last executing test programs: 4.67284329s ago: executing program 3 (id=100): r0 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="d8000000070100cb00776c3c11669836356722616e3100972ad25abd92dc82333d4dcdd4477c9f7c3fb7b398aea73026d8c3f66f6352b30d1013d0f7230e8188a47902341379fe9b22e01b2abf5734a2afdb2f1571c064fcdba08b7bc1b08d0a61b1bfc717f9ba19fcd4d7ddc204c38258d248143926b255a16e26a76608a23051"], 0xd8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045516, &(0x7f0000000080)) 4.625362851s ago: executing program 0 (id=101): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) 4.486599393s ago: executing program 3 (id=102): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0xff}}, 0x1000, 0xfff9}, 0x90) 3.783498346s ago: executing program 3 (id=105): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0xfffffffffffffffe, 0x0) 3.615563286s ago: executing program 2 (id=106): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000c00)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x1, 0x0, 0x2}, {0x0, 0x1fffffffe, 0x40000000007, 0x20000a0de, 0x40000000000004, 0x2, 0x200000003, 0x400}, {0x40000000000005, 0x0, 0x0, 0x5}, 0x4, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x2, @in6=@local, 0x3502, 0x1, 0x8, 0x0, 0x9075, 0x0, 0x9945}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 3.568251463s ago: executing program 3 (id=108): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.328470652s ago: executing program 2 (id=110): unshare(0x22020600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000180)={r2, 0xbff, 0x3}) 2.963128884s ago: executing program 2 (id=112): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x40) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000000)={0x1, 0x100, 0x6, 0x0, 0x3, 0x800}) 2.678445777s ago: executing program 0 (id=115): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000024c0)="0b0312002e0064000200475400f6a13bb1000000086086dd48034c350fb8dc4449b75c8cff0fc89e0a2862e84fb69650f6949b15d8f1552f0624fdf0bc5892b2d76bef5dc1d902d23783bb5c2c4fec10e1ff88ee180f01a337a4cad4e7b77a6336583f79138590226f4e1c8949fed3b8e1281407ed04", 0x76, 0x800, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 2.447413193s ago: executing program 4 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008f"]) 2.235918102s ago: executing program 0 (id=117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x1, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000071117b00000000008510000002"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 1.934279987s ago: executing program 1 (id=118): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) read$dsp(r0, &(0x7f0000000200)=""/168, 0xa8) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x2) 1.711744096s ago: executing program 0 (id=119): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e64", 0x6}], 0x3) 1.592558864s ago: executing program 4 (id=120): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r1, 0x0, &(0x7f0000000240)="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", 0x1000, 0x8000}) 1.380811502s ago: executing program 3 (id=121): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb1000006890086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.376334775s ago: executing program 4 (id=122): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x10001) write(r0, &(0x7f0000000280)="4591c28e8b83", 0x6) 1.107525126s ago: executing program 3 (id=123): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0xe4}) 996.436247ms ago: executing program 1 (id=124): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x1, 0x1) getdents(r1, 0x0, 0x58) 976.888267ms ago: executing program 2 (id=125): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "d40040", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 876.176721ms ago: executing program 1 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x2f) 766.047539ms ago: executing program 0 (id=127): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0xfd}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20000084) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000037400062c000700737b7352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6ee430000000000100000000000008"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 698.02689ms ago: executing program 1 (id=128): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) write$uinput_user_dev(r0, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x27, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xd, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x400, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xfff, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x6, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0x0, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d43, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x6, 0x8, 0x8, 0x5, 0xffffff2d, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x4]}, 0x45c) 614.999811ms ago: executing program 4 (id=129): timer_create(0x0, 0x0, 0x0) r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000680)="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", 0x200}) 551.272289ms ago: executing program 1 (id=130): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) 495.757727ms ago: executing program 2 (id=131): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000180)={{0x3, 0x4}, 'syz1\x00', 0x35}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x39, {0x9, 0x0, 0x2000000, 0x3, 0x80000001, 0xfffffffe}}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 481.219795ms ago: executing program 0 (id=132): syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xff, 