last executing test programs: 19.638201581s ago: executing program 2 (id=997): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f0000000200)=@framed={{}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x60) openat$null(0xffffffffffffff9c, &(0x7f0000000400), 0x50100, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) read$watch_queue(0xffffffffffffffff, &(0x7f0000000100)=""/33, 0x21) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7584, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$tipc(r7, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000380)={0x18, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x2, 0xfffffffffffffffe}, {0x6, 0x9}]}) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) write$binfmt_script(r8, 0x0, 0xfffffe5d) 18.705411594s ago: executing program 1 (id=1001): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000034c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRES16, @ANYBLOB="3e00d152e9691f618e4c245aaacfbf91bd0c041626f09445c4d9b7b1aadf48c73663d5560c5bb40a25c18e6cb817c2f80aaf4168ca8dbbd901d46e9441504ba64a00c657689b6c077513c5719dacdde09805258541ded12c508df349bf0883259462cd4d03dc2a343c6d3ac5e4213d6687dee8f922827645f71486600701596057bfa2ecc91409e054a6e5f03e9089a93d0869d2ce19fdc36f85c074", @ANYBLOB="20a1b8e0babfbf58652bf4b7ec6b8748dcdf0be0bdc127385c6772753f14eb6cb093b648fa0d2b56a2a5106936ecea49974e237232f8b9d70adc11a90244c66addac45fe07a63eb41d353c1f65d2beaf668e780ce84e125782d3b5ffd103e96667f46087c905d545dbe01a2b70322744f346a3e5dffff308ebd322e0179e21190f39b47b23a24a9be9a4eda2d84bf0c532f875cd22f880c59604b677dd2019826aff5713274eca027cefd03c1a6229c1719f23005181c6d4a8d97fbe982f720511520ae60c8c1a7f6760"], 0x118) unshare(0x22020600) bpf$PROG_BIND_MAP(0x23, 0x0, 0xffffffffffffff15) r2 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = dup(r3) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045000044000000000021907800b8bec47affffff050090780a0101024a0000000000000000000000ac1e0301ac141400070b00e0000002ffffffff860600000000000000"], 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioperm(0x0, 0x40, 0x80000) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x8000, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4000010, r2, 0x9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000032c0)=[{{&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="9b", 0x1}, {&(0x7f0000000480)="562c861e6818c581e0ac4d397f5a9e3d7ea000dada006e9a47822312167c734f75d2cdb500a92f832cfad46a77b41cdf10f9459815a2ef94548473711dfebadf7e284f7959ae7f7ffd4af5", 0x4b}], 0x2, &(0x7f0000003380)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000b558d9d26aa170ef9ad694e92900200000000000000001000000010000000daac6c7e7638e6e85b13e2d3c3d9a3d6c22acdf5f0842e59bf9dfc9add854171b394baf39b13bc1bf53bc366cf706096b435c7a57dee7bfe7b17eb0c57fca035f6b7ac5ab738933b8c96cbfa6f77fdd253a6e10cec1f4cffa0d0ae67a8c855ae3aea9f3701b9caa6a5be190cdacb3c769c5611423b4", @ANYRES32=r2, @ANYRES32, @ANYRES32=r4, @ANYRES32=r5], 0xa8, 0x4040810}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000007c0)="16bd90778139fde21596dceb5ace37125c1dcbbe759c48d0a8a6ebcef6508b49cc13a06eec54c8b894dbfa4de47adec1168b4887c5ee43aa3b56cf548432ecea90ad9586b9c73458e126", 0x4a}, {&(0x7f0000000840)="4a6d7c32c06d050dd543425d0039d915a0d58aabdfd7aae66d25b735e2c71a833acdd44e230528f569afb1e0619ff97e68bfd8821747a579432346cb4f0796dd61c4e9d825c403acfa2b514bae5621171a5e8252dd96789af6e7a578f03b185b677af411be026a4aa48dc4e3f56f25255d6c2a1cba7e97e9fce3b2fc132b67464c5086bdcfc5100cc6b3d637702833446be6de047d441e54642045a3abd35ec71c8c4b3d0238ab6e951e822692e3ae9b59f3ba931957d0532996409f151ef84113fe", 0xc2}, {&(0x7f0000000940)="dff05987a680ce05931298968ac8488afd29f546973c5792dbf33799cfd81247814481f4", 0x24}, {&(0x7f0000000980)="351e00c3875a73bd4d89ebb9a17efb43e2fc350a0ef9671bf79a83fa663d0cc1a53e9334c70b05e13af2fc626100de10717641a36869da3437ab590cfa421d3a82abc55cab3d4860cbaa3db3bd39463ea11980a1d6718985f4ea4bf5a79a554779946e45ffaf11802336a6e0b6f1786258bbce656f1ecf019170ed781bb155a94553b9aced11a3fcaa8d18b145c8fba84c35f1002c169d47bf457ac27ae7408a1445eaf7e26acc297e99556f58ddf88e7f40c1ce0e1af54b2b172ae9c3004d2b26a444759fe7cbb8d83db6f302fdd333fc3dee82412e69b7", 0xd8}, {&(0x7f0000000a80)="295e26ac8bec232c30cae075a409bd7795c0d2c050ea2e95ba0b4fc86d0d43cc0bb4e875b4cb17", 0x27}, {&(0x7f0000000ac0)="c392510063bc0c5fb597023a7f8bd4db29ebbe285974a8e68c4fe05ca75e980c580f24ab6e1bbcf74852a39d9099626bd96823acf96898aa31a985fb3f6c922eb235edd4a597add5b3d7f935d0903f3b6d53d4a953702cf767749c0ef59eb38ec002361b7aa41229007b7c8f3856b9b37ce1d1ed28437b24f84f789c31", 0x7d}, {&(0x7f0000000b40)="f9c9afd93b565b9ed3e6387160d6f379c15fc601d2828161f6a85d4746b359c00498b48e65bfbde5c1b28f92ab234cbbcc43f2ed81454f9aaa28a6e5a157dc2c916cd2e1a4b120d068793e663effabf093f989bb43875b81c6e0c8a221624cee6b4b23353ac0230d1022bfb754697980519d44691ac93d48960931791d7201a1e95446b12b98302bf98b218729df6e02c9019589acd1512be2dc2ae6e81be4c796bd0516f9ac9e3f262b64ff55e871964c8d33049cc8a36378175837b0292fec3422f320d6eeaf30e7893c60ee77066206c47c6e19278c5d8a8b0c1835931899ae2aa15e940c11aaf2ab57984300adacf5dcf9d19f750a4f36c121bb226c1ec5b95d1cc4ea8aa57c0309c0efded439d7142e005a3348509ebc0d69e336bc8230c2222b703e853fbba7354977c7e88acb498a8c9fda5a66583a082c2300f022fbcc4d66289362fc41120c8062b306c7fafb92fd42cf1dcdd22512bf911febecbd938fa317d3f5cd237c6f2dfd94218f628cb30a68b0fc3a0b4d9b3705a24b4ce34c7a1cddbf89211a402589713bec811c97347f5ddc145c317924b1c5cc9f7e56cd82dad3409fd34ffe16d867d46b5c12304d60db3d230ac4ecb218882b85b3510bf197f07b31897524c90186cc6b357fb5a12f36ece1a297a59b5454b364f4caf558c4e02b268741f58dc68ba3096f42846d53fad23df39df9d308fef6dc0d05bb1a8768ed5b6c53a2d95eb25484d8f72ddc0a152d8335d7258804ff5c7102eb0d0203a6f1e11e0475b642397475f7ef8496cb7ee06b7da72f43433f157a764bce80a50743ec8366d4b797647abaa49edd9e3b8f6c0f87f5908ba9b2332141c1c4aa6c39992bbba0b95d831f681264ae1c5a9175995556c4ccdab673b1eee194fa414270276ee1fcbedd2de228ee0619263f689e230f24cc43e70a2bc8181812886916230ffde5c5abb78af0c57790114f573d1e5b9b209a30c7b9faca205ac85e54839b9c61311be7ab696cf1a40505ee4f5bb1bab87a1f7f55421ff9ce0c1fd3fb535bcf1d0d9c23c7237e332267bdcb8be270b17d51691e1f73afa787d005ff8a844ca7707c19c95ed25de768725993ef1e233190bfe56afb100fdc83710c1a21fce103dcb31c6062e9f37662d309b08a711cce7d3ea98f82ce77cd8c0fa61a25f4608bf116705387dc8740c3276c27c751457c4e3cba27f572bad0987f5dfcf9632519128b8bfe507a88876df956efc5049f81eac978ae2241badceb4326d048cacffbd911fef916517e5b3cb92b1e87e11cca8ec61c04ea012ed34be9d3668d67fc011f5036d8c44abd328f1314a586ace540dccf0bd76b49aadbb13523a1f36e111429bf9d095dc54d1b5983e67c69bd3497d66c7eb61eb10bb83e8852800b2d1a3bdcd3bb4508c67e0b7beaa45452592f702b4f86c0d48cef1eb178343fa65f220f84cd5080f787481a049a01536065c170b23569cce1e6fee39bb97e4b2ae09a55ba06e3ae6c81dd7a110326ad4a58e9c2a67459b7b5b69d586b2cc961746a9c4255bf3336560d72813cce93146d20c79d7e8f10435b86d2634dc8e287af303ea1e9a1de9386a8c63ea890ad39060e90a84fe9b1140350d6f98a590659f26cf680a0ee3f2ef15cb52fd4dac7bd9cc6ab3b798041423c5667f9d28788abc48e24084ef59ad39c4f7be877eac672a11cd40b8914e1c282777ddf7450d7be11c04510fc7d88685b8bb1bd4060517e326808676aed8c77bfd1773bfdee7d27bed9e5a279d32b5ce400d9f9bf57af91e8a9502a5fa817a34f348e96248d730d6a76682d55f0fb3e4bc55167aec3c88c7dc4babe301ffd1839f1526975ccf855d7fb0123a1cd1c14354ed8a2e9a1a8cea6dc9a53d0da8538f18c7bab8730d62201a52707d0439720db34e9bfbf29f85443e51b1a94bfde53aa05b4f95141ce1d98bac7381a98586e15b96e3bd6a75cd2a6d361cf60ce0cd9a496844aafb5abce36e7126d5c6b4a13fef6c739cd930991ca0f3a74be497ec1fc6829423f7af5edb2fc529d51e9d3c81ec4962a203fae4ffd090b7344081d904656201468d4e6bfd5c736e6971412313d0bfeead8cb409cc3b0412fda742babaa15679c0066319a490264e17869e7a2c93e2cb3f5280c0508daa4736996d7165d12d324e392be3cf9e4aa707b9681dbed0d661ea93833f9ba50b644fc60c86687f5a1039cd165bbfb8fd8e37ecd285add860dacec5b4861120b92d89020843bc64107162a3b21b4fbc11776268c1f8efe6f98f6962c85297b3015525756036cadca529b38f4699eb366f5a0e7e43fd5daf320b89452942e835a2b796e83643a55139c0af555f286b240291bd5437d795b8211954dd662f5261faab9e1b52300c99b4f326596f57efb67528f34f280d4cf6eea6511d38f620d799ad12c612c2f4ef028e4f302c75e803baaf515239ca4380c95c9a5160eedcd657085d04828168214058844df243208ba30e21d1aa21c0760453b77c824cd61f43edd62b9ab24f93037ff3a7dd4d0932de3f368036a7465d9fb4b0fa9055f59cef033855c5803536becdb6f81f744b90061b3c185c923f138b2e164ee50982403f643d10a44e82b55c10a9a6a83063bf7ad0cabbb7c683ca03ac66ed9cd095d4ceb771f3e2f6ec28d06bc84093aef9fe35d6b4352944f32ff31005e0180e6636e2525bfe4fc78c62c5d95858ca86b29857dcc468b989a892db685ab9d2398634d93f9f55a7b6e06d72e99c623f8639b4e277afc79d6fe34b35b0e5b5eea39631781e64f12452bda84683ba7e0f1281dd5b2b46985d042e9bd2bfe8b4fd56d31e10a0ac322fd413abc56457e50e444d4e0d3ccf11b5c270c494dd21c4d71ee42432fef2b9bdb9f8530a384b66cb5d6cab3928fc63682c9e88f5b573fe9cdd1da9fa127fc8693b0ca85ee6420f569da268fb58748978e950f5156c5a6af1ebbf5fb2f3c27ed30743959d5b2489588999a88e56facb8ad0d265808b732a66f8ce1e06b16a383d1da7b10c51e592c16c7ee07bd660da0191d7b29abaff5b703f44056285acb0bb81c44d303ced2c4bc7c763c52a3f3e83edaffd3d84af1ceeeba77bc5e0eedcbc65edb9044e1c1cc521f5a7bc4ba8614e879dd9ecdc4c54b4c7394b0a07ed1ffe583c9864e9403c5fd9e9f59b868ca8ee8201efa3cfc8e3b0e7483484f2137cdbf255685c720537ed688ae5afcdf4d409c58c44c52a41be1450b647f99b482141b26c25b7bb36911cb6c5594d363e1ab70ab0e6f96b55746cfc3506484bff1f265d1ba10744e5a06484d0c8594b64b982acbbd5f4e937a2ee33740971585cf71ae10aa14da9aa5cbe2277626de4d56ca0938d47e944d7b6c62e98dd965472958dca63e5d584334077703bac4d3d41a0df736b3765bd4c75e8b6f95de3b42c366a46d8968041a31edfcbdf4a109e9e0952eaa55f7b567bc225ce07f6d7f23ae38d06a2fc0de72b574d52ab224c809c9693302fe1656b2bb8fd5af6c45f2e3f8b582aa06e35b52ceff3bec56f21ce3d0664e1883fa86ad9584ac600cc47e784cc707af4d7c90c28937a738fa001596acd06748530c0b72be771739d54253f23ac8aea22ff2e518c71344e0598bfa952e58134fd91e6ad711544a2f84d77a227627d64a2f76ab3d95486eec990318ee44c2344f8ee60f009d2f74792e178f58d948da658813a4cce35f73b717136306a12c98ba59f7e7f7e716b9246aa51609e932698f6877034bba31432c9d20692b7dac21c53699b5972d01d851a35beccf5aaebec2bba1da7cc93139b2ff4a6583da51fcb3bedf2daaca4fa9f2b824de30d7100967032aaafdfc44bbf76965dd2cdc5c46f7c3377811192401b60a1d3b6b8d9b43ae12c334b0dfd156c4b729ac008312d3fed3b293510ad1f37b427f4de8ef898293eb86c858715200229c5e6871608ba1068326c6819078f11ef4580e0261732e43d898edcc3e109771b599fdd90622428c41fdb7aa641487d991fa0acb9414dcdcd527b26d9c0ef2ea883c3f45b05e48f5456c733a78a4bdf135e82450bb03e88ad45507637e73b722d32bf7dd9875a19eb1dab7c0ad286bd737b0c8e51bbc525b16d5ab5008b3830fb93d09f8b559dd78feff2d5b918af5939121df5a1de37ddcd5abe70f9e754ee5d73712376884797b220a3455aaac69794914d035f48861a6c89979d275ac761f18977134fae149dde69878256a5f2e49d0ceac0685b90384551b7bac189128bb7bddf1567985d2f7256e98fc0e6b41eca2f26c6f66277f5c66d8ccc53f078ee81d4b682d7d1d34d78aa0ed857acd33808f1c8217a931f6d0c761997bf666a2a343bd61d86c94762d592f4aa95c14c003b7a77df58f89cc48709d5085a99f00deccaddedb31e32c60d75cd548f1496fffaf06b48c0cb70d9571d52efd7120dcb7f24a7fd020234c3b97e0c7c6da96ad8c65271d31a64718d19196f27fd4f209c4633146f63e2e0c2b7981adbca453e207e6335f7f1f8ca40ceeaa3cc3a400778e96aa0f241d52320bc2e5ab853f12ee7dfc668fec8042e9018ec7d618b41d64808cad1a71618c43bb9daf9061e92fd1e1c42ea05b666470b155e9e33256ae8ccb6939f929b3a77e3a1e0ab3a8aef0e3cb1767ad4b0437488d9900ea622d471e4037077646c063db3e3c94839714e8f9470cfb7b403e87853802349eeaca36c49ce56c485e73ef28b9083f72b2a0f71cacc17f29ef73b04388f18ddf2a7bb2d8772d63a800086388a0fa04ef5b569d1b425d1996cd65b47617e6a0b4469bf26b0b5d17781518aebe90bb3857bf75623fd10f014ce0444f6625d385ad06d77107622662012453e8d45acf494057945ccb9abf6dfdda0b1b0be2532cef4acb973d6a44267910de6782ea7862e4b56761f2ac77bafacb2805dd0761c9482af9f635c2a8f444286121e19adc468783401ff59c315593352eb3e75991480099156c3f8a1ecd2655b444dc6fb1834575bd4b411ded4994170d308354e50519521efcd5ba03299f15d07eb26a97ce55950f96c16754073c6ace2209a3d7b667f8438b0712de7d30762187656cd07a5a0949f87f946a9173cd1777747dd584eb8a44c8b3988ab2d5a27545a769f78989ee95bc9f7a6a99d20f2888c0ef78c7c92e62e485398dc64613eb998b01b8d4252f13ce72fb27df2f22460e7f85f255b34d251706828f71dab875ba7dbf541e2e091b9775bf0aa35891ae203144f71fcfeaf6953a98489d482fbe377be23e2874e1933a96ed71f9b286c8ecfdf4bfa75f55d54419e5f6f68b1bef744174e7299022c0a6839ae9c625ea6f7af27331cec65c7549e458ce774cd1643adf61db3f05a5ecf77426be7e4d46e25950cb19ed46e97634dad8c7fd6db1693f3c4539918b59640d7ad22092152058b98041316ee60ab273174e156f799ef711dea75368175028156dcc417ed896db9139ba55b4adb0b7d5c3e8cd64bb267496b19288892d997b2794ca0037fdd9dabdd34069e1ebb736b3fdd682e0e0937204c6fc83fb5ede165b2c92340906859a71d18d3557bfef65d76b5768703ea3126ec888c46408544542c4c701b8614e68b9436e4d3348a9bcf40ea222b2a460f436c12c48e67a268812d798b1de6bade3354f6182f36f0fd3ff46f405ea0fca34867db92c1666d4b8151629e743d7cf6b569915f994306794c809aafdebeb79d344d4c1bc72255ab841e4a3c5cc5257ec6f1c328dca89d13c2a62b84c378f2bae6443c92dfda2ad4b68e05192c2c895b746469d0f81bb844f9acf", 0x1000}], 0x7, &(0x7f0000001c40)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x30, 0x1, 0x1, [r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0, 0x2000000}}, {{&(0x7f0000001d40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000001dc0)="a52be211c7b69a2864952b485e15e5dcf3d3ef95065f53d86932878e8255416176be91eccf210eb4c9b87397616fb839ee3d565f6055ec41bb0369a09fc7ff93dd7344882f101eec", 0x48}, {&(0x7f0000001e40)="cc024550bcb763733f8a689b8d1a89972486177a18f89e282d4a57108a8ff5e2b3201a01cc59d19e39b1c99a4ce65046c8d07abcba62e7110df51b58778c27448bbead79ff71f2bf4bca0ca4798f40f6bbf1367ac4ef2a261d1ba08764fc58604bd6309b35cedc", 0x67}, {&(0x7f0000002140)="f9d1bc58379d9d64a6583c68af3b2b1dbd7905e6dbcf4d08196a3bf18c8d69d7fc5a7544af26f8888461f5730e860f082147cd1d1729a3384222bd10eae1257ea73b9a3c21152178f6b0345f7f2a9bdd3d9d980771a0314b080f3557b83ebcea9c01a2f2d5e26e8aff36e3fff33f08f1541b1e62a7b5c0621d5be149c4b9cec980f34c58515661d62664cad1a2c21ecc76b7e710b73e13647d6ec4d4a3f3f5a604308e2c9b18b4341ec4d8706556e0c0193e39dc3fbad19d32819580cf6038dfb6a8f0dc94425b62663a2b4966906355e55da6fb9c35e65d780b6b5a5330ea0aba9131bd2c5920baecabbdd198633ae046decced5947af855990e0d0547fadbd8ca165802d1bba2a031150d6eab1b6dda10ea8263cc6328d3929c86824ba576de07815b4a6cdeff4c1101980987595aed146b107e0018a4712fd27eb55fa908d8f4da190780d612f4c595365f973ee4fcb6c95911e85007dc7fa7ac094c17c266343686ec032f0a9b79365258dcb1801a54e0dc380f115fccd9092636fae6d5aa3a2116933202f79462694abdb60bab68e41dbc62876e1383d523ec238ce1d85dd8a31dbed0845cf75c514efb6b5bbac402d942457e476c91afab7ab60fb5d4014f1a76c64ce3d26df94f85411bb305aed6a71a9502ba4cb1ba02969a0c5f0b9412618aa643cd5ae5c0be9df9edb5ffb29a6b14524f85b650ba8622144d8eea37cd4f856857dcec60072887ff882ca05ce17315b63e03cd42bcf6b227523638077edf4f96c0497ac4af48cb07931af73c658043cf9328b9d6dc1810b40e340a1524ad6f2fe9bf3c0c1d6ec521172153115f44afaf1c3e491ca822730d24f94e82187c5cc2ebbeaa7d5046229fbbfde399f6929443d0e3a0913f284f2b3f6a2155c1a93bdea79799a5dc204a0e97fb68fa171c02892d658719b03367e8d01de62f2287efcdb49eed7e972b2bdecd3ab5a227692a27b1e534edeab1dcc2e739f57ade31f6907c56e7500fefaabeb69ecb25c32544e2224305b82c1ddbd0ddf84b14d3ac2c3ffb201ca2fe572cb2bbe9267712936cfe878a1521c20df8dd29482632bb7d24d5dd82d7a29e319c878249807e2b6b03810561b004895f258e0316181aebff3c59dbe43a20f5718d1b3d87848dd1ee8912e53620fb8b64edfe0643c6904f715319619ed78482b921a6e7bc487801f382f39ad214c51a2a741d1bf30a2d27a747715abede7a21b5811e1882d35f6c9ae0192604923d19e6d87e4532dbfb1b51ed0112d02fc1a2c721d6749a4745c0d2173bf74c08c9785ad5a9a790d45dd43013836f305a5caef6930f17b50aace87b99c82dcc6b6d16432467e68fa0f9e8be453d46bc80be144d1aa97477544a6bba6a05b1dc23b0692616a5958c490546d9c876f529d7781166cb81dc79613f32900ea39e0ea3f1d6da7aa9a49436ff2a20423d82e471718311096428e40c390c0dc2a31d4a24875e18f7ac3d565acf9892214064e7dfa9441e90313118b4feb1f6843f1428a5f4338c1b897a391ba6ff5c94ccd0401bf1ba295ecbb3f5f6610b63c392af17ef921ab4dd6f25c1e405b7975bdad087422bfd922a0c39cc4ffb904d5d858518019b60d3dce344509a522ebc31b062a0d93175d4ee6b993c6f317b6f118039dca70bd9c38b201a7ebf7bf32ff200fb235826383d7becdb0ab2239273ef2fb1b85d027f21f3b80866471329353e8576c849cba348e2e055da19a79c7cf22620f75dcfd663684a03a5cd15e39799019d5b720fe0b324ae90fe7660115962e5dc8c3397bb794fab9fc29883b7126dc3428b8d4b1d02a947e46a366e6854580422c7c26c235fd3f09e1e5eea6b02ae3efa04aa246708c7ae3b087c1df4dd8453937a9ffbb71fef7e398c2d989aee368f5f20cb945b504ed77290b03e3a5c5b1c56f571ee0fb2f68813ea38b1de3049a12576ca7dc3a73c5fb8b6400f60cb18614c908bdb8b13202d1251d72beadc973979cf48f70cfdff0a6ac8de7c30b7cf16e683ac649663d2e4bf6fdcbea2de88731f115139b50b6a62dc62f6b16f76239ce31ff86250ac4a97dfd527e9dae9f549ee80228eb800400c4adbb5a3be095e648a08f553b27bc7281331c534f9898e14f650b900870839ece45afb9de80ad3805da614ea5ab65cdc4f655c5a9034dcd22636d8e28e4e886750aa6f810f50ea8b9fbde8a38e416a8fc785541f2cad919ec0b375e6b93e095867e258ca94d518600b1db5134a7dbe6d3a841dc2e7bd44797d7ae2a16282a1bbe7aabb6028a991c48e0322a27ed609f36bb99fea5e8c99ee00d866f4ff19171f6c102344cfa0d356fb4a0e2886cb5369b60375d8a1921b8d492c39dfea1b545135c74089227f0bab621fc38c8328876943867fcdd8c574af670285668df53f86eab5c0d8227671279b0ea36bee826a9034c078ae48cb510414353be6047ab884542fc0c827386f8a61e01b936284e3846cd52de46fefc9b115634a7b38a0e75054826340a40b09b7f1ad5c92c41238546b93d6eebdea1bcea3a5dc4d27d6a327d6f198fece8f649e8a8339580471f680cd97cd88b64dd66143d9898bec6121c059e12cf09c1ec3b2962e735c4a11881d0e35083c522dd6a5cb8d2d95c67f2c5f5bb0e42f1c5aa32105a102ae2aa22e417e802e7272966ce4401b5e3fa5181dee5da227f83ea680ccb5c3349a54d309b53dcafa8e577ddfdd6b957e65215e699e7232117ab625e5aef7e927f0ffd9998ded636fdb7758fe6adc2db41eecd1f00a0a03b4aa2a33e1db94d8e08519847d43612367af086c2796ae558c67131ae2134674dfd979612c9d94a000b6f92497cae62b5bbb94be71d949aae72891519f5e5d3b416e9c3f06b034b1c7e0ef0b9596b02131161f2c8e28c942d7019e3e7514b752453664e176feeeac083cf9727e830d0edb63e8b3c9432ebd01f158548e315c834b8b9214a2606a493d3bf7a39944f22f26267a1a33ca035f2efa64840e6c67f9c2f04735ae245bd067785c235b7bc4b80b7463f92cc967de9380eca3198eebee013dc36d11fc9228bedc711fa7e573b1c14495c04541703bb9fdc85e2b61a786859f636fddeafb20a8c8e2dfbba4128ff509380aaf6319ea8a8a839185712898c38875192d8c7dfed022e4e6c55bb399ee1326b411e2a40bddef9e30a3e9639468374febc312e0ac8e132266849816cc5d717b84ee75c9ce7ffad24d85dd9226b48e2aa069d3f90d376a4118cae2d4cd092a3410de7db2ba1855d61e92704c8109638c805419376cbec59408ceb9e520009e01b5e59b241a821cb7a1f6d2a2ddc702ac484e2b334a4064864bd8eb168a77bb6b5bc5c7d3b4c475dcdf03fdd7656fca2183d225675ff1f31cace869f03ed870da530451da382d8f5eff4b226d5db6ca03c887a74ca136a802e323e726a966c77ba9ce65d62bb4ab4da2e001c690a25d636972eb7fe388041f506b2996afc2e7cd4a15997818b67f480f2f1754f6bf1153db2ba5042c88a53cb1d30401571b461ee1fd7d97dc3e853b02c512fddb921cc9b780c7b5e89622b297e5d1a45e22cfa52fb92ea86f11af619bf506ca383703a76123e65ee1cf6fc46bdb6330f2023be7191b3601ad2c144c3122c4e69977235e15ec7346a34f31ea5351f3a3b42011cfa426f27eb3d3d1e0761c053ec5097a0f3e537a3b34d18b315f7cdd0e0e896bc11e2187d61a62e1c6159a362667e903ea720c0a79ab95a3716275c41f187b8ef6afacab784e61802181c19fcc45754d625151e2fdd2651701dd82583148c19f8ddd1ba6545e929efc8114806a722508dc2e1a38af1357ac5ee6f7e220fcc72c779723863a9eedfc981dbcd32359900a1d7b7e6179df911292938ae3cf507b130a70a49383a7ad75484630bee21284dea330ee9fa646b8bf94e2e838d4bf2037ed0f08f0f36fd65e70ee098d5839fd862f831ab44f5127f48f2d301786cf316f1e46c44dc0e96c42f159ed040bf48a874504a59934d1c010fb019cd66ec4bcade76008907f2482dd628e3cc5881beb6ffd82c7079efcd70638751e32c19c4684feeda41d48ab2fa3d8b72d0f03b28cb41c2ae22a950d84b3fa80f87f032f821d24c8efcec492016bb203e2b245287bf81f4ac8d40837140588e04ba6cfcce386f347ec860d8fff2cc8f8a02526085b6de7cbf84ee0a4b318dac57c3b0ad22d9054a1e5eded7389348b52d4cf4790c6e8a059cc9ae62c81fa997077bd020bda7a6d11cd48a9a76ee011edb5e841862a7eeb9227f134ba4fa0587c2d676858e9f0886196b4bb5ae1f65284e4bed9871c83916fea78d48b73e5aeec17903d2b11bac0351c82cd05c06003be34850e45e0854a49fbd86a598e9904d45dee5b173aa97942723d6563670b13c0248ab1f0e176556837be7915474575486fd113aadb809fb6b16f66a09c48923d7be86b089fede622c402ff081ae40fa42a5e0115fe63dd2760e3c7c121c0f52d55ef087a42d033113c366203c3ebbf14078666653a3bac463d3797ec08f48ba4e57a7bc936e2b546b217badf0b207c35d5ae33bf641c7c1953de595386893e650b9292e3e6181260ac5f997316faa6f126f3d7b32fbd984cf534e947bca38c5b00340287493ccbbf04cb2b0ece60bd9435f7310315a84bf7387c4fd7493c317cfc97e99d61b61ea29a45c812f730ed5a6715bb90a3942ac4e62517c2880bf36bbf3af9cd352f263ea696525e1852f38ea203e57968eaf5fedd7f7017ded6ef35934000dff5edda57d218741e22fbee0c08f949e228de856e593b2e4f73c8237ed5c81b1130fb03aa6b00c09ea52b65d24502b7ac77ae34ba6094ec6b5b1c3dfca836528b9d437872c0a5c587d21cc28203b4a3c5282a403ba1bb6af4e12679fbd99fa251d527ce634ddc246ee24179a9e7b706b24e35d06953fac2da72e3e79934e960b07380476e33f8ebee07810a36d40eb215011ad1022f70f19aeed90e99b37c1c43bb4f0861210d7bfd5d4593c801d000e60e3c84a845024b1a2b87696dc96bff9c710d744436192102f01401adb7f77a073dc667f49087b951578293b229aeb6728943edf76fcc51a9bd117c7b18c136d447a240f377403dc14e3a40b976e38a0ff8447d1de01239bfb827531cacfba8ead08e5f711c8d7366147570d2bae2706675ba3e6fd73dc6a22512a43b1f12e32ccbf130202d380680fea8d9aa6753489821b1e82082caee7b045fe09beb035d9d251685fab026192c92f5ecf71cb5a5953b7d8287fa1ac0a24a567ed9dcfd4a7dd264de8fd2b48cc0a7848ee58252cfa6a03458946c5302ddce828811f745ff5f2440a7a841fbba0daf0cae5025ec88f4f5342c1d488174b5869ded062019e1468f678535a8c8e974f1d8fa89427d9937d8b38336cfffd1563aa7bd3f0bfd2b63a8ed16d8229f7cb78c3e890d304aeb501f4027045429fad04c0e73caa5f161e6202190e33c49140e5d397c8caf2b487011035145ce925efc320bce76a0b7f6afb8344bb59a2fe982fbe9a44fa486990aa0ff20f9c6e4a07aa6f1dfe7f8767323fa908f2494fef04eae188e537618e0285bf23fd6c68f962ee3f2278bae4ccca18327a0c5a002d2bd51e39573ebebe3537b0f6e581324443c2870f1e5e066a7ce63b0ebebb3285a447a6dd554a1e80e7b78e60f4980934321fc1d66c3e839ff3754d4eeb92958be6dea0c7f304859c19c929cc3785e07839c2a719ea214c9a1a12f456fcdc8a38665ec0099c695c27bb67e4ddad311cd27dbb66b72d230592fe76da", 