last executing test programs: 20.565015716s ago: executing program 2 (id=890): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 20.510372532s ago: executing program 1 (id=891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.current\x00', 0x26e1, 0x0) close(r0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000", @ANYRES16, @ANYBLOB="01e5ff000004000004003b1c210008", @ANYRES32, @ANYRES32=r0, @ANYRES64], 0x448}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r2 = dup2(r1, r1) setsockopt$inet6_int(r2, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) ioctl$TUNSETNOCSUM(r0, 0x8923, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x200004, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = getpid() syz_pidfd_open(r4, 0x0) syz_pidfd_open(r4, 0x0) r5 = dup(r3) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x6, 0x0, 0x1, {0x0, r6, r3}}) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x804, 0x1, 0x103, 0x1}, 0x20) sendmsg$inet6(r7, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x5e6d, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x60}, 0x20000810) migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 20.393066764s ago: executing program 2 (id=892): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x49, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000b00080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r2}, 0x14) 20.29556696s ago: executing program 2 (id=893): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x8, &(0x7f00000003c0)=[{0x4, 0xc4, 0x6, 0x3}, {0x3, 0x8, 0x1, 0x7}, {0xdfaa, 0x9, 0x40, 0xe0}, {0x95a5, 0x6, 0x5, 0x337}, {0x8, 0x6f, 0x4, 0xffffffff}, {0x0, 0x8, 0xff, 0x22}, {0x91d, 0x8, 0x3, 0xffffffc0}, {0x0, 0x2, 0x88}]}) socket$kcm(0xa, 0x0, 0x87) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0, 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) close(r0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1}) clock_getres(0x2, &(0x7f0000000000)) r8 = socket$inet6(0xa, 0x1, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xa4}, 0x800, 0x0, 0x3}, 0x20) r10 = getpgid(0x0) syz_open_procfs(r10, &(0x7f0000000080)='net/connector\x00') socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) r12 = syz_open_procfs$namespace(r4, &(0x7f0000000400)='ns/time_for_children\x00') sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c80)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r12, @ANYBLOB="c30ad2f615a7efa1220b263d85744b1fb1cac471c39446d4c72fe5335e99245f7a651363b49e2bee2a4f8e7686ee4975bb576e88abd9f5b6614d7062eec6027c149b3944f2a7fb1f6c5fdce3d3791ed22a641f3d02ca577ac673c278e45d20d200e0092c0ff1eae1a2b8b4fa1f8618b06476f59d0fdf"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00'}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000540)=""/32}, 0x20) process_vm_readv(0x0, &(0x7f0000002680)=[{&(0x7f0000003d40)=""/253, 0xfd}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000000640)=""/30, 0x1e}, {&(0x7f0000000680)=""/4094, 0xffe}, {&(0x7f0000001680)=""/4093, 0xffd}], 0x9, &(0x7f0000002700)=[{&(0x7f0000002800)=""/201, 0xc9}, {&(0x7f0000002900)=""/179, 0xb3}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/133, 0x85}], 0x4, 0x0) syz_emit_ethernet(0xf2, &(0x7f0000003a80)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd699281eb00bc110100000000000000000000000000000000fc000000000000000000000000000001330000000000000005020101000000007308006c00000000fc000000000000000000000000000000fc00000000000000000000000000000120010000000000000000000000000001ff0200050000000000000000000000014e1e4e20006490780200000002000000020000005f783887bdfe2404a42d8f321fe52b584939412f72702fd9754c242577cdead79d7973f77684def633d71572a9d373f80000000000000000000000000000000075d2161001d21369a7675e52652425137faa3fb2b6a291905282491ce58937885c538fbb7432dbff321451b658ee246c5a1b231bcdcfe669eb5cf43fdcf78d0aca58c3580f0815528c5553a1a98f861a063733bd87cd74d3947256a3de4e66f4cafc76831230ab0ef82a41edaec4e65915110e62759177a91746b1008f3e840368ac682a771a63654fecc7962875dc9b6256f2f5148cf04c40085818eef1c0a605d7068b3ac1bdcb3f9af9fe6b74639304eb5a91d6833f289ed380d834e51818c78686dcba2ebbffb6a30e2460f56326143940143a7f951ab52fe8b30839f28e5655c18e1296c7"], 0x0) 20.002321093s ago: executing program 2 (id=894): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400), &(0x7f00000004c0)=@v1={0x1000000, [{0x9, 0x9}]}, 0xc, 0x1) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000380)) r9 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r9, 0x59, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$sock_void(r7, 0x1, 0x24, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}, {0x0, 0x14}}}, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x80040, 0x0) 19.527664537s ago: executing program 1 (id=896): syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x301, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x3, 0x6, 0x4920e7af812c3f03, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c0002800800014000000000100002800c000280080001800000000009"], 0x88}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000140)={&(0x7f00000000c0)="d1", 0x1}) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000480)={0xb, 0x75, 0x1}, 0xb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000080), 0x84800) socket$nl_route(0x10, 0x3, 0x0) 18.461000043s ago: executing program 1 (id=898): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f00000000c0)={0x0, 0xfdef, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 18.246182655s ago: executing program 1 (id=900): r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x1, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046002c0051802800008011000100a7fd4531296b6353d1f3e0884700000005000200000000000800030001ac0f000a00340002020202020200000800260094090000fcad7fb0ab7b69af6b078e2da1d19b5798df33f5ae82a4bde4413a72226c78ef7ad5acad1ba7432c91fcbb79a9fa9ec70c6b1cc98babc28260ae434711e159a83b18a9d446f42e1f1c1d5631c1839c7796c420c5ae43342018e155e62044919c9de537bff33ca379b9833c33e9d1"], 0x60}}, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000100)=0x18) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188009ac0f000300", 0x33fe0}], 0x1}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x7, 0x8000, 0x100}, 0x1c) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec0000000109021200"], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x1, 0x24, &(0x7f0000002400)=ANY=[@ANYBLOB="4daa975c8d2d74926d4bbc1c2cb0da7f26b562a511e628fd0e6f03"], 0x0) socket$inet_sctp(0x2, 0x4, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x4e22, @empty}, 0x10, &(0x7f0000001080)=[{0x0}, {0x0}], 0x2, &(0x7f0000002540)=ANY=[@ANYRES8, @ANYRES32=0x0, @ANYRES8=0x0], 0x6b}, 0x488c0) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000140)={0x1}) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xfc) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x98f902, 0x8}) r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000080)={0x60, 0x3, &(0x7f00007fd000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x9, 0x0, 0x0, 0x20005, 0x7d, 0x43, 0x8, 0x60}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) syz_usb_connect(0x0, 0x4ac, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000a1bbb640bb1b0302203b0000000109029a040200000000090402"], 0x0) 14.922265761s ago: executing program 2 (id=908): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2c2e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async, rerun: 32) getpeername$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000280)=0x6e) (async, rerun: 32) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) (async) socket(0x17, 0x4, 0x200) (async) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x10, 0x4, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffffffff}, 0x1c) (async, rerun: 32) fcntl$dupfd(r2, 0x0, r1) (async, rerun: 32) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x10003, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80c002000104082, 0x0) write$binfmt_misc(r3, 0x0, 0xfffffecc) (async, rerun: 32) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc29c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf8, 0x80, 0x88, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x0, 0xfb, {0x9, 0x21, 0x3, 0x20, 0x1, {0x22, 0x164}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x3, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0xd, 0x9}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x1, 0x1, 0xff, 0x61}, 0x23, &(0x7f00000000c0)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x44, 0x6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "caa75eb087b7921e35a533fe941b5066"}]}, 0x3, [{0x65, &(0x7f0000000100)=@string={0x65, 0x3, "f5c1b4813615b4282fa6c8d270d881299325a298106b48fbb94edb4f606b78ab6a97daf0b601ee717d794558510aef6ee5e3a1d769b399b948bb60a0218fd7b5534d47ca281b78e0dc57b5312a0d0fc5ace0f9fc8188dbc527ffea89374ef31d869d95"}}, {0x6c, &(0x7f0000000180)=@string={0x6c, 0x3, "9ec8ff4fcbeaeb94a13ef88bf63c5c02b282e340db39b141f291e38eddbfa099e1b8b30cb21acbae0b9c123876087794a50cc857e3f151fe8155fb12494bacee999fc54070001cb2cdf1dbf6ac6c16ccecc5455dc30f073f779ad5390fab30355d559c7c49086be61690"}}, {0x100, &(0x7f0000000200)=@string={0x100, 0x3, "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"}}]}) (rerun: 32) syz_usb_control_io$hid(r4, &(0x7f00000020c0)={0x14, 0x0, 0x0, &(0x7f0000002040)=ANY=[], 0x0}, 0x0) 14.456684872s ago: executing program 2 (id=911): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0xffffff1f, 0xfffffffd, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x35288}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x4000080) r4 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x32}, 0x4e24, 0x2, 0x4e20, 0x7, 0x2, 0x0, 0xa0, 0xbac30eb5bac66cbf, r3, r4}, {0x6, 0x800, 0x3, 0x798e, 0x1, 0x1af7, 0x9, 0x9}, {0x76e37ef1, 0x0, 0x9, 0x4}, 0x9, 0x6e6bbe, 0x0, 0x0, 0x1, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x6c}, 0x2, @in6=@local, 0x3500, 0x2, 0x1, 0x7f, 0x2f839b7e, 0x8, 0x8}}, 0xe4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) openat$sndtimer(0xffffff9c, 0x0, 0x8101) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_clone(0x1242000, &(0x7f0000000280)="e2", 0x1, 0x0, 0x0, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x38}}, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x50000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11.959789114s ago: executing program 3 (id=921): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x5}, 0x1c) write$P9_RGETLOCK(r1, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300252b28"], 0xe6da) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x20, 0x0, 0x0, r2}, 0xc8) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) pipe2$9p(&(0x7f0000000240), 0x4000) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xe, 0x1000000000000000, 0x0, 0x2, 0x40}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0) r7 = dup(r5) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r8, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000100)={0x8001, 0x2}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x22, 0x0, r7, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00'}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x7c2, 0x41414770, 0x41565559, 0x425, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x0, 0x6}}) 9.746956511s ago: executing program 3 (id=925): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24048050) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400) socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9.558243374s ago: executing program 4 (id=926): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x200, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_cgroup={{0xb}, {0x1c0, 0x2, [@TCA_CGROUP_EMATCHES={0x1bc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x194, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x5}, {0x1ff, 0x81, 0x1ff, 0x5}}}, @TCF_EM_META={0x70, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x69}, {0x9, 0x9}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xb0, 0x7}, {0x8, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="03fec46370fa", @TCF_META_TYPE_VAR="bd2b85", @TCF_META_TYPE_VAR='O', @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="f3ba6f", @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="2210c2244f264701", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="43fefa1ddadc69f433", @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0xc, 0x1}, {0x3, 0x1, 0x1}}}]}}, @TCF_EM_IPT={0xc, 0x2, 0x0, 0x0, {{0xfc01, 0x9, 0x6}}}, @TCF_EM_META={0xdc, 0x2, 0x0, 0x0, {{0x8002, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x10}, {0x85, 0x7, 0x2}}}, @TCA_EM_META_LVALUE={0x29, 0x2, [@TCF_META_TYPE_VAR="702fa239e7a82ea67a", @TCF_META_TYPE_VAR="b5941415991704d1341b", @TCF_META_TYPE_VAR="7ff00c8742", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="c8675a3de8", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_VAR="4d81ea", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="7f83b4e05907", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x4}, {0x7, 0x81}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="54936f18d4", @TCF_META_TYPE_VAR="91b3f4151dded3d2"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_VAR="15", @TCF_META_TYPE_VAR="8e90fa0429b3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="9df72972fcb5"]}, @TCA_EM_META_RVALUE={0x29, 0x3, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8a2ed4352a1c6cc6a2", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x6]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xfffe, 0x3, 0x5}, {0xfe6, 0x5, 0xe81, 0xfffffff4}}}]}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x9f, 0x2, 0xa0}, {0xfff9, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x44}}]}]}}, @TCA_RATE={0x6}]}, 0x200}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x900}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9.390757232s ago: executing program 4 (id=928): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r2, 0xee72) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) copy_file_range(r4, 0x0, r3, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) socket$nl_xfrm(0x10, 0x3, 0x6) write$tun(r1, 0x0, 0x0) syz_usb_connect(0x6, 0x12ea, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xef, 0xd, 0xa5, 0x20, 0x436, 0x5, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12d8, 0x4, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa, 0x5, 0xf, 0xa, 0xb6, 0x6c, 0x6, [@hid_hid={0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x4a6}}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x56, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x7f, 0xd7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xf282}, @generic={0xc2, 0x6, "c4111b3b89a8c95a39add2d29ee2e4b84d4d834b790e047b724fb199ebc6ce8258c98b23ff07b52c1010cd9c01735393a7d20eed05579fc4c56f481bd7bfd44c3630e12dbab83c78cc4df2355cacb044bac889a629f806d51393d3df99dea260c176f5df8a7af1f5869232bc12557bbfcb440283de6926d636bb4ebd62741259fbf38f33acfdb5defa69dd5c4719b80ab8ba305bf7d69f6286ad6d4ffb4dd7fdb642d824d75ddde87d67862eee01833c2b92184a1d0453619ed7f57dc34c9bfa"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x81, 0x6, 0x0, [@generic={0xbe, 0x11, "ec9de4af6f303f79fa9c3e73be20e0192f2eee129813aeea9296c97e51bda0221c90d6c3f7e27997024f88ef496dca29ea981c8388413e4694beb369104a1a784d7cb93c04a6541ac50bce43a91e397f4ef8a7cfec6dbf850f771d6107a7d55a07ce24ab011dd35bfd37713db50526f28240c2a0a878604d1918a615c0e5f64dd3700a03c2281a59963d6b023047e27f7ca6996fe413476613d37c684ec7210c75395ee2d60540b345632d4b25f5c9551d434df108a4efa469805beb"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x40, 0xf, 0x4}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0xaa, 0x9, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x9}]}}, {{0x9, 0x5, 0x4, 0x1, 0x200, 0x2, 0x3f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}, @generic={0x13, 0xa, "014da0d39daac60ef56e8662a5d7d8d4ad"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x7f, 0x9, 0x89}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x4, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0x1, 0x9}, @generic={0xb2, 0x21, "a8454e5c8a05377a8255d7f70fd680c6bd5697250015309fa6c3afe2c2c3ca1b8a78feed9d6d210f2502cfc353608c0f93dc5da54640ef3bba726a3a7eb6ddcf6b4b625113bde1f54460f28abf01d8050e83b3af4de2215ef13be2bdaf20be0ff64ed90ede8fdd0053177618907bda9cf7fce9f7cda8a2f08616698de3f2c01e328434d955a7fe8d188e890d70b3662c6c60d4a7eb1bc42e720cf31fac20c2ed0bb0decd903494c5c031bbc375b85d52"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0x8, 0x62, 0x2, [@generic={0x5c, 0x24, "1222e67e34cdf00bfa98af915e179bdff19f650da97c86b6bf801e792bc92c9fbf13a0b50c947921fe265349333f7aef5b85e82eb7e67cdddd3678da407ca04b93fc42ed80a8475937d176283e1da3b03ea72af1859d118253cc"}, @generic={0xff, 0x7, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x1, 0xd, 0x92, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x6}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x8, 0xd, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x4, 0x6, 0x7, [@generic={0xea, 0xd, "8f089cd403b66eb37f319d4580c391735dfd6885b232d871afb0942380d9cd7b559ac729ef9e9f2890367591bd407d336625eff65dcd04b85dfb520ef6df54b18b982a28970b6867af5c77726071393f7dcf3544330dd56fdf6924e6f96f43cb14c1f50bd48218cf50700d4bd7a9ca8fea651cb04814d30cf37413959c9bbc1fe4b34643d289ff525d2946f713a4ad045b34d34c681968412f1149b00986a49e5982437e06cabc182992ed045fc64b0c26230fe58fe0f31931dfcd899fdbb6c9c8262741bd9a6e9c85efd93b33a41b3c965c7711cedcf261cf5c51cd12f2b6646336d853c6efcc1c"}, @generic={0xf1, 0x5, "208cafddf54494fc38bd98872dc2a2eb1305d5803e993ccb8a4391d04182f2c96d82ea46d22ad39d5c4d4e227354701268f4a2a289059b66fea2196f5a61358027dcbe8f081f720a712706cece74f7c10f8c7522bc934aada94d67437e976d844852172de7fda879a703a1574725ae79980d328e0fc62ea802b0d2879be44903f646b3abb32f6aac545c17e53b281e2f60af3eb5dbabcbcfd1e9dc68dbdd73ee1ca1ea7d044e1d979c5e7cc311a502ba4d94b7025547c33da054d8fd305fe1084187dc8523046a0a9fc8de10d8da8186ce0799c91f6ab366a8df51203459a01d5f138e8e5ffdd5b16447348ddd3e67"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x4, 0x81, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x1}, @generic={0xda, 0xc, "4622e9b745ceee924747d81840322288f65205fda4c22f5684ebe05d7815bfda7bf671169aba84195495f1bee1f7bfb38d968765f578499146aa64e3bb1e10b7d4dc84388f81332679f8fc8de5271ae456b128ab4548211ad8980b770093e5c1e838dd5896d3536068609e9dbe6fa34a5257fae2c9eed526b95c84544fa59b83df6429ca24f7d348308efe8647ca81896db6ccf313d1dd354be4808982d9eb102ab6a3a6c53bd26c742bf5ca3793b1083cd4ba7aad14b5baa3696beceab8e1def377a7dabc74eebbf07885d1a65661185f5033daaa3e4832"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x6, 0x9, 0x6, [@generic={0x38, 0x24, "3a12e93ab96cf6d4cd216b699416d217e11b756055056912e2a8d890810292ad83dd35905201fe7a5822614f72d4220de94e1735cbdb"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x71, 0x3}}]}}, {{0x9, 0x4, 0x2d, 0x3, 0xb, 0x2, 0x2, 0xff, 0x2, [@hid_hid={0x9, 0x21, 0x9, 0x1, 0x1, {0x22, 0x498}}, @generic={0xea, 0x23, "368071052eb495e8877b5c4d78c2bd5dc822e998bd4a1d7b6b11c972622ecd8d0d763168756bb5b4d7509e75b27f32e65dd0946b1802e3c47d8ebc10e8b23ed3b953794cd7b6b578213c7ee246e072e82817919250ded8d2c91a2aa0938da9c24890b62550cb2ede9526bc245bb035f6ed91576e50ed344590578c54265dd241fff089e4b752b869d2ac7bf7577eab36d6f83052d04a95ee081a8203d9d6aa3a7600bc89c8707334412e04eeb5023fc347ef0d1e5e40f94e0262e385ed1f6a18f5f94b9f2ec6ed2818048aac3bfab365ece3c865aa085dd5e3895b84a0a1f4d325dabbf5ddbf5f83"}], [{{0x9, 0x5, 0x0, 0xc, 0x10, 0x9, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x8, 0xc, 0x5, [@generic={0x10, 0x23, "262fda29370b52c69df8658eef63"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfc, 0x9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x3, 0x4d}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x6, 0x8, 0x9, [@generic={0x39, 0x22, "9bd2b5ce12307764511376e7c52b5b502c7eae3409402cff945366b0830ce60c74b401dbf3d264e2cc4d51143275ab45b9e9f806e78566"}, @generic={0xaf, 0x11, "50e983bc235333f994f17e06c9dd7f3e778f5712c6893904ed6831e3b72edb397a134370be1d43c77a746f153e8f6ed1c8f4a17bf9c927b5f2f18675b6e72d984aa08edb27ecf7b2982e48bb1e41240b4ccb2aaf827e44f1862431d1857c5e16672e3c000516285f2048902788c03c413f5d34b2eb18628c851ed6711a90fdbc1ba732c930b9e872fe11fc3fd08b09d52b11dc9cef54203f8b2e1f209d9c55558242299dce722c25e4e9f60190"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0xe, 0x2f, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8c, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x1}]}}, {{0x9, 0x5, 0x4, 0x3, 0x3ff, 0xb, 0x10, 0x8, [@generic={0x80, 0x31, "41809183999e07dbe780ac830f014b8b41201c9d25afe515fb1837423b29e2aafeb8dcb831b5cd65c4068cd944ef903e0a72e5d203473eb469e153d13af342b40d2b7fec3a891db54de2081fc5041f89609ac900141bb60244b519019fe19e849ca1413052fb2d1eb148f0c719998e6ee2539c6296cdeef107b4c7168c7d"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x65, 0xfffe}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x7, 0xe, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8000}]}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x3, 0x4, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xff, 0x5, 0x10, [@generic={0x23, 0xa, "c3188aa65ef02b342fc92f64bef00ca453be941957765c0012e4710306d6510910"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xee, 0x5}]}}, {{0x9, 0x5, 0x3a87c79123e19f63, 0xae57f11b7603dfb6, 0x187, 0x5, 0x0, 0xd, [@generic={0xfb, 