0x8, 0xa, {0x7, 0x25, 0x1, 0x80, 0x19, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x0, 0x3, 0x7}}}}}}}]}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x40095505, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) 203.458176ms ago: executing program 4 (id=133): r0 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000380)=0x3, 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 92.409039ms ago: executing program 2 (id=134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x4, 0x3}, 0x20) madvise(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x14) 82.923ms ago: executing program 1 (id=135): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffd, 0x3}, {0xfff2, 0xffff}, {0xffe0, 0x2}}}, 0x24}}, 0x20044000) 0s ago: executing program 4 (id=136): r0 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. [ 75.357678][ T5829] cgroup: Unknown subsys name 'net' [ 75.623899][ T5829] cgroup: Unknown subsys name 'cpuset' [ 75.680370][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.326684][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.054826][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.056183][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.057357][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.058678][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.060339][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.115313][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.116537][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.123083][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.126921][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.128699][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.158604][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.162687][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.163568][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.165453][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.169642][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.220220][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.222157][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.223113][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.224272][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.225447][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.272698][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.274271][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.276046][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.280465][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.281465][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.027103][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 81.034011][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 81.102285][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 81.365312][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 81.481513][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 81.601732][ T31] cfg80211: failed to load regulatory.db [ 82.150986][ T59] Bluetooth: hci0: command tx timeout [ 82.165840][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.166626][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.166977][ T5839] bridge_slave_0: entered allmulticast mode [ 82.168541][ T5839] bridge_slave_0: entered promiscuous mode [ 82.186098][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.186225][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.186393][ T5841] bridge_slave_0: entered allmulticast mode [ 82.188954][ T5841] bridge_slave_0: entered promiscuous mode [ 82.229996][ T59] Bluetooth: hci1: command tx timeout [ 82.230004][ T5848] Bluetooth: hci3: command tx timeout [ 82.309671][ T5848] Bluetooth: hci4: command tx timeout [ 82.309680][ T59] Bluetooth: hci2: command tx timeout [ 82.312913][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.313049][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.313222][ T5839] bridge_slave_1: entered allmulticast mode [ 82.315989][ T5839] bridge_slave_1: entered promiscuous mode [ 82.318161][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.318245][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.318345][ T5841] bridge_slave_1: entered allmulticast mode [ 82.325882][ T5841] bridge_slave_1: entered promiscuous mode [ 82.348113][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.348240][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.348402][ T5846] bridge_slave_0: entered allmulticast mode [ 82.351018][ T5846] bridge_slave_0: entered promiscuous mode [ 82.620401][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.620493][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.620599][ T5846] bridge_slave_1: entered allmulticast mode [ 82.622039][ T5846] bridge_slave_1: entered promiscuous mode [ 82.994444][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.997377][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.997609][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.997805][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.997969][ T5845] bridge_slave_0: entered allmulticast mode [ 82.999950][ T5845] bridge_slave_0: entered promiscuous mode [ 83.155115][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.163948][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.164169][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.164359][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.164516][ T5845] bridge_slave_1: entered allmulticast mode [ 83.167011][ T5845] bridge_slave_1: entered promiscuous mode [ 