0x1, 0x0, 0x80, 0x3, 0x1, 0x3, 0xc, 0x8, 0x9, 0xffffffffffffaa0d, 0x80000000000000, 0x5, 0x40000, 0xfffffffffffffffd, 0x3ff, 0x1, 0x1, 0xffffffffffff0001, 0x7fff, 0x6, 0x0, 0x3, 0x0, 0x0, 0x9, 0xfffffffffffeffff, 0xfffffffffffffed0, 0x5, 0x3, 0x7, 0x0, 0x4, 0x0, 0x80000001, 0x7, 0x7, 0x8, 0x9, 0x0, 0x5, 0x8, 0x0, 0x4, 0xffffffff, 0x0, 0x6, 0x3c0, 0x1, 0x7f, 0x400, 0x6, 0x0, 0x6, 0x337, 0xfff, 0x340, 0x8, 0x100000000, 0x5, 0x2, 0x7, 0x5, 0xb23, 0x9816, 0x1, 0x8, 0x8, 0x7, 0x0, 0x7fff, 0xdd9, 0x7796, 0x2, 0x7, 0x80, 0xff, 0x7, 0x6, 0xf, 0x4, 0x6, 0x9, 0xfffffffffffffff9, 0x3, 0x6, 0x4, 0x1, 0x4, 0x66ce, 0x7, 0x1, 0x6, 0x0, 0x8000, 0x9, 0x9ca, 0x3, 0x80, 0xb68, 0x3, 0x7, 0x5, 0x5, 0x40, 0xb4b1, 0x2, 0x5, 0x7, 0xd, 0x9, 0x40, 0x5, 0x4]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000180)=@gcm_256={{}, '\x00', "d830002bbfcd1b36f3672d0d000800", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 705.774493ms ago: executing program 4 (id=1828): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3a9, 0x0, &(0x7f0000000140)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r7, 0x0, {}, 0xff}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 690.601436ms ago: executing program 0 (id=1829): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x0, "fe79ca3351f25129c1ca0c4b310f855c55392fde21c7d98aef39b24985c9c778", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000800)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x0, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x900, 0x6a3, 0x0, 0x2}, 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x31) sendto$inet6(r2, 0x0, 0x0, 0x26044011, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x8923, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x1, 0x400001) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2465) fallocate(0xffffffffffffffff, 0x20, 0x2, 0xffffffff7fffffff) 656.977445ms ago: executing program 2 (id=1830): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = syz_io_uring_setup(0x113, &(0x7f0000000540), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_emit_vhci(0x0, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$packet(0x11, 0x3, 0x300) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$join(0x1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x9}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) 536.952012ms ago: executing program 0 (id=1831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x6) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCGWINSZ(r2, 0x545d, &(0x7f0000000340)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010100, 0x0, 0x6c}, 0x2, @in6=@local, 0x0, 0x4}}, 0xe8) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'unlock', ' ', 'io'}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x48, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 445.961733ms ago: executing program 3 (id=1832): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001600)={@val={0x1c, 0x19}, @void, @mpls={[], @ipv6=@dccp_packet={0x1, 0x6, "904e52", 0x139, 0x21, 0x1, @dev={0xfe, 0x80, '\x00', 0x37}, @private1, {[@fragment={0x2c, 0x0, 0xfc, 0x0, 0x0, 0x3, 0x65}, @hopopts={0x21, 0x1, '\x00', [@ra={0x5, 0x2, 0x81d}, @ra={0x5, 0x2, 0x81}, @ra={0x5, 0x2, 0x1}, @enc_lim={0x4, 0x1, 0x5}]}, @srh={0x4, 0x4, 0x4, 0x2, 0x0, 0x70, 0x5, [@private2, @local]}, @srh={0x8, 0x6, 0x4, 0x3, 0xb, 0x40, 0x7, [@private0, @ipv4={'\x00', '\xff\xff', @remote}, @private0]}, @dstopts={0x11}], {{0x4e22, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x9, 0x0, "7b7fd3", 0x5, "bfb325"}, "e2a52d64bc3f39f9814dced707547ea92ef7599cd4b809564cfe2d8ce59ffb65173a17245a753efbb64f7beb0ae4d47a772c06f44aea284165a64299e21dec61792efb36bc0a08619dcca604142525c0cb1ca984ca459147e4e3c79d1c6394205748188e70b29dbd4f5c8196386f4884600624d46a67029efe5bf9469015ca19703484cebd694b5e13dff98099c75e5d2133e53507fe06c08323cd8c43c15f80d0"}}}}}, 0x165) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_addr, @private}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f000001bff4)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x7, 0x0, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe7c}, 0x90) signalfd4(r3, &(0x7f0000000180), 0x8, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @private}, 0x10) 355.142795ms ago: executing program 2 (id=1833): bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) socket$can_raw(0x1d, 0x3, 0x1) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000", 0x17}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 350.115411ms ago: executing program 0 (id=1834): r0 = socket$alg(0x26, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mremap(&(0x7f0000349000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000635000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x10000, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gre0\x00', 0x0}) read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x2020) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x12) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}, {&(0x7f0000000040)="dc812b8dbb489522cf252b02a8bc8dcc", 0x10}], 0x2, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r3, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2161, 0x0) 171.393012ms ago: executing program 3 (id=1835): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b5430000000000000000260000000e0001006e6574646d7673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) 127.331663ms ago: executing program 0 (id=1836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) r3 = eventfd2(0x0, 0x0) io_getevents(r2, 0x1fff, 0x7fffeb3, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x11}], 0x1, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r3}]) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_netfilter(0x10, 0x3, 0xc) eventfd2(0x0, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r7}]}}}]}, 0x40}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xbf, 0xa9, 0xd4, 0x8, 0x44f, 0xa01c, 0xbb13, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x14, 0x9, 0x9f, 0x0, [], [{{0x9, 0x5, 0x5}}, {{0x9, 0x5, 0xc}}]}}]}}]}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x6f}]}) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) dup2(r9, r8) r10 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r10, 0x3) r11 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r11, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r10, 0x0, 0x0, 0x0) 30.776422ms ago: executing program 3 (id=1837): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac305"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c110fc80000000000"], 0x14) write$binfmt_script(r0, &(0x7f0000000780), 0x208e24b) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000b80)) io_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f0000001500)) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0xe729, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffc, 0x5, 0x0, 0x0, 0x67, 0xfffffffffffff924]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(0xffffffffffffffff, 0x80080401) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xac, &(0x7f0000000000), &(0x7f0000000200)=0x4) r5 = socket(0x1, 0x2, 0x0) syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000180)=""/126, 0x7e}], 0x1) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) syz_emit_vhci(0x0, 0xffffffffffffffc7) socket$xdp(0x2c, 0x3, 0x0) 0s ago: executing program 2 (id=1838): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89001) socket$kcm(0x10, 0x2, 0x0) socket(0x25, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000044}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = memfd_create(&(0x7f0000000d40)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4V\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15\x00\x00\x00\x00\xe2\xe5unu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8??h\x93\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xa4\xba\xed\xc1\xc0=l{\x7f]\xa1\x11\x8e\xd9\v\x01I\xa3PK\x8b\x16\xb6\xb2\xdfCm\xe1A\xf9\xfcu\xe3\xa1P\xb1\xfb\xe4\xb7~\xa56a.p\xbd\x1d37Q\xb1\x8bnr\x84\x86\x16O\xd0\x15)\xeb0R\xc5^\x8f\x18\x1d2\xdf\xca\xec\xb10\xc7c\xf8\nj\x17\x02\xfc\xa9\xf3r\xc2\x83tc\xc5\xbc\x917j\x91\xfd\x06v\'\x92;%\'U5\xbbg\x1b\xc7\xc17\x9dr*\x16\x1d\xb0&\x17\x96\b%\xcf6_O\x80\x90\x1bQJ\xf1\x88{@`B`\x8f\xc1\xed\xe6\xa4:\x9dj{\x8c\x8e\x91\x8d\xde?F\xa9_3t}\xac$V\xda\xdfTj\xfaj\x17\x15\x00\x00x\xd6,\x81\x1a\xa4\f\x17\x91\xf9\x1a\x1cL\xb5\xc4\xf9\x8c\xf7\x1d\xeaL\x8f\x17o\vA(q\xa3\xfe\xe3\xa7Vam \x10\xeb\xcdT\xe4\xb5\x10\xbe\xe9\x06SCT\x12\xed@W\xe9\xaf\f\x7f\x11\xfe\x0f5 [ 364.438714][ T58] usb 4-1: can't read configurations, error -22 [ 364.445642][ T58] usb usb4-port1: unable to enumerate USB device [ 365.690578][ T29] audit: type=1326 audit(1720373850.113:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 365.728122][T11063] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.767545][ T29] audit: type=1326 audit(1720373850.113:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 365.797021][T11063] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.854831][T11202] macvlan0: entered promiscuous mode [ 365.881905][T11202] macvlan0: left promiscuous mode [ 365.884496][ T29] audit: type=1326 audit(1720373850.113:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 365.974689][ T29] audit: type=1326 audit(1720373850.123:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 366.000069][T11063] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.038715][T11063] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.059330][ T29] audit: type=1326 audit(1720373850.143:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 366.084255][ T4877] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 366.094964][ T5094] Bluetooth: hci4: command tx timeout [ 366.199279][ T29] audit: type=1326 audit(1720373850.143:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 366.303231][ T29] audit: type=1326 audit(1720373850.143:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 366.305995][ T4877] usb 4-1: Using ep0 maxpacket: 8 [ 366.394172][ T29] audit: type=1326 audit(1720373850.163:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11194 comm="syz.3.1517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 366.396037][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.462592][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 366.490868][ T4877] usb 4-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 366.511612][ T4877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.523224][ T4877] usb 4-1: Product: syz [ 366.530516][ T4877] usb 4-1: Manufacturer: syz [ 366.537615][ T4877] usb 4-1: SerialNumber: syz [ 366.561809][ T4877] usb 4-1: config 0 descriptor?? [ 366.571687][T11216] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 366.578326][T11216] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 366.620515][T11063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.628644][T11216] vhci_hcd vhci_hcd.0: Device attached [ 366.661493][T11063] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.704004][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.711192][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.750905][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.758130][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.890183][T11063] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.910632][T11063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.091342][T11218] vhci_hcd: connection closed [ 367.093985][ T35] vhci_hcd: stop threads [ 367.113180][T11063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.132514][ T35] vhci_hcd: release socket [ 367.146438][ T35] vhci_hcd: disconnect device [ 367.244831][T11063] veth0_vlan: entered promiscuous mode [ 367.302332][T11228] macvlan0: entered promiscuous mode [ 367.311373][T11228] macvlan0: left promiscuous mode [ 367.350784][T11063] veth1_vlan: entered promiscuous mode [ 367.458657][T11063] veth0_macvtap: entered promiscuous mode [ 367.472490][T11063] veth1_macvtap: entered promiscuous mode [ 367.505347][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.516416][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.528739][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.545216][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.556360][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.568005][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.579003][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.590364][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.604926][T11063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.648867][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.721050][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.743366][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.776417][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.787526][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.802217][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.819264][T11063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.846604][T11063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.883578][T11063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.956930][T11063] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.997152][T11063] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.025669][T11063] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.069370][T11063] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.403001][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.418036][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.447526][ T929] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 368.552208][ T5153] usb 4-1: USB disconnect, device number 67 [ 368.589694][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.627496][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.660083][ T929] usb 3-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 368.681451][ T929] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 368.721585][ T929] usb 3-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 368.741735][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.778995][ T929] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 369.019829][ T929] gspca_sn9c2028: read1 error -32 [ 369.301801][ T929] gspca_sn9c2028: read1 error -71 [ 369.358904][ T929] sn9c2028 3-1:220.0: probe with driver sn9c2028 failed with error -71 [ 369.427805][ T929] usb 3-1: USB disconnect, device number 43 [ 370.218043][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 370.218055][ T29] audit: type=1326 audit(1720373854.643:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.262132][ T29] audit: type=1326 audit(1720373854.673:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.290489][T11316] macvlan0: entered promiscuous mode [ 370.299674][ T29] audit: type=1326 audit(1720373854.673:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.351029][ T29] audit: type=1326 audit(1720373854.673:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.373879][ T58] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 370.381660][T11316] macvlan0: left promiscuous mode [ 370.429039][ T29] audit: type=1326 audit(1720373854.673:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.468528][ T29] audit: type=1326 audit(1720373854.673:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.526293][ T29] audit: type=1326 audit(1720373854.673:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.560389][ T29] audit: type=1326 audit(1720373854.673:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.591428][ T29] audit: type=1326 audit(1720373854.673:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.614276][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 370.632223][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.648833][ T58] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.675416][ T58] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.689916][ T58] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.701706][ T58] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 370.719398][ T58] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 370.723914][ T29] audit: type=1326 audit(1720373854.673:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11310 comm="syz.2.1534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 370.733455][ T58] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 370.771967][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.831316][ T58] usb 1-1: Product: syz [ 370.844462][ T58] usb 1-1: Manufacturer: syz [ 370.852070][ T58] usb 1-1: SerialNumber: syz [ 371.184424][ T58] cdc_ncm 1-1:1.0: bind() failure [ 371.224517][ T58] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 371.268536][ T58] cdc_ncm 1-1:1.1: bind() failure [ 371.332374][ T58] usb 1-1: USB disconnect, device number 45 [ 373.024721][ T45] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 373.227314][ T45] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 373.262272][ T45] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 373.288174][ T45] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 373.329101][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.377865][ T45] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 373.483650][T11392] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 373.572804][ T45] gspca_sn9c2028: read1 error -32 [ 373.849777][ T45] gspca_sn9c2028: read1 error -71 [ 373.867654][ T45] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 373.890944][ T45] usb 5-1: USB disconnect, device number 57 [ 373.934270][ T929] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 374.010352][T11398] macvlan0: entered promiscuous mode [ 374.020486][T11398] macvlan0: left promiscuous mode [ 374.134144][ T929] usb 3-1: Using ep0 maxpacket: 16 [ 374.150375][ T929] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 374.174790][ T929] usb 3-1: config 0 has no interface number 0 [ 374.182277][ T929] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 374.193682][ T929] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 374.213058][ T929] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 374.230989][ T929] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 374.259652][ T929] usb 3-1: Product: syz [ 374.272707][ T929] usb 3-1: Manufacturer: syz [ 374.286450][ T929] usb 3-1: SerialNumber: syz [ 374.296789][ T929] usb 3-1: config 0 descriptor?? [ 374.307881][ T929] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 374.318744][ T929] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 374.329935][ T929] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 374.340070][ T929] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 374.352084][ T929] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 374.365114][ T929] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 374.389103][ T929] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 374.430139][ T929] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 374.442494][ T929] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 374.459030][ T929] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 374.584211][ T5140] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 374.681938][ T45] usb 3-1: USB disconnect, device number 44 [ 374.713941][ T45] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 374.731998][ T45] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 374.775422][ T45] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 374.814993][ T5140] usb 2-1: Using ep0 maxpacket: 32 [ 374.827101][ T45] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 374.833258][ T5140] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.856773][ T45] keyspan 3-1:0.107: device disconnected [ 374.886604][ T5140] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.921735][ T5140] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 374.942950][ T5140] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 374.967777][ T5140] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 375.009212][ T5140] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 375.044547][ T5140] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.066889][ T5140] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.088845][ T5140] usb 2-1: Product: syz [ 375.093063][ T5140] usb 2-1: Manufacturer: syz [ 375.118345][ T5140] usb 2-1: SerialNumber: syz [ 375.164415][ T58] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 375.355036][ T5140] cdc_ncm 2-1:1.0: bind() failure [ 375.365269][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 375.373366][ T5140] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 375.390736][ T58] usb 1-1: config 0 has no interfaces? [ 375.404931][ T58] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 375.424143][ T5140] cdc_ncm 2-1:1.1: bind() failure [ 375.436257][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.439691][ T5140] usb 2-1: USB disconnect, device number 43 [ 375.460563][ T58] usb 1-1: config 0 descriptor?? [ 375.722913][ T58] usb 1-1: USB disconnect, device number 46 [ 376.041381][T11444] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 376.090037][T11444] team0: Port device netdevsim0 added [ 376.109563][T11447] netlink: 'syz.1.1563': attribute type 10 has an invalid length. [ 376.161689][T11447] team0: Port device netdevsim0 removed [ 376.179309][T11447] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 376.822337][T11468] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 376.835833][T11468] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 377.794341][ T58] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 377.984336][T11489] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 378.013274][T11489] bond0: (slave netdevsim0): Releasing backup interface [ 378.024164][ T58] usb 2-1: Using ep0 maxpacket: 32 [ 378.050957][T11489] team0: Port device netdevsim0 added [ 378.063344][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.097199][T11494] netlink: 'syz.0.1575': attribute type 10 has an invalid length. [ 378.106075][ T58] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.131687][ T58] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 378.147261][ T58] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 378.158974][ T58] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 378.170387][ T58] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 378.195672][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.206097][T11494] team0: Port device netdevsim0 removed [ 378.214722][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.227811][ T58] usb 2-1: Product: syz [ 378.240535][ T58] usb 2-1: Manufacturer: syz [ 378.257710][ T58] usb 2-1: SerialNumber: syz [ 378.265216][T11494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 378.490055][ T58] cdc_ncm 2-1:1.0: bind() failure [ 378.519327][ T58] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 378.532172][ T58] cdc_ncm 2-1:1.1: bind() failure [ 378.568815][ T58] usb 2-1: USB disconnect, device number 44 [ 378.961497][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.974225][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.235281][T11522] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 379.265380][T11522] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 379.291370][T11516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.337920][T11516] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 379.340036][T11516] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 379.481605][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 379.481623][ T29] audit: type=1326 audit(1720373863.903:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.500575][ T29] audit: type=1326 audit(1720373863.923:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.500633][ T29] audit: type=1326 audit(1720373863.923:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.500674][ T29] audit: type=1326 audit(1720373863.923:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.500715][ T29] audit: type=1326 audit(1720373863.923:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.502971][ T29] audit: type=1326 audit(1720373863.923:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.503021][ T29] audit: type=1326 audit(1720373863.923:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.514237][ T29] audit: type=1326 audit(1720373863.933:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.514342][ T29] audit: type=1326 audit(1720373863.943:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.514920][ T29] audit: type=1326 audit(1720373863.943:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11524 comm="syz.2.1585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa2aa975bd9 code=0x7ffc0000 [ 379.576323][T11528] macvlan0: entered promiscuous mode [ 379.655494][T11528] macvlan0: left promiscuous mode [ 380.381625][ T5094] Bluetooth: Unexpected continuation frame (len 18) [ 380.791537][T11564] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 380.808317][T11566] netlink: 550 bytes leftover after parsing attributes in process `syz.3.1598'. [ 380.832064][T11566] FAULT_INJECTION: forcing a failure. [ 380.832064][T11566] name failslab, interval 1, probability 0, space 0, times 0 [ 380.884501][T11566] CPU: 0 PID: 11566 Comm: syz.3.1598 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 380.894684][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 380.904730][T11566] Call Trace: [ 380.907993][T11566] [ 380.910908][T11566] dump_stack_lvl+0x241/0x360 [ 380.915580][T11566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 380.920764][T11566] ? __pfx__printk+0x10/0x10 [ 380.925347][T11566] should_fail_ex+0x3b0/0x4e0 [ 380.930016][T11566] ? __alloc_skb+0x1c3/0x440 [ 380.934612][T11566] should_failslab+0x9/0x20 [ 380.939116][T11566] kmem_cache_alloc_node_noprof+0x71/0x320 [ 380.944936][T11566] __alloc_skb+0x1c3/0x440 [ 380.949338][T11566] ? __dev_queue_xmit+0x16c9/0x3d30 [ 380.954528][T11566] ? __pfx___alloc_skb+0x10/0x10 [ 380.959464][T11566] ? netlink_ack_tlv_len+0x6e/0x200 [ 380.964653][T11566] netlink_ack+0x13f/0xa30 [ 380.969064][T11566] netlink_rcv_skb+0x262/0x430 [ 380.973832][T11566] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 380.979281][T11566] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.984564][T11566] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.989748][T11566] netlink_unicast+0x7ea/0x980 [ 380.994506][T11566] ? __pfx_netlink_unicast+0x10/0x10 [ 380.999774][T11566] ? __virt_addr_valid+0x183/0x520 [ 381.004877][T11566] ? __check_object_size+0x49c/0x900 [ 381.010150][T11566] ? bpf_lsm_netlink_send+0x9/0x10 [ 381.015249][T11566] netlink_sendmsg+0x8db/0xcb0 [ 381.020009][T11566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.025284][T11566] ? aa_sock_msg_perm+0x91/0x160 [ 381.030207][T11566] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 381.035480][T11566] ? security_socket_sendmsg+0x87/0xb0 [ 381.041012][T11566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.046290][T11566] __sock_sendmsg+0x221/0x270 [ 381.050961][T11566] sock_write_iter+0x2dd/0x400 [ 381.055716][T11566] ? __pfx_sock_write_iter+0x10/0x10 [ 381.060992][T11566] ? bpf_lsm_file_permission+0x9/0x10 [ 381.066354][T11566] ? security_file_permission+0x7f/0xa0 [ 381.071891][T11566] vfs_write+0xa72/0xc90 [ 381.076120][T11566] ? __pfx_sock_write_iter+0x10/0x10 [ 381.081391][T11566] ? __pfx_vfs_write+0x10/0x10 [ 381.086156][T11566] ksys_write+0x1a0/0x2c0 [ 381.090476][T11566] ? __pfx_ksys_write+0x10/0x10 [ 381.095310][T11566] ? do_syscall_64+0x100/0x230 [ 381.100064][T11566] ? do_syscall_64+0xb6/0x230 [ 381.104728][T11566] do_syscall_64+0xf3/0x230 [ 381.109218][T11566] ? clear_bhb_loop+0x35/0x90 [ 381.113874][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.119753][T11566] RIP: 0033:0x7eff9e575bd9 [ 381.124160][T11566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.143774][T11566] RSP: 002b:00007eff9f2cf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 381.152194][T11566] RAX: ffffffffffffffda RBX: 00007eff9e703f60 RCX: 00007eff9e575bd9 [ 381.160152][T11566] RDX: 000000000000033a RSI: 0000000020000040 RDI: 000000000000000c [ 381.168111][T11566] RBP: 00007eff9f2cf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.176065][T11566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.184036][T11566] R13: 000000000000000b R14: 00007eff9e703f60 R15: 00007eff9e82fa68 [ 381.192014][T11566] [ 381.232804][ T5094] Bluetooth: hci4: command tx timeout [ 381.539084][T11575] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 381.548854][T11575] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 