0x11, "014feffaa315cccfe72fa1ae75bb64b679fc6d2611fa5742fc2f2a50d431725e569bfe400b1f220430d668babca72d0bca6fc06005486e64efeda4b82409345cec7245b1016bc5272cabbcb802174670fbf94559a4eaa4ae5f2300c1a7d8e3a8dad9674be87b031f00adb3bd99573f1172aee1618979657e88495e50aecf37a67b5524be1708aec9e01f867bf2a2537c91a044927168b62ce2d2c3978e7780588f70501dd289aa54f1d5107bfafb4da8481e135ddda57015c28ccb5a6e08d0ff62dc6a3987dc520bfc4d7e96b28624f928cd3d0b6b1daec1045de9c53aed553f555ea758b93884c4d81f880bc6e7832e761cd823d780e633cb"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf6, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0x81, 0x7, 0x2}}]}}, {{0x9, 0x4, 0xae, 0x5, 0x5, 0xd1, 0xa9, 0x71, 0x2, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x3, 0x1}}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xd, 0x4, 0x0, 0xf, "", "c1eb9f"}, @as_header={0x7, 0x24, 0x1, 0x81, 0x7, 0x5}]}], [{{0x9, 0x5, 0xe, 0xc, 0x8, 0xc4, 0x6, 0x8}}, {{0x9, 0x5, 0x3, 0x4, 0x0, 0x1, 0x9, 0x12}}, {{0x9, 0x5, 0x80, 0x19, 0x400, 0x1, 0xbe, 0x6, [@generic={0x102, 0x23, "60d2b0b1b06ecafcbc9883ed674ef43dde78176a3b42c390734e80d893cba5cff421202861d0b9285476bcdac4312e910f5849d982551029c1c2de1c1cdfd4302f96afe2e4d5e136502f9a2bc4275edb091e3fae4dc23ca11bebf46cc8ff7977155cdd0f54e0699c9d8a1fc5c50d0c7d8814eccba9513fb9dcffcd157eb60d7cad425be223eb84ec11e8ab2e5ee34c9bfe56a698e8ca45655aa8df51c8176d379ed3cb08fd4cbc76f75180240424674ec1b1435a89dfc408bfa08a4283a75ebc86555b6b90f568dc77d315b7719d5bacb11a6467dcfab33e1b72aa37a3f84370761aaf09a387a4ebc9d115ad5a871c39b56f02f69545bd6a2cf497e005308a5f"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0x7, 0x6, [@generic={0xfa, 0x23, "10ad2410e0cd00883133a3106c8274dc5a321d1b4f6529f77c713d76a376c4362681ca18298312dc60cf4d8562a38f75247a8a33499b24fb0a694da359e64a020909c006573fcba0767bae8c344af51be93e4973c6c123c77d781606dae06115bd07a895a2630320886d635299ca0bc6dc5c15d3ac98efd91e6c3abd0742e6bc4594139534613671096f30745e966e5d2a301e11f39387b318af2810374b633df0d4aaa8d9962bdfb83a4746fdf29e6946ce05d6f82feba591e6c046c02f67502588cbc6f9a9dcbfe341ef4a310a3fde1a198e212d41592304b8d97464138360d6ee50f3f0ee5558712a622988fa86e2a437f02a61933d9e"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x40}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x5, 0x9, 0x85, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x9}]}}]}}, {{0x9, 0x4, 0x48, 0x5, 0x9, 0x39, 0x91, 0xeb, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xf7dd, 0x26}, [@mixer_unit={0x9, 0x24, 0x4, 0x5, 0x4, "f3e14c95"}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x33, "1078"}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x2, 0x81, 0x0, "d5da"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0xfc, "b5", "90a0"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x4, 0xe1, 0x6, "a833", "bd"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7f, 0x1002}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x1, 0x2, 0xe, 0x1, "182fe0ce84d4d6f73c"}]}], [{{0x9, 0x5, 0x80, 0x3, 0x200, 0x7, 0x1, 0x9, [@generic={0xe8, 0x0, "3ded1a4491ecf9b1cb7643ca2620d9cbb240a4309cd8c3243e2abf1acacb98f2273d87af819fbb4f9cb4e18b0160a1b5c8c4cbe8534b4f241978be6d17602f196216ad1dae14022eeffa8af42870332305372e237d34730b14ffa9bb51d810e7d22b57eb4f2f4624dcf9f1656609fa6babe4f29b9c26ac26bd237d37dd09f100000000ab0dc02d024e8154387f701865a59380610e88ffae0c18f5afd5163e7437d4664ddfd4b9bcfa78f41a734c13f65432c3fd9630e6befbdacee75fc73012ca2bad3affc265007a372eeda1ea066264d7497985208c2f8f2c48e37d84250c3567e79fd167"}, @generic={0x3a, 0x3, "b512565f3919951d069d9dd8fdb8784a36347754f6eed186269a2a6e8e2556fa4988022d187bd7cf8a566867be69d0dc629b2e5ed0c4e80a"}]}}, {{0x9, 0x5, 0xa, 0x19, 0x8, 0xba, 0x0, 0x5, [@generic={0xc6, 0xd, "e30057406996c249da66b840debe7c3252295ea2def51e6d9957f5fc78dc2ac19ea21b44d214f345cee76e87c31931d0ea3e9b05b3d4d1dbe0d907e00636f77ffbc6607e7590d90f32b1b46e8283bdb3dfa8c5cbe4cbf38d3504212c9508f9f4b8af75290dc7e13e75f43557d775c4a7d2104fd3d56a477aa2830219ed923f2a34840f1a4de29f16c06a6737be7966ac27e5dc4ee585e684f2143a15fb09b55a38cac36062e24c3b68b85b4dec62ab9a40b839d9bd8d7519c616821a1ddbc272901afb83"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0xc88}]}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x6, 0xf8, 0x1, [@generic={0xba, 0x1e, "2fb678ba5823699640fb71056f866e1890785aa88915247966e6516095dabd360bd687793ccb776667e62c265f436ae75f2cf5db7a60ea4d54482361e9d409d0d391d42fa62ba301fd8fa1f2c54c1b46b05e2ad45ccd9bb2d31cb733fa3ab212fe1291fb12f45f649367c5aaee8e653317b38eb47eb6aee398227ee22b747cf10557526d035890d918907b5b6a9ec5cd825ce69390a4205fb9429bc5599f40ed8d2f2f6f55c8518dfd865df81233fa63922a354b2adcad0b"}, @generic={0xbf, 0xc, "4eb007bec6c8d4f4f145fc096eefa60822a16f326063c2be64a27358c39e7b7cf5dc112236b34f9e106860767b068ba9985298735083b9fc494f21881ac32faedd86c92e37cd83b1a1d6bc3bc8c0885929ed1f4897babe97f411c05a0f1757b129de9fa1b3692c7f060003a58855a649cd4b4cae742d20ab39cab598aac2d67263284b0cbfb031106dbb925ba1e08c7b7e67c91ecc8a2bfa416726643b9fb3d4878f1da706aef6f954b212d5a09491a70f77efbbbdb0967aa8667bb9ef"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x4, 0xff, 0xf8, [@generic={0xba, 0x22, "3c05e0a347704de62a9e0d8f528fa46219223728630e77c7b70a4d3f37882730bb699ff9f3fcedfcdfb9515b38f25e1d5a3b4346e8fa4de40f3f289b1f2f5a0d3fe11ad5de87499f0c49275adcb6b3b692f0e5c67d6f7d13ff724badb2e4bee7f785b4440e913bf2d507dc96a2e0d9b1c8fa618ba1c7e87e3424231fb241b6e0e5dec85dff20b7796c7b6d911a32ed08c3be009ddffb1a5bc6e85f02939515fa29c9519832f82279ddf05d522d2e31cd163b65cf076e24ef"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x7}]}}, {{0x9, 0x5, 0x3, 0xc, 0x10, 0x5, 0x0, 0x2}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x81, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x3ff, 0xcd, 0x7}}, {{0x9, 0x5, 0xa, 0x4, 0x8, 0x8, 0xf, 0x5}}, {{0x9, 0x5, 0x9, 0xc, 0x400, 0x8, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0xff, 0x40}]}}]}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.486253278s ago: executing program 3 (id=936): r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000100)={@broadcast, @remote, @void, {@llc={0x4, {@llc={0xaa, 0x0, "af", ' '}}}}}, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="ed", 0x1}], 0x1}}], 0x2, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000380), 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x24, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0xc, 0x2b, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x300}, 0x0) socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r1) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x48004) 6.464607944s ago: executing program 0 (id=937): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0xd}}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x300, 0x11000000}, 0x0) 6.383245696s ago: executing program 0 (id=938): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) close(0xffffffffffffffff) r2 = landlock_create_ruleset(&(0x7f0000000040)={0xe85, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) rmdir(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r4, @ANYBLOB="050000000000feffffff2100000008000300", @ANYRES32=r5, @ANYBLOB], 0xb0}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_int(r6, &(0x7f0000000000)='cgroup.max.descendants\x00', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r6, &(0x7f00000000c0)={0x2a, 0x4, 0x0, {0x1, 0xae, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) 6.232409527s ago: executing program 4 (id=939): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x121202, 0x177) recvfrom(r1, &(0x7f0000000100)=""/4096, 0x1000, 0x20111, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x6, 0xb, "1bd38b0854aeceff650bc81a20bc465e0e4415e9f009c382ce0f3430e25d43bed4ce0b67382dbc3cd9516f3ae9a74d7d534b9c8bd621f1cf43c927e4ec0b36", 0x1}, 0x80) sendfile(r1, r0, &(0x7f0000002700)=0x1, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$key(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001200)={0x2, 0x0, 0x1, 0x3, 0x6f, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_key={0x19, 0x9, 0x600, 0x0, "ab7a5a559506a32d92975ffbf55a5c1fdc1627da1e61d65f3f5e20a59b951e283e6eda9ae831cfa7a788c0f2e9cb337567814c53619ef081b500ddfd55809cb6df3ee3df3d02e564623dac8b9cfa9b7359657fdb96c40cbda2133c0467b492d496f73ca453875366b84594c64f60c13328e94f67857f4a3bde06b5f72ca2ff7dd6fb862aefcc35299f749d8a79a90c37a915577ecc9773735fbe522a91e74ea126025ba1a4dbd13cab541966395f23d7bfa28967ad4cb4e2f99ed87637048066"}, @sadb_sa={0x2, 0x1, 0x4d2, 0x81, 0x3, 0xe6, 0x1, 0x40000000}, @sadb_x_sec_ctx={0x1a, 0x18, 0x3, 0x4, 0xc4, "773aefebe18ee6d988347d4ace29290348fb37bdf86a1f04a35402d2310e23ea34f60e894e842d54c5da1124680aa4d59219a046ea6b35cff1774c8e688ccebeb97be27e72dd176a22ea89ff1f12d71c4dc66df4faf0dfc29f9e84911151d817efb34c0cc7b67a9287b4e6b6770c737554f580833f0520496d265c9bcb3de9bf39a00d5f62347e16593b9e3347c957967c7123c413434d8fe2b9b1f7c026b6afa56cafaeb984b40e12179dcb5aea076993a997840f0a0bc6ebf82705885d33b333b1d5ac"}, @sadb_x_sec_ctx={0x20, 0x18, 0x7f, 0x5f, 0xf7, "33d92bd00ed4f95e59e821039d746ab5bc43bcc83e00737431e1f9bc5cab5670e7fc2c9db1da4e135c791d747410981646bdf7db6f24ca6a5444be2a310946481934fc1d6acf08d3166ec66ff0cbae9019a41851b8c4c9ee9300846ab011cefefb94a9472de5d0cf9a73da5ecc8e05bd34c5fb4425c52fd71608e8545a6a1477be1aeb0fceca70712cfa10cf65e174d3f3bb9b591cf4348b343fe37077eba9a768e79291b961d3478cd64bd296fa9016a168438e24070f8e6a73e471802c8ad893d79b0062ad9d3d23c97f577379c6a361c9228c72c2f7b4dd2488f45c3108a9492dde198deeae61d7178d1aa598114b16e3a10303904c"}, @sadb_sa={0x2, 0x1, 0x4d4, 0x2, 0xc, 0xfa, 0x3}, @sadb_x_sec_ctx={0x16, 0x18, 0x7, 0x4b, 0xa4, "40b70f873d3dbf89232ff8537f29e49924718edb4af83a1e7d9a64d7d2171f373d5c02a7414ac87f301a54036ed8e28ba44f3b9fe278febb4190a78f24acfcabd8dd1eef38950ca81f220a9470e19e61c0e1ae0bfb13d13125b67b27481486f6cc5f8f4956f606a4f474434c143f9a56fe58cb9d9e6c3e13bf3fae1fc76599572917678574f72c963b576bcb853b5230abdeeb36417b82d73734067196771b39319ded62"}]}, 0x378}}, 0x10004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="7c0100001a0001000000000000f4ffffff00000000dcb353a0740086850000000000000000ffe5000000000000000000e747fb4a2543df9de7aa000000000100"/73, @ANYBLOB="ffffffff000000000000000000000000000000006c0000000a0101010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x17c}, 0x1, 0x0, 0x0, 0x840}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x6, 0x1, 0x6, 0x3, 0x2, 0x3e, 0x751, 0x105, 0x40, 0x342, 0x7, 0x7, 0x38, 0x1, 0xc, 0xfb28, 0x3}, [{0x5, 0x6, 0x0, 0x80000001, 0x1, 0x9, 0x7ff, 0x6}]}, 0x78) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000ed"], 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f00000011c0)=0x7) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000001180)={'rose0\x00', {0x2, 0x0, @local}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xfffffffffffffddf, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io(r2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe2(0x0, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_gettime(0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x17, 0x1ff003, 0x81, 0x7f, 0x2001, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)={0x20, 0x14, 0x119, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0xb, 0xfa, "8d747ea4dc9278"}]}, 0x20}}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r5, 0x0, r5) 5.264054896s ago: executing program 3 (id=940): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008001f0006"], 0x44}}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000040), 0x4) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r8, 0x0) io_uring_enter(r6, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="fd", 0x1}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x33b80}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 4.074440325s ago: executing program 4 (id=941): mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x314, 0x0, 0x0, 0xfeffffff, 0x210, 0xa4, 0x2b4, 0x2b4, 0xffffffff, 0x2b4, 0x2b4, 0x5, 0x0, {[{{@ip={@broadcast, @local, 0x0, 0x0, '\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @gre_key, @gre_key}}}}, {{@ip={@private, @broadcast, 0x0, 0xff, 'pimreg0\x00', 'syzkaller0\x00'}, 0x0, 0x70, 0x94, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x210}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @loopback, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0x0, 0x0, 0x6}, {0x0, 0x4}, {0x0, 0x1, 0x5}, 0x23f5, 0xfffffcbc}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x370) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000380)) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r2, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r3, 0x10}], 0x1, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="890000001200", 0x6}], 0x1}, 0x0) 3.144930706s ago: executing program 3 (id=942): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/83, 0x53}, {&(0x7f0000000180)=""/167, 0xa7}], 0x2, &(0x7f0000001000)=""/4096, 0x1000}, 0x2001) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2dc, 0x1b4, 0x0, 0x148, 0x1b4, 0x148, 0x248, 0x240, 0x240, 0x248, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz1\x00'}}, @common=@addrtype={{0x2c}}]}, @common=@inet=@SYNPROXY={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x338) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe7e00eb59f7a6e00, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="ee616ff87d11689f98f80eb5538038c300000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) dup(r5) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x40046207, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)='Q'}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000015dc0)={0x2020}, 0x2020) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r2], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f000001ec00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010300000000000000000000000020000000050a01040000000000000000020000000900010073797a30000000001400000011000100000000006c001c000000000a"], 0x5c}}, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b7be00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 2.159561001s ago: executing program 0 (id=943): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000540)={@multicast, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0xfffe, 0x0, 0x11, 0x0, @rand_addr, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r0, 0x0, 0x0, 0x80000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433"], 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x40, 0x140b, 0x10, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xc983}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044484}, 0x4000) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 1.51449624s ago: executing program 3 (id=944): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24048050) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x400) socket$pppoe(0x18, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.454283892s ago: executing program 0 (id=945): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xb8800) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x40, 0xffff7fff, 0x4, 0xff, 0x1, 0xe0f2, 0xb5, 0x9, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x8, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_getevents(0x0, 0x1, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x989680}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f000001b400)=""/102397, 0x18ffd}], 0x1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x40046207, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x14, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@local=@item_4={0x3, 0x2, 0xa, "c7082625"}, @global=@item_012={0x2, 0x1, 0x0, '\x00\x00'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_4={0x3, 0x2, 0x0, "f62a670a"}, @global=@item_4, @global=@item_4, @local=@item_4={0x3, 0x2, 0xa}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000004c0)=[@increfs, @enter_looper, @acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x0, 0x1000000000000, 0x0}) 961.182426ms ago: executing program 4 (id=946): r0 = socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) unshare(0xc040400) fstat(r2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000167000/0x1000)=nil, 0x12000}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000140)) close_range(r0, 0xffffffffffffffff, 0x0) 538.367634ms ago: executing program 0 (id=947): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0xfe, 0x551501) r1 = dup(r0) r2 = openat$vicodec0(0xffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0185649, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x5, '\x00', @string=&(0x7f0000000080)}}) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r8, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f0000000180)={0x1, 'vcan0\x00', 0x2}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) open$dir(0x0, 0x200, 0x105) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) faccessat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x0) futex(&(0x7f0000000140), 0x3, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r9, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r10, 0x4bfb, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaa4500004c0000000000069078ac1414bbac1414aa00004e2200"/38, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec000000907800001d12d285b6853bc4dc54c6910c1d66f8841a1d12adf059fd789278e2fb03dc15d356998a"], 0x0) 238.231942ms ago: executing program 1 (id=901): r0 = syz_open_dev$cec(&(0x7f0000002040), 0x0, 0x200) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x21) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000002080)={0x9, 0x80, 0xffffffff, 0x3ff, 0x1}) r2 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$alg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)="4b88101161139077e0cf46594095ea8cd2b82e06e2fffeabe8fb1c5c8948c38f89bc3cff8434d5ea0ce1887a31d5b84c1e9fa060b46550ebcecaef69d7c56989464f580da6660a29d1050a5d222c9b5cf8007c2c9f28c873992df8bc9497e583df5cdbb0767408b28fd618ca8970ab6c7c4f93316a6df4c8e65f16c8f86a63bd68872a16be55ad186846e3d3e3c3edba7336dd059e03e6e13f222b42b894391296", 0xa1}, {&(0x7f0000000100)="d1667bf0c0fd645db60c64bf0221c8f554e5ae213238ace739436bbca1dc595e045498d8c1c4cff1c9cb1c9d97063b62fcc7b90909b497c5b722363b0f0ff185bffc88d607dbc2b8c60afa32845507c9bea3603d2959f4fdfdb10d34f581ce7f0847b9089d3c3a7892a8e5cf638b7dc95a75ae4bd1e0071b85702bf6999dbc80e9", 0x81}, {&(0x7f00000001c0)="b5d7f586f1835fb18d49a199e5b5dba8a1ce1cd8733c4bae9e029d0ed68370f5060e6015946f71335a3904fc38a0f7758e836116d01515a8ca3f768a2a8eaaf9f4f2f8150938c4eaaac67ad629a7755b3b4db4c894fbfdf36252e4e83293b48ac013220185d7e9b2", 0x68}, {&(0x7f0000000280)="7266ac6c5edbaab0", 0x8}, {&(0x7f00000002c0)="a043f6fba5ee54db804fa63474002441f098763182ce072bd2bd0b4f827b64f4d7fd2755479a6108b3dd7ab1d8391228e751f2a2f01a9c3c3032418d5fe2d3fcbc79d515798cec0babcd94f8c4380be87162e53d06b35637a33cac56d51e8cfd329e96d34e25575ab5f213038466cd60f9e6e0b98eee0e22081a7fc471eb73aa58800f76b15d9942fa093352f9fc452d11adecd81f6d6d0fb3c02b282447afc88dd53844ac221f5e653c65f5b58ccb5dd4b86bdd6bd7a499", 0xb8}], 0x5, &(0x7f00000003c0)=[@assoc={0x10, 0x117, 0x4, 0x2}, @iv={0xcc, 0x117, 0x2, 0xbc, "6a4b650fc918d744d4dca1acbba1e760f9465989283993f5104f825eccc84da6e7c5ff0afe92823cc3c8e69e4d471c9303b3994e837f8254b07df9c6ef602f01b2d3afd970d53d64e607d34506149844722845171d4e1a7d9ff1099709c5cff552e2f9430fde6194241a0cec0f60534cbb86b20856d19a3c917ad1a375e650d91db8af6f4a559978256043a5c0b62fafb31a178fd3ecebefbf3a7ccc45fa07d398bfd71ad128643911b38b2af1bc35bf5fc8a20a057ce82bbfeabeaa"}, @assoc={0x10, 0x117, 0x4, 0x1d53}, @iv={0xf0, 0x117, 0x2, 0xde, "4eb63bb68f47f0874bd9ae25534c04bdcb17b01f7c6920bddd5dde6af5e5ba9bede0eb52a9fb122a400e6ac6809c8e965af2b33dd991c93a3a5c741e5da2db917ffa849934c174483934a5dbbe14eab84cf06111d7b13a841c7a2f469a91ee6aea974005bd7e55964881abb4e5a73450589c3c23eafbe61e3011891cbe788591b5c512693822bb6806ae0b4fd0e664c1c5fdd8e85aafdfd8bbfd53d4c117430c76b4fa425cf36f9670280ba0b96a1aaf49edae07ea03c3a631a3b946bce092ae5e9200a88d274115e2901e5cdba83044293eccfb4503ac2b55a26ef21022"}, @op={0x10}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xd8, 0x117, 0x2, 0xc6, "03ec8f34b3bc8c188001efe48b07fa29abbee2f79a03f9fde7928b0f3cb353b4d073d93c573e30893872081d0500d7c5b9d020e0fc8103239890de4e5ec391b3160d329210710c6de8854892e5786565c57b72af921bc0c01336bf7283c8286b962778219f036a6d2ef2b5d0ebfa97cde7d6c7483cb148368f23859d12a48ae83ffa5abd178f3247099392b79a436ba1091a220c2906e56799f7a267c38a08b6235913bc0782a615047af5df26b46bbed568a82b399d66a99389410fd91e14867c0d540c535b"}, @assoc={0x10, 0x117, 0x4, 0xd011}], 0x2e4, 0x4000080}, 0x24000000) 80.105493ms ago: executing program 0 (id=948): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x260c0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x490a80, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x856d}, {0xffffffffffffffff, 0x0, 0x64}], 0x2, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0xb, &(0x7f0000000040), 0x4) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r7, 0x0) io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000500)="fd", 0x1}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000002e80)={&(0x7f0000002d40)={0x2, 0x0, @local}, 0x10, &(0x7f0000002dc0)=[{&(0x7f0000002d80)='.', 0x33b80}], 0x1, 0x0, 0x0, 0x1f000004}, 0x0) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0xfdffffff) 34.531914ms ago: executing program 1 (id=949): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 4 (id=950): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000140), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x6}]}}}]}, 0x3c}}, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) getsockname(r1, &(0x7f0000000300)=@tipc, &(0x7f00000000c0)=0x80) fcntl$setlease(r3, 0x400, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f00000001c0)='\x00\x00\x00\x00', 0x4}], 0x1) timer_create(0x7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000201010100000000000000000202000024000280b7177e6f8b1094495db1a06bde34ad1400018008000120ac1414000800020000"], 0x38}}, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r8) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): .177349][ T8990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.214758][ T1859] usb 1-1: Using ep0 maxpacket: 32 [ 265.235022][ T8978] tls_set_device_offload: netdev not found [ 265.241954][ T1859] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 265.267440][ T1859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.306988][ T1859] usb 1-1: config 0 descriptor?? [ 265.322017][ T1859] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 265.331996][ T1859] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 265.528776][ T1175] usb 1-1: USB disconnect, device number 24 [ 265.845357][ T25] option 2-1:251.19: GSM modem (1-port) converter detected [ 265.879187][ T8996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.889909][ T25] usb 2-1: Found UVC 252.03 device syz (12d1:c4a9) [ 265.910816][ T25] usb 2-1: No valid video chain found. [ 265.938982][ T25] usb 2-1: USB disconnect, device number 33 [ 265.963496][ T25] option 2-1:251.19: device disconnected [ 265.989479][ T8998] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.701'. [ 266.079293][ T9000] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 266.393201][ T1859] usb 3-1: USB disconnect, device number 25 [ 266.447059][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 266.582359][ T9017] tipc: Started in network mode [ 266.591313][ T9017] tipc: Node identity , cluster identity 4711 [ 266.618627][ T9017] tipc: Failed to set node id, please configure manually [ 266.664561][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.664745][ T9017] tipc: Enabling of bearer rejected, failed to enable media [ 266.691902][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.728106][ T25] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.740408][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.751263][ T25] usb 2-1: SerialNumber: syz [ 266.834750][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 266.917192][ T9023] netlink: 68 bytes leftover after parsing attributes in process `syz.0.707'. [ 267.038911][ T9035] netlink: 32 bytes leftover after parsing attributes in process `syz.2.713'. [ 267.167790][ T25] usb 2-1: 0:2 : does not exist [ 267.174423][ T25] usb 2-1: unit 5: unexpected type 0x0e [ 267.202102][ T25] usb 2-1: USB disconnect, device number 34 [ 267.280532][ T7459] udevd[7459]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.372531][ T9038] FAULT_INJECTION: forcing a failure. [ 267.372531][ T9038] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 267.441993][ T9038] CPU: 0 UID: 0 PID: 9038 Comm: syz.4.714 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 267.452648][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.462740][ T9038] Call Trace: [ 267.466137][ T9038] [ 267.469104][ T9038] dump_stack_lvl+0x241/0x360 [ 267.473823][ T9038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.479056][ T9038] ? __pfx__printk+0x10/0x10 [ 267.483682][ T9038] ? __lock_acquire+0x1384/0x2050 [ 267.488754][ T9038] should_fail_ex+0x3b0/0x4e0 [ 267.493468][ T9038] prepare_alloc_pages+0x1da/0x5b0 [ 267.498613][ T9038] __alloc_pages_noprof+0x16f/0x710 [ 267.503847][ T9038] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 267.509618][ T9038] alloc_pages_mpol_noprof+0x3e8/0x680 [ 267.515121][ T9038] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 267.521150][ T9038] vma_alloc_folio_noprof+0x12e/0x230 [ 267.526558][ T9038] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 267.532497][ T9038] ? do_raw_spin_unlock+0x13c/0x8b0 [ 267.537732][ T9038] folio_prealloc+0x31/0x170 [ 267.542352][ T9038] do_wp_page+0x11c4/0x52d0 [ 267.546910][ T9038] ? __pfx_do_wp_page+0x10/0x10 [ 267.551797][ T9038] ? __pfx_lock_acquire+0x10/0x10 [ 267.556869][ T9038] ? do_raw_spin_lock+0x14f/0x370 [ 267.561971][ T9038] handle_pte_fault+0x10e3/0x6800 [ 267.567057][ T9038] ? mark_lock+0x9a/0x360 [ 267.571431][ T9038] ? __pfx_handle_pte_fault+0x10/0x10 [ 267.576859][ T9038] ? __lock_acquire+0x1384/0x2050 [ 267.582034][ T9038] ? mt_find+0x2a9/0x920 [ 267.586332][ T9038] ? __pfx_lock_release+0x10/0x10 [ 267.591421][ T9038] handle_mm_fault+0x1106/0x1bb0 [ 267.596407][ T9038] ? mt_find+0x2a9/0x920 [ 267.600703][ T9038] ? __pfx_handle_mm_fault+0x10/0x10 [ 267.606036][ T9038] ? __pfx___up_read+0x10/0x10 [ 267.610858][ T9038] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 267.616180][ T9038] exc_page_fault+0x2b9/0x8c0 [ 267.620897][ T9038] asm_exc_page_fault+0x26/0x30 [ 267.625779][ T9038] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 267.631614][ T9038] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 267.651262][ T9038] RSP: 0018:ffffc90008e17e60 EFLAGS: 00050206 [ 267.657360][ T9038] RAX: ffffffff84bce901 RBX: 000000002001113a RCX: 000000000000213a [ 267.665332][ T9038] RDX: 0000000000000000 RSI: ffff888052a8dd00 RDI: 000000002000f000 [ 267.673308][ T9038] RBP: 000000000000fe3a R08: 0000000000000001 R09: ffffed100a551fc7 [ 267.681277][ T9038] R10: dffffc0000000000 R11: ffffed100a551fc7 R12: 000000000000fe3a [ 267.689436][ T9038] R13: ffff88814228f500 R14: 0000000020001300 R15: ffff888052a80000 [ 267.697441][ T9038] ? __pfx__copy_to_user+0x1/0x10 [ 267.702498][ T9038] _copy_to_user+0x86/0xb0 [ 267.706974][ T9038] keyctl_read_key+0x3ce/0x450 [ 267.711758][ T9038] __do_fast_syscall_32+0xb4/0x110 [ 267.716873][ T9038] ? exc_page_fault+0x590/0x8c0 [ 267.721739][ T9038] do_fast_syscall_32+0x34/0x80 [ 267.726593][ T9038] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 267.732928][ T9038] RIP: 0023:0xf7fcf579 [ 267.736998][ T9038] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 267.756613][ T9038] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 267.765038][ T9038] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000001b698b2c [ 267.773030][ T9038] RDX: 0000000020001300 RSI: 00000000ffffffd2 RDI: 0000000000000000 [ 267.781011][ T9038] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 267.788983][ T9038] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 267.796972][ T9038] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 267.805000][ T9038] [ 267.874557][ T46] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 268.064963][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 268.077726][ T9049] loop9: detected capacity change from 0 to 7 [ 268.106931][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.131513][ T9049] Dev loop9: unable to read RDB block 7 [ 268.147317][ T46] usb 1-1: config 179 has no interface number 0 [ 268.153687][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 268.175169][ T9049] loop9: unable to read partition table [ 268.190197][ T9049] loop9: partition table beyond EOD, truncated [ 268.199181][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 268.206657][ T9049] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 268.206657][ T9049] ) failed (rc=-5) [ 268.214936][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.271903][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 268.300684][ T46] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.312503][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 268.312523][ T29] audit: type=1326 audit(1729306894.467:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.352867][ T46] usb 1-1: config 179 interface 65 has no altsetting 0 [ 268.362838][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 268.379659][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.387872][ T29] audit: type=1326 audit(1729306894.467:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=195 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.420484][ T9042] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.484565][ T29] audit: type=1326 audit(1729306894.467:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.491445][ T46] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15 [ 268.574728][ T29] audit: type=1326 audit(1729306894.517:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.675208][ T29] audit: type=1326 audit(1729306894.517:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.737617][ T29] audit: type=1326 audit(1729306894.517:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.783459][ T29] audit: type=1326 audit(1729306894.517:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.850268][ T1175] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 268.888675][ T9062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 268.907885][ T29] audit: type=1326 audit(1729306894.517:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 268.948679][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.715'. [ 268.964831][ T9041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.986470][ T29] audit: type=1326 audit(1729306894.537:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 269.003563][ T9041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.048188][ T1175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.066594][ T29] audit: type=1326 audit(1729306894.537:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9052 comm="syz.1.720" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73ed579 code=0x7ffc0000 [ 269.073819][ T1175] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.109180][ T9041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.141910][ T9041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.156288][ T1175] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 269.186715][ T1175] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.221939][ T1175] usb 5-1: config 0 descriptor?? [ 269.852088][ T1175] pyra 0003:1E7D:2CF6.0009: item fetching failed at offset 6/7 [ 269.865853][ T1175] pyra 0003:1E7D:2CF6.0009: parse failed [ 269.882255][ T1175] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 269.917180][ T9040] syz.0.715 (9040): drop_caches: 2 [ 269.932918][ T9040] syz.0.715 (9040): drop_caches: 2 [ 269.948878][ T5284] usb 1-1: USB disconnect, device number 25 [ 269.948913][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 269.963240][ T5284] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 270.079526][ T1175] usb 5-1: USB disconnect, device number 33 [ 270.354675][ T46] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 270.509225][ T46] usb 4-1: config 0 has no interfaces? [ 270.570567][ T46] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 270.633690][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.670623][ T46] usb 4-1: Product: syz [ 270.686865][ T46] usb 4-1: Manufacturer: syz [ 270.701137][ T46] usb 4-1: SerialNumber: syz [ 270.709987][ T46] usb 4-1: config 0 descriptor?? [ 270.890533][ T9096] loop9: detected capacity change from 0 to 7 [ 270.899822][ T9096] Dev loop9: unable to read RDB block 7 [ 270.906257][ T9096] loop9: unable to read partition table [ 270.914741][ T9096] loop9: partition table beyond EOD, truncated [ 270.921226][ T9096] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 270.921226][ T9096] ) failed (rc=-5) [ 271.609904][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.695252][ T46] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 271.759346][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.852114][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.884616][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 272.015144][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.023521][ T46] usb 1-1: config 0 has no interfaces? [ 272.034399][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.049971][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.062196][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.070549][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.080298][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.090666][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.117343][ T9118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.180418][ T46] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 272.190813][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.207046][ T9118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.249247][ T46] usb 1-1: Product: syz [ 272.274999][ T46] usb 1-1: Manufacturer: syz [ 272.292661][ T46] usb 1-1: SerialNumber: syz [ 272.318538][ T46] usb 1-1: config 0 descriptor?? [ 272.432684][ T11] bridge_slave_1: left allmulticast mode [ 272.451528][ T11] bridge_slave_1: left promiscuous mode [ 272.457961][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.517471][ T11] bridge_slave_0: left allmulticast mode [ 272.523172][ T11] bridge_slave_0: left promiscuous mode [ 272.543051][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.924635][ T5280] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 273.107757][ T5280] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 273.121298][ T9136] usb usb9: usbfs: process 9136 (syz.4.747) did not claim interface 0 before use [ 273.131525][ T5280] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 273.142316][ T5283] usb 4-1: USB disconnect, device number 29 [ 273.176281][ T5280] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 273.200078][ T5280] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 273.216359][ T5280] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 273.300282][ T5280] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 273.310952][ T5280] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 273.324851][ T5280] usb 2-1: Product: syz [ 273.329285][ T5280] usb 2-1: Manufacturer: syz [ 273.370808][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 273.380989][ T5280] cdc_wdm 2-1:1.0: skipping garbage [ 273.392352][ T5280] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 273.403656][ T5280] cdc_wdm 2-1:1.0: Unknown control protocol [ 273.489588][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.504001][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.522723][ T11] bond0 (unregistering): Released all slaves [ 273.589817][ T9131] FAULT_INJECTION: forcing a failure. [ 273.589817][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 273.625464][ T9131] CPU: 0 UID: 0 PID: 9131 Comm: syz.1.745 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 273.636118][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.646189][ T9131] Call Trace: [ 273.649468][ T9131] [ 273.652397][ T9131] dump_stack_lvl+0x241/0x360 [ 273.657084][ T9131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.662295][ T9131] ? __pfx__printk+0x10/0x10 [ 273.666885][ T9131] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 273.672432][ T9131] ? __pfx___might_resched+0x10/0x10 [ 273.677720][ T9131] ? validate_chain+0x11e/0x5920 [ 273.682665][ T9131] should_fail_ex+0x3b0/0x4e0 [ 273.687353][ T9131] ? ptlock_alloc+0x20/0x70 [ 273.691855][ T9131] should_failslab+0xac/0x100 [ 273.696544][ T9131] ? ptlock_alloc+0x20/0x70 [ 273.701045][ T9131] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 273.706451][ T9131] ptlock_alloc+0x20/0x70 [ 273.710796][ T9131] pte_alloc_one+0xcd/0x5d0 [ 273.715328][ T9131] ? __pfx_pte_alloc_one+0x10/0x10 [ 273.720507][ T9131] handle_pte_fault+0x2140/0x6800 [ 273.725579][ T9131] ? mark_lock+0x9a/0x360 [ 273.729949][ T9131] ? __pfx_handle_pte_fault+0x10/0x10 [ 273.735343][ T9131] ? __lock_acquire+0x1384/0x2050 [ 273.740406][ T9131] ? __thp_vma_allowable_orders+0x8ff/0x9c0 [ 273.746407][ T9131] ? __pfx_lock_release+0x10/0x10 [ 273.751442][ T9131] handle_mm_fault+0x1106/0x1bb0 [ 273.756474][ T9131] ? mt_find+0x2a9/0x920 [ 273.760731][ T9131] ? __pfx_handle_mm_fault+0x10/0x10 [ 273.766028][ T9131] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.772359][ T9131] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 273.777649][ T9131] exc_page_fault+0x2b9/0x8c0 [ 273.782338][ T9131] asm_exc_page_fault+0x26/0x30 [ 273.787186][ T9131] RIP: 0010:strnlen_user+0x47/0x180 [ 273.792389][ T9131] Code: bf 01 00 00 00 4c 89 f6 e8 06 32 a0 fc 4d 85 f6 0f 8e 23 01 00 00 49 89 dd 49 c1 fd 3f 49 09 dd 0f 01 cb 4c 89 e8 48 83 e0 f8 <48> 8b 28 44 89 eb 83 e3 07 8d 0c dd 00 00 00 00 48 c7 c0 ff ff ff [ 273.811999][ T9131] RSP: 0018:ffffc900042bfd90 EFLAGS: 00050202 [ 273.818069][ T9131] RAX: 00000000f6fffff8 RBX: 00000000f6ffffff RCX: ffff888025f80000 [ 273.826035][ T9131] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000000000001 [ 273.834022][ T9131] RBP: ffffc900042bfed0 R08: ffffffff84f4bada R09: 1ffffffff2039ff5 [ 273.842020][ T9131] R10: dffffc0000000000 R11: fffffbfff2039ff6 R12: 1ffff92000857fc8 [ 273.850004][ T9131] R13: 00000000f6ffffff R14: 0000000000001000 R15: 0000000000001000 [ 273.857987][ T9131] ? strnlen_user+0x2a/0x180 [ 273.862596][ T9131] strndup_user+0x1f/0xc0 [ 273.866925][ T9131] __se_sys_mount+0xe2/0x3c0 [ 273.871521][ T9131] ? __pfx___se_sys_mount+0x10/0x10 [ 273.876717][ T9131] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 273.883473][ T9131] ? __ia32_sys_mount+0x20/0xc0 [ 273.888328][ T9131] __do_fast_syscall_32+0xb4/0x110 [ 273.893450][ T9131] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 273.899630][ T9131] ? lockdep_hardirqs_on+0x99/0x150 [ 273.904855][ T9131] do_fast_syscall_32+0x34/0x80 [ 273.909719][ T9131] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 273.916314][ T9131] RIP: 0023:0xf73ed579 [ 273.920393][ T9131] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.940088][ T9131] RSP: 002b:00000000f56b556c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 273.948507][ T9131] RAX: ffffffffffffffda RBX: 00000000f6ffffff RCX: 0000000020000280 [ 273.956474][ T9131] RDX: 0000000000000000 RSI: 0000000000304030 RDI: 0000000000000000 [ 273.964461][ T9131] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.972465][ T9131] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.980460][ T9131] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.988464][ T9131] [ 274.054104][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.079713][ T9135] netlink: 'syz.4.747': attribute type 21 has an invalid length. [ 274.089343][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.099192][ T9142] netlink: 36 bytes leftover after parsing attributes in process `syz.3.748'. [ 274.145012][ T5240] Bluetooth: hci1: command tx timeout [ 274.219955][ T46] usb 2-1: USB disconnect, device number 35 [ 274.473421][ T11] hsr_slave_0: left promiscuous mode [ 274.500600][ T11] hsr_slave_1: left promiscuous mode [ 274.513153][ T9159] "syz.4.750" (9159) uses obsolete ecb(arc4) skcipher [ 274.525238][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.544015][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.567067][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.577993][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.608845][ T11] veth1_macvtap: left promiscuous mode [ 274.618660][ T11] veth0_macvtap: left promiscuous mode [ 274.628152][ T11] veth1_vlan: left promiscuous mode [ 274.633674][ T11] veth0_vlan: left promiscuous mode [ 274.657634][ T46] usb 1-1: USB disconnect, device number 26 [ 275.145276][ T46] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 275.309788][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 275.323204][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.334734][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.345116][ T46] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 275.354186][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.354587][ T1859] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 275.380998][ T46] usb 1-1: config 0 descriptor?? [ 275.494274][ T11] team0 (unregistering): Port device team_slave_1 removed [ 275.526227][ T1859] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 275.534870][ T1859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 275.560479][ T1859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 275.582015][ T1859] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 275.595479][ T1859] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 275.612924][ T1859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.621820][ T11] team0 (unregistering): Port device team_slave_0 removed [ 275.673136][ T1859] usb 4-1: config 0 descriptor?? [ 275.680037][ T9179] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 275.990390][ T46] usbhid 1-1:0.0: can't add hid device: -71 [ 275.997988][ T46] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 276.020977][ T46] usb 1-1: USB disconnect, device number 27 [ 276.228192][ T5240] Bluetooth: hci1: command tx timeout [ 276.812726][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 276.954714][ T5280] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 277.126264][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.144807][ T5280] usb 1-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 277.162103][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.181437][ T5280] usb 1-1: config 0 descriptor?? [ 