83.254342][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.255738][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.255858][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.256004][ T5854] bridge_slave_0: entered allmulticast mode [ 83.258708][ T5854] bridge_slave_0: entered promiscuous mode [ 83.474239][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.474562][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.474695][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.474852][ T5854] bridge_slave_1: entered allmulticast mode [ 83.477832][ T5854] bridge_slave_1: entered promiscuous mode [ 83.820257][ T5839] team0: Port device team_slave_0 added [ 83.823546][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.825365][ T5841] team0: Port device team_slave_0 added [ 83.999233][ T5839] team0: Port device team_slave_1 added [ 84.003318][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.005918][ T5841] team0: Port device team_slave_1 added [ 84.008915][ T5846] team0: Port device team_slave_0 added [ 84.024509][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.229893][ T5848] Bluetooth: hci0: command tx timeout [ 84.253840][ T5846] team0: Port device team_slave_1 added [ 84.256804][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.309629][ T5848] Bluetooth: hci1: command tx timeout [ 84.319839][ T5848] Bluetooth: hci3: command tx timeout [ 84.389743][ T5848] Bluetooth: hci2: command tx timeout [ 84.389771][ T5848] Bluetooth: hci4: command tx timeout [ 85.002363][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.002378][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.002402][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.006393][ T5845] team0: Port device team_slave_0 added [ 85.009248][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.009260][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.009282][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.283375][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.283390][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.283414][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.285809][ T5845] team0: Port device team_slave_1 added [ 85.286659][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.286670][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.286683][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.287544][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.287552][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.287565][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.305152][ T5854] team0: Port device team_slave_0 added [ 85.439828][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.439841][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.439987][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.449389][ T5854] team0: Port device team_slave_1 added [ 85.674420][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.674435][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.674458][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.782360][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.782370][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.782383][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.002534][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.002549][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.002571][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.170941][ T5839] hsr_slave_0: entered promiscuous mode [ 86.171811][ T5839] hsr_slave_1: entered promiscuous mode [ 86.174781][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.174793][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.174810][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.193731][ T5841] hsr_slave_0: entered promiscuous mode [ 86.195037][ T5841] hsr_slave_1: entered promiscuous mode [ 86.195927][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 86.196025][ T5841] Cannot create hsr debugfs directory [ 86.309303][ T5846] hsr_slave_0: entered promiscuous mode [ 86.315082][ T5846] hsr_slave_1: entered promiscuous mode [ 86.315937][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 86.315958][ T5846] Cannot create hsr debugfs directory [ 86.319686][ T59] Bluetooth: hci0: command tx timeout [ 86.389663][ T59] Bluetooth: hci3: command tx timeout [ 86.389688][ T59] Bluetooth: hci1: command tx timeout [ 86.469740][ T5848] Bluetooth: hci4: command tx timeout [ 86.469751][ T59] Bluetooth: hci2: command tx timeout [ 86.768444][ T5845] hsr_slave_0: entered promiscuous mode [ 86.769235][ T5845] hsr_slave_1: entered promiscuous mode [ 86.770564][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 86.770586][ T5845] Cannot create hsr debugfs directory [ 87.176278][ T5854] hsr_slave_0: entered promiscuous mode [ 87.177022][ T5854] hsr_slave_1: entered promiscuous mode [ 87.177501][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 87.177518][ T5854] Cannot create hsr debugfs directory [ 88.390294][ T59] Bluetooth: hci0: command tx timeout [ 88.445628][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.470493][ T5848] Bluetooth: hci3: command tx timeout [ 88.470535][ T59] Bluetooth: hci1: command tx timeout [ 88.479313][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.518354][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.551386][ T5848] Bluetooth: hci4: command tx timeout [ 88.551440][ T59] Bluetooth: hci2: command tx timeout [ 