0x1000}, {&(0x7f0000001ec0)="182da443a2230f2186cad9ee3e04b4ad10e7d744896656d1be26fec7af052467555b4d9a94a982736b2452d252892c1e0a8466143e1018e5ca01156bca5bba64809ac8a839b6987e2904467ad3c8881decb32d9a6fd876c471e9dc6d108e3b1718035f7fd3aa3f986aee90c77e887eef0e698a", 0x73}, {&(0x7f0000001f40)="3a714acfd27ca9cf5a7270450e45924bbae7f385cb4f6004590d7e9c29ae4a4f0427f94c6b3d1ca708ae5869a58b19953bcc860cd1d88a220c31989ca8f671ea8f4679504da7ca9163c71872441dad5b7ce2730d220f94d05718417d3b2cdcaa85a33a5e6f6a31887739e673416820768bb67ba6edd2eb1cd69e89955c0cc6ada66c3e0305e2b5ccdad97ae9ddf5045410534f00fc01bc64d993a4450a8d6c234383817cbc1ef9b989", 0xa9}, {&(0x7f0000000540)="c2c80e6f69b4994e76510970d9ad7fa0b4b779650b8411808c494ba6e3b8aca1d384a3e6a43fbf5e7ea1a3fdc7b96295fe72240da75750e03ed54c404ab114b72cf18200ac7a7227ebd06f81d47db6c5081f670f559eaf885193e08cbc43804e4f5e6dcb732c26d2d0e2b2be2b449760082e027ab5c5665e804f931b5efc0c16cbe8498f4a4c908af67a2f2c4477f85f1314a81814c234b84c7ae07c6b5b209c868a7e5721f0d47bd50dcac8fecbc07b61", 0xb1}, {&(0x7f0000002000)="1661ae3d25558aa12a57466d525a6634e844616f961f611709aa7e2935c9773fd59120f78d", 0x25}], 0x7, &(0x7f0000003280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30, 0x22000000}}], 0x3, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0x2}, {&(0x7f0000000300)="d4d2e002b7c32df5e38392fe9e917ffceb3b9d3672fc968a78df9e1716cf39ac736982b652d9fd9fa1613c7adf22cc803439920b01e55b6733802ce9a404e523a5024e5db4eb14e469af5d592e6c1133f6ead3f43845", 0x56}, {&(0x7f0000000380)="5b43cf378aeedc963c392b18116949fab632298f2cc8c624a7649d6c64165f2e6eb73874af826ec7a78d1e1e0a87b75089bb037d3c7d402c15d91973ff84787a2a80d0fd3c7bb1b234c5b60f5b72aa9642a70c754349bc229f26bf53eb01e4148521c2bea30f8f6703548466d3d017920e5f537b3e995c1b21b3f2addd071837587ccae22cf328a04a5b8c9fd92814a3304013", 0x93}], 0x3, 0x0, 0x0, 0x2c}, 0xc010) semget$private(0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x0) 18.353258203s ago: executing program 2 (id=1003): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6f, 0x8d, 0xb4, 0x8, 0x582, 0x7a, 0xc73d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xf1, 0x4c, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}, {{0x9, 0x5, 0xd, 0x3}}]}}]}}]}}, 0x0) 16.59380782s ago: executing program 2 (id=1007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000006060108000000000073797a30000000"], 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x488d0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x30, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_MODE={0xa, 0x2, {0x4, 0x2}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8001}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20000042) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x860) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x20010, 0xffffffffffffffff, 0xd0685000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000640)={0xc}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0xf06, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x8}}, [@qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0x3}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r6, 0xc028564e, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$BTRFS_IOC_SCRUB(r7, 0x541b, 0x0) 15.672097245s ago: executing program 2 (id=1009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000700010000000000080000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000000400000000000000b7030000012900008500000008000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) 15.506366847s ago: executing program 2 (id=1010): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) semop(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xa6479b6b3f5862f4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0) mknod(0x0, 0x0, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c00f480080008400000001014000300686173683a69702c706f72742c69700005000500020000000500040000000000", @ANYRESHEX=r0], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000080601020000000000000000000000000500010007000000d4ac7e058002f0937688f389d0cc4c6b03db69a4be1dea83f0c03459e044f5795da021413293c3859c6b61ae447a7e1b88deb6ffa90383f370edbb6640e7a4c350a902229042f3f7f4e79e478b86da808988bdd7e09ef3f54f84ffff5a287d9495562121e2996002f7f1054ab223fb40168ed3770fd0d1ccf6164826558746b246858beec79b0af6d9173c04860f208046449f761218"], 0x1c}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="8ab6a1a3d9397116c2485dd1a366cd6571a551cf06329df827e60f11f1f7cef32034a69b60add1376d93fe6890e681463944a96a524609fe5d6ae5517e09f20bc6c7928b25f724f6cbaa9e9971453b74752998416bae4dab27b838242c06dcd03a7baa5a48bc9726bcbfaeb743a0afe5a9504a54b1f5492d3ee153ff87ea44cce35929c5ac965debe7cbdfd46b0057392f1f98f8ce6bdfdf3ab6dc024d7489ad23999617c87b615ae0", 0xa9) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x51, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000004c0)={0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x3, 0xc000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) 14.61502431s ago: executing program 2 (id=1012): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x8, 0x0, 0x2, 0x8, 0x7, 0x1074}, 0x20) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000080)) (async, rerun: 64) r2 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 64) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x7, 0x4040) read$usbfs(r3, &(0x7f0000000100)=""/255, 0xff) (async) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) (async, rerun: 32) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x30, 0xffffffffffffffff, 0x10000000) (rerun: 32) r6 = syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x20000, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}], [{@subj_type={'subj_type', 0x3d, '*(+^'}}]}}, 0x0, 0x0, &(0x7f0000000340)="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") (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000013c0)={{0x1, 0x1, 0x18, r2, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) (rerun: 64) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001400)=@IORING_OP_LINKAT={0x27, 0x6, 0x0, r6, &(0x7f0000001340)='./file0\x00', &(0x7f0000001380)='./file0\x00', r7, 0x1400, 0x0, {0x0, r8}}) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000001440)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x10, 0xfff}, &(0x7f0000001500)=0x90) (rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000001540)={r9, 0xb, "b22e9d44682b1e443aace1"}, &(0x7f0000001580)=0x13) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000016c0)={'team0\x00', 0x0}) (async) pipe2(&(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000028c0)={r1, 0x20, &(0x7f0000002880)={&(0x7f00000017c0)=""/156, 0x9c, 0x0, &(0x7f0000001880)=""/4096, 0x1000}}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000002940)={0x5, 0x13, &(0x7f00000015c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0xf}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x47}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @alu={0x4, 0x0, 0x9, 0x5, 0x9, 0x6, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x3, 0x6, 0xa, 0xc, 0x1}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}]}, &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', r10, 0x37, r11, 0x8, &(0x7f0000001740)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001780)={0x1, 0xd, 0x4, 0x7}, 0x10, r13, r7, 0x0, &(0x7f0000002900)=[r7, r7, r7, r7, r7, r7], 0x0, 0x10, 0x83}, 0x90) (async) listen(r2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002dc0)={r12, 0xe0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000002b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000002b40)=[0x0], &(0x7f0000002b80)=[0x0], 0x0, 0x78, &(0x7f0000002bc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000002c00), &(0x7f0000002c40), 0x8, 0xea, 0x8, 0x8, &(0x7f0000002c80)}}, 0x10) (async) getsockopt$inet_mreqn(r12, 0x0, 0x20, &(0x7f0000002e00)={@multicast1, @loopback, 0x0}, &(0x7f0000002e40)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000003400)={'batadv_slave_1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)=[{{&(0x7f0000002a00)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000002a40)="f5ad769a4bd9e103213e63d7ad930f2f4f282a70589e22c2120bb70fbfbc724da0fe207a27ee2d06482782e025b2fe49193058854c0d4a519cf59a44d0848f67b6065a2aa7037dd00c07a7b93b9c986463e6b85a41f80101e492b607654a1b515cdaa32d03643e77022dabaf7c2a859f36", 0x71}], 0x1, &(0x7f0000002e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010102, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010101, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @private=0xa010101, @local}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r17, @empty, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0xf8}}, {{&(0x7f0000002f80)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000003200)=[{&(0x7f0000002fc0)="9dce35bf9c8c38fd0a4624b2aaf2cec47825c7f8689a6fbec7b695e676e4d404a53383d43bf9bf98f75900052303c2", 0x2f}, {&(0x7f0000003000)="04ad78973c7430561d25a0ddec9fb9acffad86f6cc96ab01856f744e70aecb7fd68d9bca1810adbf3625a249ba6ab1afae954f7d763d9be984780da3b6726755bad5653e7390b6554519510c6e1029cf4cc97bf93895430f7997ae50ebb2e07a25cf22d243882b3c3fbdec163689fb345391bc14600c6fa6afeaefbc28508f72da051d35b03f1c3ed23d51339245e9dc2eb15240db0c2ac5b529ca1e1c22884c1f97", 0xa2}, {&(0x7f00000030c0)="df21ccb7045fd1910aac293adbced61b896c7ce087a3b776e35820d0974240f84cd6219263188742960761f18c9d0baf5400d3d381e6783d02a62f54b049d60efa8fee863b96fb2f41049d842d55a4a0035f6369ff847dbbfa02c6d3f4c9", 0x5e}, {&(0x7f0000003140)="e3d13a042662679944a9b234fda1c1adcdcf78e037ab95fc5e751e4d4d841646be992e8cb89cd151d47d7e20a7cc239d5dba0987c298e3fe3b353f164c56d8a1e59e675484154a6fad03ed1e384cf7ced2af5746fde3c3767673", 0x5a}, {&(0x7f00000031c0)}], 0x5, &(0x7f0000003280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x83d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x48000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast2, @private=0xa010100}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0x98}}, {{&(0x7f0000003340)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000033c0)=[{&(0x7f0000003380)}], 0x1, &(0x7f0000003440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r18, @rand_addr=0x64010100, @rand_addr=0x64010102}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010100, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x88}}, {{&(0x7f0000003500)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003940)=[{&(0x7f0000003540)="e96be2af12fc94", 0x7}, {&(0x7f0000003580)="3fdb32cb", 0x4}, {&(0x7f00000035c0)="da8582218de24bd87f866049769c76e6bb168aea53f2a1806b969c8832be0a7a0f0beecffae5a48a5846ac5f11b2b066b675c02724efd4f724ea837d2276207194f1ec47661e17c23f0a8ac71a05989b8f1db74810501211b0f4ef9ed3879a52a963f0e574b9add598bc597cd28777928ba997be80a31b0b259f43809feb599b0e3cadc24fcf48a8a2d8237ffd7b47cb2339dea5c8e9d7ee03927a77023e69253826ee8d8a0c528243be74a40eb1069ac2810fe1059cc11b8b0fb2", 0xbb}, {&(0x7f0000003680)="1c68b8605df3c0d29af977a8ebfbd118f0a245a688a33a9c6706945fce77b69335b2201a4969b2496f6d31f3418619587042ba37b2091d49ad8bd8fe4b8fc0251da4f51a36b0e6cf15ed30424182621f457e91e9801110131ee2d3aec864e6fbcacb8b5b1aea4ebcf225fd26909f4f05b3d3628066d1a035e9caedbfdff109c4e7ad0878228ef69dd00ca3b9e6e2f241c46ef5ab37aae094abd05e105c5f4599263f68b2bb14031ad7d4aa94f32bd4129de7a88104d684db0e31ebe22c0780bfa5b0de8277696dd7e919efe816b9f38a897ef0aba1466b9dc0e2849e73528afd", 0xe0}, {&(0x7f0000003780)="bf89f89237511274f0b6537c056a55d982b023c252015869583b41473bfe3ca1cbac6ce3bfb5f34ee2de523b75f5217f37a1b4a3ba24876a162a40737a69e5f9bf3132be3c89c3f70f2db94e1fb8fb933effa6d045d00590468f188796e542127efe7d8de8a12af89a76fdfad69da3f4bd15", 0x72}, {&(0x7f0000003800)="28a1b6a3c73adafc798c2714576674b8d6eca59e3b", 0x15}, {&(0x7f0000003840)="45c98b889182d118366f832b1f17784f7ff239957c1d1c1386a580751e148210ad528fb78b1e22fe54d44c7eecb17628fc9ef378cdc58d2c6d2a57bf5ad3fbbb80e156f29d0e07a49a436a471c26e9de8dadf29751ffbb2866667897423eb930265c259faa9c5942cf0d037365383014fb1e70ddf20865835fffed0f668e572399d06a2a079948a5490207648e8adb175813b9c96825dc6f289914c2d50dc8bece8ae539892c10ffcbda9392627d3d9510045d2dfaf084eb63c6608d9628bcba468d1ed864fa1c962b8d", 0xca}], 0x7, &(0x7f00000039c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @loopback, @rand_addr=0x64010100}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@generic={0x89, 0xb, "9e9953ca9fbf32b0b8"}, @ssrr={0x89, 0x13, 0x19, [@private=0xa010100, @multicast1, @remote, @multicast1]}, @noop]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x98}}], 0x4, 0x4000041) prlimit64(0x0, 0xf, &(0x7f0000003b80)={0x3, 0x3}, &(0x7f0000003bc0)) (async) set_mempolicy(0x4000, &(0x7f0000003c00)=0xcf, 0x9) (async, rerun: 64) fadvise64(r7, 0x3, 0x8000000000000001, 0x3) (async, rerun: 64) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000003ec0)={0x2, 0x13, &(0x7f0000003c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x300}, [@alu={0x7, 0x0, 0x7, 0x8, 0x8, 0xfffffffffffffffe, 0x8}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}, @map_val={0x18, 0x1, 0x2, 0x0, r12, 0x0, 0x0, 0x0, 0x573}, @tail_call]}, &(0x7f0000003d40)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x20, '\x00', r10, 0x1a, r7, 0x8, &(0x7f0000003d80)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r16, r12, 0x9, &(0x7f0000003dc0)=[r7, r7], &(0x7f0000003e00)=[{0x3, 0x4, 0x2, 0xb}, {0x5, 0x4, 0x8, 0x1}, {0x2, 0x1, 0x10, 0x5}, {0x2, 0x4, 0x6, 0xa}, {0x5, 0x2, 0xe, 0x6}, {0x4, 0x4, 0xb, 0x8}, {0x5, 0x3, 0xc, 0x2}, {0x0, 0x4, 0x7, 0x3}, {0x2, 0x4, 0xd}], 0x10, 0xb}, 0x90) (async, rerun: 64) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x3, 0xc, &(0x7f0000003f80)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}], &(0x7f0000004000)='GPL\x00', 0x80000000, 0xf9, &(0x7f0000004040)=""/249, 0x41100, 0x5, '\x00', r18, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000004140)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000004180)={0x1, 0x9, 0x7, 0x10}, 0x10, r13, r14, 0x0, &(0x7f00000041c0)=[r7, r11, r7, r11], 0x0, 0x10, 0x5}, 0x90) (rerun: 64) sendmsg$nl_route(r12, &(0x7f0000004640)={&(0x7f0000003c40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004600)={&(0x7f00000042c0)=@newlinkprop={0x330, 0x6c, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r18, 0x13e80, 0x18082}, [@IFLA_EVENT={0x8}, @IFLA_MAP={0x24, 0xe, {0x10001, 0x6000000000, 0x9, 0x31, 0xd5, 0x2}}, @IFLA_XDP={0x44, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r19}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_FD={0x8, 0x1, r14}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r12}, @IFLA_XDP_FD={0x8, 0x1, r14}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r12}, @IFLA_XDP_FD={0x8, 0x1, r7}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r20}]}, @IFLA_VF_PORTS={0x260, 0x18, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "709b6c77d8201977c928dd5db7c5429d"}, @IFLA_PORT_PROFILE={0x6, 0x2, 'fd'}]}, {0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "86d33c4e2c830cda2bd91e4d51bfe03c"}]}, {0x64, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8b877dccab88296adacdda1923a37795"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "392bf590d06483f2e7cf1b703ad1b7bc"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "43b8dd194baf948d7de30f3310cdab36"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9c66fbc032f8f0ed1e6524528a629d8c"}]}, {0x7c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0xfffffffd}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9d3546cfcc92d51a722798e604a1e792"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2a491e7fb6090d6248c30c10fe178e24"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "fc8c1b9fdbf6e8cbba4a29d6d4ab0b47"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "21da948a51171a3ba63c8535c8d1aa50"}, @IFLA_PORT_PROFILE={0x8, 0x2, '*(+^'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xc}]}, {0x4c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x3}, @IFLA_PORT_PROFILE={0x6, 0x2, 'fd'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "492161bc511e0cc3cf301caa078ece57"}, @IFLA_PORT_VF={0x8, 0x1, 