277.332328][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.358177][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.371723][ T9125] bridge_slave_0: entered allmulticast mode [ 277.379609][ T9125] bridge_slave_0: entered promiscuous mode [ 277.388749][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.396323][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.403630][ T9125] bridge_slave_1: entered allmulticast mode [ 277.424718][ T9125] bridge_slave_1: entered promiscuous mode [ 277.656631][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.659624][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.677097][ T1859] usbhid 4-1:0.0: can't add hid device: -71 [ 277.682819][ T5280] apple 0003:05AC:027A.000A: hidraw0: USB HID v0.00 Device [HID 05ac:027a] on usb-dummy_hcd.0-1/input0 [ 277.683102][ T1859] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 277.714249][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.725149][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.738768][ T1859] usb 4-1: USB disconnect, device number 30 [ 277.747890][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.793022][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 277.802514][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.815053][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.827037][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.892696][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.937627][ T9125] team0: Port device team_slave_0 added [ 277.943875][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.950375][ T9125] team0: Port device team_slave_1 added [ 277.961674][ T5230] usb 1-1: USB disconnect, device number 28 [ 278.030189][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.160607][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.183718][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.190880][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.217440][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.230348][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.237433][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.263820][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.294733][ T5234] Bluetooth: hci1: command tx timeout [ 278.343244][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.381925][ T9125] hsr_slave_0: entered promiscuous mode [ 278.394863][ T9125] hsr_slave_1: entered promiscuous mode [ 278.845331][ T46] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 278.932018][ T11] bridge_slave_1: left allmulticast mode [ 278.939925][ T11] bridge_slave_1: left promiscuous mode [ 278.947656][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.021141][ T46] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 279.025298][ T11] bridge_slave_0: left allmulticast mode [ 279.030192][ T46] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.038794][ T11] bridge_slave_0: left promiscuous mode [ 279.051219][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.076914][ T46] usb 1-1: config 0 has no interface number 0 [ 279.091266][ T46] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 279.101716][ T46] usb 1-1: config 0 interface 168 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 279.120376][ T46] usb 1-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=48.98 [ 279.131232][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.143924][ T46] usb 1-1: config 0 descriptor?? [ 279.157769][ T46] HFC-S_USB 1-1:0.168: probe with driver HFC-S_USB failed with error -5 [ 279.390801][ T5280] usb 1-1: USB disconnect, device number 29 [ 279.572833][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.595542][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.610580][ T11] bond0 (unregistering): Released all slaves [ 279.700650][ T9212] chnl_net:caif_netlink_parms(): no params data found [ 279.975233][ T5234] Bluetooth: hci0: command tx timeout [ 280.059227][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.066474][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.073714][ T9212] bridge_slave_0: entered allmulticast mode [ 280.080772][ T9212] bridge_slave_0: entered promiscuous mode [ 280.089846][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.097074][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.104301][ T9212] bridge_slave_1: entered allmulticast mode [ 280.111300][ T9212] bridge_slave_1: entered promiscuous mode [ 280.328089][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.376586][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.383242][ T5234] Bluetooth: hci1: command tx timeout [ 280.398101][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 280.398119][ T29] audit: type=1804 audit(1729306906.557:193): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.767" name="/" dev="pidfs" ino=9556 res=1 errno=0 [ 280.578764][ T9125] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.656565][ T9212] team0: Port device team_slave_0 added [ 280.695255][ T9212] team0: Port device team_slave_1 added [ 280.723578][ T9125] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.754920][ T1859] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 280.784237][ T11] hsr_slave_0: left promiscuous mode [ 280.799179][ T11] hsr_slave_1: left promiscuous mode [ 280.826173][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.833637][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.863542][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.880426][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.924210][ T11] veth1_macvtap: left promiscuous mode [ 280.935192][ T1859] usb 1-1: Using ep0 maxpacket: 8 [ 280.937362][ T11] veth0_macvtap: left promiscuous mode [ 280.946413][ T1859] usb 1-1: no configurations [ 280.950164][ T11] veth1_vlan: left promiscuous mode [ 280.951024][ T1859] usb 1-1: can't read configurations, error -22 [ 280.958005][ T11] veth0_vlan: left promiscuous mode [ 281.124634][ T1859] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 281.294561][ T1859] usb 1-1: Using ep0 maxpacket: 8 [ 281.303548][ T1859] usb 1-1: no configurations [ 281.316196][ T1859] usb 1-1: can't read configurations, error -22 [ 281.322965][ T1859] usb usb1-port1: attempt power cycle [ 281.335081][ T5284] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 281.485994][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 281.504776][ T5284] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 281.526027][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.534066][ T5284] usb 4-1: Product: syz [ 281.539057][ T5284] usb 4-1: Manufacturer: syz [ 281.543742][ T5284] usb 4-1: SerialNumber: syz [ 281.559920][ T5284] usb 4-1: config 0 descriptor?? [ 281.579770][ T5284] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 281.665782][ T1859] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 281.690690][ T1859] usb 1-1: Using ep0 maxpacket: 8 [ 281.697398][ T1859] usb 1-1: no configurations [ 281.711883][ T1859] usb 1-1: can't read configurations, error -22 [ 281.761174][ T11] team0 (unregistering): Port device team_slave_1 removed [ 281.842686][ T11] team0 (unregistering): Port device team_slave_0 removed [ 281.850160][ T1859] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 281.891113][ T1859] usb 1-1: Using ep0 maxpacket: 8 [ 281.917141][ T1859] usb 1-1: no configurations [ 281.922204][ T1859] usb 1-1: can't read configurations, error -22 [ 281.942670][ T1859] usb usb1-port1: unable to enumerate USB device [ 282.058317][ T5234] Bluetooth: hci0: command tx timeout [ 282.217924][ T5284] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 282.252719][ T5284] usb 4-1: USB disconnect, device number 31 [ 282.623345][ T9125] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.637316][ T9125] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.647886][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.660641][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.698596][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.788993][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.805889][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.849751][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.856995][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.883643][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.012063][ T9212] hsr_slave_0: entered promiscuous mode [ 283.023748][ T9212] hsr_slave_1: entered promiscuous mode [ 283.041073][ T9212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.050622][ T9212] Cannot create hsr debugfs directory [ 283.063298][ T1059] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.070413][ T1059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.093764][ T1059] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.100954][ T1059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.312604][ T9125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.323497][ T9125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.354848][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.392350][ T9125] veth0_vlan: entered promiscuous mode [ 283.403328][ T9125] veth1_vlan: entered promiscuous mode [ 283.427645][ T9125] veth0_macvtap: entered promiscuous mode [ 283.437280][ T9125] veth1_macvtap: entered promiscuous mode [ 283.453050][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.463638][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.473598][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.484131][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.496899][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.507343][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.517896][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.528501][ T9125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.539511][ T9125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.551078][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.947266][ T9125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.963842][ T9125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.981881][ T9125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.001895][ T9125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.135815][ T5234] Bluetooth: hci0: command tx timeout [ 284.474762][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.508886][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.520287][ T9297] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.774'. [ 284.627019][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.669452][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.174830][ T46] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 285.374550][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 285.386802][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 285.428826][ T46] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 285.464780][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.509514][ T46] usb 3-1: Product: syz [ 285.517484][ T46] usb 3-1: Manufacturer: syz [ 285.533568][ T46] usb 3-1: SerialNumber: syz [ 285.564937][ T46] usb 3-1: config 0 descriptor?? [ 285.595949][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 285.637558][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 285.656632][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 285.667238][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 285.675084][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 285.697326][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.789225][ T46] usb 3-1: Unknown endpoint type found, address 0x06 [ 285.796180][ T46] usb 3-1: Not enough endpoints found in device, aborting! [ 285.936742][ T1122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.127981][ T1122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.188191][ T9212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 286.215087][ T5240] Bluetooth: hci0: command tx timeout [ 286.220080][ T9212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 286.327869][ T1122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.391245][ T9212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 286.479050][ T9212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 286.588749][ T1122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.817173][ T9212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.993323][ T9212] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.027409][ T1122] bridge_slave_1: left allmulticast mode [ 287.050778][ T1122] bridge_slave_1: left promiscuous mode [ 287.078666][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.103773][ T1122] bridge_slave_0: left allmulticast mode [ 287.112996][ T1122] bridge_slave_0: left promiscuous mode [ 287.119365][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.814719][ T5240] Bluetooth: hci3: command tx timeout [ 288.194167][ T46] usb 3-1: USB disconnect, device number 26 [ 288.246476][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.279700][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.299318][ T1122] bond0 (unregistering): Released all slaves [ 288.339958][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.347204][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.450004][ T9326] chnl_net:caif_netlink_parms(): no params data found [ 288.493769][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.500974][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.724813][ T5280] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 288.794314][ T1122] hsr_slave_0: left promiscuous mode [ 288.830276][ T1122] hsr_slave_1: left promiscuous mode [ 288.892224][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.912101][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 288.924032][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.937564][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 288.951437][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.963812][ T5280] usb 1-1: New USB device found, idVendor=12b8, idProduct=ec62, bcdDevice= 4.34 [ 288.975824][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.983607][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.022263][ T5280] usb 1-1: config 0 descriptor?? [ 289.039612][ T1122] veth1_macvtap: left promiscuous mode [ 289.049749][ T5280] cp210x 1-1:0.0: cp210x converter detected [ 289.062787][ T1122] veth0_macvtap: left promiscuous mode [ 289.073310][ T1122] veth1_vlan: left promiscuous mode [ 289.078824][ T1122] veth0_vlan: left promiscuous mode [ 289.169996][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.186939][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.196856][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.206661][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.224567][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 289.235167][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.752883][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 289.803136][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 289.896028][ T5240] Bluetooth: hci3: command tx timeout [ 290.395903][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.403241][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.439924][ T9326] bridge_slave_0: entered allmulticast mode [ 290.468245][ T9326] bridge_slave_0: entered promiscuous mode [ 290.516873][ T9326] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.524396][ T9326] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.544023][ T9326] bridge_slave_1: entered allmulticast mode [ 290.552439][ T9326] bridge_slave_1: entered promiscuous mode [ 290.592915][ T9439] loop9: detected capacity change from 0 to 6 [ 290.623264][ T9439] Dev loop9: unable to read RDB block 6 [ 290.634536][ T9439] loop9: unable to read partition table [ 290.640364][ T9439] loop9: partition table beyond EOD, truncated [ 290.657380][ T9439] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 290.657380][ T9439] ) failed (rc=-5) [ 290.803013][ T9326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.843398][ T9326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.913247][ T9326] team0: Port device team_slave_0 added [ 290.931473][ T9326] team0: Port device team_slave_1 added [ 291.048672][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.056755][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.083436][ T9326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.097639][ T9326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.105099][ T9326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.132460][ T9326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.149670][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.228080][ T1122] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.254953][ T5240] Bluetooth: hci1: command tx timeout [ 291.308077][ T9428] chnl_net:caif_netlink_parms(): no params data found [ 291.396753][ T1122] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.465803][ T5280] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 291.488242][ T5280] cp210x 1-1:0.0: querying part number failed [ 291.516896][ T5280] usb 1-1: cp210x converter now attached to ttyUSB0 [ 291.536911][ T5280] usb 1-1: USB disconnect, device number 34 [ 291.564285][ T5280] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.575924][ T5280] cp210x 1-1:0.0: device disconnected [ 291.598434][ T9326] hsr_slave_0: entered promiscuous mode [ 291.617933][ T9326] hsr_slave_1: entered promiscuous mode [ 291.629244][ T9326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.637018][ T9326] Cannot create hsr debugfs directory [ 291.681739][ T1122] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.738186][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.794'. [ 291.778188][ T1122] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.792246][ T9473] ptrace attach of "./syz-executor exec"[8589] was attempted by "./syz-executor exec"[9473] [ 291.885460][ T9479] binder: 9478:9479 ioctl c0306201 0 returned -14 [ 291.919460][ T9428] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.935126][ T9428] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.942402][ T9428] bridge_slave_0: entered allmulticast mode [ 291.972579][ T9428] bridge_slave_0: entered promiscuous mode [ 291.978956][ T5240] Bluetooth: hci3: command tx timeout [ 291.999884][ T9428] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.031537][ T9428] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.084731][ T9428] bridge_slave_1: entered allmulticast mode [ 292.096464][ T9428] bridge_slave_1: entered promiscuous mode [ 292.183114][ T9428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.200181][ T9212] veth0_vlan: entered promiscuous mode [ 292.281402][ T9428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.395924][ T9212] veth1_vlan: entered promiscuous mode [ 292.592946][ T9428] team0: Port device team_slave_0 added [ 292.742197][ T9428] team0: Port device team_slave_1 added [ 292.789907][ T1122] bridge_slave_1: left allmulticast mode [ 292.801983][ T1122] bridge_slave_1: left promiscuous mode [ 292.809072][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.827555][ T1122] bridge_slave_0: left allmulticast mode [ 292.840965][ T1122] bridge_slave_0: left promiscuous mode [ 292.850089][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.334674][ T5240] Bluetooth: hci1: command tx timeout [ 293.457717][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.471076][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.482850][ T1122] bond0 (unregistering): Released all slaves [ 293.514337][ T9517] ɶƣ0GC: entered promiscuous mode [ 293.578115][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.601656][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.628115][ T9428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.661982][ T9212] veth0_macvtap: entered promiscuous mode [ 293.671263][ T9212] veth1_macvtap: entered promiscuous mode [ 293.697522][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.708043][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.718448][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.729212][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.741620][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.752247][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.763020][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.773372][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.784327][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.795930][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.806071][ T9212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.814956][ T9212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.823677][ T9212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.832675][ T9212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.868883][ T9534] netlink: 'syz.0.804': attribute type 10 has an invalid length. [ 293.892184][ T9534] netlink: 152 bytes leftover after parsing attributes in process `syz.0.804'. [ 293.941270][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.949285][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.000259][ T9428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.016211][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 294.027193][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'. [ 294.065134][ T5240] Bluetooth: hci3: command tx timeout [ 294.228247][ T9428] hsr_slave_0: entered promiscuous