88.578427][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.676046][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.711635][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.748317][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.801048][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.948373][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.993121][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.038763][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.073695][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.223707][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.266207][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.313590][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.369233][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.528297][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.567028][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.582279][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.629153][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.675292][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.792494][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.826796][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.847582][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.848145][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.898258][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.898375][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.954387][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.983376][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.010793][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.011220][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.057539][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.057658][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.118346][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.161563][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.167295][ T1122] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.167416][ T1122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.227612][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.227757][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.353993][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.413982][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.435380][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.435901][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.485888][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.486093][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.582573][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.637370][ T1528] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.637607][ T1528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.694769][ T1528] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.694918][ T1528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.723641][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.026052][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.086169][ T5839] veth0_vlan: entered promiscuous mode [ 91.165667][ T5839] veth1_vlan: entered promiscuous mode [ 91.247263][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.378200][ T5846] veth0_vlan: entered promiscuous mode [ 91.415471][ T5839] veth0_macvtap: entered promiscuous mode [ 91.446008][ T5846] veth1_vlan: entered promiscuous mode [ 91.461457][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.467256][ T5839] veth1_macvtap: entered promiscuous mode [ 91.599084][ T5841] veth0_vlan: entered promiscuous mode [ 91.608941][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.675668][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.693812][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.695239][ T5841] veth1_vlan: entered promiscuous mode [ 91.698701][ T5846] veth0_macvtap: entered promiscuous mode [ 91.726246][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.737468][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.747806][ T1528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.755575][ T5846] veth1_macvtap: entered promiscuous mode [ 91.756999][ T1528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.010021][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.054460][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.114921][ T5841] veth0_macvtap: entered promiscuous mode [ 92.138165][ T3665] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.157004][ T3665] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.159121][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.159141][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.185217][ T5841] veth1_macvtap: entered promiscuous mode [ 92.198910][ T3665] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.225369][ T3665] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.234702][ T5854] veth0_vlan: entered promiscuous mode [ 92.342700][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.342717][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.425881][ T5854] veth1_vlan: entered promiscuous mode [ 92.442530][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.529084][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.534481][ T5845] veth0_vlan: entered promiscuous mode [ 92.605487][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.607309][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.627169][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.642078][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.648049][ T5845] veth1_vlan: entered promiscuous mode [ 92.673812][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.673829][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.033509][ T5854] veth0_macvtap: entered promiscuous mode [ 93.038467][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.038484][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.142996][ T5854] veth1_macvtap: entered promiscuous mode [ 93.345216][ T5845] veth0_macvtap: entered promiscuous mode [ 93.356854][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.356870][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.363720][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.409842][ T5845] veth1_macvtap: entered promiscuous mode [ 93.447816][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.616204][ T1528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.632556][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.632573][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.632726][ T1528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.647275][ T1528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.656216][ T1528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.675225][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.754487][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.798145][ T3665] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.868068][ T3665] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.894288][ T3665] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.918694][ T3665] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.619326][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.619343][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.768044][ T167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.768062][ T167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.780192][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.924325][ T1528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.924342][ T1528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.929793][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 94.937886][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.937930][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 94.937952][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.994535][ T45] usb 3-1: config 0 descriptor?? [ 95.043768][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.209586][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 95.211821][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 95.211844][ T10] usb 2-1: config 0 has no interface number 0 [ 95.215536][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 95.215559][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.215577][ T10] usb 2-1: Product: syz [ 95.215590][ T10] usb 2-1: Manufacturer: syz [ 95.215603][ T10] usb 2-1: SerialNumber: syz [ 95.271533][ T10] usb 2-1: config 0 descriptor?? [ 95.291823][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 95.326840][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.326857][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.789365][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 95.797780][ T45] kye 0003:0458:5016.0001: control desc unexpectedly large [ 95.850348][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 95.912156][ T45] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0001/input/input5 [ 95.990304][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 96.046062][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 96.119726][ T10] usb 2-1: USB disconnect, device number 2 [ 96.256439][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 96.334162][ T45] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0001/input/input6 [ 96.346678][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 96.347753][ T10] quatech2 2-1:0.51: device disconnected [ 96.609178][ T45] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 96.671886][ T45] usb 3-1: USB disconnect, device number 2 [ 96.851148][ T5994] Bluetooth: MGMT ver 1.23 [ 96.870942][ T5995] ptrace attach of "./syz-executor exec"[5846] was attempted by ""[5995] [ 97.471329][ T6016] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 97.514490][ T6007] fido_id[6007]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 98.062114][ T6031] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 98.423163][ T6043] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.450054][ T6044] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 98.522966][ T6046] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 98.536206][ T6040] syzkaller1: entered promiscuous mode [ 98.536231][ T6040] syzkaller1: entered allmulticast mode [ 99.016104][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 99.105792][ T6059] IPVS: Error joining to the multicast group [ 99.259901][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.433976][ T31] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 99.434003][ T31] usb 4-1: config 0 has no interface number 0 [ 99.434034][ T31] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 99.434318][ T31] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 99.434346][ T31] usb 4-1: config 0 interface 255 has no altsetting 0 [ 99.434379][ T31] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 99.434411][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.458329][ T31] usb 4-1: config 0 descriptor?? [ 99.479623][ T31] ums-realtek 4-1:0.255: USB Mass Storage device detected [ 99.694897][ T31] usb 4-1: USB disconnect, device number 2 [ 100.139721][ T1235] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.289919][ T1235] usb 5-1: Using ep0 maxpacket: 16 [ 100.292703][ T1235] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.292728][ T1235] usb 5-1: config 0 interface 0 has no altsetting 0 [ 100.292759][ T1235] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 100.292781][ T1235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.364592][ T1235] usb 5-1: config 0 