0xffffffff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "55fbe610e569fbf8dcf5ef1d511c9221"}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f30c9695e7b8f929aa835af33187289d"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ffbccc5532ea5628820f7316bf341207"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "45ff769cb31c68b7f80416380cb86e7f"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c0eea75690bddca9f775bc0cb8b65304"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "ab7ee6895e8e3dc7ce523eb7bf00af7e"}]}, {0x90, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "43506681db0bf1aeb66736b2e68fb7a9"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "08204de7450948e7f83883614b3b28a3"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "8b38313375028eb311e0ff91e14d1922"}, @IFLA_PORT_PROFILE={0x9, 0x2, 'fuse\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "1131e3d5363f91beac5f83f7bbff9a89"}, @IFLA_PORT_VF={0x8, 0x1, 0x100}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "2aad7023ebdc8f1f6888f25b54b8a637"}, @IFLA_PORT_PROFILE={0xb, 0x2, 'user_id'}]}]}, @IFLA_MASTER={0x8, 0xa, r17}, @IFLA_NET_NS_PID={0x8}, @IFLA_BROADCAST={0xa, 0x2, @multicast}, @IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_GROUP={0x8, 0x1b, 0x2}]}, 0x330}, 0x1, 0x0, 0x0, 0x800}, 0x8800) 5.982767299s ago: executing program 1 (id=1002): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast2, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) execve(0x0, 0x0, &(0x7f0000000080)=[&(0x7f0000000d00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!3\xf2\x84\xa9H\x92\x1e4\"u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6 \x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJ9\x13V\x1e\b\x16\xf6/\xc3{h\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\x1f\x02)sP%Z\xad\x83\xda\xbe2r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xafd\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91_]\xb26\xbf\x9cA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10`xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0\xd8k\xb7vo?1H\x86\x032\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xf2\a\x00\x00\x00\x00\x00\x00\x00\x00\x13\x9eX$\xe1\x00\x00\x00\x00\x00\x00\x003\xe0\xe3\x0e\xaa\x8e\x9a\x1f\x12\fRw\x11B\x17xO0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) 3.239533212s ago: executing program 4 (id=1044): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000002c0)) poll(0x0, 0x0, 0x64) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r1, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = eventfd2(0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x5421) 3.079214948s ago: executing program 1 (id=1045): gettid() timer_create(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}]}, 0x37) sendmsg$unix(r0, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, 0x0) 2.998036416s ago: executing program 4 (id=1046): syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="da"], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000440)={&(0x7f00000002c0)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) rt_sigreturn() r1 = eventfd(0x0) r2 = dup2(r1, r1) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18, 0xd, 0x0, {{0x17610384cad1c145}}}, 0x5c) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffff"], 0x15) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000500)={0x50, 0xffffffffffffffc4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.80768213s ago: executing program 3 (id=1047): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ENTRY(r4, &(0x7f0000001400)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xfff6) rt_sigreturn() write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x22) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.729729689s ago: executing program 1 (id=1048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) 2.729284004s ago: executing program 4 (id=1049): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x7, @private0={0xfc, 0x0, '\x00', 0x2}, 0xffffffff}, 0x1c) fsopen(0x0, 0x1) 2.268036152s ago: executing program 0 (id=1051): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.267823582s ago: executing program 3 (id=1052): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000880)='.\x00', 0x9800, &(0x7f0000001dc0)={0x0, 0x0, 0x20000}, 0x20) 2.027364548s ago: executing program 4 (id=1053): unshare(0x20020400) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) 1.692915943s ago: executing program 0 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000210000000000000000000000000a6c000000160a3f360000000000000000020000000900010073797a30000000004000038008000240000000002c000380"], 0x94}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') 178.250075ms ago: executing program 0 (id=1056): bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x8000, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 79.67337ms ago: executing program 0 (id=1057): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015000000"], 0x4c}}, 0x0) 0s ago: executing program 0 (id=1058): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f00000002c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000780)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.359431][ T1850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.367468][ T5272] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 280.369286][ T1850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.387444][ T1850] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.412363][ T1850] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.472198][ T1850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.517141][ T5229] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 280.528002][ T1850] usb 2-1: config 0 descriptor?? [ 280.528357][ T5229] Bluetooth: hci4: SCO packet for unknown connection handle 14 [ 280.542016][ T9240] loop0: detected capacity change from 0 to 7 [ 280.570582][ T9240] Dev loop0: unable to read RDB block 7 [ 280.577147][ T9240] loop0: AHDI p1 p3 p4 [ 280.581730][ T9240] loop0: partition table partially beyond EOD, truncated [ 280.595453][ T9240] loop0: p1 start 2048 is beyond EOD, truncated [ 280.603597][ T9240] loop0: p3 size 16779293 extends beyond EOD, truncated [ 280.637648][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 280.648271][ T5272] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 280.666296][ T5272] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 280.692285][ T5272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 280.722887][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.774484][ T1850] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 280.789758][ T5272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 280.825850][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 280.840660][ T1850] usb 2-1: USB disconnect, device number 46 [ 280.881004][ T1850] usblp0: removed [ 280.890661][ T5272] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 280.900361][ T9220] can: request_module (can-proto-0) failed. [ 280.925606][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.953611][ T5272] usb 4-1: config 0 descriptor?? [ 281.195538][ T5272] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 281.241175][ T5272] usb 4-1: USB disconnect, device number 32 [ 281.314545][ T5272] usblp0: removed [ 281.400806][ T1850] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 281.587693][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.718'. [ 281.627398][ T1850] usb 2-1: Using ep0 maxpacket: 32 [ 281.648051][ T1850] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 281.666722][ T1850] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 281.686987][ T1850] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 281.705388][ T1850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 281.715718][ T1850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 281.731562][ T1850] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 281.776916][ T1850] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 281.789344][ T1850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.807536][ T5272] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 281.828103][ T1850] usb 2-1: config 0 descriptor?? [ 281.997550][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 282.011258][ T5272] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 282.021343][ T5272] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 282.031052][ T5272] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 282.042036][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 282.052940][ T5272] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 282.063989][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 282.096677][ T5272] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 282.130161][ T5272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.166704][ T5272] usb 4-1: config 0 descriptor?? [ 282.338619][ T29] audit: type=1326 audit(1723355173.809:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9221 comm="syz.1.709" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x0 [ 282.433472][ T29] audit: type=1326 audit(1723355173.909:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9223 comm="syz.3.710" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9181779f9 code=0x0 [ 282.507748][ T1850] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.544275][ T1850] usb 2-1: USB disconnect, device number 47 [ 282.560207][ T5273] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 282.580859][ T1850] usblp0: removed [ 282.603508][ T5272] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 282.634107][ T5272] usb 4-1: USB disconnect, device number 33 [ 282.637523][ T5278] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 282.663734][ T5272] usblp0: removed [ 282.757443][ T5273] usb 1-1: Using ep0 maxpacket: 8 [ 282.767889][ T5273] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 282.785498][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.795780][ T5273] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.814780][ T5273] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.827346][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 282.834797][ T5273] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.843628][ T5278] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.845058][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.860128][ T5278] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.879606][ T5278] usb 5-1: Product: syz [ 282.888917][ T5278] usb 5-1: Manufacturer: syz [ 282.893659][ T5278] usb 5-1: SerialNumber: syz [ 282.919420][ T5278] usb 5-1: config 0 descriptor?? [ 283.139234][ T5278] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 284.049240][ T29] audit: type=1326 audit(1723355175.519:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.126473][ T29] audit: type=1326 audit(1723355175.529:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.180695][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.3.727'. [ 284.198977][ T29] audit: type=1326 audit(1723355175.529:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.264914][ T29] audit: type=1326 audit(1723355175.529:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.310709][ T5264] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 284.337195][ T5264] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 284.374555][ T29] audit: type=1326 audit(1723355175.529:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.437040][ T29] audit: type=1326 audit(1723355175.529:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.479314][ T29] audit: type=1326 audit(1723355175.529:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.585968][ T29] audit: type=1326 audit(1723355175.529:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 284.698606][ T29] audit: type=1326 audit(1723355175.529:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f19ed5764df code=0x7ffc0000 [ 284.766990][ T29] audit: type=1326 audit(1723355175.529:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9284 comm="syz.1.726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x7ffc0000 [ 285.027477][ T5264] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 285.246924][ T5273] usb 1-1: usb_control_msg returned -71 [ 285.251813][ T5264] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 285.264754][ T5273] usbtmc 1-1:16.0: can't read capabilities [ 285.294645][ T5264] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.334402][ T5273] usb 1-1: USB disconnect, device number 57 [ 285.341475][ T5264] usb 4-1: Product: syz [ 285.373102][ T5264] usb 4-1: Manufacturer: syz [ 285.404861][ T5264] usb 4-1: SerialNumber: syz [ 285.431055][ T5264] usb 4-1: config 0 descriptor?? [ 285.457054][ T5278] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 285.670835][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 285.906052][ T5278] usb 5-1: USB disconnect, device number 49 [ 285.926880][ T5264] usb 4-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (1) [ 286.143795][ T5264] usb 4-1: failed to fetch extended address, random address set [ 286.243169][ T5264] usb 4-1: USB disconnect, device number 34 [ 286.339126][ T9314] loop2: detected capacity change from 0 to 7 [ 286.346398][ T9314] Dev loop2: unable to read RDB block 7 [ 286.364563][ T9314] loop2: unable to read partition table [ 286.373756][ T9314] loop2: partition table beyond EOD, truncated [ 286.385176][ T9314] loop_reread_partitions: partition scan of loop2 (ώθ’«xόŸΡψ ιΪ¬§½dΖ€΄ΰ–ƒέ‘―¨β·ϋ [ 286.385176][ T9314] ) failed (rc=-5) [ 286.588602][ T9316] input: syz0 as /devices/virtual/input/input14 [ 287.247355][ T5264] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 287.437543][ T5264] usb 5-1: Using ep0 maxpacket: 8 [ 287.449019][ T5264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.472876][ T5264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.495477][ T5264] usb 5-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 287.523424][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.546995][ T5264] usb 5-1: config 0 descriptor?? [ 288.010939][ T5264] usbhid 5-1:0.0: can't add hid device: -71 [ 288.019255][ T5264] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.063178][ T5264] usb 5-1: USB disconnect, device number 50 [ 288.176866][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.206512][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.254499][ T9347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.318237][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.352892][ T9347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.392282][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.537777][ T5264] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 288.688633][ T9357] loop2: detected capacity change from 0 to 7 [ 288.768132][ T9357] Dev loop2: unable to read RDB block 7 [ 288.784199][ T9357] loop2: unable to read partition table [ 288.810374][ T5229] Bluetooth: hci3: command 0x0406 tx timeout [ 288.860444][ T9357] loop2: partition table beyond EOD, truncated [ 288.880145][ T5264] usb 5-1: device descriptor read/all, error -71 [ 288.897794][ T9357] loop_reread_partitions: partition scan of loop2 (ώθ’«xόŸΡψ ιΪ¬§½dΖ€΄ΰ–ƒέ‘―¨β·ϋ [ 288.897794][ T9357] ) failed (rc=-5) [ 288.942049][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 288.969875][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.989015][ T9360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.105501][ T9360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.114026][ T9360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.891611][ T9376] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.751'. [ 290.860547][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 291.205208][ T5277] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 291.426950][ T5277] usb 5-1: Using ep0 maxpacket: 8 [ 291.447842][ T5277] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 291.479978][ T5277] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.512786][ T5277] usb 5-1: config 0 has no interface number 0 [ 291.540033][ T5277] usb 5-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.574993][ T5277] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.626756][ T5277] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.658433][ T5277] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.682239][ T5264] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 291.690021][ T5277] usb 5-1: config 0 interface 52 has no altsetting 0 [ 291.690070][ T5277] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 291.690095][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.779252][ T5277] usb 5-1: config 0 descriptor?? [ 291.917410][ T5264] usb 4-1: Using ep0 maxpacket: 32 [ 291.935090][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.950701][ T5264] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.976639][ T5264] usb 4-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 292.002198][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.041489][ T5264] usb 4-1: config 0 descriptor?? [ 292.069666][ T9398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.091129][ T9398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.484243][ T5264] thrustmaster 0003:044F:B320.000D: unknown main item tag 0x0 [ 292.510407][ T5264] thrustmaster 0003:044F:B320.000D: unknown main item tag 0x0 [ 292.545128][ T5264] thrustmaster 0003:044F:B320.000D: unknown main item tag 0x0 [ 292.555315][ T5264] thrustmaster 0003:044F:B320.000D: unknown main item tag 0x0 [ 292.575407][ T5264] thrustmaster 0003:044F:B320.000D: unknown main item tag 0x0 [ 292.596869][ T5264] thrustmaster 0003:044F:B320.000D: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.3-1/input0 [ 292.623112][ T5264] thrustmaster 0003:044F:B320.000D: no inputs found [ 292.673274][ T5264] usb 4-1: USB disconnect, device number 35 [ 292.968735][ T9418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.004953][ T9418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.184311][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.762'. [ 293.230357][ T5264] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 293.860718][ T5277] usb 5-1: Can not set alternate setting to 1, error: -71 [ 293.909275][ T5277] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71 [ 293.932792][ T5229] Bluetooth: hci2: command 0x0406 tx timeout [ 293.981308][ T5277] usb 5-1: USB disconnect, device number 53 [ 294.266439][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 294.266457][ T29] audit: type=1326 audit(1723355185.739:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9441 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9181779f9 code=0x7fc00000 [ 294.387385][ T5264] usb 3-1: device descriptor read/64, error -71 [ 294.657422][ T5264] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 294.869405][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 294.891694][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.920794][ T5264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.961721][ T5264] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 294.987350][ T29] audit: type=1326 audit(1723355186.459:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9441 comm="syz.3.