mode [ 294.251181][ T9428] hsr_slave_1: entered promiscuous mode [ 294.286969][ T9428] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.299955][ T9428] Cannot create hsr debugfs directory [ 294.392043][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.419211][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.523961][ T1122] hsr_slave_0: left promiscuous mode [ 294.532523][ T1122] hsr_slave_1: left promiscuous mode [ 294.547588][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.557665][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.582192][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.593393][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.632643][ T1122] veth1_macvtap: left promiscuous mode [ 294.641705][ T1122] veth0_macvtap: left promiscuous mode [ 294.652239][ T1122] veth1_vlan: left promiscuous mode [ 294.661018][ T1122] veth0_vlan: left promiscuous mode [ 295.414879][ T5240] Bluetooth: hci1: command tx timeout [ 295.689333][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 295.750008][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 296.238701][ T5281] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 296.441210][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.453039][ T5281] usb 1-1: config 0 has no interfaces? [ 296.468075][ T5281] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 296.480946][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.490097][ T5281] usb 1-1: Product: syz [ 296.501063][ T5281] usb 1-1: Manufacturer: syz [ 296.510333][ T5281] usb 1-1: SerialNumber: syz [ 296.545468][ T5281] usb 1-1: config 0 descriptor?? [ 296.547707][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.565451][ T9326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.585599][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.613680][ T9326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.664707][ T9326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.740978][ T9326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.902380][ T1102] tipc: Subscription rejected, illegal request [ 296.965829][ T9645] netlink: 'syz.1.759': attribute type 11 has an invalid length. [ 297.164301][ T29] audit: type=1800 audit(1729306923.317:194): pid=9653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.815" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 297.184673][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.388581][ T9326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.443917][ T9326] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.455252][ T5284] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 297.472456][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.479614][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.494905][ T5240] Bluetooth: hci1: command tx timeout [ 297.540869][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.548096][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.634634][ T5284] usb 2-1: device descriptor read/64, error -71 [ 297.789305][ T9428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 297.821178][ T9428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 297.874707][ T5284] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 297.896792][ T9326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.953226][ T9428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 297.973586][ T9428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.034663][ T5284] usb 2-1: device descriptor read/64, error -71 [ 298.062541][ T9326] veth0_vlan: entered promiscuous mode [ 298.101035][ T9326] veth1_vlan: entered promiscuous mode [ 298.193711][ T9428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.213390][ T5284] usb usb2-port1: attempt power cycle [ 298.218135][ T9326] veth0_macvtap: entered promiscuous mode [ 298.254842][ T9326] veth1_macvtap: entered promiscuous mode [ 298.289130][ T9428] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.330725][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.352660][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.363316][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.375287][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.388530][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.399250][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.406376][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.447680][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.454844][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.499701][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.531093][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.567857][ T9326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.597293][ T9326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.607334][ T5284] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 298.627308][ T9326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.645082][ T5284] usb 2-1: device descriptor read/8, error -71 [ 298.708211][ T9326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.720941][ T9326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.732631][ T9326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.746129][ T9326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.827594][ T9428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 298.840245][ T9428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 298.896132][ T5284] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 298.917903][ T9428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.928507][ T5284] usb 2-1: device descriptor read/8, error -71 [ 298.979563][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.989972][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.040048][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.046188][ T5284] usb usb2-port1: unable to enumerate USB device [ 299.051095][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.112619][ T9428] veth0_vlan: entered promiscuous mode [ 299.153303][ T9687] ip6t_srh: unknown srh match flags 6374 [ 299.167793][ T9428] veth1_vlan: entered promiscuous mode [ 299.229727][ T9428] veth0_macvtap: entered promiscuous mode [ 299.243879][ T9428] veth1_macvtap: entered promiscuous mode [ 299.266886][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.278057][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.290864][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.324886][ T5284] usb 1-1: USB disconnect, device number 35 [ 299.341290][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.353794][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.365159][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.411398][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.444599][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.475278][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.485350][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.496857][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.508023][ T9428] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.524958][ T9428] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.536671][ T9428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.549568][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.819'. [ 299.563792][ T9428] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.584545][ T9428] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.593298][ T9428] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.635036][ T9428] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.852161][ T9706] warning: `syz.0.822' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 299.876044][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.902627][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.979612][ T2605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.005212][ T2605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.077766][ T1059] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.316230][ T9717] usb usb8: usbfs: process 9717 (syz.1.826) did not claim interface 0 before use [ 300.331729][ T1059] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.465991][ T1059] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.601356][ T1059] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.631529][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 300.648233][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 300.657789][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 300.670111][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 300.677956][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 300.685383][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 300.724709][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 300.866001][ T25] usb 2-1: device descriptor read/64, error -71 [ 300.894728][ T1059] ip6gretap0: left allmulticast mode [ 300.900049][ T1059] ip6gretap0: left promiscuous mode [ 300.904844][ T5283] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 301.107660][ T5283] usb 3-1: no configurations [ 301.112626][ T5283] usb 3-1: can't read configurations, error -22 [ 301.119560][ T25] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 301.255371][ T5283] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 301.263109][ T25] usb 2-1: device descriptor read/64, error -71 [ 301.329429][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.342272][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.355472][ T1059] bond0 (unregistering): Released all slaves [ 301.375209][ T25] usb usb2-port1: attempt power cycle [ 301.383428][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.829'. [ 301.445399][ T5283] usb 3-1: no configurations [ 301.455487][ T5283] usb 3-1: can't read configurations, error -22 [ 301.482803][ T1059] ɶƣ0GC: left promiscuous mode [ 301.484927][ T5283] usb usb3-port1: attempt power cycle [ 301.616617][ T9743] xfrm0: entered allmulticast mode [ 301.754382][ T25] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 301.844604][ T5283] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 301.855037][ T25] usb 2-1: device descriptor read/8, error -71 [ 301.865790][ T5283] usb 3-1: no configurations [ 301.870437][ T5283] usb 3-1: can't read configurations, error -22 [ 302.004824][ T5283] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 302.057540][ T5283] usb 3-1: no configurations [ 302.074838][ T5283] usb 3-1: can't read configurations, error -22 [ 302.106180][ T25] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 302.118552][ T5283] usb usb3-port1: unable to enumerate USB device [ 302.186767][ T25] usb 2-1: device descriptor read/8, error -71 [ 302.254234][ T1059] hsr_slave_0: left promiscuous mode [ 302.314828][ T25] usb usb2-port1: unable to enumerate USB device [ 302.400945][ T1059] hsr_slave_1: left promiscuous mode [ 302.412688][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.430241][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.478028][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.486499][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.534051][ T1059] veth1_macvtap: left promiscuous mode [ 302.541715][ T1059] veth0_macvtap: left promiscuous mode [ 302.553061][ T1059] veth1_vlan: left promiscuous mode [ 302.562695][ T1059] veth0_vlan: left promiscuous mode [ 302.782272][ T5234] Bluetooth: hci4: command tx timeout [ 303.066129][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 303.114148][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 303.819217][ T9733] chnl_net:caif_netlink_parms(): no params data found [ 303.944775][ T5283] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 304.017590][ T5284] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 304.042348][ T9791] netlink: 88 bytes leftover after parsing attributes in process `syz.0.842'. [ 304.074084][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.092641][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.110939][ T9733] bridge_slave_0: entered allmulticast mode [ 304.118867][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.140569][ T9733] bridge_slave_0: entered promiscuous mode [ 304.147690][ T5283] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.160472][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.174601][ T5284] usb 3-1: device descriptor read/64, error -71 [ 304.174693][ T5283] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 304.196056][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.219704][ T9733] bridge_slave_1: entered allmulticast mode [ 304.239103][ T9733] bridge_slave_1: entered promiscuous mode [ 304.245112][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.277407][ T5283] usb 2-1: config 0 descriptor?? [ 304.347525][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.377324][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.414745][ T5284] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 304.521672][ T9733] team0: Port device team_slave_0 added [ 304.552773][ T9733] team0: Port device team_slave_1 added [ 304.594735][ T5284] usb 3-1: device descriptor read/64, error -71 [ 304.703652][ T1059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.727977][ T5284] usb usb3-port1: attempt power cycle [ 304.819048][ T5240] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.833459][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.844794][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.853060][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.855372][ T5238] Bluetooth: hci4: command tx timeout [ 304.887198][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 304.895907][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.899890][ T1059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.975255][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.982244][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.015688][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.074586][ T5284] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 305.112844][ T5283] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.1-1/input0 [ 305.118460][ T5284] usb 3-1: device descriptor read/8, error -71 [ 305.140933][ T1059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.156319][ T5283] hid-led 0003:27B8:01ED.000B: ThingM blink(1) v1 initialized [ 305.182385][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.193341][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.219882][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.273643][ T1059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.338587][ T1859] usb 2-1: USB disconnect, device number 44 [ 305.357157][ T9733] hsr_slave_0: entered promiscuous mode [ 305.363873][ T9733] hsr_slave_1: entered promiscuous mode [ 305.384590][ T5284] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 305.410485][ T5284] usb 3-1: device descriptor read/8, error -71 [ 305.534763][ T5284] usb usb3-port1: unable to enumerate USB device [ 305.866891][ T1059] bridge_slave_1: left allmulticast mode [ 305.872639][ T1059] bridge_slave_1: left promiscuous mode [ 305.903798][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.932782][ T1059] bridge_slave_0: left allmulticast mode [ 305.948674][ T1059] bridge_slave_0: left promiscuous mode [ 305.958354][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.266357][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 306.342249][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.353830][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.368791][ T1059] bond0 (unregistering): Released all slaves [ 306.444303][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 306.458806][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 306.480655][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 306.508195][ T25] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 306.528745][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.561395][ T25] usb 1-1: Product: syz [ 306.571518][ T25] usb 1-1: Manufacturer: syz [ 306.579624][ T25] usb 1-1: SerialNumber: syz [ 306.608543][ T25] usb 1-1: config 0 descriptor?? [ 306.621540][ T25] pegasus_notetaker 1-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 306.687758][ T9847] netlink: 'syz.1.851': attribute type 1 has an invalid length. [ 306.701503][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 306.937203][ T5234] Bluetooth: hci4: command tx timeout [ 306.967075][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 307.014739][ T5234] Bluetooth: hci3: command tx timeout [ 307.022987][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.042246][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.054991][ T9813] bridge_slave_0: entered allmulticast mode [ 307.081479][ T9813] bridge_slave_0: entered promiscuous mode [ 307.130196][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.144221][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.144648][ T5281] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 307.159760][ T9813] bridge_slave_1: entered allmulticast mode [ 307.167329][ T9813] bridge_slave_1: entered promiscuous mode [ 307.199335][ T1059] hsr_slave_0: left promiscuous mode [ 307.210146][ T1059] hsr_slave_1: left promiscuous mode [ 307.219661][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.235592][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.252158][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.269836][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.299550][ T1059] veth1_macvtap: left promiscuous mode [ 307.311446][ T1059] veth0_macvtap: left promiscuous mode [ 307.322142][ T1059] veth1_vlan: left promiscuous mode [ 307.333453][ T1059] veth0_vlan: left promiscuous mode [ 307.347645][ T5281] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.357962][ T1859] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 307.375991][ T25] usb 1-1: USB disconnect, device number 36 [ 307.383332][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 307.409189][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 307.441661][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 307.474150][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 307.498610][ T5281] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 307.512229][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 307.520917][ T5281] usb 2-1: Product: syz [ 307.525803][ T5281] usb 2-1: Manufacturer: syz [ 307.530485][ T5281] usb 2-1: SerialNumber: syz [ 307.542491][ T5281] usb 2-1: config 0 descriptor?? [ 307.547771][ T1859] usb 3-1: Using ep0 maxpacket: 16 [ 307.559044][ T1859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.570994][ T1859] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.582141][ T1859] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 307.597942][ T1859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.609448][ T1859] usb 3-1: config 0 descriptor?? [ 307.835006][ T5281] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 307.846188][ T5281] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 308.021487][ T5281] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 308.039040][ T5281] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 308.053030][ T5281] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 308.268919][ T5281] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 308.293883][ T1859] usbhid 3-1:0.0: can't add hid device: -71 [ 308.337424][ T1859] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 308.356772][ T1859] usb 3-1: USB disconnect, device number 35 [ 308.501482][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 308.569604][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 309.015915][ T5234] Bluetooth: hci4: command tx timeout [ 309.102016][ T5234] Bluetooth: hci3: command tx timeout [ 309.216631][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.229566][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.410921][ T9813] team0: Port device team_slave_0 added [ 309.428100][ T9813] team0: Port device team_slave_1 added [ 309.474732][ T9733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 309.488627][ T9733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 309.500229][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.509250][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.536731][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.558047][ T9733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 309.575373][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.583083][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.594656][ T5285] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 309.610503][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.629767][ T9733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 309.720070][ T9813] hsr_slave_0: entered promiscuous mode [ 309.739191][ T9813] hsr_slave_1: entered promiscuous mode [ 309.758494][ T9813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.774742][ T9813] Cannot create hsr debugfs directory [ 309.804938][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 309.826521][ T5285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.852210][ T5281] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 309.873697][ T5285] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 309.884207][ T5281] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 309.903354][ T5285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.940655][ T5285] usb 1-1: config 0 descriptor?? [ 310.268934][ T9879] netlink: 'syz.2.858': attribute type 4 has an invalid length. [ 310.377378][ T5285] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 310.433215][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 310.454269][ T5285] usb 1-1: USB disconnect, device number 37 [ 310.489787][ T5285] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 310.526977][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.570427][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.624013][ T1175] usb 2-1: USB disconnect, device number 45 [ 310.690228][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.697431][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.760074][ T9890] netlink: 'syz.1.859': attribute type 9 has an invalid length. [ 310.768199][ T9890] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.859'. [ 310.883696][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.890907][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.991859][ T9733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 311.037064][ T9733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 311.110664][ T9813] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.151393][ T9813] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.172282][ T9813] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.186589][ T5234] Bluetooth: hci3: command tx timeout [ 311.213359][ T9813] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.242636][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.306835][ T9733] veth0_vlan: entered promiscuous mode [ 311.314699][ T1859] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 311.352872][ T9733] veth1_vlan: entered promiscuous mode [ 311.459329][ T9733] veth0_macvtap: entered promiscuous mode [ 311.465293][ T5230] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 311.483707][ T1859] usb 1-1: Using ep0 maxpacket: 16 [ 311.505553][ T1859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.520042][ T9733] veth1_macvtap: entered promiscuous mode [ 311.539576][ T1859] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.565806][ T1859] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 311.579570][ T1859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.602110][ T1859] usb 1-1: config 0 descriptor?? [ 311.607676][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.637565][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.701189][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.732156][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.768945][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.785777][ T5230] usb 2-1: config 0 has no interfaces? [ 311.834369][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.848027][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.860241][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.864718][ T5230] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 311.871535][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.899798][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.926435][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.950997][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.964569][ T5230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.971868][ T9733] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.982216][ T9733] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.992288][ T9733] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.012645][ T9733] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.065147][ T5230] usb 2-1: Product: syz [ 312.095852][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.103028][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.115800][ T5230] usb 2-1: Manufacturer: syz [ 312.120471][ T5230] usb 2-1: SerialNumber: syz [ 312.182061][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.189337][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.330339][ T5230] usb 2-1: config 0 descriptor?? [ 312.419212][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.465988][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.492127][ T1859] usbhid 1-1:0.0: can't add hid device: -71 [ 312.500387][ T1859] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 312.559328][ T1859] usb 1-1: USB disconnect, device number 38 [ 312.572040][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.613131][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.643195][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.789965][ T9813] veth0_vlan: entered promiscuous mode [ 312.888400][ T9813] veth1_vlan: entered promiscuous mode [ 313.033912][ T9813] veth0_macvtap: entered promiscuous mode [ 313.069611][ T9813] veth1_macvtap: entered promiscuous mode [ 313.162683][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.174320][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.186005][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.210573][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.241635][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.252763][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.262850][ T5234] Bluetooth: hci3: command tx timeout [ 313.292983][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.363381][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.409552][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.444787][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.458529][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.480106][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.511182][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.685634][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.821212][ T9813] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.848236][ T9813] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.871649][ T9813] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.880486][ T9813] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.027691][ T1175] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 314.248649][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.275834][ T1175] usb 1-1: config 0 has no interfaces? [ 314.275887][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.337431][ T1175] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 314.363292][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.380241][ T1175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.406599][ T1175] usb 1-1: Product: syz [ 314.421026][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.427872][ T1175] usb 1-1: Manufacturer: syz [ 314.469012][ T9985] ptrace attach of "./syz-executor exec"[9986] was attempted by "./syz-executor exec"[9985] [ 314.514159][ T9985] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 314.534003][ T9985] team0: Failed to send options change via netlink (err -105) [ 314.598930][ T9985] team0: Port device netdevsim0 added [ 314.605412][ T1175] usb 1-1: SerialNumber: syz [ 314.661571][ T1175] usb 1-1: config 0 descriptor?? [ 314.683693][ T9988] netlink: 'syz.2.871': attribute type 10 has an invalid length. [ 314.872258][ T9988] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 314.915327][ T9988] team0: Failed to send options change via netlink (err -105) [ 315.009625][ T9988] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 315.029030][ T10] usb 2-1: USB disconnect, device number 46 [ 315.136733][ T9988] team0: Port device netdevsim0 removed [ 315.160446][ T9988] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 315.201606][ T9995] netlink: 'syz.4.844': attribute type 8 has an invalid length. [ 315.334603][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 315.363145][T10014] netlink: 88 bytes leftover after parsing attributes in process `syz.2.873'. [ 315.497572][ T10] usb 2-1: config 0 has no interfaces? [ 315.503351][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 315.541865][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.593907][ T10] usb 2-1: config 0 descriptor?? [ 315.834663][ T5280] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 315.961729][T10045] FAULT_INJECTION: forcing a failure. [ 315.961729][T10045] name failslab, interval 1, probability 0, space 0, times 0 [ 316.014894][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.4.877 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 316.016940][ T5280] usb 3-1: Using ep0 maxpacket: 16 [ 316.025611][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 316.025645][T10045] Call Trace: [ 316.025654][T10045] [ 316.025663][T10045] dump_stack_lvl+0x241/0x360 [ 316.048005][ T5280] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 316.051727][T10045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.065627][T10045] ? __pfx__printk+0x10/0x10 [ 316.070255][T10045] ? ref_tracker_alloc+0x332/0x490 [ 316.070765][ T5280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.075382][T10045] should_fail_ex+0x3b0/0x4e0 [ 316.075417][T10045] ? skb_clone+0x20c/0x390 [ 316.075439][T10045] should_failslab+0xac/0x100 [ 316.075460][T10045] ? skb_clone+0x20c/0x390 [ 316.075477][T10045] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 316.075505][T10045] skb_clone+0x20c/0x390 [ 316.075528][T10045] __netlink_deliver_tap+0x3cc/0x7c0 [ 316.075557][T10045] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.075575][T10045] netlink_deliver_tap+0x19d/0x1b0 [ 316.075595][T10045] netlink_sendskb+0x68/0x140 [ 316.075621][T10045] netlink_unicast+0x39d/0x990 [ 316.075642][T10045] ? __asan_memcpy+0x40/0x70 [ 316.075665][T10045] ? __pfx_netlink_unicast+0x10/0x10 [ 316.075696][T10045] netlink_rcv_skb+0x262/0x430 [ 316.075715][T10045] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 316.075741][T10045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.075782][T10045] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.075802][T10045] netlink_unicast+0x7f6/0x990 [ 316.075833][T10045] ? __pfx_netlink_unicast+0x10/0x10 [ 316.075854][T10045] ? __virt_addr_valid+0x183/0x530 [ 316.075875][T10045] ? __check_object_size+0x48e/0x900 [ 316.075899][T10045] netlink_sendmsg+0x8e4/0xcb0 [ 316.075929][T10045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.075951][T10045] ? __pfx_lock_release+0x10/0x10 [ 316.075975][T10045] ? aa_sock_msg_perm+0x91/0x160 [ 316.076001][T10045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.076020][T10045] __sock_sendmsg+0x221/0x270 [ 316.076046][T10045] ____sys_sendmsg+0x52a/0x7e0 [ 316.076083][T10045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.192716][ T5280] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 316.194511][T10045] __sys_sendmsg+0x292/0x380 [ 316.194545][T10045] ? __pfx___sys_sendmsg+0x10/0x10 [ 316.194576][T10045] ? __pfx_vfs_write+0x10/0x10 [ 316.194622][T10045] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 316.194643][T10045] ? lockdep_hardirqs_on+0x99/0x150 [ 316.194664][T10045] __do_fast_syscall_32+0xb4/0x110 [ 316.194685][T10045] ? exc_page_fault+0x590/0x8c0 [ 316.194715][T10045] do_fast_syscall_32+0x34/0x80 [ 316.194735][T10045] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 316.194768][T10045] RIP: 0023:0xf742d579 [ 316.194787][T10045] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 316.194804][T10045] RSP: 002b:00000000f571656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 316.194827][T10045] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020000200 [ 316.194841][T10045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 316.214874][ T5280] usb 3-1: config 1 has no interface number 1 [ 316.215430][T10045] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 316.220109][ T5280] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 316.224848][T10045] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 316.224866][T10045] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 316.224891][T10045] [ 316.224944][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.491652][ T10] usb 2-1: USB disconnect, device number 47 [ 316.642117][ T5280] usb 3-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x19, changing to 0x9 [ 316.672799][ T5280] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 316.725663][ T5280] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.735848][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.750350][ T5280] usb 3-1: Product: syz [ 316.766208][ T5280] usb 3-1: Manufacturer: syz [ 316.777722][ T5280] usb 3-1: SerialNumber: syz [ 316.994893][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 317.008763][T10031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.044180][T10031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.144587][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 317.152226][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.163639][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.175005][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 317.184720][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.209311][ T10] usb 5-1: config 0 descriptor?? [ 317.415867][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.422793][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.176295][ T5281] usb 1-1: USB disconnect, device number 39 [ 318.264583][ T5280] usb 3-1: USB disconnect, device number 36 [ 318.342754][ T7459] udevd[7459]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.343424][T10085] loop9: detected capacity change from 0 to 7 [ 318.414677][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 318.436901][T10085] Dev loop9: unable to read RDB block 7 [ 318.441263][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 318.452688][T10085] loop9: unable to read partition table [ 318.471970][T10085] loop9: partition table beyond EOD, truncated [ 318.481177][ T10] usb 5-1: USB disconnect, device number 35 [ 318.510187][T10085] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 318.510187][T10085] ) failed (rc=-5) [ 318.666183][ T5281] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 318.864027][ T1859] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 318.892815][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 318.906412][ T5281] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.918448][ T5281] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 576 [ 318.941442][ T5281] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 318.990414][ T5281] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 319.023843][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 319.052542][ T1859] usb 4-1: config 0 has no interfaces? [ 319.069302][ T5281] usb 1-1: SerialNumber: syz [ 319.074103][ T1859] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 319.090433][T10089] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.142780][ T1859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.156398][ T5281] cdc_acm 1-1:1.0: skipping garbage [ 319.173315][ T1859] usb 4-1: Product: syz [ 319.191927][ T1859] usb 4-1: Manufacturer: syz [ 319.212849][ T1859] usb 4-1: SerialNumber: syz [ 319.249562][ T1859] usb 4-1: config 0 descriptor?? [ 319.382282][ T5281] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 319.401432][T10119] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.890'. [ 319.411207][ T5281] usb 1-1: USB disconnect, device number 40 [ 319.604849][ T5283] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 319.691886][T10126] vlan2: entered allmulticast mode [ 319.774810][ T5283] usb 5-1: Using ep0 maxpacket: 16 [ 319.797021][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 319.873921][ T5283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.048763][ T5283] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 320.149627][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.218651][ T5283] usb 5-1: Product: syz [ 320.251758][T10133] loop9: detected capacity change from 0 to 7 [ 320.258097][ T5283] usb 5-1: Manufacturer: syz [ 320.268348][T10133] Dev loop9: unable to read RDB block 7 [ 320.268661][ T5283] usb 5-1: SerialNumber: syz [ 320.273995][T10133] loop9: unable to read partition table [ 320.299339][T10133] loop9: partition table beyond EOD, truncated [ 320.301212][ T5283] usb 5-1: config 0 descriptor?? [ 320.305821][T10133] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 320.305821][T10133] ) failed (rc=-5) [ 320.377476][ T5283] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 320.390341][ T5283] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 320.464901][ T8373] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 320.624729][ T8373] usb 3-1: Using ep0 maxpacket: 16 [ 320.637865][ T8373] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 320.653815][ T8373] usb 3-1: config 0 has no interface number 0 [ 320.654709][ T1859] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 320.671493][ T5283] em28xx 5-1:0.0: chip ID is em2874 [ 320.685513][ T8373] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 320.715558][ T8373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.736044][ T8373] usb 3-1: Product: syz [ 320.742895][ T8373] usb 3-1: Manufacturer: syz [ 320.748284][ T8373] usb 3-1: SerialNumber: syz [ 320.758000][ T8373] usb 3-1: config 0 descriptor?? [ 320.771595][ T8373] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 320.816186][ T1859] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 320.829867][ T1859] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 320.849179][ T1859] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 320.867325][ T1859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 320.881314][ T1859] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 320.894285][ T1859] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 320.908559][ T1859] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 320.916878][ T1859] usb 1-1: Product: syz [ 320.921137][ T1859] usb 1-1: Manufacturer: syz [ 320.946340][ T1859] cdc_wdm 1-1:1.0: skipping garbage [ 320.957212][ T1859] cdc_wdm 1-1:1.0: skipping garbage [ 320.968200][ T1859] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 320.974258][ T1859] cdc_wdm 1-1:1.0: Unknown control protocol [ 321.520236][ T5281] usb 4-1: USB disconnect, device number 32 [ 321.856750][T10149] FAULT_INJECTION: forcing a failure. [ 321.856750][T10149] name failslab, interval 1, probability 0, space 0, times 0 [ 321.864711][ T29] audit: type=1326 audit(1729306948.007:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 321.874267][T10149] CPU: 0 UID: 0 PID: 10149 Comm: syz.3.902 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 321.902013][T10149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 321.912196][T10149] Call Trace: [ 321.915506][T10149] [ 321.918464][T10149] dump_stack_lvl+0x241/0x360 [ 321.923183][T10149] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.924541][ T29] audit: type=1326 audit(1729306948.007:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 321.928392][T10149] ? __pfx__printk+0x10/0x10 [ 321.928420][T10149] ? __kmalloc_node_noprof+0xb7/0x440 [ 321.928445][T10149] ? __pfx___might_resched+0x10/0x10 [ 321.928466][T10149] ? lockdep_init_map_type+0xa1/0x910 [ 321.928492][T10149] should_fail_ex+0x3b0/0x4e0 [ 321.928521][T10149] should_failslab+0xac/0x100 [ 321.928544][T10149] __kmalloc_node_noprof+0xdf/0x440 [ 321.928566][T10149] ? __kvmalloc_node_noprof+0x72/0x190 [ 321.928589][T10149] __kvmalloc_node_noprof+0x72/0x190 [ 321.928608][T10149] io_ring_ctx_alloc+0x356/0x1b20 [ 321.928641][T10149] io_uring_create+0x2c0/0x1360 [ 321.928671][T10149] __se_sys_io_uring_setup+0x2ba/0x330 [ 321.987973][ T29] audit: type=1326 audit(1729306948.007:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 321.991367][T10149] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 322.014537][ T29] audit: type=1326 audit(1729306948.007:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 322.033868][T10149] ? __secure_computing+0x125/0x370 [ 322.033906][T10149] __do_fast_syscall_32+0xb4/0x110 [ 322.033928][T10149] ? exc_page_fault+0x590/0x8c0 [ 322.033956][T10149] do_fast_syscall_32+0x34/0x80 [ 322.033974][T10149] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.033996][T10149] RIP: 0023:0xf747d579 [ 322.034013][T10149] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.034029][T10149] RSP: 002b:00000000f576651c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 322.034051][T10149] RAX: ffffffffffffffda RBX: 0000000000005169 RCX: 0000000020000140 [ 322.034065][T10149] RDX: 00000000f72bd2f4 RSI: 0000000000000001 RDI: 00000000f576657c [ 322.034078][T10149] RBP: 0000000020000100 R08: 0000000000000000 R09: 0000000000000000 [ 322.034091][T10149] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.034103][T10149] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.034129][T10149] [ 322.034290][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.076424][ T29] audit: type=1326 audit(1729306948.007:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 322.077344][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.094513][ T29] audit: type=1326 audit(1729306948.007:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 322.112198][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.221956][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.227244][ T29] audit: type=1326 audit(1729306948.017:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 322.244036][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 322.259800][ T29] audit: type=1326 