381.612848][ T58] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 381.658951][T11579] macvlan0: entered promiscuous mode [ 381.671515][T11579] macvlan0: left promiscuous mode [ 381.804178][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 381.831663][ T58] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 381.868664][ T58] usb 2-1: config 0 has no interface number 0 [ 381.868765][ T58] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 381.868794][ T58] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 381.878130][ T58] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 381.878151][ T58] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 381.878164][ T58] usb 2-1: Product: syz [ 381.878173][ T58] usb 2-1: Manufacturer: syz [ 381.878182][ T58] usb 2-1: SerialNumber: syz [ 381.879713][ T58] usb 2-1: config 0 descriptor?? [ 381.881111][ T58] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 381.881296][ T58] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 381.882118][ T58] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 381.889405][ T58] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 381.903061][ T58] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 381.910662][ T58] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 381.919179][ T58] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 381.921034][ T58] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 381.927930][ T58] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 382.073284][ T58] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 382.287333][ T5140] usb 2-1: USB disconnect, device number 45 [ 382.308100][ T5140] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 382.324423][ T5140] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 382.352067][ T5140] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 382.361519][ T5140] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 382.420538][ T5140] keyspan 2-1:0.107: device disconnected [ 382.773155][T11597] program syz.0.1608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.714874][T11619] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 383.725199][T11619] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 384.291834][T11628] binder: 11626:11628 ioctl c0306201 0 returned -14 [ 385.576830][T11669] kvm: pic: non byte write [ 385.838128][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.965067][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.129396][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.264878][ T35] bond0: (slave netdevsim0): Releasing backup interface [ 386.281884][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.589569][T11679] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 386.600143][ T35] bridge_slave_1: left allmulticast mode [ 386.621103][T11679] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 386.629664][ T35] bridge_slave_1: left promiscuous mode [ 386.649150][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.672366][ T35] bridge_slave_0: left allmulticast mode [ 386.679673][ T35] bridge_slave_0: left promiscuous mode [ 386.687222][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.735078][ T4877] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 386.785541][ T5088] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.797265][ T5088] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.808764][ T5088] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.818490][ T5088] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.826610][ T5088] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 386.834097][ T5088] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.924199][ T4877] usb 2-1: Using ep0 maxpacket: 32 [ 386.975560][ T4877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.055250][ T4877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.101069][ T4877] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 387.172923][ T4877] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 387.245220][ T4877] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 387.297473][ T4877] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 387.330389][ T4877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 387.343619][ T4877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.358206][ T4877] usb 2-1: Product: syz [ 387.362461][ T4877] usb 2-1: Manufacturer: syz [ 387.368151][ T4877] usb 2-1: SerialNumber: syz [ 387.768332][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.789323][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.809148][ T35] bond0 (unregistering): Released all slaves [ 387.843482][T11684] netlink: 'syz.0.1634': attribute type 10 has an invalid length. [ 387.859230][T11684] bond0: (slave netdevsim0): Releasing backup interface [ 387.883307][T11684] team0: Port device netdevsim0 added [ 387.944776][ T4877] cdc_ncm 2-1:1.0: bind() failure [ 387.968737][ T4877] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 387.978158][ T4877] cdc_ncm 2-1:1.1: bind() failure [ 388.007578][ T35] tipc: Disabling bearer [ 388.016627][ T35] tipc: Left network mode [ 388.021511][ T4877] usb 2-1: USB disconnect, device number 46 [ 388.545334][ T58] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 388.563015][ T35] hsr_slave_0: left promiscuous mode [ 388.633815][ T35] hsr_slave_1: left promiscuous mode [ 388.660411][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.709810][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.748021][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.781005][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.795239][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 388.831567][ T58] usb 1-1: config 6 has an invalid interface number: 119 but max is 0 [ 388.846098][ T35] veth1_macvtap: left promiscuous mode [ 388.862042][ T35] veth0_macvtap: left promiscuous mode [ 388.873890][ T5088] Bluetooth: hci0: command tx timeout [ 388.874459][ T35] veth1_vlan: left promiscuous mode [ 388.885083][ T58] usb 1-1: config 6 has no interface number 0 [ 388.892036][ T58] usb 1-1: config 6 interface 119 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 388.911598][ T58] usb 1-1: config 6 interface 119 has no altsetting 0 [ 388.921225][ T58] usb 1-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= b.48 [ 388.930223][ T35] veth0_vlan: left promiscuous mode [ 388.930883][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.943730][ T58] usb 1-1: Product: 청歹駠䄢ॺﻫ懈紿Ḇᱭに頣ძ咍帾⌊娜敨ᆱ⬻⫯襭铛齱陞ᧉ쇤럯⠵冟芚ꈑ写陾⸂ꋔ䶁珃 [ 388.961740][ T58] usb 1-1: Manufacturer: 탻짹჎슦弮䃮⽡쳤嫮㉦ꭴ湏扏퍐鷸㉾椁ꁩ૪機虁극⡡๺卨葅ႊ᠌䂫⸃쟽븤夞췆秛灆钬륗᳂撝歴紆쥝ꩌ䀹嘧幌ㅰ滻켨뿝鑓Β퉼㉢좹⥗际侀ᗯ♣쨑氾棚겎롿訯ᢛ [ 388.998118][ T58] usb 1-1: SerialNumber: С [ 389.455721][ T58] digi_acceleport 1-1:6.119: required endpoints missing [ 389.499329][ T58] usb 1-1: USB disconnect, device number 47 [ 390.107564][ T35] team0 (unregistering): Port device team_slave_1 removed [ 390.142276][T11738] FAULT_INJECTION: forcing a failure. [ 390.142276][T11738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.156522][T11738] CPU: 1 PID: 11738 Comm: syz.1.1647 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 390.166720][T11738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 390.176800][T11738] Call Trace: [ 390.180088][T11738] [ 390.183023][T11738] dump_stack_lvl+0x241/0x360 [ 390.187703][T11738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.192898][T11738] ? __pfx__printk+0x10/0x10 [ 390.197482][T11738] ? __pfx_lock_release+0x10/0x10 [ 390.202501][T11738] should_fail_ex+0x3b0/0x4e0 [ 390.207197][T11738] _copy_from_user+0x2f/0xe0 [ 390.211777][T11738] userfaultfd_ioctl+0x1d1/0x7160 [ 390.216823][T11738] ? stack_trace_save+0x118/0x1d0 [ 390.221868][T11738] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 390.227337][T11738] ? stack_depot_save_flags+0x29/0x830 [ 390.232803][T11738] ? kasan_save_track+0x51/0x80 [ 390.237661][T11738] ? kasan_save_track+0x3f/0x80 [ 390.242537][T11738] ? kasan_save_free_info+0x40/0x50 [ 390.247743][T11738] ? poison_slab_object+0xe0/0x150 [ 390.252856][T11738] ? __kasan_slab_free+0x37/0x60 [ 390.257800][T11738] ? kfree+0x149/0x360 [ 390.262314][T11738] ? tomoyo_path_number_perm+0x68d/0x880 [ 390.267947][T11738] ? security_file_ioctl+0x75/0xb0 [ 390.273058][T11738] ? __se_sys_ioctl+0x47/0x170 [ 390.277815][T11738] ? do_syscall_64+0xf3/0x230 [ 390.282486][T11738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.288556][T11738] ? do_vfs_ioctl+0xf0e/0x2e50 [ 390.293315][T11738] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 390.298380][T11738] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.304794][T11738] ? tomoyo_path_number_perm+0x208/0x880 [ 390.310429][T11738] ? __pfx_lock_release+0x10/0x10 [ 390.315454][T11738] ? kfree+0x149/0x360 [ 390.319522][T11738] ? tomoyo_path_number_perm+0x71a/0x880 [ 390.325155][T11738] ? tomoyo_path_number_perm+0x208/0x880 [ 390.330806][T11738] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 390.336789][T11738] ? __pfx_vfs_write+0x10/0x10 [ 390.341561][T11738] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 390.347534][T11738] ? bpf_lsm_file_ioctl+0x9/0x10 [ 390.352550][T11738] ? security_file_ioctl+0x87/0xb0 [ 390.357653][T11738] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 390.363111][T11738] __se_sys_ioctl+0xfc/0x170 [ 390.367702][T11738] do_syscall_64+0xf3/0x230 [ 390.372210][T11738] ? clear_bhb_loop+0x35/0x90 [ 390.376926][T11738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.382817][T11738] RIP: 0033:0x7f9745775bd9 [ 390.387225][T11738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.407003][T11738] RSP: 002b:00007f97451ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 390.415413][T11738] RAX: ffffffffffffffda RBX: 00007f9745903f60 RCX: 00007f9745775bd9 [ 390.423377][T11738] RDX: 0000000020000180 RSI: 00000000c018aa3f RDI: 0000000000000003 [ 390.431362][T11738] RBP: 00007f97451ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 390.439347][T11738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.447317][T11738] R13: 000000000000000b R14: 00007f9745903f60 R15: 00007f9745a2fa68 [ 390.455295][T11738] [ 390.483337][ T35] team0 (unregistering): Port device team_slave_0 removed [ 390.947087][ T5088] Bluetooth: hci0: command tx timeout [ 391.022256][T11736] netlink: 'syz.3.1646': attribute type 10 has an invalid length. [ 391.253148][T11686] chnl_net:caif_netlink_parms(): no params data found [ 391.621628][T11761] FAULT_INJECTION: forcing a failure. [ 391.621628][T11761] name failslab, interval 1, probability 0, space 0, times 0 [ 391.621957][T11686] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.676606][T11761] CPU: 1 PID: 11761 Comm: syz.3.1652 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 391.686795][T11761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 391.696850][T11761] Call Trace: [ 391.700126][T11761] [ 391.703046][T11761] dump_stack_lvl+0x241/0x360 [ 391.707727][T11761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.712918][T11761] ? __pfx__printk+0x10/0x10 [ 391.717513][T11761] should_fail_ex+0x3b0/0x4e0 [ 391.722192][T11761] ? sctp_add_bind_addr+0x89/0x3a0 [ 391.727297][T11761] should_failslab+0x9/0x20 [ 391.731880][T11761] kmalloc_trace_noprof+0x6c/0x2c0 [ 391.736992][T11761] sctp_add_bind_addr+0x89/0x3a0 [ 391.741924][T11761] sctp_copy_local_addr_list+0x311/0x500 [ 391.747552][T11761] ? sctp_copy_local_addr_list+0xab/0x500 [ 391.753263][T11761] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 391.759409][T11761] ? sctp_v6_is_any+0x60/0x70 [ 391.764090][T11761] sctp_bind_addr_copy+0xad/0x3b0 [ 391.769194][T11761] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 391.775519][T11761] sctp_connect_new_asoc+0x2f3/0x6c0 [ 391.780796][T11761] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 391.786591][T11761] ? sctp_sendmsg+0xbb9/0x3520 [ 391.791347][T11761] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 391.796883][T11761] ? security_sctp_bind_connect+0x90/0xb0 [ 391.802792][T11761] sctp_sendmsg+0x219a/0x3520 [ 391.807470][T11761] ? __pfx_sctp_sendmsg+0x10/0x10 [ 391.812486][T11761] ? __pfx_aa_sk_perm+0x10/0x10 [ 391.817335][T11761] ? inet_sendmsg+0x330/0x390 [ 391.822004][T11761] __sock_sendmsg+0x1a6/0x270 [ 391.826678][T11761] ____sys_sendmsg+0x525/0x7d0 [ 391.831440][T11761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.836732][T11761] __sys_sendmmsg+0x3b2/0x740 [ 391.841409][T11761] ? __pfx___sys_sendmmsg+0x10/0x10 [ 391.846625][T11761] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 391.852511][T11761] ? ksys_write+0x23e/0x2c0 [ 391.857006][T11761] ? __pfx_lock_release+0x10/0x10 [ 391.862027][T11761] ? vfs_write+0x7c4/0xc90 [ 391.866440][T11761] ? __mutex_unlock_slowpath+0x21d/0x750 [ 391.872065][T11761] ? __pfx_vfs_write+0x10/0x10 [ 391.876836][T11761] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 391.882807][T11761] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 391.889211][T11761] ? do_syscall_64+0x100/0x230 [ 391.893970][T11761] __x64_sys_sendmmsg+0xa0/0xb0 [ 391.898817][T11761] do_syscall_64+0xf3/0x230 [ 391.903314][T11761] ? clear_bhb_loop+0x35/0x90 [ 391.907982][T11761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.913869][T11761] RIP: 0033:0x7eff9e575bd9 [ 391.918276][T11761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.937876][T11761] RSP: 002b:00007eff9f2cf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 391.946281][T11761] RAX: ffffffffffffffda RBX: 00007eff9e703f60 RCX: 00007eff9e575bd9 [ 391.954242][T11761] RDX: 0000000000000001 RSI: 0000000020000200 RDI: 0000000000000003 [ 391.962199][T11761] RBP: 00007eff9f2cf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.970160][T11761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.978119][T11761] R13: 000000000000000b R14: 00007eff9e703f60 R15: 00007eff9e82fa68 [ 391.986106][T11761] [ 391.994967][T11686] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.002351][T11686] bridge_slave_0: entered allmulticast mode [ 392.042687][T11686] bridge_slave_0: entered promiscuous mode [ 392.067781][T11686] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.102582][T11686] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.134528][T11686] bridge_slave_1: entered allmulticast mode [ 392.141842][T11686] bridge_slave_1: entered promiscuous mode [ 