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7ff9181779f9 code=0x7fc00000 [ 295.054224][ T5264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.100150][ T5264] usb 3-1: config 0 descriptor?? [ 295.141164][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'. [ 295.166268][ T9458] IPv6: Can't replace route, no match found [ 295.351592][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.768'. [ 295.410110][ T9458] netlink: 'syz.1.776': attribute type 3 has an invalid length. [ 295.436926][ T9458] netlink: 48 bytes leftover after parsing attributes in process `syz.1.776'. [ 295.468569][ T9458] netlink: 'syz.1.776': attribute type 3 has an invalid length. [ 295.515698][ T9458] netlink: 48 bytes leftover after parsing attributes in process `syz.1.776'. [ 295.654616][ T5264] usbhid 3-1:0.0: can't add hid device: -71 [ 295.673406][ T5264] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 295.726177][ T5264] usb 3-1: USB disconnect, device number 42 [ 296.195425][ T9481] netlink: 'syz.3.781': attribute type 2 has an invalid length. [ 296.437712][ T9452] can: request_module (can-proto-0) failed. [ 296.828460][ T5264] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 297.039651][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 297.062321][ T5264] usb 3-1: config 0 has an invalid interface number: 112 but max is 1 [ 297.089969][ T5264] usb 3-1: config 0 has an invalid interface number: 17 but max is 1 [ 297.108891][ T5264] usb 3-1: config 0 has no interface number 0 [ 297.129140][ T5264] usb 3-1: config 0 has no interface number 1 [ 297.148909][ T5264] usb 3-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14 [ 297.168669][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.187430][ T5264] usb 3-1: Product: syz [ 297.202242][ T5264] usb 3-1: Manufacturer: syz [ 297.209754][ T5264] usb 3-1: SerialNumber: syz [ 297.224889][ T5264] usb 3-1: config 0 descriptor?? [ 297.285086][ T9507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.315750][ T9506] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.505519][ T5277] usb 3-1: USB disconnect, device number 43 [ 298.032979][ T9530] loop0: detected capacity change from 0 to 7 [ 298.043785][ T9530] Dev loop0: unable to read RDB block 7 [ 298.052865][ T9530] loop0: AHDI p1 p3 p4 [ 298.059133][ T9530] loop0: partition table partially beyond EOD, truncated [ 298.077497][ T5277] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 298.097817][ T9530] loop0: p1 start 2048 is beyond EOD, truncated [ 298.133710][ T9530] loop0: p3 size 16779293 extends beyond EOD, truncated [ 298.320677][ T5277] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 298.345044][ T5277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.395158][ T5277] usb 4-1: config 0 descriptor?? [ 298.623433][ T29] audit: type=1326 audit(1723355190.099:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 298.654248][ T29] audit: type=1326 audit(1723355190.099:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 298.787592][ T29] audit: type=1326 audit(1723355190.139:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 298.787592][ T5264] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 298.787642][ T29] audit: type=1326 audit(1723355190.139:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 298.901229][ T5277] usb 4-1: can't set first interface for hiFace device. [ 298.907437][ T29] audit: type=1326 audit(1723355190.139:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 299.009881][ T5277] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 299.017599][ T29] audit: type=1326 audit(1723355190.139:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 299.077631][ T5264] usb 3-1: Using ep0 maxpacket: 8 [ 299.087951][ T5264] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 299.099963][ T5264] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.113278][ T5264] usb 3-1: Product: syz [ 299.117564][ T5264] usb 3-1: Manufacturer: syz [ 299.118353][ T5277] usb 4-1: USB disconnect, device number 36 [ 299.122162][ T5264] usb 3-1: SerialNumber: syz [ 299.123317][ T29] audit: type=1326 audit(1723355190.139:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 299.156758][ T5264] usb 3-1: config 0 descriptor?? [ 299.170723][ T29] audit: type=1326 audit(1723355190.139:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9522 comm="syz.3.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff9181779f9 code=0x7ffc0000 [ 299.208626][ T9545] netlink: 36 bytes leftover after parsing attributes in process `syz.4.801'. [ 299.380484][ T5264] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 299.514807][ T9549] loop2: detected capacity change from 0 to 7 [ 299.581738][ T9549] Dev loop2: unable to read RDB block 7 [ 299.587624][ T9549] loop2: unable to read partition table [ 299.594209][ T9549] loop2: partition table beyond EOD, truncated [ 299.627631][ T9549] loop_reread_partitions: partition scan of loop2 (ώθ’«xόŸΡψ ιΪ¬§½dΖ€΄ΰ–ƒέ‘―¨β·ϋ [ 299.627631][ T9549] ) failed (rc=-5) [ 299.900160][ T9533] can: request_module (can-proto-0) failed. [ 300.864809][ T5264] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 300.917639][ T5264] usb 3-1: USB disconnect, device number 44 [ 301.156824][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 301.156845][ T29] audit: type=1326 audit(1723355192.619:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9579 comm="syz.1.813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19ed5779f9 code=0x0 [ 301.271040][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.278689][ T5277] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 301.316644][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.325263][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.333659][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.342296][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 301.350575][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.448636][ T5277] usb 5-1: device descriptor read/64, error -71 [ 301.577589][ T5264] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 301.607785][ T6781] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.751357][ T9590] xt_l2tp: v2 doesn't support IP mode [ 301.760629][ T5277] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 301.767415][ T5264] usb 2-1: Using ep0 maxpacket: 8 [ 301.782105][ T5264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.793612][ T6781] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.809155][ T5264] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.827647][ T5264] usb 2-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 301.836907][ T5264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.847699][ T5264] usb 2-1: config 0 descriptor?? [ 301.928615][ T5277] usb 5-1: device descriptor read/64, error -71 [ 301.972677][ T6781] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.058162][ T5277] usb usb5-port1: attempt power cycle [ 302.148679][ T6781] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.182122][ T9584] chnl_net:caif_netlink_parms(): no params data found [ 302.481070][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.488611][ T5277] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 302.498557][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.506211][ T9584] bridge_slave_0: entered allmulticast mode [ 302.540168][ T5277] usb 5-1: device descriptor read/8, error -71 [ 302.550339][ T9584] bridge_slave_0: entered promiscuous mode [ 302.565319][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.589065][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.597216][ T9584] bridge_slave_1: entered allmulticast mode [ 302.618782][ T9584] bridge_slave_1: entered promiscuous mode [ 302.713026][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.782348][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.827399][ T5277] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 302.878193][ T5277] usb 5-1: device descriptor read/8, error -71 [ 302.913133][ T9584] team0: Port device team_slave_0 added [ 303.017810][ T5277] usb usb5-port1: unable to enumerate USB device [ 303.238556][ T5229] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.251424][ T5229] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.264094][ T5229] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.280921][ T5229] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.296308][ T5229] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.305587][ T5229] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 303.378849][ T5232] Bluetooth: hci0: command tx timeout [ 303.654271][ T9599] can: request_module (can-proto-0) failed. [ 304.058757][ T6781] bond0 (unregistering): left promiscuous mode [ 304.124493][ T6781] bond0 (unregistering): Released all slaves [ 304.153988][ T6781] bond1 (unregistering): Released all slaves [ 304.196623][ T6781] bond2 (unregistering): Released all slaves [ 304.243998][ T5264] usb 2-1: string descriptor 0 read error: -71 [ 304.277941][ T5264] qmi_wwan 2-1:0.0: probe with driver qmi_wwan failed with error -22 [ 304.302531][ T6781] bond3 (unregistering): Released all slaves [ 304.315682][ T5264] usb 2-1: USB disconnect, device number 48 [ 304.358736][ T6781] bond4 (unregistering): Released all slaves [ 304.390772][ T6781] bond5 (unregistering): Released all slaves [ 304.409578][ T6781] bond6 (unregistering): Released all slaves [ 304.429380][ T6781] bond7 (unregistering): Released all slaves [ 304.452889][ T6781] bond8 (unregistering): Released all slaves [ 304.475148][ T6781] bond9 (unregistering): Released all slaves [ 304.502269][ T6781] bond10 (unregistering): Released all slaves [ 304.554901][ T6781] bond11 (unregistering): Released all slaves [ 304.569473][ T6781] bond12 (unregistering): Released all slaves [ 304.602491][ T6781] bond13 (unregistering): Released all slaves [ 304.619770][ T6781] bond14 (unregistering): Released all slaves [ 304.647074][ T6781] bond15 (unregistering): Released all slaves [ 304.672725][ T6781] bond16 (unregistering): Released all slaves [ 304.702565][ T6781] bond17 (unregistering): Released all slaves [ 304.729297][ T6781] bond18 (unregistering): Released all slaves [ 304.769037][ T6781] bond19 (unregistering): Released all slaves [ 304.784028][ T6781] bond20 (unregistering): Released all slaves [ 304.806181][ T6781] bond21 (unregistering): Released all slaves [ 304.846334][ T6781] bond22 (unregistering): Released all slaves [ 304.879365][ T6781] bond23 (unregistering): Released all slaves [ 304.913991][ T6781] bond24 (unregistering): Released all slaves [ 304.948599][ T6781] bond25 (unregistering): Released all slaves [ 304.968022][ T6781] bond26 (unregistering): Released all slaves [ 304.986625][ T6781] bond27 (unregistering): Released all slaves [ 305.014081][ T6781] bond28 (unregistering): Released all slaves [ 305.027421][ T6781] bond29 (unregistering): Released all slaves [ 305.062158][ T6781] bond30 (unregistering): Released all slaves [ 305.090161][ T6781] bond31 (unregistering): Released all slaves [ 305.109981][ T6781] bond32 (unregistering): Released all slaves [ 305.134434][ T6781] bond33 (unregistering): Released all slaves [ 305.178994][ T9584] team0: Port device team_slave_1 added [ 305.204167][ T9625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 305.221512][ T9625] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.230216][ T9625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.253792][ T9625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.265594][ T9625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.367728][ T5232] Bluetooth: hci1: command tx timeout [ 305.452825][ T5232] Bluetooth: hci0: command tx timeout [ 305.664589][ T9631] loop0: detected capacity change from 0 to 7 [ 305.678743][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.680460][ T9631] Dev loop0: unable to read RDB block 7 [ 305.688114][ T9631] loop0: AHDI p1 p3 p4 [ 305.700328][ T9631] loop0: partition table partially beyond EOD, truncated [ 305.728424][ T9631] loop0: p1 start 2048 is beyond EOD, truncated [ 305.735631][ T9631] loop0: p3 size 16779293 extends beyond EOD, truncated [ 305.738370][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.903650][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.974114][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.013109][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.141345][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.526329][ T9584] hsr_slave_0: entered promiscuous mode [ 306.533818][ T9584] hsr_slave_1: entered promiscuous mode [ 306.544796][ T9584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.563149][ T9584] Cannot create hsr debugfs directory [ 306.707467][ T1850] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 306.820864][ T6781] hsr_slave_0: left promiscuous mode [ 306.845664][ T6781] hsr_slave_1: left promiscuous mode [ 306.910338][ T6781] veth1_macvtap: left promiscuous mode [ 306.917469][ T1850] usb 5-1: Using ep0 maxpacket: 8 [ 306.927544][ T6781] veth0_macvtap: left promiscuous mode [ 306.943708][ T1850] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 306.945516][ T6781] veth1_vlan: left promiscuous mode [ 306.984913][ T1850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.010749][ T1850] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.010835][ T6781] veth0_vlan: left promiscuous mode [ 307.048088][ T1850] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.080466][ T1850] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 307.092572][ T1850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.343889][ T1850] usb 5-1: GET_CAPABILITIES returned 0 [ 307.363288][ T1850] usbtmc 5-1:16.0: can't read capabilities [ 307.447630][ T5232] Bluetooth: hci1: command tx timeout [ 307.528395][ T5232] Bluetooth: hci0: command tx timeout [ 307.630223][ T5271] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 307.696148][ T5277] usb 5-1: USB disconnect, device number 58 [ 307.844072][ T5271] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 307.853361][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.881213][ T5271] usb 3-1: config 0 descriptor?? [ 307.889058][ T5271] cp210x 3-1:0.0: cp210x converter detected [ 308.322546][ T9675] ipt_REJECT: TCP_RESET invalid for non-tcp [ 308.430361][ T9679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.833'. [ 309.425345][ T9601] chnl_net:caif_netlink_parms(): no params data found [ 309.527694][ T5232] Bluetooth: hci1: command tx timeout [ 309.587524][ T5278] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 309.612755][ T5232] Bluetooth: hci0: command tx timeout [ 309.813712][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.835769][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.853521][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.861999][ T5278] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.883797][ T9601] bridge_slave_0: entered allmulticast mode [ 309.891359][ T5278] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 309.904245][ T5278] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.908878][ T9601] bridge_slave_0: entered promiscuous mode [ 309.921428][ T9710] xt_l2tp: v2 doesn't support IP mode [ 309.935773][ T5278] usb 2-1: config 0 descriptor?? [ 310.028794][ T6781] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.061348][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.073772][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.086906][ T9601] bridge_slave_1: entered allmulticast mode [ 310.113061][ T9601] bridge_slave_1: entered promiscuous mode [ 310.168786][ T6781] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.272242][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.372488][ T6781] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.432243][ T5271] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 310.448413][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.459203][ T5271] cp210x 3-1:0.0: querying part number failed [ 310.512213][ T5271] usb 3-1: cp210x converter now attached to ttyUSB0 [ 310.547154][ T5278] usbhid 2-1:0.0: can't add hid device: -71 [ 310.563169][ T5271] usb 3-1: USB disconnect, device number 45 [ 310.578626][ T5278] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 310.611189][ T5271] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 310.622506][ T5278] usb 2-1: USB disconnect, device number 49 [ 310.632817][ T5271] cp210x 3-1:0.0: device disconnected [ 310.769527][ T6781] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.813192][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 310.845069][ T9601] team0: Port device team_slave_0 added [ 310.873007][ T9601] team0: Port device team_slave_1 added [ 310.899536][ T9724] netlink: 'syz.4.839': attribute type 1 has an invalid length. [ 311.224113][ T9584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.281476][ T9584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.358775][ T9584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.409987][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.446158][ T9745] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 311.456667][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.492657][ T5232] Bluetooth: hci4: ISO packet for unknown connection handle 3072 [ 311.501938][ T9601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.561409][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.577882][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.607510][ T5232] Bluetooth: hci1: command tx timeout [ 311.670122][ T9601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.749095][ T9584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.832843][ T9762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'. [ 311.943682][ T9765] fuse: Bad value for 'user_id' [ 311.960684][ T9765] fuse: Bad value for 'user_id' [ 311.995346][ T9601] hsr_slave_0: entered promiscuous mode [ 312.018631][ T9601] hsr_slave_1: entered promiscuous mode [ 312.043790][ T6781] bridge_slave_1: left allmulticast mode [ 312.051803][ T6781] bridge_slave_1: left promiscuous mode [ 312.063380][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.091522][ T6781] bridge_slave_0: left allmulticast mode [ 312.104266][ T6781] bridge_slave_0: left promiscuous mode [ 312.110942][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.707135][ T6781] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.723722][ T6781] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.734765][ T6781] bond0 (unregistering): Released all slaves [ 313.087890][ T9803] loop0: detected capacity change from 0 to 7 [ 313.112294][ T9803] Dev loop0: unable to read RDB block 7 [ 313.118639][ T9803] loop0: AHDI p1 p3 p4 [ 313.126049][ T9803] loop0: partition table partially beyond EOD, truncated [ 313.134953][ T9803] loop0: p1 start 2048 is beyond EOD, truncated [ 313.142008][ T9803] loop0: p3 size 16779293 extends beyond EOD, truncated [ 313.338741][ T6781] hsr_slave_0: left promiscuous mode [ 313.363718][ T6781] hsr_slave_1: left promiscuous mode [ 313.373958][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.386497][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.433794][ T6781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.472293][ T6781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.545081][ T6781] veth1_macvtap: left promiscuous mode [ 313.565568][ T6781] veth0_macvtap: left promiscuous mode [ 313.575795][ T6781] veth1_vlan: left promiscuous mode [ 313.585051][ T6781] veth0_vlan: left promiscuous mode [ 314.447746][ T5271] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 314.723594][ T6781] team0 (unregistering): Port device team_slave_1 removed [ 314.795272][ T6781] team0 (unregistering): Port device team_slave_0 removed [ 315.657040][ T9842] program syz.1.858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.683510][ T9842] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 315.713915][ T9824] vlan2: entered promiscuous mode [ 315.727827][ T9824] vlan2: entered allmulticast mode [ 315.838195][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.968620][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.860'. [ 315.980687][ T9584] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.182264][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.189558][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.271255][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.278486][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.570581][ T9601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.634079][ T9601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.656609][ T9601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.711061][ T9601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.753868][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.005434][ T9584] veth0_vlan: entered promiscuous mode [ 317.091874][ T9584] veth1_vlan: entered promiscuous mode [ 317.136972][ T9601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.230570][ T9601] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.291706][ T955] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.298896][ T955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.321657][ T955] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.329067][ T955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.345919][ T9584] veth0_macvtap: entered promiscuous mode [ 317.357122][ T9584] veth1_macvtap: entered promiscuous mode [ 317.395973][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.409139][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.441858][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.453153][ T1263] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.453513][ T1263] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.498068][ T5264] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 317.520522][ T9584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.534042][ T9584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.554734][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.577931][ T9584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.588854][ T9584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.599021][ T9584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.608661][ T9584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.657890][ T5264] usb 5-1: device descriptor read/64, error -71 [ 317.796256][ T9601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.849858][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.873743][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.926352][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.927390][ T5264] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 317.964912][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.025398][ T9601] veth0_vlan: entered promiscuous mode [ 318.057926][ T9601] veth1_vlan: entered promiscuous mode [ 318.098182][ T5264] usb 5-1: device descriptor read/64, error -71 [ 318.127384][ T25] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 318.141919][ T9601] veth0_macvtap: entered promiscuous mode [ 318.184149][ T9601] veth1_macvtap: entered promiscuous mode [ 318.222112][ T5264] usb usb5-port1: attempt power cycle [ 318.227197][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.227787][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.227809][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.227825][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.229434][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.299105][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 318.325667][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.337918][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.349648][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.350156][ T9601] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.369806][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.372770][ T9601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.385499][ T25] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 318.396470][ T9601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.445962][ T9601] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.465455][ T9601] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.475188][ T9601] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.475192][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.508373][ T9601] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.556236][ T25] usb 2-1: config 0 descriptor?? [ 318.587486][ T5277] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 318.727927][ T5264] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 318.766399][ T6781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.779045][ T5277] usb 1-1: Using ep0 maxpacket: 8 [ 318.792569][ T5277] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 318.811893][ T5277] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.828228][ T6781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.828519][ T5264] usb 5-1: device descriptor read/8, error -71 [ 318.832058][ T5277] usb 1-1: config 0 has no interface number 0 [ 318.856980][ T5277] usb 1-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 318.897624][ T5277] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 318.913573][ T5277] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 318.926703][ T5277] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.953896][ T5277] usb 1-1: config 0 interface 52 has no altsetting 0 [ 318.959239][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.966351][ T5277] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 318.990020][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.010457][ T25] hid-rmi 0003:06CB:81A7.000E: item fetching failed at offset 0/5 [ 319.025891][ T25] hid-rmi 0003:06CB:81A7.000E: parse failed [ 319.032485][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.081065][ T25] hid-rmi 0003:06CB:81A7.000E: probe with driver hid-rmi failed with error -22 [ 319.117363][ T5277] usb 1-1: config 0 descriptor?? [ 319.157410][ T5264] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 319.201646][ T5271] usb 2-1: USB disconnect, device number 50 [ 319.214162][ T5264] usb 5-1: device descriptor read/8, error -71 [ 319.353383][ T5264] usb usb5-port1: unable to enumerate USB device [ 319.368819][ T9890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.385159][ T9890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.459567][ T9897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 319.520230][ T5272] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 319.718477][ T5272] usb 4-1: Using ep0 maxpacket: 32 [ 319.745564][ T5272] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 319.787369][ T5272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.795565][ T5272] usb 4-1: Product: syz [ 319.802646][ T5272] usb 4-1: Manufacturer: syz [ 319.811650][ T5272] usb 4-1: SerialNumber: syz [ 319.829292][ T5272] usb 4-1: config 0 descriptor?? [ 319.845961][ T5272] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 320.249209][ T5232] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 320.267434][ T1850] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 320.290759][ T9903] fuse: Bad value for 'fd' [ 320.497426][ T1850] usb 2-1: Using ep0 maxpacket: 16 [ 320.515772][ T1850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 54946, setting to 1024 [ 320.529762][ T1850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 320.550934][ T1850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.561038][ T1850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 320.576937][ T1850] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 320.602960][ T1850] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 320.629686][ T1850] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 25 [ 320.644396][ T1850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 320.667437][ T1850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 320.685984][ T1850] usb 2-1: SerialNumber: syz [ 320.707778][ T9899] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 320.722770][ T1850] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 321.210849][ T5277] usb 1-1: Can not set alternate setting to 1, error: -71 [ 321.228155][ T5277] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -71 [ 321.268708][ T5277] usb 1-1: USB disconnect, device number 58 [ 321.775232][ T5271] usb 2-1: USB disconnect, device number 51 [ 321.820516][ T9920] sctp: [Deprecated]: syz.0.881 (pid 9920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.820516][ T9920] Use struct sctp_sack_info instead [ 321.945058][ T9926] netlink: 36 bytes leftover after parsing attributes in process `syz.2.884'. [ 322.035183][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.885'. [ 322.407508][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 322.795342][ T5272] gspca_stk1135: reg_w 0x351 err -71 [ 322.811517][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 322.834225][ T5272] gspca_stk1135: Sensor write failed [ 322.844406][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 322.852102][ T5272] gspca_stk1135: Sensor write failed [ 322.862667][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 322.870249][ T5272] gspca_stk1135: Sensor read failed [ 322.877888][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 322.886229][ T5272] gspca_stk1135: Sensor read failed [ 322.900683][ T5272] gspca_stk1135: Detected sensor type unknown (0x0) [ 322.930926][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 322.953372][ T5272] gspca_stk1135: Sensor read failed [ 322.980376][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 322.992695][ T5272] gspca_stk1135: Sensor read failed [ 323.004437][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 323.016283][ T5272] gspca_stk1135: Sensor write failed [ 323.030115][ T5272] gspca_stk1135: serial bus timeout: status=0x00 [ 323.040817][ T5272] gspca_stk1135: Sensor write failed [ 323.051793][ T5272] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 323.091118][ T5272] usb 4-1: USB disconnect, device number 37 [ 323.579639][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.597466][ T5272] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 323.634932][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.664152][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.673493][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.682419][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.696922][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.707585][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.715396][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.724239][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.732471][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.742296][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.751273][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.762064][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.775629][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.794481][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.810769][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.823262][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.831108][ T5272] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 323.843300][ T5272] usb 3-1: config 0 has no interface number 0 [ 323.854340][ T5272] usb 3-1: New USB device found, idVendor=0403, idProduct=bcd9, bcdDevice=94.33 [ 323.866802][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.876294][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.886949][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.902519][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.911533][ T5272] usb 3-1: config 0 descriptor?? [ 323.921307][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.934614][ T5272] ftdi_sio 3-1:0.125: FTDI USB Serial Device converter detected [ 323.943277][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.954658][ T5272] ftdi_sio ttyUSB0: unknown device type: 0x9433 [ 323.961231][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.976444][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 323.979425][ T5278] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 323.985644][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.007808][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.016778][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.029421][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.039597][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.051061][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.063607][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.074616][ T5271] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 324.116594][ T5271] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 324.187457][ T5278] usb 2-1: Using ep0 maxpacket: 16 [ 324.210576][ T5278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 324.241584][ T5278] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.277146][ T9971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.286777][ T5278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.308358][ T9971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.329550][ T5232] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 324.339683][ T5232] Bluetooth: hci2: Injecting HCI hardware error event [ 324.352205][ T5229] Bluetooth: hci2: hardware error 0x00 [ 324.368274][ T5278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 324.383032][ T5278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.393595][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.410781][ T5278] usb 2-1: Product: syz [ 324.415486][ T5278] usb 2-1: Manufacturer: syz [ 324.424300][ T5278] usb 2-1: SerialNumber: syz [ 324.661799][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.678862][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.761532][ T5278] usb 2-1: USB disconnect, device number 52 [ 324.887941][ T5271] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 325.051321][ T5339] udevd[5339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.052771][ T9982] loop0: detected capacity change from 0 to 7 [ 325.096682][ T9982] Dev loop0: unable to read RDB block 7 [ 325.103447][ T9982] loop0: AHDI p1 p3 p4 [ 325.103679][ T5271] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 325.120509][ T9982] loop0: partition table partially beyond EOD, truncated [ 325.130093][ T9982] loop0: p1 start 2048 is beyond EOD, truncated [ 325.136965][ T9982] loop0: p3 size 16779293 extends beyond EOD, truncated [ 325.167662][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.214913][ T5271] usb 4-1: config 0 descriptor?? [ 325.327161][ T5271] cp210x 4-1:0.0: cp210x converter detected [ 325.666876][ T9979] can: request_module (can-proto-0) failed. [ 325.681360][ T9987] ipt_REJECT: TCP_RESET invalid for non-tcp [ 325.878052][ T5271] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 325.912588][ T5271] cp210x 4-1:0.0: querying part number failed [ 325.924907][ T5271] usb 4-1: cp210x converter now attached to ttyUSB1 [ 325.968656][ T5271] usb 4-1: USB disconnect, device number 38 [ 325.997729][ T5271] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 326.030137][ T5271] cp210x 4-1:0.0: device disconnected [ 326.356018][ T5271] usb 3-1: USB disconnect, device number 47 [ 326.372777][ T5271] ftdi_sio 3-1:0.125: device disconnected [ 326.468463][T10005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.907'. [ 326.487430][ T5229] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 326.527532][T10005] netlink: 92 bytes leftover after parsing attributes in process `syz.2.907'. [ 326.582133][T10005] vlan0: entered allmulticast mode [ 326.592539][T10005] veth0_vlan: entered allmulticast mode [ 326.668675][ T29] audit: type=1326 audit(1723355218.149:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 326.726466][ T29] audit: type=1326 audit(1723355218.149:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 326.754432][ T29] audit: type=1326 audit(1723355218.149:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 326.778587][ T29] audit: type=1326 audit(1723355218.159:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 326.854897][T10009] vivid-000: disconnect [ 326.889179][T10008] vivid-000: reconnect [ 326.907347][ T29] audit: type=1326 audit(1723355218.159:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 326.932489][ T29] audit: type=1326 audit(1723355218.169:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 326.970029][ T29] audit: type=1326 audit(1723355218.169:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe9fb376390 code=0x7ffc0000 [ 326.970128][ T5278] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 326.995830][ T29] audit: type=1326 audit(1723355218.179:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9fb3775fb code=0x7ffc0000 [ 327.129557][ T29] audit: type=1326 audit(1723355218.179:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9fb3775fb code=0x7ffc0000 [ 327.172569][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.910'. [ 327.192106][T10012] netlink: 28 bytes leftover after parsing attributes in process `syz.2.910'. [ 327.207009][T10012] netlink: 'syz.2.910': attribute type 3 has an invalid length. [ 327.225008][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.253615][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.259891][ T29] audit: type=1326 audit(1723355218.189:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.3.908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9fb3775fb code=0x7ffc0000 [ 327.326743][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.373179][ T5278] usb 4-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 327.411356][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.451584][ T5278] usb 4-1: config 0 descriptor?? [ 327.608041][ T5229] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 327.618593][ T5229] Bluetooth: hci1: Injecting HCI hardware error event [ 327.627911][ T5232] Bluetooth: hci1: hardware error 0x00 [ 327.840980][T10003] can: request_module (can-proto-0) failed. [ 327.914745][ T5278] wacom 0003:056A:0325.0010: unknown main