audit(1729306948.017:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 322.273673][ T8373] gspca_spca1528: reg_w err -110 [ 322.289670][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.295121][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 322.296086][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 322.301957][ T8373] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 322.311085][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 322.334715][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 322.345332][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.390307][ T29] audit: type=1326 audit(1729306948.547:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 322.417121][ T8373] usb 5-1: USB disconnect, device number 36 [ 322.423862][ T8373] em28xx 5-1:0.0: Disconnecting em28xx [ 322.450988][T10156] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.903'. [ 322.483831][ T29] audit: type=1326 audit(1729306948.547:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10148 comm="syz.3.902" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf747d579 code=0x7ffc0000 [ 322.488670][ T8373] em28xx 5-1:0.0: Freeing device [ 322.505870][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.581576][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.604675][T10131] netlink: 'syz.2.894': attribute type 21 has an invalid length. [ 322.614999][T10131] netlink: 128 bytes leftover after parsing attributes in process `syz.2.894'. [ 322.625026][T10131] netlink: 'syz.2.894': attribute type 5 has an invalid length. [ 322.644142][T10131] netlink: 3 bytes leftover after parsing attributes in process `syz.2.894'. [ 322.721135][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.821249][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.874633][ T1859] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 323.059278][ T1859] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.135135][ T1859] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 323.146937][T10157] chnl_net:caif_netlink_parms(): no params data found [ 323.156279][ T1859] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.210158][ T1859] usb 4-1: Product: syz [ 323.272209][ T1859] usb 4-1: Manufacturer: syz [ 323.282133][ T11] bridge_slave_1: left allmulticast mode [ 323.307264][ T1859] usb 4-1: SerialNumber: syz [ 323.319241][ T11] bridge_slave_1: left promiscuous mode [ 323.349282][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.359888][ T11] bridge_slave_0: left allmulticast mode [ 323.379165][ T11] bridge_slave_0: left promiscuous mode [ 323.404645][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.652785][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.701495][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.903022][ T1175] usb 3-1: USB disconnect, device number 37 [ 324.381046][ T5238] Bluetooth: hci0: command tx timeout [ 324.388270][ T1859] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 324.395639][ T1859] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 324.403233][ T1859] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 324.831157][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.845984][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.861562][ T11] bond0 (unregistering): Released all slaves [ 324.995147][T10163] netlink: 284 bytes leftover after parsing attributes in process `syz.3.905'. [ 325.074724][ T1859] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 325.357008][T10199] capability: warning: `syz.4.910' uses deprecated v2 capabilities in a way that may be insecure [ 325.381859][ T1859] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 325.456348][ T1859] usb 4-1: USB disconnect, device number 33 [ 325.556830][ T1859] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 325.816214][T10157] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.839710][T10157] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.870953][T10157] bridge_slave_0: entered allmulticast mode [ 325.889246][T10157] bridge_slave_0: entered promiscuous mode [ 325.929496][T10157] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.962002][T10217] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.914'. [ 325.967766][T10157] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.005769][T10157] bridge_slave_1: entered allmulticast mode [ 326.028899][T10157] bridge_slave_1: entered promiscuous mode [ 326.123914][ T11] hsr_slave_0: left promiscuous mode [ 326.144865][ T11] hsr_slave_1: left promiscuous mode [ 326.174750][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.183113][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.227195][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.251963][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.323092][ T11] veth1_macvtap: left promiscuous mode [ 326.385923][ T11] veth0_macvtap: left promiscuous mode [ 326.416095][ T11] veth1_vlan: left promiscuous mode [ 326.421435][ T11] veth0_vlan: left promiscuous mode [ 326.454629][ T5238] Bluetooth: hci0: command tx timeout [ 326.556174][ T5280] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 326.607319][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.620256][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.632831][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.661714][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.669685][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.677353][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 327.132770][ T5280] usb 5-1: config 0 has no interfaces? [ 327.184707][ T5280] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 327.232316][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.260644][ T5280] usb 5-1: Product: syz [ 327.264937][ T5280] usb 5-1: Manufacturer: syz [ 327.278255][ T5280] usb 5-1: SerialNumber: syz [ 327.462638][ T5280] usb 5-1: config 0 descriptor?? [ 327.670533][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 327.783787][T10227] netlink: 148 bytes leftover after parsing attributes in process `syz.4.916'. [ 328.534551][ T5234] Bluetooth: hci0: command tx timeout [ 328.774733][ T5234] Bluetooth: hci1: command tx timeout [ 328.906450][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.967216][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.062900][ T11] team0 (unregistering): Port device team_slave_1 removed [ 329.313113][ T11] team0 (unregistering): Port device team_slave_0 removed [ 330.050047][ T1859] usb 5-1: USB disconnect, device number 37 [ 330.106642][T10157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.177348][T10157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.207119][T10259] netlink: 'syz.0.923': attribute type 10 has an invalid length. [ 330.224833][T10259] macvlan0: entered promiscuous mode [ 330.230380][T10259] macvlan0: entered allmulticast mode [ 330.244147][T10259] veth1_vlan: entered allmulticast mode [ 330.396082][ T5280] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 330.409456][T10157] team0: Port device team_slave_0 added [ 330.420065][T10157] team0: Port device team_slave_1 added [ 330.495129][T10157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.512388][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.589571][ T5280] usb 4-1: config 0 has no interfaces? [ 330.595717][ T5280] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.614684][ T5234] Bluetooth: hci0: command tx timeout [ 330.615274][T10157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.630813][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.655655][ T5280] usb 4-1: config 0 descriptor?? [ 330.671824][T10157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.705130][T10157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.756353][T10157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.796260][T10231] chnl_net:caif_netlink_parms(): no params data found [ 330.855560][ T5234] Bluetooth: hci1: command tx timeout [ 331.242074][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.356687][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz.0.931'. [ 331.435517][T10157] hsr_slave_0: entered promiscuous mode [ 331.453538][T10157] hsr_slave_1: entered promiscuous mode [ 331.562920][T10157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.571101][T10157] Cannot create hsr debugfs directory [ 331.751141][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.010209][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.063193][T10231] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.082357][T10231] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.100600][T10231] bridge_slave_0: entered allmulticast mode [ 332.111295][T10231] bridge_slave_0: entered promiscuous mode [ 332.205886][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.932'. [ 332.259241][ T11] bond0: (slave netdevsim0): Releasing backup interface [ 332.288507][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.343442][T10231] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.366603][T10231] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.374082][T10231] bridge_slave_1: entered allmulticast mode [ 332.413732][T10231] bridge_slave_1: entered promiscuous mode [ 332.537720][T10231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.586633][T10231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.720377][T10231] team0: Port device team_slave_0 added [ 332.820998][T10345] sctp: [Deprecated]: syz.0.934 (pid 10345) Use of int in maxseg socket option. [ 332.820998][T10345] Use struct sctp_assoc_value instead [ 332.888983][T10231] team0: Port device team_slave_1 added [ 332.934648][ T5234] Bluetooth: hci1: command tx timeout [ 333.225847][T10231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.232860][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.272388][T10231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.324707][ T5283] usb 4-1: USB disconnect, device number 34 [ 333.499579][T10231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.510447][T10231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.542949][T10231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.573513][ T11] bridge_slave_1: left allmulticast mode [ 333.582549][ T11] bridge_slave_1: left promiscuous mode [ 333.595976][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.632991][ T11] bridge_slave_0: left allmulticast mode [ 333.643501][ T11] bridge_slave_0: left promiscuous mode [ 333.651167][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.720565][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.761217][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.976967][T10367] netlink: 148 bytes leftover after parsing attributes in process `syz.0.938'. [ 334.014671][ T1859] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 334.164671][ T1859] usb 5-1: Using ep0 maxpacket: 32 [ 334.173864][ T1859] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 334.184299][ T1859] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 334.199262][ T1859] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 334.208658][ T1859] usb 5-1: config 1 has no interface number 0 [ 334.222496][ T1859] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.250873][ T1859] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 334.292202][ T1859] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 334.301922][ T1859] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.323484][ T1859] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 334.510087][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.532550][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.545267][ T11] bond0 (unregistering): Released all slaves [ 334.557954][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.936'. [ 334.714762][T10231] hsr_slave_0: entered promiscuous mode [ 334.740788][T10231] hsr_slave_1: entered promiscuous mode [ 334.764886][T10231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.779943][T10231] Cannot create hsr debugfs directory [ 334.883766][ T1859] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 335.014690][ T5234] Bluetooth: hci1: command tx timeout [ 335.021076][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 335.488854][ T11] hsr_slave_0: left promiscuous mode [ 335.552609][ T11] hsr_slave_1: left promiscuous mode [ 335.599642][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.611342][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.693581][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.701402][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.729303][ T1859] usb 5-1: USB disconnect, device number 38 [ 335.742709][ T1859] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 335.824902][ T11] veth1_macvtap: left promiscuous mode [ 335.834283][ T11] veth0_macvtap: left promiscuous mode [ 335.841589][ T11] veth1_vlan: left promiscuous mode [ 335.856751][ T11] veth0_vlan: left promiscuous mode [ 336.903564][ T11] team0 (unregistering): Port device team_slave_1 removed [ 336.966330][ T11] team0 (unregistering): Port device team_slave_0 removed [ 337.524263][T10157] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.543549][T10385] IPv6: Can't replace route, no match found [ 337.559839][T10157] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.622118][T10157] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.693501][T10157] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 337.771291][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.805972][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.056806][T10157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.115030][T10157] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.150067][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.157440][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.203728][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.210947][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.322254][T10231] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 338.343182][T10231] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 338.393356][T10231] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 338.420267][T10231] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 338.480467][T10157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.587920][T10408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.598367][T10157] veth0_vlan: entered promiscuous mode [ 338.622675][T10157] veth1_vlan: entered promiscuous mode [ 338.632393][T10408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.674961][ T5280] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 338.700548][T10157] veth0_macvtap: entered promiscuous mode [ 338.738858][T10157] veth1_macvtap: entered promiscuous mode [ 338.756721][T10231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.786885][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.801150][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.812493][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 338.827964][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.839986][T10157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.856770][ T5280] usb 4-1: config 0 has no interfaces? [ 338.862420][ T5280] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 338.879511][ T5280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.881993][T10231] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.889555][ T5280] usb 4-1: config 0 descriptor?? [ 338.920548][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.944334][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.955972][T10157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.968650][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 338.968669][ T29] audit: type=1326 audit(1729306965.127:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10410 comm="syz.4.946" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf742d579 code=0x0 [ 338.969707][T10157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.008391][T10157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.037420][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.044596][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.055868][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.062986][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.084048][T10157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.094152][T10157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.111969][T10157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.122221][T10157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.349902][T10231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.367866][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.395058][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.494098][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.516478][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.652510][T10231] veth0_vlan: entered promiscuous mode [ 339.700070][T10231] veth1_vlan: entered promiscuous mode [ 339.836402][T10231] veth0_macvtap: entered promiscuous mode [ 339.868333][T10231] veth1_macvtap: entered promiscuous mode [ 339.946666][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.972218][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.003708][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.034627][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.075012][T10231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.118228][T10231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.141263][T10231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.187779][T10443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.950'. [ 340.234462][T10443] [ 340.236830][T10443] ===================================================== [ 340.243778][T10443] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 340.251252][T10443] 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 Not tainted [ 340.258383][T10443] ----------------------------------------------------- [ 340.265334][T10443] syz.4.950/10443 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 340.272997][T10443] ffffffff8e60a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0x108/0x390 [ 340.281676][T10443] [ 340.281676][T10443] and this task is already holding: [ 340.289066][T10443] ffff88802cbc6a20 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 340.297763][T10443] which would create a new lock dependency: [ 340.303677][T10443] (&f_owner->lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 340.311266][T10443] [ 340.311266][T10443] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 340.320717][T10443] (&dev->event_lock#2){..-.}-{2:2} [ 340.320758][T10443] [ 340.320758][T10443] ... which became SOFTIRQ-irq-safe at: [ 340.333665][T10443] lock_acquire+0x1ed/0x550 [ 340.338284][T10443] _raw_spin_lock_irqsave+0xd5/0x120 [ 340.343665][T10443] input_inject_event+0xc5/0x340 [ 340.348689][T10443] kd_sound_helper+0x1a0/0x210 [ 340.353541][T10443] input_handler_for_each_handle+0x103/0x1d0 [ 340.359635][T10443] call_timer_fn+0x18e/0x650 [ 340.364327][T10443] __run_timer_base+0x66a/0x8e0 [ 340.369267][T10443] run_timer_softirq+0xb7/0x170 [ 340.374219][T10443] handle_softirqs+0x2c5/0x980 [ 340.379073][T10443] __irq_exit_rcu+0xf4/0x1c0 [ 340.383744][T10443] irq_exit_rcu+0x9/0x30 [ 340.388070][T10443] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 340.393801][T10443] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.399878][T10443] finish_task_switch+0x1ea/0x870 [ 340.404988][T10443] __schedule+0x189d/0x4b30 [ 340.409580][T10443] schedule_idle+0x56/0x90 [ 340.414079][T10443] do_idle+0x56a/0x5d0 [ 340.418231][T10443] cpu_startup_entry+0x42/0x60 [ 340.423081][T10443] rest_init+0x2dc/0x300 [ 340.427409][T10443] start_kernel+0x47f/0x500 [ 340.431996][T10443] x86_64_start_reservations+0x2a/0x30 [ 340.437531][T10443] x86_64_start_kernel+0x9f/0xa0 [ 340.442548][T10443] common_startup_64+0x13e/0x147 [ 340.447566][T10443] [ 340.447566][T10443] to a SOFTIRQ-irq-unsafe lock: [ 340.454574][T10443] (tasklist_lock){.+.+}-{2:2} [ 340.454607][T10443] [ 340.454607][T10443] ... which became SOFTIRQ-irq-unsafe at: [ 340.467241][T10443] ... [ 340.467254][T10443] lock_acquire+0x1ed/0x550 [ 340.474417][T10443] _raw_read_lock+0x36/0x50 [ 340.479014][T10443] __do_wait+0x12d/0x850 [ 340.483359][T10443] do_wait+0x1e9/0x560 [ 340.487507][T10443] kernel_wait+0xe9/0x240 [ 340.491918][T10443] call_usermodehelper_exec_work+0xbd/0x230 [ 340.497893][T10443] process_scheduled_works+0xa63/0x1850 [ 340.503526][T10443] worker_thread+0x870/0xd30 [ 340.508198][T10443] kthread+0x2f0/0x390 [ 340.512351][T10443] ret_from_fork+0x4b/0x80 [ 340.516856][T10443] ret_from_fork_asm+0x1a/0x30 [ 340.521708][T10443] [ 340.521708][T10443] other info that might help us debug this: [ 340.521708][T10443] [ 340.531927][T10443] Chain exists of: [ 340.531927][T10443] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 340.531927][T10443] [ 340.544973][T10443] Possible interrupt unsafe locking scenario: [ 340.544973][T10443] [ 340.553280][T10443] CPU0 CPU1 [ 340.558642][T10443] ---- ---- [ 340.563995][T10443] lock(tasklist_lock); [ 340.568238][T10443] local_irq_disable(); [ 340.574986][T10443] lock(&dev->event_lock#2); [ 340.582185][T10443] lock(&f_owner->lock); [ 340.589032][T10443] [ 340.592476][T10443] lock(&dev->event_lock#2); [ 340.597331][T10443] [ 340.597331][T10443] *** DEADLOCK *** [ 340.597331][T10443] [ 340.605480][T10443] 6 locks held by syz.4.950/10443: [ 340.610578][T10443] #0: ffff88805d784420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 340.619742][T10443] #1: ffffffff8eaa3f70 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x3b3/0x1820 [ 340.628885][T10443] #2: ffff888030cda4e8 (&ctx->flc_lock){+.