descriptor?? [ 100.498601][ T6088] netlink: 64 bytes leftover after parsing attributes in process `syz.1.55'. [ 100.599791][ T5926] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.762494][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 100.769712][ T5926] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 100.769737][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.769755][ T5926] usb 3-1: Product: syz [ 100.769768][ T5926] usb 3-1: Manufacturer: syz [ 100.769781][ T5926] usb 3-1: SerialNumber: syz [ 100.804472][ T5926] usb 3-1: config 0 descriptor?? [ 100.812399][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.831231][ T1235] hid (null): report_id 55783 is invalid [ 100.860486][ T1235] cougar 0003:060B:500A.0002: usage count exceeds max: fixing up report descriptor [ 100.863000][ T1235] cougar 0003:060B:500A.0002: unexpected long global item [ 100.863823][ T1235] cougar 0003:060B:500A.0002: parse failed [ 100.863926][ T1235] cougar 0003:060B:500A.0002: probe with driver cougar failed with error -22 [ 101.001916][ T5915] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 101.001972][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.007664][ T5915] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 101.007689][ T5915] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 101.007707][ T5915] usb 4-1: Manufacturer: syz [ 101.025401][ T5926] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 101.073564][ T5915] usb 4-1: config 0 descriptor?? [ 101.175732][ T31] usb 5-1: USB disconnect, device number 2 [ 101.247151][ T6094] pim6reg1: entered promiscuous mode [ 101.247179][ T6094] pim6reg1: entered allmulticast mode [ 101.342873][ T5915] rc_core: IR keymap rc-hauppauge not found [ 101.342891][ T5915] Registered IR keymap rc-empty [ 101.374538][ T5915] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 101.379049][ T5915] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 101.449708][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 101.493727][ T31] usb 4-1: USB disconnect, device number 3 [ 101.850006][ T5926] usb write operation failed. (-71) [ 101.867395][ T6103] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.927911][ T5926] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 101.941924][ T5926] dvbdev: DVB: registering new adapter (Terratec H7) [ 101.942013][ T5926] usb 3-1: media controller created [ 101.943654][ T5926] usb read operation failed. (-71) [ 101.960110][ T5926] usb write operation failed. (-71) [ 101.985903][ T5926] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 102.032108][ T5926] usb 3-1: USB disconnect, device number 3 [ 103.017850][ T6135] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 103.069705][ T5990] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 103.232704][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.232736][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.232759][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.232780][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.232820][ T5990] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.232841][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.250376][ T5990] usb 5-1: config 0 descriptor?? [ 103.400774][ T37] audit: type=1800 audit(1755985101.287:2): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.77" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 103.704492][ T5990] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 103.762975][ T5990] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 103.975665][ T5990] usb 5-1: USB disconnect, device number 3 [ 104.194883][ T6157] fido_id[6157]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 104.462260][ T5990] kernel read not supported for file /dsp1 (pid: 5990 comm: kworker/1:6) [ 104.820534][ T6155] input: syz0 as /devices/virtual/input/input9 [ 105.164114][ T6177] netlink: 'syz.4.92': attribute type 1 has an invalid length. [ 105.164134][ T6177] netlink: 180 bytes leftover after parsing attributes in process `syz.4.92'. [ 105.559741][ T5990] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 105.713441][ T5990] usb 5-1: unable to get BOS descriptor or descriptor too short [ 105.714200][ T5990] usb 5-1: not running at top speed; connect to a high speed hub [ 105.715744][ T5990] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 105.715768][ T5990] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 105.715786][ T5990] usb 5-1: config 4 has no interface number 0 [ 105.761079][ T5990] usb 5-1: string descriptor 0 read error: -22 [ 105.761236][ T5990] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 105.761259][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.780529][ T5915] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.828461][ T5990] usb 5-1: Found UVC 0.00 device (04f2:b746) [ 105.839043][ T5990] usb 5-1: No valid video chain found. [ 105.929656][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 105.932222][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.932250][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.932287][ T5915] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 105.932308][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.992652][ T5915] usb 2-1: config 0 descriptor?? [ 106.020581][ T5915] hub 2-1:0.0: USB hub found [ 106.070256][ T5990] usb 5-1: USB disconnect, device number 4 [ 106.198877][ T5915] hub 2-1:0.0: 1 port detected [ 106.652038][ T6202] usb usb8: usbfs: process 6202 (syz.2.104) did not claim interface 0 before use [ 106.805247][ T5915] hub 2-1:0.0: hub_ext_port_status failed (err = 0) [ 107.139953][ T6015] usb 2-1: USB disconnect, device