392.373706][T11686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.450604][T11686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.612016][T11686] team0: Port device team_slave_0 added [ 392.640957][T11686] team0: Port device team_slave_1 added [ 392.644168][ T5140] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 392.796299][T11686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.803279][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.866790][ T5094] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.877374][ T5094] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.886742][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 392.902673][ T5094] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.909950][T11686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.925028][ T5140] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 392.941978][ T5094] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.951154][ T5140] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 392.966284][ T5140] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.976850][ T5140] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.005590][ T5094] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 393.013311][ T5094] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 393.024620][ T5094] Bluetooth: hci0: command tx timeout [ 393.052074][ T5140] usb 3-1: config 0 descriptor?? [ 393.175693][T11686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.209536][T11686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.258312][T11686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.333086][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.480310][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.526509][ T5140] plantronics 0003:047F:FFFF.000F: ignoring exceeding usage max [ 393.573770][T11686] hsr_slave_0: entered promiscuous mode [ 393.597963][ T5140] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 393.599515][T11686] hsr_slave_1: entered promiscuous mode [ 393.633125][T11686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.657768][T11686] Cannot create hsr debugfs directory [ 393.666635][ T5140] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 393.703808][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.742222][T11787] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 393.765973][T11787] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 393.908342][ T35] team0: Port device netdevsim0 removed [ 393.926890][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.434205][ T929] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 394.627855][ T929] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 394.657231][ T929] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 394.694130][ T929] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 394.726404][ T929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.771956][ T929] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 394.813820][T11783] chnl_net:caif_netlink_parms(): no params data found [ 394.883158][ T35] hsr0: left allmulticast mode [ 394.892439][ T35] hsr_slave_0: left allmulticast mode [ 394.906518][ T35] hsr_slave_1: left allmulticast mode [ 394.913423][ T35] hsr0: left promiscuous mode [ 394.928992][ T35] bridge0: port 3(hsr0) entered disabled state [ 394.964257][ T4877] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 394.982997][ T929] gspca_sn9c2028: read1 error -32 [ 394.984187][ T35] bridge_slave_0: left allmulticast mode [ 395.008651][ T35] bridge_slave_0: left promiscuous mode [ 395.025308][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.114757][ T5094] Bluetooth: hci1: command tx timeout [ 395.116363][ T5088] Bluetooth: hci0: command tx timeout [ 395.126244][ T4877] usb 3-1: device descriptor read/64, error -32 [ 395.245457][ T929] gspca_sn9c2028: read1 error -71 [ 395.254148][ T929] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 395.302584][ T929] usb 2-1: USB disconnect, device number 47 [ 395.394252][ T4877] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 395.554620][ T4877] usb 3-1: device descriptor read/64, error -32 [ 395.591712][T11769] mmap: syz.2.1653 (11769) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 395.762872][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.774371][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.785388][ T35] bond0 (unregistering): Released all slaves [ 395.800178][ T35] bond1 (unregistering): Released all slaves [ 395.827442][ T4877] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 395.872770][ T4877] usb 3-1: device descriptor read/8, error -32 [ 396.008732][ T35] tipc: Disabling bearer [ 396.021620][ T35] tipc: Left network mode [ 396.144434][ T4877] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 396.197618][ T4877] usb 3-1: device descriptor read/8, error -32 [ 396.287167][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.334842][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.348385][ T4877] raw-gadget.0 gadget.2: failed to queue suspend event [ 396.359537][T11783] bridge_slave_0: entered allmulticast mode [ 396.367401][ T5139] usb 3-1: USB disconnect, device number 45 [ 396.387031][T11783] bridge_slave_0: entered promiscuous mode [ 396.410196][ T5139] raw-gadget.0 gadget.2: failed to queue reset event [ 396.423328][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.442433][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.451486][T11783] bridge_slave_1: entered allmulticast mode [ 396.460473][T11783] bridge_slave_1: entered promiscuous mode [ 396.524355][ T5139] raw-gadget.0 gadget.2: failed to queue resume event [ 396.614833][ T5139] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 396.647358][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.664421][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 396.671771][ T5139] raw-gadget.0 gadget.2: failed to queue reset event [ 396.697478][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.754204][ T5139] raw-gadget.0 gadget.2: failed to queue resume event [ 396.778891][T11850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1663'. [ 396.815771][T11773] raw-gadget.0 gadget.2: failed to queue suspend event [ 396.854274][ T5139] usb 3-1: device descriptor read/64, error -32 [ 396.854534][T11773] raw-gadget.0 gadget.2: failed to queue disconnect event [ 396.911018][T11783] team0: Port device team_slave_0 added [ 397.005693][T11783] team0: Port device team_slave_1 added [ 397.069098][T11686] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.184429][ T5088] Bluetooth: hci1: command tx timeout [ 397.215889][T11686] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.288623][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.298133][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.323999][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.334415][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.348693][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.356429][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.382954][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.398627][T11686] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.451177][T11686] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.464218][ T4877] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 397.501158][ T35] hsr_slave_0: left promiscuous mode [ 397.523447][ T35] hsr_slave_1: left promiscuous mode [ 397.542673][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.554704][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.571646][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.579892][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.610697][ T35] veth1_macvtap: left promiscuous mode [ 397.616574][ T35] veth0_macvtap: left promiscuous mode [ 397.622336][ T35] veth1_vlan: left promiscuous mode [ 397.629664][ T35] veth0_vlan: left promiscuous mode [ 397.676059][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.688927][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.699579][ T4877] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 397.713176][ T4877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.728419][ T4877] usb 4-1: config 0 descriptor?? [ 398.164885][ T4877] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 398.186384][ T4877] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 398.193832][ T4877] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 398.212451][ T4877] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 398.221115][ T4877] greenasia 0003:0E8F:0012.0010: unknown main item tag 0x0 [ 398.238529][ T4877] greenasia 0003:0E8F:0012.0010: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 398.251341][ T4877] greenasia 0003:0E8F:0012.0010: no inputs found [ 398.448137][ T35] team0 (unregistering): Port device team_slave_1 removed [ 398.496937][ T35] team0 (unregistering): Port device team_slave_0 removed [ 399.044484][T11861] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1665'. [ 399.073606][ T5140] usb 4-1: USB disconnect, device number 68 [ 399.134886][T11783] hsr_slave_0: entered promiscuous mode [ 399.149197][T11783] hsr_slave_1: entered promiscuous mode [ 399.156963][T11783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.166492][T11783] Cannot create hsr debugfs directory [ 399.264314][ T5088] Bluetooth: hci1: command tx timeout [ 399.779108][T11686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.819517][T11686] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.909143][ T4877] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.916408][ T4877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.947132][ T4877] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.954385][ T4877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.155847][ T5140] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 400.291136][T11686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.329075][T11783] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.352216][T11783] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.380576][T11783] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.403986][T11783] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.410896][ T5140] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 400.423016][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.448164][ T5140] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 400.494902][ T5140] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 400.508804][ T5140] usb 4-1: Manufacturer: syz [ 400.530329][T11686] veth0_vlan: entered promiscuous mode [ 400.539220][ T5140] usb 4-1: config 0 descriptor?? [ 400.622105][T11686] veth1_vlan: entered promiscuous mode [ 400.744295][ T5140] rc_core: IR keymap rc-hauppauge not found [ 400.750337][ T5140] Registered IR keymap rc-empty [ 400.778842][T11686] veth0_macvtap: entered promiscuous mode [ 400.785991][ T5140] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 400.814553][T11686] veth1_macvtap: entered promiscuous mode [ 400.825504][ T5140] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 400.843553][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.855218][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 400.906034][T11686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.919039][T11686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.929047][T11686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.942215][T11686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.957276][T11686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 400.972228][T11686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.996988][T11686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.036290][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.052778][T11686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.068338][ T5139] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 401.068726][T11686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.088789][T11686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.109511][T11686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.126227][T11686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.138253][T11686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.156335][T11686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.175329][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.182555][ T5140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.270090][T11686] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.281124][T11686] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.291937][T11686] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.296297][ T5139] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 401.303608][T11686] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.329922][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.335454][ T5139] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 401.337228][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.354344][ T5088] Bluetooth: hci1: command tx timeout [ 401.360071][ T5139] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 401.372602][ T5139] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.387237][ T5139] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 401.416127][ T5153] usb 4-1: USB disconnect, device number 69 [ 401.593957][ T5139] gspca_sn9c2028: read1 error -32 [ 401.670944][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.684519][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.771273][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.823472][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.846048][ T5139] gspca_sn9c2028: read1 error -71 [ 401.851194][ T5139] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 401.882483][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.891680][ T5139] usb 2-1: USB disconnect, device number 48 [ 402.067782][T11783] veth0_vlan: entered promiscuous mode [ 402.124785][T11783] veth1_vlan: entered promiscuous mode [ 402.125868][T11924] binder: transaction release 11 bad handle 1, ret = -22 [ 402.157126][T11926] netlink: 'syz.4.1631': attribute type 21 has an invalid length. [ 402.267460][T11783] veth0_macvtap: entered promiscuous mode [ 402.309526][T11783] veth1_macvtap: entered promiscuous mode [ 402.318324][ T5088] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.328948][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.341216][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.356522][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.367937][ T5088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 402.381185][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.431069][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.494304][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.504590][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.515560][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.525770][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.536697][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.550052][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.561149][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.581578][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.628359][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.646795][ T5140] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 402.659551][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.691633][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.703670][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.715693][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.726343][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.769055][T11783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.793865][T11783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.843051][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.854456][ T5140] usb 4-1: Using ep0 maxpacket: 32 [ 402.873973][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.908802][ T5140] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.930546][T11783] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.934299][ T5140] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.963998][ T5140] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 402.980407][T11783] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.984075][ T5140] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 402.994512][T11783] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.020137][ T5140] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 403.020817][T11783] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.050036][ T5140] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.072972][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.085437][ T5140] usb 4-1: Product: syz [ 403.089687][ T5140] usb 4-1: Manufacturer: syz [ 403.113112][ T5140] usb 4-1: SerialNumber: syz [ 403.118149][T11893] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 403.316963][T11893] usb 2-1: config 0 has an invalid interface number: 193 but max is 0 [ 403.340715][T11893] usb 2-1: config 0 has no interface number 0 [ 403.373098][T11893] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=62.71 [ 403.391927][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.431813][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.440673][T11893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.524396][ T5140] cdc_ncm 4-1:1.0: bind() failure [ 403.532822][T11893] usb 2-1: config 0 descriptor?? [ 403.568159][ T5140] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 403.580075][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.595671][ T5140] cdc_ncm 4-1:1.1: bind() failure [ 403.614058][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.633869][ T5140] usb 4-1: USB disconnect, device number 70 [ 403.914440][T11936] chnl_net:caif_netlink_parms(): no params data found [ 404.131164][ T5140] usb 2-1: USB disconnect, device number 49 [ 404.144680][ T5088] Bluetooth: hci0: command tx timeout [ 404.256830][T11936] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.308911][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.339803][T11936] bridge_slave_0: entered allmulticast mode [ 404.368187][T11936] bridge_slave_0: entered promiscuous mode [ 404.408789][T11936] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.437380][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.464669][ T5088] Bluetooth: hci2: command tx timeout [ 404.479589][T11936] bridge_slave_1: entered allmulticast mode [ 404.501948][T11936] bridge_slave_1: entered promiscuous mode [ 404.594604][ T5139] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 404.642747][T11936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.699916][T11936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.802906][ T5139] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 404.830844][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.869163][T11936] team0: Port device team_slave_0 added [ 404.892951][ T5139] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 404.906886][T11936] team0: Port device team_slave_1 added [ 404.912564][ T5139] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 404.926733][ T5139] usb 1-1: Manufacturer: syz [ 404.961486][ T5139] usb 1-1: config 0 descriptor?? [ 405.016170][T11936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.030781][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.076444][T11936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.098458][T11936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.106904][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.132829][ C1] vkms_vblank_simulate: vblank timer overrun [ 405.139808][ T5139] rc_core: IR keymap rc-hauppauge not found [ 405.152757][ T5139] Registered IR keymap rc-empty [ 405.154497][T11936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.157874][ T45] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 405.189351][ T5139] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 405.229021][ T5139] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 405.244700][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 405.256824][ T58] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 405.331798][T11936] hsr_slave_0: entered promiscuous mode [ 405.373897][T11936] hsr_slave_1: entered promiscuous mode [ 405.405970][T11936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 405.417316][ T45] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 405.433290][T11936] Cannot create hsr debugfs directory [ 405.441668][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.469895][ T58] usb 4-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 405.507602][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.543083][ T45] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 405.579262][ T45] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 405.588549][ T58] usb 4-1: config 0 descriptor?? [ 405.606181][ T45] usb 2-1: Manufacturer: syz [ 405.643585][ T45] usb 2-1: config 0 descriptor?? [ 405.767968][ T5139] usb 1-1: USB disconnect, device number 48 [ 405.814154][ T45] rc_core: IR keymap rc-hauppauge not found [ 405.829255][ T45] Registered IR keymap rc-empty [ 405.862209][ T45] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 405.914567][ T45] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input34 [ 405.946541][ C1] igorplugusb 2-1:0.0: Error: urb status = -32 [ 405.998755][ T58] hackrf 4-1:0.0: Board ID: 00 [ 406.016414][ T58] hackrf 4-1:0.0: Firmware version: [ 406.079469][ T58] hackrf 4-1:0.0: Registered as swradio16 [ 406.105095][ T58] hackrf 4-1:0.0: Registered as swradio17 [ 406.126978][ T58] hackrf 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 406.222545][ T58] usb 4-1: USB disconnect, device number 71 [ 406.251213][T11936] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.544837][ T5088] Bluetooth: hci2: command tx timeout [ 406.588829][T11936] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.625492][ T5153] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 406.741012][T11936] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.787666][T12044] netlink: 'syz.0.1686': attribute type 21 has an invalid length. [ 406.873077][ T5153] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 406.897908][ T5153] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 406.912531][T11936] bond0: (slave netdevsim0): Releasing backup interface [ 406.933202][ T5153] usb 5-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 406.968236][T11936] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.981208][ T5153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.008866][ T5153] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 407.024402][ T929] usb 2-1: USB disconnect, device number 50 [ 407.217476][ T5153] gspca_sn9c2028: read1 error -32 [ 407.379937][T11936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 407.413176][T11936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 407.441465][T11936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 407.490615][T11936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 407.490890][ T5153] gspca_sn9c2028: read1 error -71 [ 407.524905][ T5153] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -71 [ 407.568170][ T5153] usb 5-1: USB disconnect, device number 58 [ 407.831966][T11936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.928513][T11936] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.944458][ T9] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 407.952302][T12073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 408.023227][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.030446][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.060747][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.067962][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.144655][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 408.163361][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.206900][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.237956][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 408.286999][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 408.326625][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 408.374599][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 408.420729][T11936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.432921][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.453958][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.480242][ T9] usb 1-1: Product: syz [ 408.511590][ T9] usb 1-1: Manufacturer: syz [ 408.522747][ T9] usb 1-1: SerialNumber: syz [ 408.562458][T11936] veth0_vlan: entered promiscuous mode [ 408.596523][T11936] veth1_vlan: entered promiscuous mode [ 408.624907][ T5088] Bluetooth: hci2: command tx timeout [ 408.704284][ T5088] Bluetooth: hci1: command tx timeout [ 408.759078][T11936] veth0_macvtap: entered promiscuous mode [ 408.778873][T11936] veth1_macvtap: entered promiscuous mode [ 408.796703][ T9] cdc_ncm 1-1:1.0: bind() failure [ 408.808464][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.819563][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.831809][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.839086][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 408.849386][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.856419][ T9] cdc_ncm 1-1:1.1: bind() failure [ 408.867835][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.886811][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.898213][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.898976][ T9] usb 1-1: USB disconnect, device number 49 [ 408.910656][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.927827][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.939490][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.959263][ T5153] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 408.969487][T11936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.008117][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.025087][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.036071][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.048442][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.060153][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.073439][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.088418][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.102518][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.114659][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.127076][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.140490][T11936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.161550][T11936] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.171086][T11936] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.182201][T11936] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.193498][T11936] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.224963][ T5153] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 409.240539][ T5153] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 409.270446][ T5153] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 409.281103][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.313432][ T5153] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 409.514692][ T5153] gspca_sn9c2028: read1 error -32 [ 409.537147][ T5153] gspca_sn9c2028: read1 error -32 [ 409.578379][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.607138][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.701636][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.740635][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.871641][T12111] netlink: 'syz.4.1701': attribute type 10 has an invalid length. [ 409.897066][T12111] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 410.356475][T12125] hub 9-0:1.0: USB hub found [ 410.363150][T12125] hub 9-0:1.0: 8 ports detected [ 410.704244][ T5088] Bluetooth: hci2: command tx timeout [ 411.036401][T12140] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 411.053792][T12140] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 411.551353][ T5153] usb 4-1: USB disconnect, device number 72 [ 411.564322][ T25] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 411.594226][ T4877] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 411.625247][ T45] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 411.662195][T12154] netlink: 'syz.3.1713': attribute type 4 has an invalid length. [ 411.680219][T12154] netlink: 'syz.3.1713': attribute type 4 has an invalid