last executing test programs: 5.045689333s ago: executing program 1 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @ioapic={0xf000, 0x100100, 0x1ff, 0x6, 0x0, [{0x6, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x2, '\x00', 0xc7}, {0xa, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x62}, {0x0, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x3, 0x7, 0x5, '\x00', 0xd}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x5, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfd, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf2}, {0x6, 0x3, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0xde, '\x00', 0x8}, {0x6, 0x0, 0x9, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0xff}, {0x1, 0x0, 0x8, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0xd}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x1, 0xfffffffffffffffe, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.558961913s ago: executing program 1 (id=11): socket$packet(0x11, 0x2, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="89e7eb2c7cdad9b4b47380c986dd", 0xe}], 0x1) 2.937328099s ago: executing program 1 (id=18): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {}, 0x0, {0x2, 0x4e22, @multicast1=0xe000cc02}}) 2.831868142s ago: executing program 1 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x33c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf8, 0x40, 0x25, [{{0x9, 0x4, 0x0, 0x1d, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x4, 0xf8, 0x1, {0x22, 0x9eb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xfd, 0x4}}}}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.554844175s ago: executing program 2 (id=24): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)=ANY=[], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa4c02, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x40187014, 0xf07) ioctl$EVIOCRMFF(r0, 0x40085507, &(0x7f00000000c0)=0x18) 2.041059936s ago: executing program 1 (id=26): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0xf30, 0x111, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x28, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x340a4c17619389e4, 0x0, 0xfe, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b\x00\x00\x00'], 0x0}, 0x0) 1.726064382s ago: executing program 2 (id=29): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r0, &(0x7f0000000b40)={0x11, 0x1c, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) 1.599036017s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x102000, 0x10000, 0x7, 0x0, 0x9}) 1.431240665s ago: executing program 2 (id=35): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x14d2}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f0000000580)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) 1.322955255s ago: executing program 2 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)=ANY=[@ANYRES16=r2]) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYRES32=r2]) 1.138399816s ago: executing program 0 (id=40): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x100) openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.026903265s ago: executing program 2 (id=41): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa4, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x541b, 0x0) 911.227096ms ago: executing program 0 (id=42): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xffff, 0x2000}, 0x4) 817.133599ms ago: executing program 0 (id=43): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 653.279078ms ago: executing program 3 (id=44): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000001000000000000000000000000000000aa"], 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x104, 0x7, @private2}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 527.074416ms ago: executing program 0 (id=45): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x2f, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 467.044849ms ago: executing program 3 (id=46): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 396.639692ms ago: executing program 3 (id=47): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe1}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000000c40)={0x2020}, 0x2020) 308.760356ms ago: executing program 3 (id=48): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0) close(r0) socket$packet(0x11, 0xa, 0x300) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x2400c100}, 0x10) 198.978748ms ago: executing program 0 (id=49): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "ab64337707aea0f466389eca00e8273fa681ce3683faa418b99df8f987d2dcc4", "c8adf18e5a8118824b62595c46fd5f3ee24b8e85334f1bb786f99f361953f788", "7a6d05b81fea90a253dd77725147d687026d26ca6f00", "d7a3a3c002fb00006d0dd00e2b9d475ee25503cfc59c30a17b27b179bc33d117", "6b72b1f095575b2ed10ba721d53a8bf9c29750ad9c2d5a7a05582a661306a6f7", "d85f4023183cb73b81c01cd4", 0xa00a, 0x7f, 0x8, 0x3ff, 0x8}}) 198.819547ms ago: executing program 3 (id=50): io_setup(0x76eb, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) 162.43779ms ago: executing program 0 (id=51): mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x4020100) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x9a, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x6, 0x1, {0x22, 0xae6}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x1}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000004c0)={0x20, 0x1, 