item tag 0xe [ 327.937976][ T5278] wacom 0003:056A:0325.0010: hidraw0: USB HID v0.00 Device [HID 056a:0325] on usb-dummy_hcd.3-1/input0 [ 327.958093][ T5277] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 328.199539][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 328.230658][ T5277] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 328.235905][T10036] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 328.254584][ T5277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.265959][ T5277] usb 2-1: Product: syz [ 328.272850][ T5277] usb 2-1: Manufacturer: syz [ 328.285282][ T5277] usb 2-1: SerialNumber: syz [ 328.300210][ T5277] usb 2-1: config 0 descriptor?? [ 328.311632][ T5277] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 328.320703][ T5277] usb 2-1: Detected FT-X [ 328.553420][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.575919][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.603635][ T5277] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 328.620186][ T5277] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 328.650893][ T5277] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 328.680595][ T5277] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 328.726825][ T5277] usb 2-1: USB disconnect, device number 53 [ 328.746231][ T5277] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 328.790125][ T5277] ftdi_sio 2-1:0.0: device disconnected [ 329.036807][T10050] syz.2.919 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 329.207665][ T5273] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 329.409472][ T5273] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 329.428629][ T5273] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.445260][ T5273] usb 5-1: config 0 descriptor?? [ 329.458198][ T5273] cp210x 5-1:0.0: cp210x converter detected [ 329.514828][T10056] x_tables: ip6_tables: l2tp.0 match: invalid size 16 (kernel) != (user) 56 [ 329.687863][ T5232] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 329.827381][ T1850] usb 4-1: USB disconnect, device number 39 [ 329.828944][T10048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.852872][T10060] ipt_REJECT: TCP_RESET invalid for non-tcp [ 330.266658][T10063] loop0: detected capacity change from 0 to 7 [ 330.276354][T10063] Dev loop0: unable to read RDB block 7 [ 330.284985][T10063] loop0: AHDI p1 p3 p4 [ 330.290338][T10063] loop0: partition table partially beyond EOD, truncated [ 330.302743][T10063] loop0: p1 start 2048 is beyond EOD, truncated [ 330.311090][T10063] loop0: p3 size 16779293 extends beyond EOD, truncated [ 330.441295][T10069] fuse: Invalid uid '00000000000000000003' [ 330.827522][ T5278] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 331.018174][ T5278] usb 3-1: no configurations [ 331.024084][ T5278] usb 3-1: can't read configurations, error -22 [ 331.187514][ T5278] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 331.372570][ T5278] usb 3-1: no configurations [ 331.382516][ T5278] usb 3-1: can't read configurations, error -22 [ 331.390388][ T5278] usb usb3-port1: attempt power cycle [ 331.427387][ T1850] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 331.622519][ T1850] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 331.638407][ T1850] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 331.656409][ T1850] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 331.665941][ T1850] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.678748][T10080] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.691168][ T1850] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.717421][ T5264] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 331.808081][ T5278] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 331.916097][ T5278] usb 3-1: no configurations [ 331.937529][ T5264] usb 1-1: Using ep0 maxpacket: 8 [ 331.944633][ T5278] usb 3-1: can't read configurations, error -22 [ 331.956754][ T5264] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.982267][ T5264] usb 1-1: config 0 has no interface number 0 [ 332.013424][ T5264] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 332.042032][ T5264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.055570][ T5273] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 332.086742][ T5273] cp210x 5-1:0.0: querying part number failed [ 332.106384][ T5264] usb 1-1: config 0 descriptor?? [ 332.117776][ T5278] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 332.118804][ T5273] usb 5-1: cp210x converter now attached to ttyUSB0 [ 332.165451][ T5264] hso 1-1:0.1: Failed to find BULK IN ep [ 332.184885][ T5278] usb 3-1: no configurations [ 332.192003][ T1850] usb 4-1: USB disconnect, device number 40 [ 332.205272][ T5273] usb 5-1: USB disconnect, device number 63 [ 332.213739][ T5278] usb 3-1: can't read configurations, error -22 [ 332.235058][ T5278] usb usb3-port1: unable to enumerate USB device [ 332.309275][ T5273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 332.355206][ T5273] cp210x 5-1:0.0: device disconnected [ 332.486640][ T5278] usb 1-1: USB disconnect, device number 59 [ 332.673370][T10105] netlink: 72 bytes leftover after parsing attributes in process `syz.1.934'. [ 333.057361][ T5273] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 333.249412][ T5273] usb 2-1: Using ep0 maxpacket: 16 [ 333.256993][ T5273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 333.269773][ T5273] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 333.281552][ T5273] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.295106][ T5273] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 333.310009][ T5273] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.320215][ T5273] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.328321][ T5273] usb 2-1: Product: syz [ 333.332521][ T5273] usb 2-1: Manufacturer: syz [ 333.337132][ T5273] usb 2-1: SerialNumber: syz [ 333.477504][ T5271] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 333.593613][ T5273] usb 2-1: USB disconnect, device number 54 [ 333.668281][ T5271] usb 1-1: Using ep0 maxpacket: 8 [ 333.691788][ T5271] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 333.722114][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 333.749293][ T5271] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 333.781563][ T5271] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 333.812836][ T5271] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 333.816652][T10124] fuse: Bad value for 'fd' [ 333.826585][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.851910][ T5339] udevd[5339]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.988730][T10129] team_slave_0: entered promiscuous mode [ 334.016799][T10129] team_slave_0: entered allmulticast mode [ 334.074534][ T5271] usb 1-1: GET_CAPABILITIES returned 0 [ 334.108832][ T5271] usbtmc 1-1:16.0: can't read capabilities [ 334.129663][T10129] team0: Port device team_slave_0 removed [ 334.220055][ T5273] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 334.379898][ T5277] usb 1-1: USB disconnect, device number 60 [ 334.445928][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 334.493158][ T5273] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 334.512082][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.545196][ T5273] usb 3-1: Product: syz [ 334.563093][ T5273] usb 3-1: Manufacturer: syz [ 334.592953][ T5273] usb 3-1: SerialNumber: syz [ 334.617315][ T5271] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 334.648111][ T5273] usb 3-1: config 0 descriptor?? [ 334.679773][ T5273] gspca_main: sq930x-2.14.0 probing 2770:930c [ 334.748528][T10148] input: syz1 as /devices/virtual/input/input21 [ 334.864015][ T5271] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 334.904558][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.925327][T10121] x_tables: duplicate underflow at hook 2 [ 334.934137][T10121] netlink: 132 bytes leftover after parsing attributes in process `syz.2.940'. [ 334.958766][T10148] netlink: 'syz.1.949': attribute type 8 has an invalid length. [ 334.968866][ T5273] gspca_sq930x: reg_r 001f failed -32 [ 334.998699][ T5273] sq930x 3-1:0.0: probe with driver sq930x failed with error -32 [ 335.045586][ T5271] usb 4-1: config 0 descriptor?? [ 335.517397][ T5271] [drm:udl_init] *ERROR* Selecting channel failed [ 335.594855][ T5271] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 335.610199][ T5271] [drm] Initialized udl on minor 2 [ 335.634394][ T5271] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 335.645596][ T5271] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 335.664710][ T5273] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 335.682001][ T5273] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 335.694846][ T5271] usb 4-1: USB disconnect, device number 41 [ 336.357430][ T5278] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 336.547373][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 336.560200][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.586187][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.613419][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.638736][ T5278] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 336.674761][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.697181][ T5271] usb 3-1: USB disconnect, device number 52 [ 336.722425][ T5278] usb 4-1: config 0 descriptor?? [ 337.187040][ T5264] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 337.248428][T10189] netlink: 36 bytes leftover after parsing attributes in process `syz.2.962'. [ 337.291761][ T5278] cypress 0003:04B4:07B1.0011: unknown main item tag 0x0 [ 337.323599][ T5278] cypress 0003:04B4:07B1.0011: unknown main item tag 0x0 [ 337.351219][ T5278] cypress 0003:04B4:07B1.0011: unknown main item tag 0x0 [ 337.368296][ T5264] usb 2-1: device descriptor read/64, error -71 [ 337.377308][ T5278] cypress 0003:04B4:07B1.0011: unknown main item tag 0x0 [ 337.384511][ T5278] cypress 0003:04B4:07B1.0011: unknown main item tag 0x0 [ 337.412950][ T5278] cypress 0003:04B4:07B1.0011: unknown main item tag 0x0 [ 337.423123][ T5278] cypress 0003:04B4:07B1.0011: unknown main item tag 0x0 [ 337.443876][ T5278] cypress 0003:04B4:07B1.0011: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.3-1/input0 [ 337.502432][ T5272] usb 4-1: USB disconnect, device number 42 [ 337.667418][ T5264] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 337.817401][ T5264] usb 2-1: device descriptor read/64, error -71 [ 337.830168][ T5271] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 337.917333][ T5273] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 337.937627][ T5264] usb usb2-port1: attempt power cycle [ 338.049643][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.064571][ T5271] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.075234][ T5271] usb 1-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 338.087544][ T5271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.099565][ T5271] usb 1-1: config 0 descriptor?? [ 338.152173][ T5273] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.174088][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.211655][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 338.230994][ T5273] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 338.259188][ T5273] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.290150][ T5273] usb 3-1: Product: syz [ 338.294402][ T5273] usb 3-1: Manufacturer: syz [ 338.338796][ T5273] usb 3-1: SerialNumber: syz [ 338.347400][ T5264] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 338.358345][ T5273] usb 3-1: config 0 descriptor?? [ 338.397992][ T5264] usb 2-1: device descriptor read/8, error -71 [ 338.540965][ T5271] wacom 0003:056A:0300.0012: unknown main item tag 0x0 [ 338.565981][ T5271] wacom 0003:056A:0300.0012: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 338.624573][ T5271] wacom 0003:056A:0300.0012: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.0-1/input0 [ 338.641594][ T5271] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0300.0012/input/input22 [ 338.665541][T10203] CIFS: VFS: Malformed UNC in devname [ 338.687441][ T5264] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 338.728833][ T5264] usb 2-1: device descriptor read/8, error -71 [ 338.845251][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.971'. [ 338.887601][ T5273] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 338.908842][ T5264] usb usb2-port1: unable to enumerate USB device [ 339.097739][ T5273] usb 5-1: Using ep0 maxpacket: 32 [ 339.112384][ T5273] usb 5-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.5f [ 339.124257][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.133831][ T5273] usb 5-1: Product: syz [ 339.139580][ T5273] usb 5-1: Manufacturer: syz [ 339.145996][ T5273] usb 5-1: SerialNumber: syz [ 339.158100][ T5273] usb 5-1: config 0 descriptor?? [ 339.170736][ T5273] usb-storage 5-1:0.0: USB Mass Storage device detected [ 339.187736][ T5273] usb-storage 5-1:0.0: Quirks match for vid 057b pid 0000: 1 [ 339.307402][ T5271] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 339.453636][ T5277] usb 5-1: USB disconnect, device number 64 [ 339.517374][ T5271] usb 4-1: Using ep0 maxpacket: 16 [ 339.536552][ T5271] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 339.553201][ T5271] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.564139][ T5271] usb 4-1: Product: syz [ 339.569357][ T5271] usb 4-1: Manufacturer: syz [ 339.574288][ T5271] usb 4-1: SerialNumber: syz [ 339.587577][ T5271] usb 4-1: config 0 descriptor?? [ 339.815291][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 339.815310][ T29] audit: type=1326 audit(1723355231.289:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 339.856201][ T29] audit: type=1326 audit(1723355231.289:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 339.879187][ T5271] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 339.893176][ T29] audit: type=1326 audit(1723355231.319:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 339.916288][ T29] audit: type=1326 audit(1723355231.319:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 339.956059][ T29] audit: type=1326 audit(1723355231.319:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 340.012533][ T29] audit: type=1326 audit(1723355231.329:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 340.036763][ T29] audit: type=1326 audit(1723355231.329:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 340.167046][ T29] audit: type=1326 audit(1723355231.369:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 340.238794][ T29] audit: type=1326 audit(1723355231.369:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 340.262812][ T29] audit: type=1326 audit(1723355231.369:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10228 comm="syz.3.972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9fb3779f9 code=0x7ffc0000 [ 340.291735][ T5272] usb 4-1: USB disconnect, device number 43 [ 340.617558][ T5272] usb 3-1: USB disconnect, device number 53 [ 340.798510][ T5278] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 340.861404][ T1119] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.008054][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 341.034555][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 341.061120][ T1119] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.073745][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 341.088302][ T5278] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 341.099180][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.116760][ T5278] usb 5-1: config 0 descriptor?? [ 341.126065][T10241] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 341.244013][ T1119] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.370605][ T5277] usb 1-1: USB disconnect, device number 61 [ 341.489467][ T1119] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.527439][ T1850] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 341.622409][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.647841][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.704784][T10240] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1847362798 (236462438144 ns) > initial count (117901241344 ns). Using initial count to start timer. [ 341.747479][ T1850] usb 2-1: device descriptor read/64, error -71 [ 341.795757][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.830672][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.887360][ T5271] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 341.937017][ T1119] bridge_slave_1: left allmulticast mode [ 341.947299][ T1119] bridge_slave_1: left promiscuous mode [ 341.966114][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.999808][T10240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.013684][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.021841][ T1850] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 342.030290][ T1119] bridge_slave_0: left allmulticast mode [ 342.043970][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.044434][T10240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.052902][ T1119] bridge_slave_0: left promiscuous mode [ 342.065254][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.072714][ T5271] usb 4-1: device descriptor read/64, error -71 [ 342.083182][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.091869][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.102054][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 342.109618][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 342.203000][ T5278] usbhid 5-1:0.0: can't add hid device: -71 [ 342.209938][ T5278] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 342.218163][ T1850] usb 2-1: device descriptor read/64, error -71 [ 342.233230][ T5278] usb 5-1: USB disconnect, device number 65 [ 342.337710][ T1850] usb usb2-port1: attempt power cycle [ 342.361525][ T5271] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 342.527385][ T5271] usb 4-1: device descriptor read/64, error -71 [ 342.602877][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.616089][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.627147][ T1119] bond0 (unregistering): Released all slaves [ 342.647917][ T5271] usb usb4-port1: attempt power cycle [ 342.748671][ T1850] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 342.845570][ T1850] usb 2-1: device descriptor read/8, error -71 [ 343.098773][ T5271] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 343.138078][ T5271] usb 4-1: device descriptor read/8, error -71 [ 343.183087][ T1850] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 343.238575][ T1850] usb 2-1: device descriptor read/8, error -71 [ 343.269604][ T5277] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 343.335484][T10265] chnl_net:caif_netlink_parms(): no params data found [ 343.393449][ T1850] usb usb2-port1: unable to enumerate USB device [ 343.427482][ T5271] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 343.456348][ T1119] hsr_slave_0: left promiscuous mode [ 343.468455][ T1119] hsr_slave_1: left promiscuous mode [ 343.474726][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.488379][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.489765][ T5271] usb 4-1: device descriptor read/8, error -71 [ 343.508308][ T5277] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 343.508351][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.530384][ T5277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.539589][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.555539][ T5277] usb 5-1: Product: syz [ 343.564138][ T5277] usb 5-1: Manufacturer: syz [ 343.585167][ T1119] veth1_macvtap: left promiscuous mode [ 343.592094][ T5277] usb 5-1: SerialNumber: syz [ 343.594430][ T1119] veth0_macvtap: left promiscuous mode [ 343.613931][ T1119] veth1_vlan: left promiscuous mode [ 343.625603][ T5277] usb 5-1: config 0 descriptor?? [ 343.639934][ T1119] veth0_vlan: left promiscuous mode [ 343.668029][ T5271] usb usb4-port1: unable to enumerate USB device [ 344.076437][ T5277] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (1) [ 344.175923][ T5232] Bluetooth: hci0: command tx timeout [ 344.316059][ T5277] usb 5-1: failed to fetch extended address, random address set [ 344.521856][T10297] netlink: 1588 bytes leftover after parsing attributes in process `syz.2.988'. [ 344.890613][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 344.914832][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.991'. [ 345.012051][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 345.127509][ T5271] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 345.347006][ T5271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.372145][ T5271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 345.394365][ T5271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 345.415159][ T5271] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 345.426600][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.460052][T10300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 345.471719][ T5271] hub 4-1:1.0: bad descriptor, ignoring hub [ 345.487396][ T5271] hub 4-1:1.0: probe with driver hub failed with error -5 [ 345.533170][ T5271] cdc_wdm 4-1:1.0: skipping garbage [ 345.547313][ T5271] cdc_wdm 4-1:1.0: skipping garbage [ 345.569295][ T5271] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 345.576554][ T5271] cdc_wdm 4-1:1.0: Unknown control protocol [ 345.717474][T10316] program syz.2.993 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 345.842459][T10316] bond0: entered promiscuous mode [ 345.849935][T10316] bond_slave_0: entered promiscuous mode [ 345.855871][T10316] bond_slave_1: entered promiscuous mode [ 345.923956][T10316] netlink: 20 bytes leftover after parsing attributes in process `syz.2.993'. [ 345.986434][ T5277] usb 5-1: USB disconnect, device number 66 [ 346.010181][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.017102][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.023395][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.030038][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.036363][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.043154][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.049544][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.056170][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.062444][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.069067][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.075346][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.082058][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.088349][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.094964][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.101324][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 346.107943][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 346.114298][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 346.173470][ T5271] usb 4-1: USB disconnect, device number 48 [ 346.174019][ T5264] usb 4-1: Failed to suspend device, error -19 [ 346.249304][ T5232] Bluetooth: hci0: command tx timeout [ 346.324548][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.347940][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.357027][T10265] bridge_slave_0: entered allmulticast mode [ 346.375720][T10265] bridge_slave_0: entered promiscuous mode [ 346.414371][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.432838][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.452756][T10265] bridge_slave_1: entered allmulticast mode [ 346.468853][T10265] bridge_slave_1: entered promiscuous mode [ 346.577360][ T5271] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 346.590660][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.629279][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.684549][T10344] IPVS: length: 78 != 24 [ 346.720447][T10344] bridge_slave_1: left allmulticast mode [ 346.726150][T10344] bridge_slave_1: left promiscuous mode [ 346.748814][T10344] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.788938][ T5271] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.810205][ T5271] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 346.829667][ T5271] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 346.858276][T10265] team0: Port device team_slave_0 added [ 346.867947][ T5271] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 346.886191][ T5271] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.945825][T10300] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 346.958747][ T5271] hub 4-1:1.0: bad descriptor, ignoring hub [ 346.974781][ T5271] hub 4-1:1.0: probe with driver hub failed with error -5 [ 346.988855][T10265] team0: Port device team_slave_1 added [ 347.002695][ T5271] cdc_wdm 4-1:1.0: skipping garbage [ 347.020661][ T5271] cdc_wdm 4-1:1.0: skipping garbage [ 347.020844][T10350] kvm: pic: non byte read [ 347.034603][ T5271] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 347.051224][ T5271] cdc_wdm 4-1:1.0: Unknown control protocol [ 347.088486][T10265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.099189][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.137917][T10265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.179095][T10265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.211004][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.236963][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.249144][T10265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.319340][ T5264] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 347.366816][T10265] hsr_slave_0: entered promiscuous mode [ 347.384177][T10265] hsr_slave_1: entered promiscuous mode [ 347.398698][T10265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.425154][T10265] Cannot create hsr debugfs directory [ 347.512607][ T1119] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.530397][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 347.537060][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 347.543495][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 347.550296][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 347.568773][ T5264] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.585950][ T5264] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.610981][ T5264] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.636830][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.657500][ T5264] usb 5-1: SerialNumber: syz [ 347.735007][ T1119] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.858397][ T1119] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.892772][ T5264] usb 5-1: 0:2 : does not exist [ 347.924053][ T5264] usb 5-1: unit 5: unexpected type 0x09 [ 347.945287][ T5271] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 347.980763][ T5264] usb 5-1: USB disconnect, device number 67 [ 348.035855][ T5229] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.053205][ T5229] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.070635][ T5229] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.084005][ T5229] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.094354][ T5229] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.101249][ T1119] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.115596][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.179539][ T5271] usb 3-1: Using ep0 maxpacket: 8 [ 348.193204][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 348.233207][ T5271] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 348.256640][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 348.285987][ T5339] udevd[5339]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.306285][ T5271] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 348.328811][ T5232] Bluetooth: hci0: command tx timeout [ 348.334560][ T5271] usb 3-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice=c7.3d [ 348.334588][ T5271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.334609][ T5271] usb 3-1: Product: syz [ 348.334625][ T5271] usb 3-1: Manufacturer: syz [ 348.334640][ T5271] usb 3-1: SerialNumber: syz [ 348.336924][ T5271] usb 3-1: config 0 descriptor?? [ 348.575971][ T1119] bridge_slave_1: left allmulticast mode [ 348.595947][ T1119] bridge_slave_1: left promiscuous mode [ 348.603404][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.618289][ T1119] bridge_slave_0: left allmulticast mode [ 348.633545][ T1119] bridge_slave_0: left promiscuous mode [ 348.671287][ T5271] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 348.682733][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.702320][ T5273] usb 4-1: USB disconnect, device number 49 [ 348.805129][ T5271] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 348.844933][T10378] program syz.3.1005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 348.858506][ T5271] usb 3-1: USB disconnect, device number 54 [ 349.092365][ T5222] udevd[5222]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.295660][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 349.332149][ T5264] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 349.366112][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.378871][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.390578][ T1119] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 349.401523][ T1119] bond0 (unregistering): Released all slaves [ 349.414364][ T1119] bond1 (unregistering): Released all slaves [ 349.433627][ T1119] bond2 (unregistering): Released all slaves [ 349.539511][ T1119] Κό: left promiscuous mode [ 349.551955][ T5264] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 349.587463][ T5264] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 349.596608][ T5264] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.644349][ T5264] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 349.668894][ T1119] tipc: Disabling bearer [ 349.681047][ T1119] tipc: Left network mode [ 349.994293][T10365] chnl_net:caif_netlink_parms(): no params data found [ 350.172127][ T5232] Bluetooth: hci3: command tx timeout [ 350.248665][ T1119] hsr_slave_0: left promiscuous mode [ 350.264242][ T1119] hsr_slave_1: left promiscuous mode [ 350.276345][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.308647][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.313284][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.324432][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.337090][ T1119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.348416][ T1119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.408714][ T5232] Bluetooth: hci0: command tx timeout [ 350.434572][ T1119] veth1_macvtap: left promiscuous mode [ 350.448685][ T1119] veth0_macvtap: left promiscuous mode [ 350.455639][ T1119] veth1_vlan: left promiscuous mode [ 350.461469][ T1119] veth0_vlan: left promiscuous mode [ 350.760870][ T5264] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 351.282305][ T5264] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 351.309633][ T5264] stv0680 4-1:4.0: last error: 2, command = 0x30 [ 351.635182][ T1119] team0 (unregistering): Port device team_slave_1 removed [ 351.695641][ T1119] team0 (unregistering): Port device team_slave_0 removed [ 352.253525][ T5232] Bluetooth: hci3: command tx timeout [ 352.603473][ T5264] usb 4-1: USB disconnect, device number 50 [ 352.656472][T10265] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 352.740703][T10431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.798390][T10265] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 352.823734][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.844141][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.862461][T10365] bridge_slave_0: entered allmulticast mode [ 352.878981][T10365] bridge_slave_0: entered promiscuous mode [ 352.887059][T10265] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 352.905466][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.933214][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.943339][T10365] bridge_slave_1: entered allmulticast mode [ 352.951405][T10365] bridge_slave_1: entered promiscuous mode [ 352.977437][T10265] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 352.988967][ T5272] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 353.143048][T10365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.170843][T10365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.218206][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.242774][ T5272] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.260276][ T5272] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 353.270129][ T5272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.281973][ T5272] usb 5-1: config 0 descriptor?? [ 353.383136][T10365] team0: Port device team_slave_0 added [ 353.431446][T10365] team0: Port device team_slave_1 added [ 353.563396][T10365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.597279][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.666971][T10365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.724855][ T5272] logitech-djreceiver 0003:046D:C534.0013: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input0 [ 353.740921][T10365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.763131][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.794563][T10365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.944928][T10451] netlink: 'syz.3.1017': attribute type 10 has an invalid length. [ 353.968727][T10451] hsr0: entered promiscuous mode [ 354.025894][T10451] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 354.045646][T10451] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 354.084105][T10451] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 354.099167][T10451] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 354.138119][T10365] hsr_slave_0: entered promiscuous mode [ 354.154199][T10365] hsr_slave_1: entered promiscuous mode [ 354.172485][T10365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.193803][T10365] Cannot create hsr debugfs directory [ 354.215958][ T1850] usb 5-1: USB disconnect, device number 68 [ 354.329929][ T5232] Bluetooth: hci3: command tx timeout [ 354.405203][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.521452][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.585145][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.592463][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.672834][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.680069][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.231524][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.373733][T10265] veth0_vlan: entered promiscuous mode [ 355.422066][T10265] veth1_vlan: entered promiscuous mode [ 355.521610][T10265] veth0_macvtap: entered promiscuous mode [ 355.526522][T10484] syz.4.1023: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 355.526700][T10484] CPU: 0 UID: 0 PID: 10484 Comm: syz.4.1023 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 355.526728][T10484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 355.526741][T10484] Call Trace: [ 355.526750][T10484] [ 355.526760][T10484] dump_stack_lvl+0x241/0x360 [ 355.526797][T10484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.526826][T10484] ? __pfx__printk+0x10/0x10 [ 355.526858][T10484] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 355.526882][T10484] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 355.526908][T10484] warn_alloc+0x278/0x410 [ 355.526934][T10484] ? stack_depot_save_flags+0x29/0x830 [ 355.526956][T10484] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 355.526977][T10484] ? __pfx_warn_alloc+0x10/0x10 [ 355.527004][T10484] ? kasan_save_track+0x3f/0x80 [ 355.527027][T10484] ? __kasan_kmalloc+0x98/0xb0 [ 355.527051][T10484] ? xsk_setsockopt+0x598/0x950 [ 355.527073][T10484] ? do_sock_setsockopt+0x3af/0x720 [ 355.527095][T10484] ? __sys_setsockopt+0x1ae/0x250 [ 355.527113][T10484] ? __x64_sys_setsockopt+0xb5/0xd0 [ 355.527133][T10484] ? do_syscall_64+0xf3/0x230 [ 355.527158][T10484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.527190][T10484] __vmalloc_node_range_noprof+0x130/0x1460 [ 355.527238][T10484] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 355.527261][T10484] ? __kasan_kmalloc+0x98/0xb0 [ 355.527284][T10484] ? xskq_create+0x54/0x170 [ 355.527321][T10484] vmalloc_user_noprof+0x74/0x80 [ 355.527342][T10484] ? xskq_create+0xb6/0x170 [ 355.527362][T10484] xskq_create+0xb6/0x170 [ 355.527386][T10484] xsk_init_queue+0xa1/0x100 [ 355.527411][T10484] xsk_setsockopt+0x598/0x950 [ 355.527436][T10484] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.527462][T10484] ? __pfx_lock_acquire+0x10/0x10 [ 355.527486][T10484] ? aa_sock_opt_perm+0x79/0x120 [ 355.527509][T10484] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 355.527532][T10484] ? security_socket_setsockopt+0x87/0xb0 [ 355.527560][T10484] ? __pfx_xsk_setsockopt+0x10/0x10 [ 355.527582][T10484] do_sock_setsockopt+0x3af/0x720 [ 355.527610][T10484] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 355.527629][T10484] ? __fget_files+0x29/0x470 [ 355.527657][T10484] ? __fget_files+0x3f6/0x470 [ 355.527693][T10484] __sys_setsockopt+0x1ae/0x250 [ 355.527719][T10484] __x64_sys_setsockopt+0xb5/0xd0 [ 355.527743][T10484] do_syscall_64+0xf3/0x230 [ 355.527775][T10484] ? clear_bhb_loop+0x35/0x90 [ 355.527800][T10484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.527819][T10484] RIP: 0033:0x7efeafb779f9 [ 355.527837][T10484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.527855][T10484] RSP: 002b:00007efeb08e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 355.527876][T10484] RAX: ffffffffffffffda RBX: 00007efeafd06058 RCX: 00007efeafb779f9 [ 355.527892][T10484] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 355.527906][T10484] RBP: 00007efeafbe58ee R08: 0000000000000020 R09: 0000000000000000 [ 355.527921][T10484] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 355.527934][T10484] R13: 0000000000000000 R14: 00007efeafd06058 R15: 