length. [ 411.717175][T12154] netlink: 'syz.3.1713': attribute type 4 has an invalid length. [ 411.775137][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 411.782645][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.794723][ T4877] usb 3-1: Using ep0 maxpacket: 16 [ 411.814484][ T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 411.824322][ T4877] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 411.839455][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.851164][ T25] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 411.852127][T12163] IPv6: Can't replace route, no match found [ 411.860835][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.881423][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.891062][ T25] usb 1-1: Product: syz [ 411.896216][ T4877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 411.904536][ T4877] usb 3-1: can't read configurations, error -61 [ 411.911051][ T25] usb 1-1: Manufacturer: syz [ 411.915854][ T45] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 411.927360][ T25] usb 1-1: SerialNumber: syz [ 411.933477][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.943211][ T25] usb 1-1: config 0 descriptor?? [ 411.956639][ T45] usb 2-1: config 0 descriptor?? [ 412.025447][ T5088] Bluetooth: Unexpected continuation frame (len 18) [ 412.074345][ T4877] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 412.177127][ T25] usb 1-1: USB disconnect, device number 50 [ 412.242592][T12173] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 412.264230][ T4877] usb 3-1: Using ep0 maxpacket: 16 [ 412.283731][ T4877] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 412.296791][T12173] netlink: 'syz.4.1720': attribute type 4 has an invalid length. [ 412.315547][ T4877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 412.323270][ T4877] usb 3-1: can't read configurations, error -61 [ 412.360576][ T4877] usb usb3-port1: attempt power cycle [ 412.381269][ T45] itetech 0003:06CB:73F5.0011: unknown main item tag 0x0 [ 412.389960][ T45] itetech 0003:06CB:73F5.0011: item fetching failed at offset 9/11 [ 412.399895][ T45] itetech 0003:06CB:73F5.0011: probe with driver itetech failed with error -22 [ 412.666434][ T45] usb 2-1: USB disconnect, device number 51 [ 412.774211][ T4877] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 412.828111][ T4877] usb 3-1: Using ep0 maxpacket: 16 [ 412.870263][ T4877] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 412.882494][ T4877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 412.897336][ T4877] usb 3-1: can't read configurations, error -61 [ 412.944338][ T5140] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 413.054196][ T4877] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 413.097774][ T4877] usb 3-1: Using ep0 maxpacket: 16 [ 413.107375][ T4877] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 413.120710][ T4877] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 413.129110][ T4877] usb 3-1: can't read configurations, error -61 [ 413.135938][ T4877] usb usb3-port1: unable to enumerate USB device [ 413.136236][ T5153] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 413.158556][ T5140] usb 4-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 413.170031][ T5140] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 413.184600][ T5140] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 413.203761][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.243157][ T5140] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 413.428001][ T5153] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config [ 413.457568][ T5140] gspca_sn9c2028: read1 error -32 [ 413.480892][ T5140] gspca_sn9c2028: read1 error -32 [ 413.499129][ T5153] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 413.530975][ T5153] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 413.563736][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.607874][ T5153] usb 1-1: config 0 descriptor?? [ 414.193561][T12208] hsr_slave_0: left promiscuous mode [ 414.213391][T12208] hsr_slave_1: left promiscuous mode [ 414.231687][ T5088] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 414.247990][ T5088] Bluetooth: hci0: Injecting HCI hardware error event [ 414.259268][ T5088] Bluetooth: hci0: hardware error 0x00 [ 414.522901][ T5094] Bluetooth: Unexpected continuation frame (len 18) [ 414.685837][T12215] netlink: 'syz.1.1731': attribute type 21 has an invalid length. [ 414.760308][ T5153] usb 1-1: string descriptor 0 read error: -71 [ 414.809234][ T5153] usb 1-1: USB disconnect, device number 51 [ 414.888354][T12219] netlink: 'syz.2.1732': attribute type 4 has an invalid length. [ 414.948640][T12219] netlink: 'syz.2.1732': attribute type 4 has an invalid length. [ 415.464176][ T4877] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 415.547728][ T45] usb 4-1: USB disconnect, device number 73 [ 415.664181][ T4877] usb 3-1: Using ep0 maxpacket: 16 [ 415.674267][ T5139] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 415.708744][ T4877] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 415.722658][ T4877] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 415.732355][ T4877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.741794][ T4877] usb 3-1: Product: syz [ 415.749455][ T4877] usb 3-1: Manufacturer: syz [ 415.756381][ T4877] usb 3-1: SerialNumber: syz [ 415.764151][ T4877] usb 3-1: config 0 descriptor?? [ 415.905073][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.945538][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.956855][ T5139] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 415.970372][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.995542][ T45] usb 3-1: USB disconnect, device number 52 [ 416.018637][ T5139] usb 1-1: config 0 descriptor?? [ 416.384321][ T5088] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 416.459563][ T5139] itetech 0003:06CB:73F5.0012: unknown main item tag 0x0 [ 416.470446][ T5139] itetech 0003:06CB:73F5.0012: item fetching failed at offset 9/11 [ 416.501827][ T5139] itetech 0003:06CB:73F5.0012: probe with driver itetech failed with error -22 [ 416.706663][ T5088] Bluetooth: hci4: command tx timeout [ 416.716120][T12256] netlink: 'syz.2.1743': attribute type 21 has an invalid length. [ 416.721178][ T45] usb 1-1: USB disconnect, device number 52 [ 416.798816][T12258] netlink: 'syz.4.1744': attribute type 4 has an invalid length. [ 416.829525][T12258] netlink: 'syz.4.1744': attribute type 4 has an invalid length. [ 417.178737][T12273] input: syz0 as /devices/virtual/input/input35 [ 417.624241][ T45] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 417.854222][ T45] usb 4-1: Using ep0 maxpacket: 8 [ 417.866416][ T45] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 417.881696][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.899847][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.910427][ T45] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 417.922685][ T45] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 417.982791][ T45] usb 4-1: string descriptor 0 read error: -22 [ 417.990366][ T4877] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 417.998868][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.015808][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.092187][ T45] usb 4-1: 0:2 : does not exist [ 418.204143][ T4877] usb 1-1: Using ep0 maxpacket: 32 [ 418.217916][ T4877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.259188][ T4877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.280652][ T4877] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 418.300333][ T4877] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 418.325579][ T45] usb 4-1: USB disconnect, device number 74 [ 418.410836][ T4877] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 418.480634][ T4877] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 418.556961][ T4877] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.596658][ T4877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.639592][ T4877] usb 1-1: Product: syz [ 418.704319][ T5088] Bluetooth: hci2: command tx timeout [ 418.744180][ T4877] usb 1-1: Manufacturer: syz [ 418.764918][ T4877] usb 1-1: SerialNumber: syz [ 418.959750][T12300] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 419.020214][T12300] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 419.057372][T12303] netlink: 'syz.3.1757': attribute type 21 has an invalid length. [ 419.078126][ T4877] cdc_ncm 1-1:1.0: bind() failure [ 419.111134][ T4877] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 419.124649][ T45] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 419.136986][ T4877] cdc_ncm 1-1:1.1: bind() failure [ 419.151336][ T4877] usb 1-1: USB disconnect, device number 53 [ 419.317647][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 419.350303][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 419.401394][ T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.420107][ T45] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.470722][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 419.470742][ T29] audit: type=1326 audit(1720373903.893:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.474211][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.515143][ T29] audit: type=1326 audit(1720373903.933:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.546980][ T29] audit: type=1326 audit(1720373903.933:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.569852][ T45] usb 5-1: config 0 descriptor?? [ 419.575229][ T29] audit: type=1326 audit(1720373903.943:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.611442][ T29] audit: type=1326 audit(1720373903.943:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.641205][ T29] audit: type=1326 audit(1720373903.943:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.644219][ T5153] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 419.680627][ T29] audit: type=1326 audit(1720373903.943:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.715032][ T29] audit: type=1326 audit(1720373903.943:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.742022][ T29] audit: type=1326 audit(1720373903.943:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.768726][ T29] audit: type=1326 audit(1720373903.993:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12309 comm="syz.3.1760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7eff9e575bd9 code=0x7ffc0000 [ 419.866849][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.900631][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.932606][ T5153] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 419.949073][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.984890][ T5153] usb 2-1: config 0 descriptor?? [ 420.015565][ T45] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 420.049424][ T45] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 420.098232][ T45] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 420.256741][ T5140] usb 5-1: USB disconnect, device number 59 [ 420.415614][ T5153] itetech 0003:06CB:73F5.0014: unknown main item tag 0x0 [ 420.443085][ T5153] itetech 0003:06CB:73F5.0014: item fetching failed at offset 9/11 [ 420.479711][ T5153] itetech 0003:06CB:73F5.0014: probe with driver itetech failed with error -22 [ 420.606290][T12328] kvm: pic: non byte write [ 420.612955][ T5088] Bluetooth: hci4: link tx timeout [ 420.619834][ T5088] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 420.700033][T11893] usb 2-1: USB disconnect, device number 52 [ 421.119583][T12337] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1767'. [ 421.395683][T12351] netlink: 'syz.0.1768': attribute type 4 has an invalid length. [ 421.424488][ T5088] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 421.424576][ T5088] Bluetooth: hci1: Injecting HCI hardware error event [ 421.426490][ T5088] Bluetooth: hci1: hardware error 0x00 [ 421.468505][T12351] netlink: 'syz.0.1768': attribute type 4 has an invalid length. [ 422.706961][ T5094] Bluetooth: hci4: command 0x0406 tx timeout [ 423.118040][T12377] kvm: pic: non byte write [ 423.431285][T12380] vivid-007: ================= START STATUS ================= [ 423.453651][T12380] vivid-007: Enable Output Cropping: true [ 423.469200][T12380] vivid-007: Enable Output Composing: true [ 423.480384][T12380] vivid-007: Enable Output Scaler: true [ 423.490835][T12380] vivid-007: Tx RGB Quantization Range: Automatic [ 423.504616][ T5088] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 423.529285][T12380] vivid-007: Transmit Mode: HDMI [ 423.558091][T12380] vivid-007: Display Present: true inactive [ 423.588157][T12381] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 423.594140][T12380] vivid-007: Hotplug Present: 0x00000001 [ 423.631450][T12383] tipc: Started in network mode [ 423.655295][T12380] vivid-007: RxSense Present: 0x00000001 [ 423.672482][T12383] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 423.724163][T12380] vivid-007: EDID Present: 0x00000001 [ 423.764309][T12380] vivid-007: ================== END STATUS ================== [ 423.791071][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 2 < 9 [ 423.794659][T12383] tipc: Enabled bearer , priority 10 [ 423.798130][ T5088] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 423.976728][T12389] tipc: Can't bind to reserved service type 0 [ 424.077622][T12394] netlink: 'syz.1.1781': attribute type 4 has an invalid length. [ 424.178695][T12396] netlink: 'syz.1.1781': attribute type 4 has an invalid length. [ 424.590338][ T5099] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 424.604709][ T5099] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 424.619328][ T5099] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 424.630027][ T5099] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 424.646494][ T5099] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 424.661738][ T5099] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 424.684192][ T4877] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 424.878708][T12404] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 424.888089][ T4877] usb 2-1: Using ep0 maxpacket: 8 [ 424.904315][ T5153] tipc: Node number set to 4269801491 [ 424.911547][ T4877] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.936899][ T4877] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 424.964135][ T4877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.990587][ T4877] usb 2-1: config 0 descriptor?? [ 425.011522][ T4877] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 425.059295][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.193118][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.224235][ T58] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 425.290227][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.392372][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.434595][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 425.463086][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.494538][ T58] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 425.507779][ T58] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 425.518345][ T58] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 425.528791][ T58] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.540757][ T58] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 425.555602][ T58] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.569545][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.581053][ T58] usb 4-1: Product: syz [ 425.587547][ T58] usb 4-1: Manufacturer: syz [ 425.592907][ T58] usb 4-1: SerialNumber: syz [ 425.645220][T12400] chnl_net:caif_netlink_parms(): no params data found [ 425.684416][ T45] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 425.704909][ T12] bridge_slave_1: left allmulticast mode [ 425.717039][ T12] bridge_slave_1: left promiscuous mode [ 425.722917][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.743595][ T12] bridge_slave_0: left allmulticast mode [ 425.749918][ T12] bridge_slave_0: left promiscuous mode [ 425.757868][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.890981][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.935337][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.967508][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.005602][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.038526][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.062729][ T45] usb 1-1: Product: syz [ 426.072047][ T45] usb 1-1: Manufacturer: syz [ 426.086682][ T45] usb 1-1: SerialNumber: syz [ 426.121850][ T45] usb 1-1: selecting invalid altsetting 1 [ 426.164462][ T4877] gspca_vc032x: reg_w err -110 [ 426.169429][ T4877] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 426.321897][ T45] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 426.335353][ T45] cdc_ncm 1-1:1.0: bind() failure [ 426.356168][ T45] usb 1-1: USB disconnect, device number 54 [ 426.639425][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.653684][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.672796][ T12] bond0 (unregistering): Released all slaves [ 426.734868][ T58] cdc_ncm 4-1:1.0: bind() failure [ 426.765317][ T58] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 426.781075][ T58] cdc_ncm 4-1:1.1: bind() failure [ 426.786803][ T5088] Bluetooth: hci5: command tx timeout [ 426.810318][ T58] usb 4-1: USB disconnect, device number 75 [ 426.933937][ T5140] usb 2-1: USB disconnect, device number 53 [ 427.263518][T12400] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.306735][T12400] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.347781][T12400] bridge_slave_0: entered allmulticast mode [ 427.382932][T12400] bridge_slave_0: entered promiscuous mode [ 427.421819][T12400] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.460382][T12443] kvm: pic: non byte write [ 427.471439][T12400] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.500570][T12400] bridge_slave_1: entered allmulticast mode [ 427.524774][T12400] bridge_slave_1: entered promiscuous mode [ 427.638325][ T12] hsr_slave_0: left promiscuous mode [ 427.677627][ T12] hsr_slave_1: left promiscuous mode [ 427.710875][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.774837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.810255][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.826774][ T5088] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 427.838697][ T5088] Bluetooth: hci4: Injecting HCI hardware error event [ 427.854816][ T5099] Bluetooth: hci4: hardware error 0x00 [ 427.903854][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.040482][ T12] veth1_macvtap: left promiscuous mode [ 428.061386][ T12] veth0_macvtap: left promiscuous mode [ 428.090398][ T12] veth1_vlan: left promiscuous mode [ 428.120569][ T12] veth0_vlan: left promiscuous mode [ 428.251881][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 428.251905][ T29] audit: type=1326 audit(1720373912.673:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.312694][ T29] audit: type=1326 audit(1720373912.703:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.363275][ T29] audit: type=1326 audit(1720373912.713:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.479289][ T29] audit: type=1326 audit(1720373912.713:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.552980][ T29] audit: type=1326 audit(1720373912.723:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.577189][ T29] audit: type=1326 audit(1720373912.763:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.601226][ T29] audit: type=1326 audit(1720373912.763:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.635637][ T29] audit: type=1326 audit(1720373912.763:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.673711][ T29] audit: type=1326 audit(1720373912.763:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.704347][ T45] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 428.721309][ T29] audit: type=1326 audit(1720373912.763:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12467 comm="syz.1.1794" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9745775bd9 code=0x7ffc0000 [ 428.866117][ T5088] Bluetooth: hci5: command tx timeout [ 428.895232][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 428.906358][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.924833][ T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 428.946007][ T45] usb 2-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 428.955373][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.963595][ T45] usb 2-1: Product: syz [ 428.971199][ T45] usb 2-1: Manufacturer: syz [ 428.986616][ T45] usb 2-1: SerialNumber: syz [ 429.006936][ T45] usb 2-1: config 0 descriptor?? [ 429.381326][ T12] team0 (unregistering): Port device team_slave_1 removed [ 429.470384][ T12] team0 (unregistering): Port device team_slave_0 removed [ 429.904364][ T5099] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 430.256132][T12449] netlink: 'syz.3.1792': attribute type 4 has an invalid length. [ 430.291818][T12444] netlink: 'syz.3.1792': attribute type 4 has an invalid length. [ 430.437086][T12400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.458641][T12400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.488091][T12481] netlink: 'syz.4.1797': attribute type 21 has an invalid length. [ 430.670832][T12400] team0: Port device team_slave_0 added [ 430.732592][T12400] team0: Port device team_slave_1 added [ 430.906848][T12400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.922814][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.960801][ T5099] Bluetooth: hci5: command tx timeout [ 431.004416][T12400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.063457][T12400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.089023][T12400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.131006][T12400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.273642][T12400] hsr_slave_0: entered promiscuous mode [ 431.289769][T12400] hsr_slave_1: entered promiscuous mode [ 431.464123][ T58] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 431.531486][T11893] usb 2-1: USB disconnect, device number 54 [ 431.680625][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 431.705463][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 431.738134][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 431.768995][ T58] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 431.799865][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.812745][ T45] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 431.844955][ T58] usb 5-1: config 0 descriptor?? [ 432.020796][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.062366][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.119550][ T45] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.143329][ T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 432.166786][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.183735][ T45] usb 1-1: Product: syz [ 432.188409][ T45] usb 1-1: Manufacturer: syz [ 432.193298][ T45] usb 1-1: SerialNumber: syz [ 432.233751][ T45] usb 1-1: selecting invalid altsetting 1 [ 432.288061][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 432.312170][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.363962][ T58] usb 5-1: USB disconnect, device number 60 [ 432.468089][ T45] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 432.485352][ T45] cdc_ncm 1-1:1.0: bind() failure [ 432.530436][ T45] usb 1-1: USB disconnect, device number 55 [ 432.559629][ T5102] udevd[5102]: setting mode of /dev/bus/usb/001/055 to 020664 failed: No such file or directory [ 432.594678][ T5102] udevd[5102]: setting owner of /dev/bus/usb/001/055 to uid=0, gid=0 failed: No such file or directory [ 432.637489][T12400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 432.688029][T12400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 432.718749][T12400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 432.752833][T12400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 432.836229][ T929] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 432.940084][T12400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.976668][T12400] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.993438][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.000595][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.024310][ T5099] Bluetooth: hci5: command tx timeout [ 433.049229][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.056424][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.069217][ T929] usb 4-1: Using ep0 maxpacket: 32 [ 433.081753][ T929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.094665][ T929] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.108132][ T929] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 433.139641][ T929] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 433.150164][ T929] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 433.207981][ T929] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 433.252368][ T929] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 433.291610][T12544] netlink: 'syz.4.1807': attribute type 4 has an invalid length. [ 433.315883][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.380808][ T929] usb 4-1: Product: syz [ 433.399631][ T929] usb 4-1: Manufacturer: syz [ 433.412697][T12542] netlink: 'syz.4.1807': attribute type 4 has an invalid length. [ 433.428101][ T929] usb 4-1: SerialNumber: syz [ 433.561977][T12400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.663412][ T929] cdc_ncm 4-1:1.0: bind() failure [ 433.719258][ T929] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 433.732944][T12400] veth0_vlan: entered promiscuous mode [ 433.757040][ T929] cdc_ncm 4-1:1.1: bind() failure [ 433.793161][ T929] usb 4-1: USB disconnect, device number 76 [ 433.793787][T12400] veth1_vlan: entered promiscuous mode [ 433.926506][T12400] veth0_macvtap: entered promiscuous mode [ 433.963292][T12400] veth1_macvtap: entered promiscuous mode [ 434.043924][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.103826][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.126307][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.143510][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.161420][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.188096][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.232874][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.263280][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.280994][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.299066][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.332114][T12400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.358900][T12557] netlink: 'syz.0.1810': attribute type 21 has an invalid length. [ 434.390074][T12565] netlink: 'syz.3.1811': attribute type 10 has an invalid length. [ 434.411764][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.436121][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.473049][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.509467][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.532620][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.547110][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.563035][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.579034][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.590832][T12400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.615811][T12400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.638380][T12400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.668812][T12400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.719311][T12400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.742492][T12400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.752935][T12400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.764557][ T58] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 434.956184][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 434.986311][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 435.027554][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.044883][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 435.044898][ T29] audit: type=1326 audit(1720373919.463:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.044894][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.044946][ T58] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.101960][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.129088][ T29] audit: type=1326 audit(1720373919.473:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.194575][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.196732][T12581] macvlan0: entered promiscuous mode [ 435.231192][ T29] audit: type=1326 audit(1720373919.473:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.246495][ T58] usb 4-1: config 0 descriptor?? [ 435.261820][T12581] macvlan0: left promiscuous mode [ 435.341363][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.367717][ T29] audit: type=1326 audit(1720373919.543:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.392398][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.420272][ T29] audit: type=1326 audit(1720373919.543:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.467996][ T29] audit: type=1326 audit(1720373919.543:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.493646][ T5153] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 435.577886][ T29] audit: type=1326 audit(1720373919.543:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.653626][ T29] audit: type=1326 audit(1720373919.543:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.711979][ T5099] Bluetooth: hci5: unexpected event 0x0f length: 17 > 4 [ 435.713140][ T58] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 435.725391][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 435.737974][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.758211][ T29] audit: type=1326 audit(1720373919.543:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.783745][ T58] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 435.793227][ T5153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 435.797505][ T29] audit: type=1326 audit(1720373919.543:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12576 comm="syz.0.