0x38, "4b728ded4b52dd2b503fdf9621732303f6104fff75916713ca6d92470c3d8e9a1e07304c4deb210481313823c548912b6850096a5a29915a"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xf}}) 21.516529ms ago: executing program 3 (id=52): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) 0s ago: executing program 1 (id=53): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.55' (ED25519) to the list of known hosts. [ 63.958847][ T5820] cgroup: Unknown subsys name 'net' [ 64.049123][ T5820] cgroup: Unknown subsys name 'cpuset' [ 64.057664][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.482509][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.919468][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.927586][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.935137][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.943094][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.950784][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.983987][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.991875][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.999235][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.007318][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.014659][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.022001][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.030079][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.037742][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.066142][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.074492][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.131925][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.139870][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.147694][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.155739][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.163607][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.464215][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 69.577595][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 69.740037][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.747647][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.755548][ T5829] bridge_slave_0: entered allmulticast mode [ 69.762476][ T5829] bridge_slave_0: entered promiscuous mode [ 69.816724][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.823926][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.831001][ T5829] bridge_slave_1: entered allmulticast mode [ 69.838843][ T5829] bridge_slave_1: entered promiscuous mode [ 69.857503][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.865565][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.872713][ T5837] bridge_slave_0: entered allmulticast mode [ 69.882150][ T5837] bridge_slave_0: entered promiscuous mode [ 69.901647][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 69.919382][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.926813][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.933970][ T5837] bridge_slave_1: entered allmulticast mode [ 69.940850][ T5837] bridge_slave_1: entered promiscuous mode [ 69.969588][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.008181][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 70.020928][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.066758][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.101897][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.141283][ T5829] team0: Port device team_slave_0 added [ 70.176666][ T5829] team0: Port device team_slave_1 added [ 70.184400][ T5837] team0: Port device team_slave_0 added [ 70.219053][ T5837] team0: Port device team_slave_1 added [ 70.226560][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.233953][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.241206][ T5833] bridge_slave_0: entered allmulticast mode [ 70.248221][ T5833] bridge_slave_0: entered promiscuous mode [ 70.282538][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.289846][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.297259][ T5833] bridge_slave_1: entered allmulticast mode [ 70.304876][ T5833] bridge_slave_1: entered promiscuous mode [ 70.323832][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.330755][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.356657][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.404777][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.411733][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.438171][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.455286][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.462280][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.488300][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.510987][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.518176][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.526209][ T5842] bridge_slave_0: entered allmulticast mode [ 70.533064][ T5842] bridge_slave_0: entered promiscuous mode [ 70.540797][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.548065][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.555241][ T5842] bridge_slave_1: entered allmulticast mode [ 70.562071][ T5842] bridge_slave_1: entered promiscuous mode [ 70.576738][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.583727][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.609951][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.623975][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.665690][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.684288][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.711265][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.773538][ T5842] team0: Port device team_slave_0 added [ 70.780329][ T5833] team0: Port device team_slave_0 added [ 70.805014][ T5829] hsr_slave_0: entered promiscuous mode [ 70.811698][ T5829] hsr_slave_1: entered promiscuous mode [ 70.831153][ T5842] team0: Port device team_slave_1 added [ 70.847851][ T5833] team0: Port device team_slave_1 added [ 70.882515][ T5837] hsr_slave_0: entered promiscuous mode [ 70.889212][ T5837] hsr_slave_1: entered promiscuous mode [ 70.895739][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.904170][ T5837] Cannot create hsr debugfs directory [ 70.932794][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.941482][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.967749][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.980054][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.988122][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.014821][ T51] Bluetooth: hci0: command tx timeout [ 71.015177][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.043568][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.050505][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.076868][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.087464][ T51] Bluetooth: hci2: command tx timeout [ 71.114597][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.121534][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.148019][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.163459][ T51] Bluetooth: hci1: command tx timeout [ 71.243537][ T51] Bluetooth: hci3: command tx timeout [ 71.275933][ T5842] hsr_slave_0: entered promiscuous mode [ 71.282141][ T5842] hsr_slave_1: entered promiscuous mode [ 71.288366][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.296527][ T5842] Cannot create hsr debugfs directory [ 71.326900][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.333253][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.348563][ T5833] hsr_slave_0: entered promiscuous mode [ 71.354942][ T5833] hsr_slave_1: entered promiscuous mode [ 71.361337][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.368935][ T5833] Cannot create hsr debugfs directory [ 71.734345][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.746532][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.756869][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.779904][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.856319][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.870840][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.881444][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.894867][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.990796][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.001651][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.028285][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.038924][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.116439][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.133196][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.143996][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.155979][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.174836][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.200828][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.220705][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.227942][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.282760][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.289914][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.320415][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.380740][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.391800][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.413021][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.420172][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.453010][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.460131][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.512298][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.538674][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.545929][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.569967][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.577114][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.629043][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.718544][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.739310][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.771963][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.779147][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.793117][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.800292][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.869812][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.027322][ T5837] veth0_vlan: entered promiscuous mode [ 73.064768][ T5837] veth1_vlan: entered promiscuous mode [ 73.086935][ T51] Bluetooth: hci0: command tx timeout [ 73.128511][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.157244][ T5837] veth0_macvtap: entered promiscuous mode [ 73.165137][ T51] Bluetooth: hci2: command tx timeout [ 73.177338][ T5837] veth1_macvtap: entered promiscuous mode [ 73.220472][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.233206][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.244291][ T51] Bluetooth: hci1: command tx timeout [ 73.272830][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.288362][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.302790][ T5829] veth0_vlan: entered promiscuous mode [ 73.323124][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.333683][ T51] Bluetooth: hci3: command tx timeout [ 73.344860][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.371909][ T5829] veth1_vlan: entered promiscuous mode [ 73.429924][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.471544][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.492409][ T5829] veth0_macvtap: entered promiscuous mode [ 73.517522][ T5829] veth1_macvtap: entered promiscuous mode [ 73.524338][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.532390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.609717][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.621670][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.636797][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.638239][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.681151][ T5842] veth0_vlan: entered promiscuous mode [ 73.699205][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.722319][ T5842] veth1_vlan: entered promiscuous mode [ 73.742285][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.758534][ T5833] veth0_vlan: entered promiscuous mode [ 73.767773][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.795059][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.810443][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.846679][ T5833] veth1_vlan: entered promiscuous mode [ 73.946153][ T5842] veth0_macvtap: entered promiscuous mode [ 73.955060][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.970774][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.989319][ T5842] veth1_macvtap: entered promiscuous mode [ 74.021059][ T5833] veth0_macvtap: entered promiscuous mode [ 74.031223][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.041053][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.043324][ T5833] veth1_macvtap: entered promiscuous mode [ 74.071082][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.087964][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.115996][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.125786][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.137506][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.149706][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.159771][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.189389][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.255799][ T3554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.284900][ T3554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.325398][ T3554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.337595][ T3554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.439950][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.456423][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.491564][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.516202][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.543928][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.556982][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.564617][ T5881] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 74.602624][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.611470][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.737775][ T5881] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 74.759521][ T5881] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 35300, setting to 8 [ 74.793103][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 74.811106][ T5881] usb 4-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 74.829920][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.864141][ T5926] Zero length message leads to an empty skb [ 74.881985][ T5881] usb 4-1: config 0 descriptor?? [ 74.882068][ T5926] input: syz1 as /devices/virtual/input/input5 [ 74.888690][ T5919] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 74.954624][ T5930] netlink: 'syz.2.7': attribute type 27 has an invalid length. [ 75.044370][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.052494][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.166172][ T51] Bluetooth: hci0: command tx timeout [ 75.195129][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.208604][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.244001][ T51] Bluetooth: hci2: command tx timeout [ 75.312304][ T5936] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.331930][ T51] Bluetooth: hci1: command tx timeout [ 75.357786][ T5881] pantherlord 0003:0F30:0111.0001: unknown main item tag 0x6 [ 75.403967][ T51] Bluetooth: hci3: command tx timeout [ 75.411314][ T5881] pantherlord 0003:0F30:0111.0001: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.3-1/input0 [ 75.474360][ T5881] pantherlord 0003:0F30:0111.0001: no output reports found [ 75.600055][ T24] usb 4-1: USB disconnect, device number 2 [ 75.719755][ T59] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.744068][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.758434][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.829142][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.950338][ T5944] syzkaller0: entered promiscuous mode [ 75.956491][ T5944] syzkaller0: entered allmulticast mode [ 76.283963][ T980] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 