+.}-{2:2}, at: __break_lease+0x3c0/0x1820 [ 340.638372][T10443] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 340.647541][T10443] #4: ffff88806b2d30c0 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 340.656809][T10443] #5: ffff88802cbc6a20 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 340.665885][T10443] [ 340.665885][T10443] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 340.676377][T10443] -> (&dev->event_lock#2){..-.}-{2:2} { [ 340.682298][T10443] IN-SOFTIRQ-W at: [ 340.686535][T10443] lock_acquire+0x1ed/0x550 [ 340.693215][T10443] _raw_spin_lock_irqsave+0xd5/0x120 [ 340.700672][T10443] input_inject_event+0xc5/0x340 [ 340.707801][T10443] kd_sound_helper+0x1a0/0x210 [ 340.714770][T10443] input_handler_for_each_handle+0x103/0x1d0 [ 340.722947][T10443] call_timer_fn+0x18e/0x650 [ 340.729749][T10443] __run_timer_base+0x66a/0x8e0 [ 340.736781][T10443] run_timer_softirq+0xb7/0x170 [ 340.743806][T10443] handle_softirqs+0x2c5/0x980 [ 340.750747][T10443] __irq_exit_rcu+0xf4/0x1c0 [ 340.757508][T10443] irq_exit_rcu+0x9/0x30 [ 340.763920][T10443] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 340.771732][T10443] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 340.779894][T10443] finish_task_switch+0x1ea/0x870 [ 340.787092][T10443] __schedule+0x189d/0x4b30 [ 340.793769][T10443] schedule_idle+0x56/0x90 [ 340.800383][T10443] do_idle+0x56a/0x5d0 [ 340.806634][T10443] cpu_startup_entry+0x42/0x60 [ 340.813565][T10443] rest_init+0x2dc/0x300 [ 340.819984][T10443] start_kernel+0x47f/0x500 [ 340.826658][T10443] x86_64_start_reservations+0x2a/0x30 [ 340.834320][T10443] x86_64_start_kernel+0x9f/0xa0 [ 340.841446][T10443] common_startup_64+0x13e/0x147 [ 340.848559][T10443] INITIAL USE at: [ 340.852721][T10443] lock_acquire+0x1ed/0x550 [ 340.859308][T10443] _raw_spin_lock_irqsave+0xd5/0x120 [ 340.866685][T10443] input_inject_event+0xc5/0x340 [ 340.873713][T10443] kbd_led_trigger_activate+0xb8/0x100 [ 340.881254][T10443] led_trigger_set+0x582/0x9c0 [ 340.888103][T10443] led_trigger_set_default+0x229/0x260 [ 340.895644][T10443] led_classdev_register_ext+0x6e6/0x8a0 [ 340.903352][T10443] input_leds_connect+0x489/0x630 [ 340.910469][T10443] input_register_device+0xd3b/0x1110 [ 340.917928][T10443] atkbd_connect+0x752/0xa00 [ 340.924600][T10443] serio_driver_probe+0x7f/0xa0 [ 340.931536][T10443] really_probe+0x2b8/0xad0 [ 340.938120][T10443] __driver_probe_device+0x1a2/0x390 [ 340.945483][T10443] driver_probe_device+0x50/0x430 [ 340.952593][T10443] __driver_attach+0x45f/0x710 [ 340.959433][T10443] bus_for_each_dev+0x239/0x2b0 [ 340.966369][T10443] serio_handle_event+0x1c7/0x920 [ 340.973476][T10443] process_scheduled_works+0xa63/0x1850 [ 340.981104][T10443] worker_thread+0x870/0xd30 [ 340.987786][T10443] kthread+0x2f0/0x390 [ 340.993940][T10443] ret_from_fork+0x4b/0x80 [ 341.000451][T10443] ret_from_fork_asm+0x1a/0x30 [ 341.007302][T10443] } [ 341.010057][T10443] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 341.019338][T10443] -> (&client->buffer_lock){....}-{2:2} { [ 341.025252][T10443] INITIAL USE at: [ 341.029312][T10443] lock_acquire+0x1ed/0x550 [ 341.035729][T10443] _raw_spin_lock_irq+0xd3/0x120 [ 341.042576][T10443] evdev_read+0x535/0xe00 [ 341.048896][T10443] vfs_readv+0x6bc/0xa80 [ 341.055479][T10443] do_readv+0x1b1/0x350 [ 341.061569][T10443] __do_fast_syscall_32+0xb4/0x110 [ 341.068593][T10443] do_fast_syscall_32+0x34/0x80 [ 341.075351][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.083610][T10443] } [ 341.086279][T10443] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 341.094609][T10443] ... acquired at: [ 341.098586][T10443] lock_acquire+0x1ed/0x550 [ 341.103289][T10443] _raw_spin_lock+0x2e/0x40 [ 341.107969][T10443] evdev_pass_values+0xf2/0xad0 [ 341.112991][T10443] evdev_events+0x1c2/0x300 [ 341.117665][T10443] input_pass_values+0x286/0x860 [ 341.122766][T10443] input_event_dispose+0x30f/0x600 [ 341.128055][T10443] input_handle_event+0xa71/0xbe0 [ 341.133254][T10443] input_inject_event+0x22f/0x340 [ 341.138448][T10443] evdev_write+0x5fd/0x790 [ 341.143029][T10443] vfs_write+0x29c/0xc90 [ 341.147437][T10443] ksys_write+0x183/0x2b0 [ 341.152020][T10443] __do_fast_syscall_32+0xb4/0x110 [ 341.157322][T10443] do_fast_syscall_32+0x34/0x80 [ 341.162342][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.168841][T10443] [ 341.171156][T10443] -> (&new->fa_lock){....}-{2:2} { [ 341.176374][T10443] INITIAL USE at: [ 341.180349][T10443] lock_acquire+0x1ed/0x550 [ 341.186597][T10443] _raw_write_lock_irq+0xd3/0x120 [ 341.193361][T10443] fasync_remove_entry+0xff/0x1d0 [ 341.200131][T10443] sock_fasync+0x87/0x100 [ 341.206201][T10443] __fput+0x71b/0x880 [ 341.211921][T10443] task_work_run+0x24f/0x310 [ 341.218245][T10443] do_exit+0xa2f/0x28e0 [ 341.224219][T10443] do_group_exit+0x207/0x2c0 [ 341.230541][T10443] get_signal+0x16a3/0x1740 [ 341.236868][T10443] arch_do_signal_or_restart+0x96/0x860 [ 341.244153][T10443] syscall_exit_to_user_mode+0xc9/0x370 [ 341.251431][T10443] __do_fast_syscall_32+0xc4/0x110 [ 341.258282][T10443] do_fast_syscall_32+0x34/0x80 [ 341.264862][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.272926][T10443] INITIAL READ USE at: [ 341.277335][T10443] lock_acquire+0x1ed/0x550 [ 341.284018][T10443] _raw_read_lock_irqsave+0xdd/0x130 [ 341.291477][T10443] kill_fasync+0x199/0x4f0 [ 341.298062][T10443] sock_wake_async+0x147/0x170 [ 341.304999][T10443] sk_wake_async+0x183/0x280 [ 341.311761][T10443] unix_release_sock+0x727/0xd00 [ 341.318871][T10443] unix_release+0x91/0xc0 [ 341.325371][T10443] sock_close+0xbc/0x240 [ 341.331783][T10443] __fput+0x23f/0x880 [ 341.337958][T10443] task_work_run+0x24f/0x310 [ 341.344717][T10443] syscall_exit_to_user_mode+0x168/0x370 [ 341.352517][T10443] __do_fast_syscall_32+0xc4/0x110 [ 341.359805][T10443] do_fast_syscall_32+0x34/0x80 [ 341.366826][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.375324][T10443] } [ 341.377931][T10443] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 341.386722][T10443] ... acquired at: [ 341.390606][T10443] lock_acquire+0x1ed/0x550 [ 341.395291][T10443] _raw_read_lock_irqsave+0xdd/0x130 [ 341.400756][T10443] kill_fasync+0x199/0x4f0 [ 341.405353][T10443] evdev_pass_values+0x58a/0xad0 [ 341.410463][T10443] evdev_events+0x1c2/0x300 [ 341.415131][T10443] input_pass_values+0x286/0x860 [ 341.420239][T10443] input_event_dispose+0x30f/0x600 [ 341.425523][T10443] input_handle_event+0xa71/0xbe0 [ 341.430727][T10443] input_inject_event+0x22f/0x340 [ 341.435921][T10443] evdev_write+0x5fd/0x790 [ 341.440501][T10443] vfs_write+0x29c/0xc90 [ 341.444917][T10443] ksys_write+0x183/0x2b0 [ 341.449418][T10443] __do_fast_syscall_32+0xb4/0x110 [ 341.454698][T10443] do_fast_syscall_32+0x34/0x80 [ 341.459722][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.466215][T10443] [ 341.468533][T10443] -> (&f_owner->lock){....}-{2:2} { [ 341.473751][T10443] INITIAL USE at: [ 341.477647][T10443] lock_acquire+0x1ed/0x550 [ 341.483714][T10443] _raw_write_lock_irq+0xd3/0x120 [ 341.490302][T10443] __f_setown+0x6b/0x380 [ 341.496110][T10443] f_setown+0x243/0x310 [ 341.501832][T10443] do_fcntl+0x115/0x1a60 [ 341.507640][T10443] do_compat_fcntl64+0x572/0x1050 [ 341.514226][T10443] __do_fast_syscall_32+0xb4/0x110 [ 341.520987][T10443] do_fast_syscall_32+0x34/0x80 [ 341.527394][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.535279][T10443] INITIAL READ USE at: [ 341.539603][T10443] lock_acquire+0x1ed/0x550 [ 341.546100][T10443] _raw_read_lock_irq+0xda/0x120 [ 341.553033][T10443] do_fcntl+0x85f/0x1a60 [ 341.559267][T10443] do_compat_fcntl64+0x572/0x1050 [ 341.566284][T10443] __do_fast_syscall_32+0xb4/0x110 [ 341.573406][T10443] do_fast_syscall_32+0x34/0x80 [ 341.580598][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.588923][T10443] } [ 341.591411][T10443] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 341.600273][T10443] ... acquired at: [ 341.604073][T10443] lock_acquire+0x1ed/0x550 [ 341.608756][T10443] _raw_read_lock_irqsave+0xdd/0x130 [ 341.614220][T10443] send_sigio+0x37/0x390 [ 341.618638][T10443] kill_fasync+0x256/0x4f0 [ 341.623227][T10443] sock_wake_async+0x147/0x170 [ 341.628176][T10443] sk_wake_async+0x183/0x280 [ 341.633028][T10443] unix_release_sock+0x727/0xd00 [ 341.638139][T10443] unix_release+0x91/0xc0 [ 341.642638][T10443] sock_close+0xbc/0x240 [ 341.647056][T10443] __fput+0x23f/0x880 [ 341.651217][T10443] task_work_run+0x24f/0x310 [ 341.655973][T10443] syscall_exit_to_user_mode+0x168/0x370 [ 341.661790][T10443] __do_fast_syscall_32+0xc4/0x110 [ 341.667079][T10443] do_fast_syscall_32+0x34/0x80 [ 341.672096][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 341.678593][T10443] [ 341.680903][T10443] [ 341.680903][T10443] the dependencies between the lock to be acquired [ 341.680912][T10443] and SOFTIRQ-irq-unsafe lock: [ 341.694402][T10443] -> (tasklist_lock){.+.+}-{2:2} { [ 341.699538][T10443] HARDIRQ-ON-R at: [ 341.703529][T10443] lock_acquire+0x1ed/0x550 [ 341.709683][T10443] _raw_read_lock+0x36/0x50 [ 341.715839][T10443] __do_wait+0x12d/0x850 [ 341.721726][T10443] do_wait+0x1e9/0x560 [ 341.727613][T10443] kernel_wait+0xe9/0x240 [ 341.733605][T10443] call_usermodehelper_exec_work+0xbd/0x230 [ 341.741584][T10443] process_scheduled_works+0xa63/0x1850 [ 341.749231][T10443] worker_thread+0x870/0xd30 [ 341.755492][T10443] kthread+0x2f0/0x390 [ 341.761241][T10443] ret_from_fork+0x4b/0x80 [ 341.767311][T10443] ret_from_fork_asm+0x1a/0x30 [ 341.773728][T10443] SOFTIRQ-ON-R at: [ 341.777710][T10443] lock_acquire+0x1ed/0x550 [ 341.783870][T10443] _raw_read_lock+0x36/0x50 [ 341.790024][T10443] __do_wait+0x12d/0x850 [ 341.795919][T10443] do_wait+0x1e9/0x560 [ 341.801634][T10443] kernel_wait+0xe9/0x240 [ 341.807609][T10443] call_usermodehelper_exec_work+0xbd/0x230 [ 341.815153][T10443] process_scheduled_works+0xa63/0x1850 [ 341.822350][T10443] worker_thread+0x870/0xd30 [ 341.828589][T10443] kthread+0x2f0/0x390 [ 341.834303][T10443] ret_from_fork+0x4b/0x80 [ 341.840454][T10443] ret_from_fork_asm+0x1a/0x30 [ 341.846872][T10443] INITIAL USE at: [ 341.850763][T10443] lock_acquire+0x1ed/0x550 [ 341.856834][T10443] _raw_write_lock_irq+0xd3/0x120 [ 341.863431][T10443] copy_process+0x2267/0x3d50 [ 341.869706][T10443] kernel_clone+0x226/0x8f0 [ 341.875788][T10443] user_mode_thread+0x132/0x1a0 [ 341.882210][T10443] rest_init+0x23/0x300 [ 341.887926][T10443] start_kernel+0x47f/0x500 [ 341.893989][T10443] x86_64_start_reservations+0x2a/0x30 [ 341.901013][T10443] x86_64_start_kernel+0x9f/0xa0 [ 341.907530][T10443] common_startup_64+0x13e/0x147 [ 341.914034][T10443] INITIAL READ USE at: [ 341.918360][T10443] lock_acquire+0x1ed/0x550 [ 341.924868][T10443] _raw_read_lock+0x36/0x50 [ 341.931372][T10443] __do_wait+0x12d/0x850 [ 341.937607][T10443] do_wait+0x1e9/0x560 [ 341.943666][T10443] kernel_wait+0xe9/0x240 [ 341.949986][T10443] call_usermodehelper_exec_work+0xbd/0x230 [ 341.957879][T10443] process_scheduled_works+0xa63/0x1850 [ 341.965427][T10443] worker_thread+0x870/0xd30 [ 341.972012][T10443] kthread+0x2f0/0x390 [ 341.978071][T10443] ret_from_fork+0x4b/0x80 [ 341.984488][T10443] ret_from_fork_asm+0x1a/0x30 [ 341.991339][T10443] } [ 341.993828][T10443] ... key at: [] tasklist_lock+0x18/0x40 [ 342.001558][T10443] ... acquired at: [ 342.005357][T10443] lock_acquire+0x1ed/0x550 [ 342.010040][T10443] _raw_read_lock+0x36/0x50 [ 342.014724][T10443] send_sigio+0x108/0x390 [ 342.019227][T10443] kill_fasync+0x256/0x4f0 [ 342.023812][T10443] lease_break_callback+0x26/0x30 [ 342.029006][T10443] __break_lease+0x6d5/0x1820 [ 342.033853][T10443] vfs_truncate+0x26b/0x3b0 [ 342.038519][T10443] do_sys_truncate+0xdb/0x190 [ 342.043361][T10443] __do_fast_syscall_32+0xb4/0x110 [ 342.048645][T10443] do_fast_syscall_32+0x34/0x80 [ 342.053662][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.060160][T10443] [ 342.062473][T10443] [ 342.062473][T10443] stack backtrace: [ 342.068958][T10443] CPU: 1 UID: 0 PID: 10443 Comm: syz.4.950 Not tainted 6.12.0-rc3-syzkaller-00217-g4d939780b705 #0 [ 342.079626][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.089673][T10443] Call Trace: [ 342.092946][T10443] [ 342.095873][T10443] dump_stack_lvl+0x241/0x360 [ 342.100553][T10443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.105759][T10443] ? __pfx__printk+0x10/0x10 [ 342.110349][T10443] ? print_shortest_lock_dependencies+0xf2/0x160 [ 342.116681][T10443] validate_chain+0x4ebd/0x5920 [ 342.121553][T10443] ? __pfx_validate_chain+0x10/0x10 [ 342.126777][T10443] ? __pfx_validate_chain+0x10/0x10 [ 342.131983][T10443] ? __lock_acquire+0x1384/0x2050 [ 342.137012][T10443] ? mark_lock+0x9a/0x360 [ 342.141338][T10443] __lock_acquire+0x1384/0x2050 [ 342.146193][T10443] lock_acquire+0x1ed/0x550 [ 342.150698][T10443] ? send_sigio+0x108/0x390 [ 342.155213][T10443] ? __pfx_lock_acquire+0x10/0x10 [ 342.160235][T10443] ? __pfx_lock_acquire+0x10/0x10 [ 342.165257][T10443] ? do_raw_read_lock+0x3c/0x90 [ 342.170106][T10443] ? _raw_read_lock_irqsave+0xe9/0x130 [ 342.175567][T10443] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 342.181492][T10443] ? _raw_read_lock_irqsave+0xe9/0x130 [ 342.186951][T10443] _raw_read_lock+0x36/0x50 [ 342.191475][T10443] ? send_sigio+0x108/0x390 [ 342.195976][T10443] send_sigio+0x108/0x390 [ 342.200319][T10443] kill_fasync+0x256/0x4f0 [ 342.204750][T10443] ? kill_fasync+0x54/0x4f0 [ 342.209264][T10443] lease_break_callback+0x26/0x30 [ 342.214297][T10443] __break_lease+0x6d5/0x1820 [ 342.218978][T10443] ? __pfx___break_lease+0x10/0x10 [ 342.225046][T10443] ? generic_permission+0x2be/0x550 [ 342.230265][T10443] ? inode_permission+0xff/0x460 [ 342.235220][T10443] ? bpf_lsm_inode_permission+0x9/0x10 [ 342.240689][T10443] ? security_inode_permission+0xbc/0x320 [ 342.246422][T10443] vfs_truncate+0x26b/0x3b0 [ 342.250995][T10443] do_sys_truncate+0xdb/0x190 [ 342.255678][T10443] ? __pfx_do_sys_truncate+0x10/0x10 [ 342.260957][T10443] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 342.267548][T10443] ? lockdep_hardirqs_on+0x99/0x150 [ 342.272739][T10443] __do_fast_syscall_32+0xb4/0x110 [ 342.277857][T10443] ? ret_from_fork_asm+0x1a/0x30 [ 342.282794][T10443] ? lockdep_hardirqs_on+0x99/0x150 [ 342.288008][T10443] do_fast_syscall_32+0x34/0x80 [ 342.292861][T10443] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 342.299363][T10443] RIP: 0023:0xf742d579 [ 342.303428][T10443] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 342.323038][T10443] RSP: 002b:00000000f56f556c EFLAGS: 00000206 ORIG_RAX: 000000000000005c [ 342.331463][T10443] RAX: ffffffffffffffda RBX: 0000000020000040 RCX: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 342.339435][T10443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 342.347423][T10443] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 342.355493][T10443] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 342.363472][T10443] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.371449][T10443] [ 342.947476][T10435] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 343.169912][ T2605] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.279579][ T5281] usb 4-1: USB disconnect, device number 35 [ 343.280323][ T2605] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.368803][ T2605] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.442980][ T2605] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.531007][ T2605] bridge_slave_1: left allmulticast mode [ 343.539445][ T2605] bridge_slave_1: left promiscuous mode [ 343.546508][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.555023][ T2605] bridge_slave_0: left allmulticast mode [ 343.560703][ T2605] bridge_slave_0: left promiscuous mode [ 343.574848][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.771992][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.782914][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.797452][ T2605] bond0 (unregistering): Released all slaves [ 343.987840][ T2605] hsr_slave_0: left promiscuous mode [ 343.994217][ T2605] hsr_slave_1: left promiscuous mode [ 344.000730][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.009964][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.018074][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.025843][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.036834][ T2605] veth1_macvtap: left promiscuous mode [ 344.042365][ T2605] veth0_macvtap: left promiscuous mode [ 344.063229][ T2605] veth1_vlan: left promiscuous mode [ 344.069122][ T2605] veth0_vlan: left promiscuous mode [ 344.266196][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 344.311159][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 345.195106][ T2605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.239732][ T2605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.288712][ T2605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.347400][ T2605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.455351][ T2605] bridge_slave_1: left allmulticast mode [ 345.474287][ T2605] bridge_slave_1: left promiscuous mode [ 345.482268][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.497080][ T2605] bridge_slave_0: left allmulticast mode [ 345.504519][ T2605] bridge_slave_0: left promiscuous mode [ 345.510217][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.527767][ T2605] bridge_slave_1: left allmulticast mode [ 345.533490][ T2605] bridge_slave_1: left promiscuous mode [ 345.539380][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.549014][ T2605] bridge_slave_0: left allmulticast mode [ 345.554857][ T2605] bridge_slave_0: left promiscuous mode [ 345.560536][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.730181][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.740793][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.753180][ T2605] bond0 (unregistering): Released all slaves [ 345.767269][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.777451][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.788151][ T2605] bond0 (unregistering): Released all slaves [ 346.026932][ T2605] hsr_slave_0: left promiscuous mode [ 346.032764][ T2605] hsr_slave_1: left promiscuous mode [ 346.039144][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.048737][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.056497][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.066784][ T2605] hsr_slave_0: left promiscuous mode [ 346.072877][ T2605] hsr_slave_1: left promiscuous mode [ 346.079628][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.087168][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.096906][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.104334][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.114349][ T2605] veth1_macvtap: left promiscuous mode [ 346.120002][ T2605] veth0_macvtap: left promiscuous mode [ 346.125723][ T2605] veth1_vlan: left promiscuous mode [ 346.130984][ T2605] veth0_vlan: left promiscuous mode [ 346.136690][ T2605] veth1_macvtap: left promiscuous mode [ 346.142195][ T2605] veth0_macvtap: left promiscuous mode [ 346.147799][ T2605] veth1_vlan: left promiscuous mode [ 346.153072][ T2605] veth0_vlan: left promiscuous mode [ 346.340131][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 346.368703][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 346.590368][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 346.622384][ T2605] team0 (unregistering): Port device team_slave_0 removed [ 347.150505][ T2605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.198379][ T2605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.270607][ T2605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.324112][ T2605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.439944][ T2605] bridge_slave_1: left allmulticast mode [ 347.448122][ T2605] bridge_slave_1: left promiscuous mode [ 347.454145][ T2605] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.464173][ T2605] bridge_slave_0: left allmulticast mode [ 347.470068][ T2605] bridge_slave_0: left promiscuous mode [ 347.476335][ T2605] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.571441][ T2605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.581912][ T2605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.591810][ T2605] bond0 (unregistering): Released all slaves [ 347.854899][ T2605] hsr_slave_0: left promiscuous mode [ 347.860691][ T2605] hsr_slave_1: left promiscuous mode [ 347.866966][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.874372][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.882453][ T2605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.890576][ T2605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.899751][ T2605] veth1_macvtap: left promiscuous mode [ 347.905294][ T2605] veth0_macvtap: left promiscuous mode [ 347.910836][ T2605] veth1_vlan: left promiscuous mode [ 347.916165][ T2605] veth0_vlan: left promiscuous mode [ 348.053054][ T2605] team0 (unregistering): Port device team_slave_1 removed [ 348.080199][ T2605] team0 (unregistering): Port device team_slave_0 removed