00007efeafe2fa38 [ 355.527967][T10484] [ 355.529560][T10484] Mem-Info: [ 355.529574][T10484] active_anon:6333 inactive_anon:0 isolated_anon:0 [ 355.529574][T10484] active_file:18571 inactive_file:38295 isolated_file:0 [ 355.529574][T10484] unevictable:768 dirty:248 writeback:0 [ 355.529574][T10484] slab_reclaimable:9038 slab_unreclaimable:98764 [ 355.529574][T10484] mapped:22649 shmem:1702 pagetables:891 [ 355.529574][T10484] sec_pagetables:0 bounce:0 [ 355.529574][T10484] kernel_misc_reclaimable:0 [ 355.529574][T10484] free:1365252 free_pcp:1415 free_cma:0 [ 355.529630][T10484] Node 0 active_anon:25192kB inactive_anon:0kB active_file:74244kB inactive_file:153096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90556kB dirty:992kB writeback:0kB shmem:5272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10488kB pagetables:3564kB sec_pagetables:0kB all_unreclaimable? no [ 355.529680][T10484] Node 1 active_anon:140kB inactive_anon:0kB active_file:40kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 355.529730][T10484] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 355.529784][T10484] lowmem_reserve[]: 0 2561 2562 0 0 [ 355.529829][T10484] Node 0 DMA32 free:1495612kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:25148kB inactive_anon:0kB active_file:74244kB inactive_file:151780kB unevictable:1536kB writepending:988kB present:3129332kB managed:2651256kB mlocked:0kB bounce:0kB free_pcp:1788kB local_pcp:1424kB free_cma:0kB [ 355.529883][T10484] lowmem_reserve[]: 0 0 1 0 0 [ 355.529921][T10484] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 355.529975][T10484] lowmem_reserve[]: 0 0 0 0 0 [ 355.530017][T10484] Node 1 Normal free:3950032kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:140kB inactive_anon:0kB active_file:40kB inactive_file:84kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3852kB local_pcp:3764kB free_cma:0kB [ 355.530074][T10484] lowmem_reserve[]: 0 0 0 0 0 [ 355.530118][T10484] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 355.530255][T10484] Node 0 DMA32: 615*4kB (U) 416*8kB (UME) 774*16kB (UME) 690*32kB (ME) 119*64kB (UME) 14*128kB (ME) 16*256kB (UME) 14*512kB (UME) 3*1024kB (UM) 5*2048kB (M) 347*4096kB (UME) = 1495548kB [ 355.530460][T10484] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 355.545411][T10484] Node 1 Normal: 2*4kB (U) 17*8kB (UM) 12*16kB (U) 10*32kB (U) 9*64kB (U) 4*128kB (UM) 3*256kB (UM) 2*512kB (UM) 2*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3950032kB [ 355.545604][T10484] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.545623][T10484] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.545640][T10484] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 355.545657][T10484] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 355.545674][T10484] 58568 total pagecache pages [ 355.545683][T10484] 0 pages in swap cache [ 355.545692][T10484] Free swap = 124324kB [ 355.545701][T10484] Total swap = 124996kB [ 355.545711][T10484] 2097051 pages RAM [ 355.545719][T10484] 0 pages HighMem/MovableOnly [ 355.545727][T10484] 402771 pages reserved [ 355.545735][T10484] 0 pages cma reserved [ 355.611875][T10265] veth1_macvtap: entered promiscuous mode [ 355.699952][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.699978][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.701524][T10265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.723680][T10265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.428442][ T5232] Bluetooth: hci3: command tx timeout [ 356.433349][T10265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.467717][T10265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.503336][T10365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.553164][T10365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.596832][T10265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.623309][T10265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.655454][T10265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.664825][T10265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.682122][T10365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.715286][T10365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 356.752553][T10499] syzkaller1: entered promiscuous mode [ 356.777756][T10499] syzkaller1: entered allmulticast mode [ 356.814805][T10499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'. [ 356.958936][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.974718][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.080090][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.105631][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.266065][T10365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.346450][T10513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.979'. [ 357.360321][T10365] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.439423][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.446777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.527731][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.535055][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.909246][T10365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.079791][T10365] veth0_vlan: entered promiscuous mode [ 358.156098][T10365] veth1_vlan: entered promiscuous mode [ 358.164839][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1026'. [ 358.271687][T10365] veth0_macvtap: entered promiscuous mode [ 358.380118][T10365] veth1_macvtap: entered promiscuous mode [ 358.474841][T10365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.488552][T10365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.510078][T10365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.526234][T10365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.556737][T10365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.591938][T10365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.640672][T10365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.669408][T10365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.720464][T10365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.739798][T10537] loop0: detected capacity change from 0 to 7 [ 358.772779][T10537] Dev loop0: unable to read RDB block 7 [ 358.778733][T10537] loop0: AHDI p1 p3 p4 [ 358.783088][T10537] loop0: partition table partially beyond EOD, truncated [ 358.793558][T10537] loop0: p1 start 2048 is beyond EOD, truncated [ 358.802182][T10537] loop0: p3 size 16779293 extends beyond EOD, truncated [ 358.807175][T10365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.886575][T10365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.944349][T10365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.986268][T10365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.026010][T10365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.418230][T10553] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1031'. [ 359.554872][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.577865][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.638768][ T955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.661358][ T955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.674040][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1031'. [ 360.487513][ T5264] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 360.707489][ T5272] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 360.712478][ T5264] usb 5-1: Using ep0 maxpacket: 16 [ 360.729601][ T5264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.775636][ T5264] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.813853][ T5264] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 360.860674][ T5264] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 360.917557][ T5264] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.939442][ T5272] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 360.946724][ T5264] usb 5-1: config 0 descriptor?? [ 360.977398][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.000889][ T5272] usb 2-1: config 0 descriptor?? [ 361.019607][ T5272] pwc: Samsung MPC-C10 USB webcam detected. [ 361.162200][T10583] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.185365][T10583] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 361.210146][ T5272] pwc: send_video_command error -71 [ 361.227521][ T5272] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 361.235178][ T5273] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 361.243527][T10603] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 361.263826][T10603] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 361.264665][ T5272] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 361.333895][ T5272] usb 2-1: USB disconnect, device number 63 [ 361.487422][ T5273] usb 1-1: Using ep0 maxpacket: 32 [ 361.504457][ T5273] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 361.530618][ T5273] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 361.567997][ T5273] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.595588][ T5273] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 361.631047][ T5264] usbhid 5-1:0.0: can't add hid device: -71 [ 361.631864][ T5273] usb 1-1: config 1 has no interface number 0 [ 361.641045][ T5264] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 361.679719][ T5273] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 361.688144][ T5264] usb 5-1: USB disconnect, device number 69 [ 361.754239][ T5273] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 361.820535][ T5273] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.870655][ T5273] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 362.071112][ T5273] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 362.089531][ T5273] snd_usb_pod 1-1:1.1: invalid control EP [ 362.106120][ T5273] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 362.132401][ T5273] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 362.149617][ T5273] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 362.617154][T10645] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 362.627512][T10645] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 362.637865][T10645] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 362.647075][T10645] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 362.658800][T10645] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 362.678935][T10645] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 362.790573][ T1119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.806568][ T1119] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.871945][ T5273] usb 1-1: USB disconnect, device number 62 [ 363.010299][ T1119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.026257][ T1119] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.204264][ T1119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.228159][ T1119] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.439710][ T1119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 363.474176][ T1119] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.037979][T10645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.049864][T10645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.061334][T10645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.083854][T10645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.096301][T10645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 364.111329][T10645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.209014][ T1119] bridge_slave_1: left allmulticast mode [ 364.214732][ T1119] bridge_slave_1: left promiscuous mode [ 364.286599][ T1119] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.341210][ T1119] bridge_slave_0: left allmulticast mode [ 364.346943][ T1119] bridge_slave_0: left promiscuous mode [ 364.365601][ T1119] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.579000][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 364.595885][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 364.605172][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 364.631440][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 364.657845][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 364.666817][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.729907][T10645] Bluetooth: hci2: command tx timeout [ 364.800067][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.825049][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.835520][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.845635][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.864749][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 364.876283][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.132196][T10702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1054'. [ 365.347004][ T1119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.356055][ T1119] bond_slave_0: left promiscuous mode [ 365.369135][ T1119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.378648][ T1119] bond_slave_1: left promiscuous mode [ 365.386410][ T1119] bond0 (unregistering): Released all slaves [ 365.407618][T10651] chnl_net:caif_netlink_parms(): no params data found [ 365.792660][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1057'. [ 365.885713][T10714] ------------[ cut here ]------------ [ 365.891815][T10714] kernel BUG at drivers/android/binder.c:1173! [ 365.898313][T10714] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 365.905267][T10714] CPU: 1 UID: 0 PID: 10714 Comm: syz.0.1058 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 365.916018][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 365.926061][T10714] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00 [ 365.932328][T10714] Code: c8 f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 e4 c1 c8 f8 e9 4c fd ff ff e8 9a 7b 61 f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 365.952376][T10714] RSP: 0018:ffffc900042275e8 EFLAGS: 00010283 [ 365.958456][T10714] RAX: ffffffff8931fc46 RBX: 0000000000000000 RCX: 0000000000040000 [ 365.966796][T10714] RDX: ffffc90009a59000 RSI: 0000000000000901 RDI: 0000000000000902 [ 365.974853][T10714] RBP: ffff88802e5c7820 R08: ffffffff8931f77b R09: 0000000000000000 [ 365.982824][T10714] R10: ffff888060424330 R11: ffffed100c084868 R12: 0000000000000000 [ 365.990976][T10714] R13: dffffc0000000000 R14: ffff888060424128 R15: ffff888060424110 [ 365.998966][T10714] FS: 00007f0889cd56c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 366.007894][T10714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.014470][T10714] CR2: 000000110c2917e5 CR3: 000000005a1e6000 CR4: 00000000003506f0 [ 366.022440][T10714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.030403][T10714] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.038382][T10714] Call Trace: [ 366.041658][T10714] [ 366.044579][T10714] ? __die_body+0x88/0xe0 [ 366.048908][T10714] ? die+0xcf/0x110 [ 366.052709][T10714] ? do_trap+0x15a/0x3a0 [ 366.056951][T10714] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 366.062585][T10714] ? do_error_trap+0x1dc/0x2c0 [ 366.067346][T10714] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 366.072988][T10714] ? __pfx_do_error_trap+0x10/0x10 [ 366.078188][T10714] ? handle_invalid_op+0x34/0x40 [ 366.083117][T10714] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 366.088747][T10714] ? exc_invalid_op+0x38/0x50 [ 366.093413][T10714] ? asm_exc_invalid_op+0x1a/0x20 [ 366.098430][T10714] ? binder_inc_ref_for_node+0x92b/0xe00 [ 366.104214][T10714] ? binder_inc_ref_for_node+0xdf6/0xe00 [ 366.109963][T10714] ? binder_inc_ref_for_node+0xdf7/0xe00 [ 366.115596][T10714] ? binder_inc_ref_for_node+0xdf6/0xe00 [ 366.121316][T10714] binder_ioctl_write_read+0xc7b/0x8d00 [ 366.126872][T10714] ? __pfx_stack_trace_save+0x10/0x10 [ 366.132343][T10714] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 366.138350][T10714] ? __lock_acquire+0x137a/0x2040 [ 366.143440][T10714] ? binder_get_thread+0x16e/0x6c0 [ 366.148661][T10714] ? __pfx_lock_release+0x10/0x10 [ 366.153774][T10714] ? do_raw_spin_unlock+0x13c/0x8b0 [ 366.158971][T10714] ? _raw_spin_unlock+0x28/0x50 [ 366.163838][T10714] ? binder_get_thread+0x178/0x6c0 [ 366.169055][T10714] binder_ioctl+0x43d/0x1c70 [ 366.173773][T10714] ? tomoyo_path_number_perm+0x71a/0x880 [ 366.179415][T10714] ? tomoyo_path_number_perm+0x208/0x880 [ 366.185041][T10714] ? __pfx_binder_ioctl+0x10/0x10 [ 366.190081][T10714] ? __fget_files+0x29/0x470 [ 366.194667][T10714] ? __fget_files+0x3f6/0x470 [ 366.199685][T10714] ? __fget_files+0x29/0x470 [ 366.204270][T10714] ? bpf_lsm_file_ioctl+0x9/0x10 [ 366.209302][T10714] ? security_file_ioctl+0x87/0xb0 [ 366.214405][T10714] ? __pfx_binder_ioctl+0x10/0x10 [ 366.219426][T10714] __se_sys_ioctl+0xfc/0x170 [ 366.224011][T10714] do_syscall_64+0xf3/0x230 [ 366.228512][T10714] ? clear_bhb_loop+0x35/0x90 [ 366.233186][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.239169][T10714] RIP: 0033:0x7f0888f779f9 [ 366.243657][T10714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.263428][T10714] RSP: 002b:00007f0889cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.271941][T10714] RAX: ffffffffffffffda RBX: 00007f0889105f80 RCX: 00007f0888f779f9 [ 366.279904][T10714] RDX: 00000000200003c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 366.287956][T10714] RBP: 00007f0888fe58ee R08: 0000000000000000 R09: 0000000000000000 [ 366.296003][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.304048][T10714] R13: 0000000000000000 R14: 00007f0889105f80 R15: 00007f088922fa38 [ 366.312101][T10714] [ 366.315105][T10714] Modules linked in: [ 366.319282][T10714] ---[ end trace 0000000000000000 ]--- [ 366.324773][T10714] RIP: 0010:binder_inc_ref_for_node+0xdf7/0xe00 [ 366.331473][T10645] Bluetooth: hci1: command tx timeout [ 366.338372][T10714] Code: c8 f8 e9 4e fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fd ff ff 48 89 df e8 e4 c1 c8 f8 e9 4c fd ff ff e8 9a 7b 61 f8 90 <0f> 0b 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 366.358131][T10714] RSP: 0018:ffffc900042275e8 EFLAGS: 00010283 [ 366.364220][T10714] RAX: ffffffff8931fc46 RBX: 0000000000000000 RCX: 0000000000040000 [ 366.372629][T10714] RDX: ffffc90009a59000 RSI: 0000000000000901 RDI: 0000000000000902 [ 366.380830][T10714] RBP: ffff88802e5c7820 R08: ffffffff8931f77b R09: 0000000000000000 [ 366.388842][T10714] R10: ffff888060424330 R11: ffffed100c084868 R12: 0000000000000000 [ 366.396811][T10714] R13: dffffc0000000000 R14: ffff888060424128 R15: ffff888060424110 [ 366.404959][T10714] FS: 00007f0889cd56c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 366.413925][T10714] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.420538][T10714] CR2: 000000110c2917e5 CR3: 000000005a1e6000 CR4: 00000000003506f0 [ 366.428536][T10714] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 366.436576][T10714] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 366.444574][T10714] Kernel panic - not syncing: Fatal exception [ 366.450845][T10714] Kernel Offset: disabled [ 366.455154][T10714] Rebooting in 86400 seconds..