number 3 [ 107.143336][ T5915] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.295415][ T5915] usb 4-1: config 0 interface 0 has no altsetting 0 [ 107.295456][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 107.295478][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.344224][ T5915] usb 4-1: config 0 descriptor?? [ 107.779781][ T5990] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 107.951968][ T5990] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 107.952022][ T5990] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.952048][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.952073][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.952097][ T5990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.952132][ T5990] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.952153][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.964233][ T5990] usb 3-1: config 0 descriptor?? [ 107.966124][ T6220] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 108.364872][ T5915] video4linux radio48: keene_cmd_set failed (-71) [ 108.364898][ T5915] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 108.405988][ T5915] usb 4-1: USB disconnect, device number 4 [ 108.453922][ T5990] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.453957][ T5990] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.453986][ T5990] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.454013][ T5990] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.454040][ T5990] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.454067][ T5990] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 108.506052][ T6232] warning: `syz.0.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 108.633997][ T5990] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 108.754597][ T10] usb 3-1: USB disconnect, device number 4 [ 109.021790][ T6238] fido_id[6238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 109.708648][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 110.011267][ T6274] input: syz1 as /devices/virtual/input/input11 [ 110.249785][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.373599][ T6287] [ 110.373611][ T6287] ====================================================== [ 110.373619][ T6287] WARNING: possible circular locking dependency detected [ 110.373636][ T6287] syzkaller #0 Not tainted [ 110.373646][ T6287] ------------------------------------------------------ [ 110.373653][ T6287] syz.4.136/6287 is trying to acquire lock: [ 110.373664][ T6287] ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 110.373723][ T6287] [ 110.373723][ T6287] but task is already holding lock: [ 110.373729][ T6287] ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 110.373775][ T6287] [ 110.373775][ T6287] which lock already depends on the new lock. [ 110.373775][ T6287] [ 110.373782][ T6287] [ 110.373782][ T6287] the existing dependency chain (in reverse order) is: [ 110.373789][ T6287] [ 110.373789][ T6287] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 110.373815][ T6287] lock_acquire+0x120/0x360 [ 110.373838][ T6287] rt_write_lock+0x6a/0x110 [ 110.373855][ T6287] smc_hash_sk+0x8f/0x2a0 [ 110.373873][ T6287] smc_sk_init+0x5a1/0x7f0 [ 110.373890][ T6287] __smc_create+0x10d/0x280 [ 110.373913][ T6287] __sock_create+0x4b3/0x9f0 [ 110.373931][ T6287] __sys_socket+0xd7/0x1b0 [ 110.373948][ T6287] __x64_sys_socket+0x7a/0x90 [ 110.373967][ T6287] do_syscall_64+0xfa/0x3b0 [ 110.373989][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.374007][ T6287] [ 110.374007][ T6287] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 110.374032][ T6287] validate_chain+0xb9b/0x2140 [ 110.374057][ T6287] __lock_acquire+0xab9/0xd20 [ 110.374079][ T6287] reacquire_held_locks+0x127/0x1d0 [ 110.374103][ T6287] lock_release+0x1b4/0x3e0 [ 110.374124][ T6287] __local_bh_enable_ip+0x10c/0x270 [ 110.374145][ T6287] sock_i_ino+0xa9/0xc0 [ 110.374168][ T6287] smc_diag_dump_proto+0xa4c/0x1fb0 [ 110.374187][ T6287] smc_diag_dump+0x27/0xa0 [ 110.374205][ T6287] netlink_dump+0x6e4/0xe90 [ 110.374224][ T6287] __netlink_dump_start+0x5cb/0x7e0 [ 110.374241][ T6287] smc_diag_handler_dump+0x178/0x210 [ 110.374260][ T6287] sock_diag_rcv_msg+0x4c9/0x600 [ 110.374278][ T6287] netlink_rcv_skb+0x205/0x470 [ 110.374297][ T6287] netlink_unicast+0x843/0xa10 [ 110.374314][ T6287] netlink_sendmsg+0x805/0xb30 [ 110.374334][ T6287] __sock_sendmsg+0x219/0x270 [ 110.374350][ T6287] ____sys_sendmsg+0x508/0x820 [ 110.374380][ T6287] ___sys_sendmsg+0x21f/0x2a0 [ 110.374403][ T6287] __x64_sys_sendmsg+0x1a1/0x260 [ 110.374427][ T6287] do_syscall_64+0xfa/0x3b0 [ 110.374450][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.374467][ T6287] [ 110.374467][ T6287] other info that might help us debug this: [ 110.374467][ T6287] [ 110.374474][ T6287] Possible unsafe locking scenario: [ 110.374474][ T6287] [ 110.374480][ T6287] CPU0 CPU1 [ 110.374486][ T6287] ---- ---- [ 110.374492][ T6287] rlock(smc_v4_hashinfo.lock); [ 110.374505][ T6287] lock((softirq_ctrl.lock)); [ 110.374519][ T6287] lock(smc_v4_hashinfo.lock); [ 110.374534][ T6287] lock((softirq_ctrl.lock)); [ 110.374546][ T6287] [ 110.374546][ T6287] *** DEADLOCK *** [ 110.374546][ T6287] [ 110.374551][ T6287] 3 locks held by syz.4.136/6287: [ 110.374563][ T6287] #0: ffff888029c0e908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 110.374611][ T6287] #1: ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 110.374657][ T6287] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 110.374701][ T6287] [ 110.374701][ T6287] stack backtrace: [ 110.374722][ T6287] CPU: 0 UID: 0 PID: 6287 Comm: syz.4.136 