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f4236375bd9 code=0x7ffc0000 [ 435.830437][ T58] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 435.886495][ T5153] usb 1-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 435.922921][ T58] usb 4-1: USB disconnect, device number 77 [ 435.937507][ T5153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.145130][ T5153] usb 1-1: Product: syz [ 436.202276][ T5153] usb 1-1: Manufacturer: syz [ 436.216802][ T5153] usb 1-1: SerialNumber: syz [ 436.265096][ T5153] usb 1-1: config 0 descriptor?? [ 436.930637][ T58] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 436.982317][T12628] IPVS: length: 28 != 24 [ 437.001024][T12629] IPVS: length: 28 != 24 [ 437.061082][T12633] netlink: 'syz.3.1821': attribute type 10 has an invalid length. [ 437.135162][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 437.153963][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.186478][ T58] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.223524][ T58] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 437.274852][ T58] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 437.287668][T12638] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 437.302578][T12638] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 437.340405][ T58] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 437.370885][ T58] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 437.410026][ T58] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 437.428535][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.461649][ T58] usb 3-1: Product: syz [ 437.480648][ T58] usb 3-1: Manufacturer: syz [ 437.500599][ T58] usb 3-1: SerialNumber: syz [ 437.725776][ T58] cdc_ncm 3-1:1.0: bind() failure [ 437.744666][ T5099] Bluetooth: hci5: command tx timeout [ 437.818273][ T58] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 437.859698][ T58] cdc_ncm 3-1:1.1: bind() failure [ 437.880491][ T58] usb 3-1: USB disconnect, device number 53 [ 438.000535][T11893] usb 1-1: USB disconnect, device number 56 [ 438.210354][T12669] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 438.646758][T12688] pimreg: entered allmulticast mode [ 438.670802][ T4877] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 438.684849][T11893] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 438.792818][T12692] netlink: 'syz.2.1833': attribute type 10 has an invalid length. [ 438.853103][T12692] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 438.864740][ T4877] usb 5-1: Using ep0 maxpacket: 32 [ 438.887488][ T4877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.904661][T11893] usb 2-1: Using ep0 maxpacket: 16 [ 438.911736][T11893] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 438.923968][T11893] usb 2-1: config 0 has no interface number 0 [ 438.930392][T11893] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 438.951573][ T4877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.981909][ T4877] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 438.991341][T11893] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 439.012650][ T4877] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 439.033925][ T4877] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 439.046452][T11893] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 439.061868][ T4877] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 439.072070][T11893] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 439.090100][T11893] usb 2-1: Product: syz [ 439.091186][ T4877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 439.111791][T11893] usb 2-1: Manufacturer: syz [ 439.119175][ T4877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.145001][T11893] usb 2-1: SerialNumber: syz [ 439.148173][ T4877] usb 5-1: Product: syz [ 439.160045][ T4877] usb 5-1: Manufacturer: syz [ 439.168817][ T4877] usb 5-1: SerialNumber: syz [ 439.181347][T12707] macvlan0: entered promiscuous mode [ 439.193772][T11893] usb 2-1: config 0 descriptor?? [ 439.203378][T12710] binder: 12705:12710 ioctl 4018620d 0 returned -22 [ 439.217181][T11893] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 439.260660][T11893] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 439.268983][T12707] macvlan0: left promiscuous mode [ 439.318435][T11893] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 439.324467][T12709] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 439.342314][T12709] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 439.380361][T11893] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 439.436008][T11893] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 439.453674][ T4877] cdc_ncm 5-1:1.0: bind() failure [ 439.495907][ T4877] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 439.497502][T11893] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 439.504282][ T5139] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 439.547740][ T4877] cdc_ncm 5-1:1.1: bind() failure [ 439.561710][T11893] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 439.584822][ T4877] usb 5-1: USB disconnect, device number 61 [ 439.607674][T11893] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 439.660869][T11893] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 439.710076][T11893] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 439.749363][T11893] usb 2-1: USB disconnect, device number 55 [ 439.754282][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 439.782276][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.797552][T11893] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 439.801384][ T5139] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 439.830014][ T5139] usb 1-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 439.850145][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.864150][ T5139] usb 1-1: Product: syz [ 439.866634][T11893] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 439.882446][ T5139] usb 1-1: Manufacturer: syz [ 439.904949][T11893] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 439.920915][ T5139] usb 1-1: SerialNumber: syz [ 439.937718][ T12] ------------[ cut here ]------------ [ 439.943528][ T12] WARNING: CPU: 0 PID: 12 at net/wireless/nl80211.c:19473 cfg80211_bss_color_notify+0x5f6/0x8b0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 439.954130][ T12] Modules linked in: [ 439.958046][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 439.968190][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.978397][ T12] Workqueue: phy58 ieee80211_color_collision_detection_work [ 439.985871][ T12] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 439.992303][ T12] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 c9 dd b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 bb dd b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ad dd b8 f6 c6 05 94 83 ba 04 01 90 48 [ 440.011950][ T12] RSP: 0018:ffffc90000117aa0 EFLAGS: 00010293 [ 440.013282][ T5139] usb 1-1: config 0 descriptor?? [ 440.018116][ T12] RAX: ffffffff8add49f5 RBX: 0000000000000000 RCX: ffff888016ec5a00 [ 440.032196][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.041200][ T12] RBP: ffffc90000117bb0 R08: ffffffff8add4522 R09: 1ffffffff1f5a925 [ 440.049341][ T12] R10: dffffc0000000000 R11: ffffffff8af8c3f0 R12: 1ffff92000022f5c [ 440.057397][ T12] R13: ffff88806949c000 R14: ffff88806949ccb0 R15: dffffc0000000000 [ 440.065613][ T12] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 440.074620][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 440.081358][ T12] CR2: 0000000020057000 CR3: 000000007899a000 CR4: 00000000003506f0 [ 440.089406][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 440.097439][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 440.105520][ T12] Call Trace: [ 440.108817][ T12] [ 440.111770][ T12] ? __warn+0x163/0x4e0 [ 440.116115][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 440.121954][ T12] ? report_bug+0x2b3/0x500 [ 440.127475][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 440.133326][ T12] ? handle_bug+0x3e/0x70 [ 440.138564][ T12] ? exc_invalid_op+0x1a/0x50 [ 440.143278][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 440.148584][ T12] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 440.156112][ T12] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 440.161939][ T12] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 440.167946][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 440.173809][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 440.178918][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.184955][ T12] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 440.191136][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 440.197524][ T12] ? process_scheduled_works+0x945/0x1830 [ 440.203263][ T12] process_scheduled_works+0xa2c/0x1830 [ 440.208915][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.215047][ T12] ? assign_work+0x364/0x3d0 [ 440.219669][ T12] worker_thread+0x86d/0xd50 [ 440.224414][ T12] ? __kthread_parkme+0x169/0x1d0 [ 440.230079][ T12] ? __pfx_worker_thread+0x10/0x10 [ 440.235778][ T12] kthread+0x2f0/0x390 [ 440.239849][ T12] ? __pfx_worker_thread+0x10/0x10 [ 440.244977][ T12] ? __pfx_kthread+0x10/0x10 [ 440.249562][ T12] ret_from_fork+0x4b/0x80 [ 440.253984][ T12] ? __pfx_kthread+0x10/0x10 [ 440.258650][ T12] ret_from_fork_asm+0x1a/0x30 [ 440.263417][ T12] [ 440.266458][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 440.273720][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 440.283788][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 440.293831][ T12] Workqueue: phy58 ieee80211_color_collision_detection_work [ 440.301107][ T12] Call Trace: [ 440.304380][ T12] [ 440.307307][ T12] dump_stack_lvl+0x241/0x360 [ 440.311983][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.317165][ T12] ? __pfx__printk+0x10/0x10 [ 440.321743][ T12] ? vscnprintf+0x5d/0x90 [ 440.326055][ T12] panic+0x349/0x860 [ 440.329941][ T12] ? __warn+0x172/0x4e0 [ 440.334186][ T12] ? __pfx_panic+0x10/0x10 [ 440.338594][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 440.343606][ T12] __warn+0x346/0x4e0 [ 440.347677][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 440.353484][ T12] report_bug+0x2b3/0x500 [ 440.357807][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 440.363603][ T12] handle_bug+0x3e/0x70 [ 440.367754][ T12] exc_invalid_op+0x1a/0x50 [ 440.372262][ T12] asm_exc_invalid_op+0x1a/0x20 [ 440.377101][ T12] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 440.383504][ T12] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 c9 dd b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 bb dd b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ad dd b8 f6 c6 05 94 83 ba 04 01 90 48 [ 440.403100][ T12] RSP: 0018:ffffc90000117aa0 EFLAGS: 00010293 [ 440.409160][ T12] RAX: ffffffff8add49f5 RBX: 0000000000000000 RCX: ffff888016ec5a00 [ 440.417116][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 440.425071][ T12] RBP: ffffc90000117bb0 R08: ffffffff8add4522 R09: 1ffffffff1f5a925 [ 440.433039][ T12] R10: dffffc0000000000 R11: ffffffff8af8c3f0 R12: 1ffff92000022f5c [ 440.441004][ T12] R13: ffff88806949c000 R14: ffff88806949ccb0 R15: dffffc0000000000 [ 440.448968][ T12] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 440.456413][ T12] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 440.462310][ T12] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 440.468101][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 440.473107][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 440.479067][ T12] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 440.485203][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 440.491519][ T12] ? process_scheduled_works+0x945/0x1830 [ 440.497237][ T12] process_scheduled_works+0xa2c/0x1830 [ 440.502779][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 440.508746][ T12] ? assign_work+0x364/0x3d0 [ 440.513325][ T12] worker_thread+0x86d/0xd50 [ 440.517915][ T12] ? __kthread_parkme+0x169/0x1d0 [ 440.522921][ T12] ? __pfx_worker_thread+0x10/0x10 [ 440.528016][ T12] kthread+0x2f0/0x390 [ 440.532068][ T12] ? __pfx_worker_thread+0x10/0x10 [ 440.537170][ T12] ? __pfx_kthread+0x10/0x10 [ 440.541749][ T12] ret_from_fork+0x4b/0x80 [ 440.546154][ T12] ? __pfx_kthread+0x10/0x10 [ 440.550731][ T12] ret_from_fork_asm+0x1a/0x30 [ 440.555496][ T12] [ 440.558749][ T12] Kernel Offset: disabled [ 440.563148][ T12] Rebooting in 86400 seconds..