76.454736][ T980] usb 1-1: Using ep0 maxpacket: 16 [ 76.476333][ T980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.498116][ T980] usb 1-1: config 2 has an invalid interface number: 186 but max is 0 [ 76.507994][ T980] usb 1-1: config 2 has an invalid interface number: 5 but max is 0 [ 76.523394][ T980] usb 1-1: config 2 has an invalid descriptor of length 246, skipping remainder of the config [ 76.543498][ T980] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 76.552439][ T980] usb 1-1: config 2 has no interface number 0 [ 76.583405][ T980] usb 1-1: config 2 has no interface number 1 [ 76.589953][ T980] usb 1-1: config 2 interface 186 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.626396][ T980] usb 1-1: config 2 interface 5 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 76.653417][ T980] usb 1-1: config 2 interface 186 has no altsetting 0 [ 76.663911][ T980] usb 1-1: config 2 interface 5 has no altsetting 0 [ 76.685820][ T980] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=b4.73 [ 76.703409][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.723432][ T980] usb 1-1: Product: syz [ 76.727626][ T980] usb 1-1: Manufacturer: syz [ 76.733728][ T980] usb 1-1: SerialNumber: syz [ 76.971289][ T980] usbhid 1-1:2.186: couldn't find an input interrupt endpoint [ 77.011955][ T980] usb 1-1: USB disconnect, device number 2 [ 77.244227][ T51] Bluetooth: hci0: command tx timeout [ 77.323752][ T51] Bluetooth: hci2: command tx timeout [ 77.407477][ T51] Bluetooth: hci1: command tx timeout [ 77.461547][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 77.483823][ T51] Bluetooth: hci3: command tx timeout [ 77.557710][ T5980] netlink: 'syz.0.23': attribute type 27 has an invalid length. [ 77.666798][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.674592][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.787547][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.800451][ T5980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.901015][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.911214][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.927320][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.936313][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.016375][ T49] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.058541][ T49] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.443523][ T5997] input: syz1 as /devices/virtual/input/input6 [ 78.493433][ T5895] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 78.610315][ T6003] netlink: 84 bytes leftover after parsing attributes in process `syz.3.32'. [ 78.667639][ T5895] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 78.706917][ T5895] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 35300, setting to 8 [ 78.755147][ T5895] usb 2-1: config 0 interface 0 has no altsetting 0 [ 78.760121][ T6009] netlink: 'syz.3.36': attribute type 27 has an invalid length. [ 78.761778][ T5895] usb 2-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 78.801886][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.834952][ T5895] usb 2-1: config 0 descriptor?? [ 78.844131][ T5991] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.950786][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.958537][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.098328][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.114273][ T6009] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.277023][ T5895] pantherlord 0003:0F30:0111.0003: unknown main item tag 0x6 [ 79.314975][ T5895] pantherlord 0003:0F30:0111.0003: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.1-1/input0 [ 79.334036][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.334993][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.352647][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.364036][ T5895] pantherlord 0003:0F30:0111.0003: no output reports found [ 79.391341][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.402250][ T6026] input: syz1 as /devices/virtual/input/input7 [ 79.417667][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.539579][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 79.541414][ T980] usb 2-1: USB disconnect, device number 2 [ 79.560615][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 79.587219][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 79.613415][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 79.650579][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 79.670290][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.691698][ T10] usb 3-1: config 0 descriptor?? [ 79.706038][ T6020] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 79.720403][ T10] hub 3-1:0.0: USB hub found [ 79.919287][ T10] hub 3-1:0.0: 2 ports detected [ 80.122443][ T10] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 80.129070][ T10] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 80.156798][ T10] ------------[ cut here ]------------ [ 80.162324][ T10] WARNING: kernel/workqueue.c:4208 at __flush_work+0xabc/0xbc0, CPU#0: kworker/0:1/10 [ 80.172191][ T10] Modules linked in: [ 80.176582][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 80.188171][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.198443][ T10] Workqueue: usb_hub_wq hub_event [ 80.203568][ T10] RIP: 0010:__flush_work+0xabc/0xbc0 [ 80.208884][ T10] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 80.228602][ T10] RSP: 0018:ffffc900000f6940 EFLAGS: 00010283 [ 80.234982][ T10] RAX: ffffffff818ade3b RBX: 1ffff1100b6e3c54 RCX: 0000000000100000 [ 80.242976][ T10] RDX: ffffc90015eae000 RSI: 000000000006b8fa RDI: 000000000006b8fb [ 80.251196][ T10] RBP: ffffc900000f6b10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 80.259219][ T10] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 80.267256][ T10] R13: ffff88805b71e2a0 R14: dffffc0000000000 R15: ffff88805b71e288 [ 80.268851][ T5949] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 80.275519][ T10] FS: 0000000000000000(0000) GS:ffff8881259e4000(0000) knlGS:0000000000000000 [ 80.292187][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 80.298986][ T10] CR2: 00007f3e01deb000 CR3: 00000000331a8000 CR4: 00000000003526f0 [ 80.307019][ T10] Call Trace: [ 80.310301][ T10] [ 80.313242][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.319671][ T10] ? __pfx___flush_work+0x10/0x10 [ 80.324767][ T10] ? __timer_delete_sync+0x218/0x2d0 [ 80.330069][ T10] ? __pfx___might_resched+0x10/0x10 [ 80.335426][ T10] ? __pfx___timer_delete_sync+0x10/0x10 [ 80.341090][ T10] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 80.346770][ T10] ? flush_delayed_work+0x11d/0x190 [ 80.351975][ T10] flush_delayed_work+0x13e/0x190 [ 80.357028][ T10] ? __pfx_flush_delayed_work+0x10/0x10 [ 80.362580][ T10] ? _dev_err+0x10a/0x160 [ 80.366996][ T10] hub_quiesce+0x1f0/0x330 [ 80.371433][ T10] hub_disconnect+0xc8/0x470 [ 80.376397][ T10] hub_probe+0x132f/0x36e0 [ 80.380851][ T10] ? __pfx_hub_probe+0x10/0x10 [ 80.385908][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 80.391823][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.398212][ T10] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 80.403829][ T10] ? pm_runtime_enable+0x1f3/0x340 [ 80.408960][ T10] usb_probe_interface+0x634/0xbf0 [ 80.414156][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 80.419806][ T10] really_probe+0x26d/0x9a0 [ 80.424382][ T10] __driver_probe_device+0x18c/0x2f0 [ 80.429680][ T10] driver_probe_device+0x4f/0x430 [ 80.434753][ T10] __device_attach_driver+0x2ce/0x530 [ 80.440137][ T10] bus_for_each_drv+0x24e/0x2e0 [ 80.445069][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 80.450972][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.456399][ T10] __device_attach+0x2b8/0x400 [ 80.461171][ T10] ? __pfx___device_attach+0x10/0x10 [ 80.466501][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 80.471722][ T10] bus_probe_device+0x185/0x260 [ 80.476127][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 80.476606][ T10] device_add+0x7b6/0xb50 [ 80.492108][ T10] usb_set_configuration+0x1a87/0x20e0 [ 80.492154][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.497916][ T10] usb_generic_driver_probe+0x8d/0x150 [ 80.510694][ T5949] usb 1-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 80.512785][ T10] usb_probe_device+0x1c4/0x390 [ 80.512817][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 80.522304][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.526792][ T10] really_probe+0x26d/0x9a0 [ 80.526830][ T10] __driver_probe_device+0x18c/0x2f0 [ 80.526855][ T10] driver_probe_device+0x4f/0x430 [ 80.526878][ T10] __device_attach_driver+0x2ce/0x530 [ 80.526904][ T10] bus_for_each_drv+0x24e/0x2e0 [ 80.526930][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 80.557500][ T5949] usb 1-1: config 0 descriptor?? [ 80.560474][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 80.581826][ T10] __device_attach+0x2b8/0x400 [ 80.586896][ T10] ? __pfx___device_attach+0x10/0x10 [ 80.592207][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 80.597486][ T10] bus_probe_device+0x185/0x260 [ 80.602361][ T10] device_add+0x7b6/0xb50 [ 80.606836][ T10] usb_new_device+0xa39/0x16f0 [ 80.611640][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 80.616900][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.622105][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.627341][ T10] hub_event+0x2941/0x4a00 [ 80.631820][ T10] ? __pfx_hub_event+0x10/0x10 [ 80.636634][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 80.642367][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.647644][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 80.653401][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 80.659140][ T10] process_scheduled_works+0xae1/0x17b0 [ 80.664774][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 80.670788][ T10] worker_thread+0x8a0/0xda0 [ 80.675464][ T10] kthread+0x70e/0x8a0 [ 80.679549][ T10] ? __pfx_worker_thread+0x10/0x10 [ 80.685232][ T10] ? __pfx_kthread+0x10/0x10 [ 80.689845][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 80.695356][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 80.700575][ T10] ? __pfx_kthread+0x10/0x10 [ 80.705229][ T10] ret_from_fork+0x3fc/0x770 [ 80.709842][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 80.715023][ T10] ? __switch_to_asm+0x39/0x70 [ 80.719794][ T10] ? __switch_to_asm+0x33/0x70 [ 80.724610][ T10] ? __pfx_kthread+0x10/0x10 [ 80.729212][ T10] ret_from_fork_asm+0x1a/0x30 [ 80.734064][ T10] [ 80.737087][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.744367][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 80.755724][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 80.765770][ T10] Workqueue: usb_hub_wq hub_event [ 80.770789][ T10] Call Trace: [ 80.774068][ T10] [ 80.776992][ T10] dump_stack_lvl+0x99/0x250 [ 80.781580][ T10] ? __asan_memcpy+0x40/0x70 [ 80.786184][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.791394][ T10] ? __pfx__printk+0x10/0x10 [ 80.796004][ T10] panic+0x2db/0x790 [ 80.799909][ T10] ? __pfx_panic+0x10/0x10 [ 80.804332][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 80.809282][ T10] __warn+0x334/0x4c0 [ 80.813259][ T10] ? __flush_work+0xabc/0xbc0 [ 80.817933][ T10] ? __flush_work+0xabc/0xbc0 [ 80.822599][ T10] report_bug+0x2be/0x4f0 [ 80.826929][ T10] ? __flush_work+0xabc/0xbc0 [ 80.831601][ T10] ? __flush_work+0xabc/0xbc0 [ 80.836275][ T10] ? __flush_work+0xabe/0xbc0 [ 80.840952][ T10] handle_bug+0x84/0x160 [ 80.845190][ T10] exc_invalid_op+0x1a/0x50 [ 80.849695][ T10] asm_exc_invalid_op+0x1a/0x20 [ 80.854534][ T10] RIP: 0010:__flush_work+0xabc/0xbc0 [ 80.859812][ T10] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 80.879405][ T10] RSP: 0018:ffffc900000f6940 EFLAGS: 00010283 [ 80.885471][ T10] RAX: ffffffff818ade3b RBX: 1ffff1100b6e3c54 RCX: 0000000000100000 [ 80.893431][ T10] RDX: ffffc90015eae000 RSI: 000000000006b8fa RDI: 000000000006b8fb [ 80.901398][ T10] RBP: ffffc900000f6b10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 80.909360][ T10] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 80.917316][ T10] R13: ffff88805b71e2a0 R14: dffffc0000000000 R15: ffff88805b71e288 [ 80.925287][ T10] ? __flush_work+0xabb/0xbc0 [ 80.929963][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.936280][ T10] ? __pfx___flush_work+0x10/0x10 [ 80.941300][ T10] ? __timer_delete_sync+0x218/0x2d0 [ 80.946572][ T10] ? __pfx___might_resched+0x10/0x10 [ 80.951854][ T10] ? __pfx___timer_delete_sync+0x10/0x10 [ 80.957476][ T10] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 80.963103][ T10] ? flush_delayed_work+0x11d/0x190 [ 80.968295][ T10] flush_delayed_work+0x13e/0x190 [ 80.973306][ T10] ? __pfx_flush_delayed_work+0x10/0x10 [ 80.978839][ T10] ? _dev_err+0x10a/0x160 [ 80.983167][ T10] hub_quiesce+0x1f0/0x330 [ 80.987581][ T10] hub_disconnect+0xc8/0x470 [ 80.992163][ T10] hub_probe+0x132f/0x36e0 [ 80.996589][ T10] ? __pfx_hub_probe+0x10/0x10 [ 81.001342][ T10] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 81.007223][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.013537][ T10] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 81.019078][ T10] ? pm_runtime_enable+0x1f3/0x340 [ 81.024181][ T10] usb_probe_interface+0x634/0xbf0 [ 81.029295][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 81.034915][ T10] really_probe+0x26d/0x9a0 [ 81.039415][ T10] __driver_probe_device+0x18c/0x2f0 [ 81.044693][ T10] driver_probe_device+0x4f/0x430 [ 81.049713][ T10] __device_attach_driver+0x2ce/0x530 [ 81.055075][ T10] bus_for_each_drv+0x24e/0x2e0 [ 81.059917][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 81.065803][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 81.071172][ T10] __device_attach+0x2b8/0x400 [ 81.075927][ T10] ? __pfx___device_attach+0x10/0x10 [ 81.081201][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 81.086395][ T10] bus_probe_device+0x185/0x260 [ 81.091240][ T10] device_add+0x7b6/0xb50 [ 81.095561][ T10] usb_set_configuration+0x1a87/0x20e0 [ 81.101038][ T10] usb_generic_driver_probe+0x8d/0x150 [ 81.106489][ T10] usb_probe_device+0x1c4/0x390 [ 81.111332][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 81.116692][ T10] really_probe+0x26d/0x9a0 [ 81.121186][ T10] __driver_probe_device+0x18c/0x2f0 [ 81.126459][ T10] driver_probe_device+0x4f/0x430 [ 81.131559][ T10] __device_attach_driver+0x2ce/0x530 [ 81.136923][ T10] bus_for_each_drv+0x24e/0x2e0 [ 81.141767][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 81.147647][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 81.153017][ T10] __device_attach+0x2b8/0x400 [ 81.157768][ T10] ? __pfx___device_attach+0x10/0x10 [ 81.163040][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 81.168232][ T10] bus_probe_device+0x185/0x260 [ 81.173079][ T10] device_add+0x7b6/0xb50 [ 81.177398][ T10] usb_new_device+0xa39/0x16f0 [ 81.182166][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 81.187358][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.192547][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.197743][ T10] hub_event+0x2941/0x4a00 [ 81.202188][ T10] ? __pfx_hub_event+0x10/0x10 [ 81.206936][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 81.212651][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.217833][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 81.223543][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 81.229259][ T10] process_scheduled_works+0xae1/0x17b0 [ 81.234822][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 81.240811][ T10] worker_thread+0x8a0/0xda0 [ 81.245407][ T10] kthread+0x70e/0x8a0 [ 81.249465][ T10] ? __pfx_worker_thread+0x10/0x10 [ 81.254562][ T10] ? __pfx_kthread+0x10/0x10 [ 81.259146][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 81.264330][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 81.269514][ T10] ? __pfx_kthread+0x10/0x10 [ 81.274090][ T10] ret_from_fork+0x3fc/0x770 [ 81.278677][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 81.283783][ T10] ? __switch_to_asm+0x39/0x70 [ 81.288535][ T10] ? __switch_to_asm+0x33/0x70 [ 81.293293][ T10] ? __pfx_kthread+0x10/0x10 [ 81.297883][ T10] ret_from_fork_asm+0x1a/0x30 [ 81.302660][ T10] [ 81.305979][ T10] Kernel Offset: disabled [ 81.310297][ T10] Rebooting in 86400 seconds..