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 110.374745][ T6287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.374763][ T6287] Call Trace: [ 110.374770][ T6287] [ 110.374778][ T6287] dump_stack_lvl+0x189/0x250 [ 110.374808][ T6287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.374834][ T6287] ? __pfx__printk+0x10/0x10 [ 110.374853][ T6287] ? print_lock_name+0xde/0x100 [ 110.374873][ T6287] print_circular_bug+0x2ee/0x310 [ 110.374892][ T6287] check_noncircular+0x134/0x160 [ 110.374923][ T6287] validate_chain+0xb9b/0x2140 [ 110.374949][ T6287] ? validate_chain+0x897/0x2140 [ 110.374985][ T6287] __lock_acquire+0xab9/0xd20 [ 110.375011][ T6287] reacquire_held_locks+0x127/0x1d0 [ 110.375038][ T6287] ? __local_bh_disable_ip+0x264/0x400 [ 110.375063][ T6287] lock_release+0x1b4/0x3e0 [ 110.375086][ T6287] ? __local_bh_enable_ip+0x100/0x270 [ 110.375111][ T6287] __local_bh_enable_ip+0x10c/0x270 [ 110.375137][ T6287] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 110.375163][ T6287] ? rt_read_unlock+0x65/0xa0 [ 110.375182][ T6287] ? sock_i_ino+0x24/0xc0 [ 110.375208][ T6287] sock_i_ino+0xa9/0xc0 [ 110.375233][ T6287] smc_diag_dump_proto+0xa4c/0x1fb0 [ 110.375265][ T6287] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 110.375287][ T6287] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 110.375319][ T6287] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 110.375348][ T6287] ? __phys_addr+0xd3/0x180 [ 110.375382][ T6287] ? __kasan_kmalloc_large+0x85/0xa0 [ 110.375409][ T6287] ? rcu_is_watching+0x15/0xb0 [ 110.375437][ T6287] ? rcu_is_watching+0x15/0xb0 [ 110.375465][ T6287] ? trace_kmalloc+0x1f/0xd0 [ 110.375488][ T6287] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 110.375516][ T6287] ? __build_skb_around+0x257/0x3e0 [ 110.375541][ T6287] smc_diag_dump+0x27/0xa0 [ 110.375561][ T6287] netlink_dump+0x6e4/0xe90 [ 110.375587][ T6287] ? __pfx_netlink_dump+0x10/0x10 [ 110.375606][ T6287] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 110.375630][ T6287] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.375663][ T6287] __netlink_dump_start+0x5cb/0x7e0 [ 110.375687][ T6287] smc_diag_handler_dump+0x178/0x210 [ 110.375710][ T6287] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 110.375732][ T6287] ? __pfx_smc_diag_dump+0x10/0x10 [ 110.375753][ T6287] ? sock_diag_lock_handler+0x19/0x290 [ 110.375773][ T6287] ? sock_diag_lock_handler+0x19/0x290 [ 110.375796][ T6287] sock_diag_rcv_msg+0x4c9/0x600 [ 110.375818][ T6287] netlink_rcv_skb+0x205/0x470 [ 110.375840][ T6287] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 110.375861][ T6287] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 110.375886][ T6287] ? netlink_deliver_tap+0x2e/0x1b0 [ 110.375911][ T6287] netlink_unicast+0x843/0xa10 [ 110.375934][ T6287] ? __pfx_netlink_unicast+0x10/0x10 [ 110.375953][ T6287] ? netlink_sendmsg+0x642/0xb30 [ 110.375973][ T6287] ? skb_put+0x11b/0x210 [ 110.375998][ T6287] netlink_sendmsg+0x805/0xb30 [ 110.376023][ T6287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.376049][ T6287] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 110.376068][ T6287] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.376089][ T6287] __sock_sendmsg+0x219/0x270 [ 110.376109][ T6287] ____sys_sendmsg+0x508/0x820 [ 110.376135][ T6287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.376163][ T6287] ? import_iovec+0x74/0xa0 [ 110.376184][ T6287] ___sys_sendmsg+0x21f/0x2a0 [ 110.376210][ T6287] ? __pfx____sys_sendmsg+0x10/0x10 [ 110.376249][ T6287] ? __fget_files+0x2a/0x420 [ 110.376274][ T6287] ? __fget_files+0x3a6/0x420 [ 110.376303][ T6287] __x64_sys_sendmsg+0x1a1/0x260 [ 110.376330][ T6287] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 110.376359][ T6287] ? rcu_is_watching+0x15/0xb0 [ 110.376394][ T6287] ? do_syscall_64+0xbe/0x3b0 [ 110.376420][ T6287] do_syscall_64+0xfa/0x3b0 [ 110.376444][ T6287] ? lockdep_hardirqs_on+0x9c/0x150 [ 110.376466][ T6287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.376485][ T6287] ? clear_bhb_loop+0x60/0xb0 [ 110.376506][ T6287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.376524][ T6287] RIP: 0033:0x7f8978f5ebe9 [ 110.376550][ T6287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.376567][ T6287] RSP: 002b:00007f89771be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.376587][ T6287] RAX: ffffffffffffffda RBX: 00007f8979185fa0 RCX: 00007f8978f5ebe9 [ 110.376603][ T6287] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000004 [ 110.376616][ T6287] RBP: 00007f8978fe1e19 R08: 0000000000000000 R09: 0000000000000000 [ 110.376628][ T6287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.376639][ T6287] R13: 00007f8979186038 R14: 00007f8979185fa0 R15: 00007ffc27202d28 [ 110.376661][ T6287] [ 110.499564][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 110.579989][ T10] usb 1-1: config index 0 descriptor too short (expected 95, got 59) [ 110.580015][ T10] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 110.580032][ T10] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 110.580049][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.619588][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.619614][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.619634][ T10] usb 1-1: Product: syz [ 110.619647][ T10] usb 1-1: Manufacturer: syz [ 110.619660][ T10] usb 1-1: SerialNumber: syz [ 110.999453][ T6275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 111.209704][ T10] usb 1-1: 0:2 : does not exist [ 111.319566][ T10] usb 1-1: USB disconnect, device number 2 [ 111.336334][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory