last executing test programs: 6.316478291s ago: executing program 1 (id=2990): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000500)=[{}, {r1, 0xa1caac9f2fa8efad}], 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x0, 0x1}}, 0xf8, 0x0}, 0x0) 5.802328626s ago: executing program 2 (id=2994): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3b0, 0x0, &(0x7f0000000140)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.790591621s ago: executing program 3 (id=2997): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x87, 0x37, 0x4d, 0x10, 0x5c5, 0x2, 0xb48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x6, 0x20, 0x80, 0x8, [{{0x9, 0x4, 0x77, 0x1, 0x2, 0xd9, 0x55, 0xcb, 0x7, [], [{{0x9, 0x5, 0xa, 0x4, 0x400, 0x5, 0x4b, 0x1f, [@generic={0x21, 0x22, "47918dd5e89e9d75ad41c905533fd5771c013b15ed743b08c337f909dffac4"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x6, 0x4e, 0x5}}]}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x5, 0x3f, 0x9, 0x8, 0xab}, 0xc7, &(0x7f0000000100)={0x5, 0xf, 0xc7, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0xab, 0x0, 0xc, 0xfb, 0x1}, @generic={0xa6, 0x10, 0x2, "c2695d581a4c236c798765ecdcdf4c06bc1572184a5b7f5d82c06f5246b4c45e0de329076f43f6c3d55a64450bae57ed2443720f7081317bdebe1811adf2f24202ef12f40248bcce3df4a3a6ea003500f7c4a94c1772b78af2fc3b2647cec82214c2b48afa8d6d5e35e11c8655f99dede0b207113b58183bb9d8b4491fa7d7856daf5546b8dcc75746f542d7254d6cb274182c6faf56bca300ebdcccd28b59d7a13d04"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x3, 0x3, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x4, 0xff, 0x9}]}, 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44f}}, {0xa4, &(0x7f0000000240)=@string={0xa4, 0x3, "fbd0f9c9ce1083e8a6c22e5fee40612fe4ccee5a663287f8e4db74ab4f6e4f6250d3f89d7e32016969a0ea0a5f6a40e470ea4186f9ad61287a0e685345848a100c18ab40032efdc724be80f31e59c6cddb794670ac9457b9c21c9d64746b067d5dc94caad4fa2756e1f54c5e7031fb6e28cfddbfeff5539492037cd26232b9c85729459673fa81f0ef15632611ca3e6cda68d2dd8eac7fb82f8ac9e7e8f1d5f39b18"}}, {0x0, 0x0}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x421}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) epoll_create1(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) socket$inet(0x2, 0x0, 0x0) 4.398394284s ago: executing program 1 (id=2999): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000000)) 4.166052192s ago: executing program 2 (id=3002): fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000080), 0x4e) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000fbf80e1004231f02af5f010203010902120001000000000904"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x0, &(0x7f0000000340)={0x0, 0x0, 0x200, 0xfffffffd, 0x340}, &(0x7f0000000140), &(0x7f0000000100)) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8a01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) 4.086114908s ago: executing program 4 (id=3003): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_io_uring_setup(0x1365, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r6 = socket$inet(0x15, 0x5, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000740)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0xe}) io_uring_enter(r3, 0x2d3c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) 3.96231595s ago: executing program 4 (id=3004): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x21, @broadcast, 'vlan1\x00'}}, 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000002380)=[{{&(0x7f0000000080)=@ieee802154={0x24, @long}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, 0x0}}], 0x2, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=@newtaction={0x200, 0x30, 0x0, 0x0, 0x0, {}, [{0x1ec, 0x1, [@m_nat={0x12c, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast1, @private}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @broadcast, @empty}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}]}, {0x61, 0x6, "b95741ba0d30e86d21d86be581d7d8259fa5b51c57a8316b132aa79ce46586a8f142f5a1fd8b5cbd213460c2995d2bee696525b3b08fcd4b6eea6e8f9af137f4560192360e0d6f215225d230281a54ce871fb30d6812b4fbf745429002"}, {0xc}, {0xc}}}, @m_xt={0xbc, 0x0, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x0, 'security\x00'}}]}, {0x65, 0x6, "93ac9ba19db03b78dc5bda30c9b0ea5f17a24c9f8d5184ee2c8682b59d0eb24d0043553e353d94590da225bef9d01cb78cca5ac007aeef53c096735a9987be42a6741b59ac1ba663050067f0b468c14cbe07cb79a25616e6a99c06859f6a9613c2"}, {0xc}, {0xc}}}]}]}, 0x200}}, 0x0) sendmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x88, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10001}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x6}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x9}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8}]}, 0x88}}, 0x0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) 3.796256205s ago: executing program 1 (id=3005): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x40006828, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000000)=[0x0, 0x9]) unshare(0x50000000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', '', [{0x20, '\x00'}], 0xa, "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"/278}, 0xfffffea2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) dup(r3) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000480)=0xd97, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 3.623032705s ago: executing program 4 (id=3006): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000181000/0xf000)=nil, 0xf000}, 0x5}) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) 3.293252214s ago: executing program 3 (id=3007): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000400)=@req3={0x788, 0x101, 0x7fffffff, 0x2, 0x50b, 0xffffffff}, 0x1c) 3.15845688s ago: executing program 3 (id=3008): mknod(0x0, 0x8000, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="8ab6a1a3d9397116c2485dd1a366cd6571a551cf06329df827e60f11f1f7cef32034a69b60add1376d93fe6890e681463944a96a524609fe5d6ae5517e09f20bc6c7928b25f724f6cbaa9e9971453b74752998416bae4dab27b838242c06dcd03a7baa5a48bc9726bcbfaeb743a0afe5a9504a54b1f5492d3ee153ff87ea44cce35929c5ac965debe7cbdfd46b0057392f1f98f8ce6bdfdf3ab6dc024d7489ad23999617c87b615ae0", 0xa9) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2.754873645s ago: executing program 2 (id=3011): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xc8) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15e", 0xbd}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a", 0x10}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x348}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.646356927s ago: executing program 0 (id=3012): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044325, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000200)=[{0x9, 0x0, 0x0, 0x7ffffff8}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f00000005c0)=[{0x0, 0x16, 0x3, 0x7}, {0x16, 0x40}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x1c960f5e}], 0x1, 0x0, 0x0) r3 = creat(0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000600), 0x8, 0x121700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000280), &(0x7f0000000180)=r2}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x8399, 0x10}, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x1) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000300)=""/1, &(0x7f0000000580)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000400)='GPL\x00', 0xe, 0xf8, &(0x7f0000000b80)=""/248, 0x21880, 0x24, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x100}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x6, 0x6}, {0x1, 0x2, 0x3, 0xc}, {0x2, 0x0, 0x1, 0x3}], 0x10, 0x1000}, 0x90) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x80, 0x17, 0x303, 0x0, 0x0, 0x0, 0x0}) openat(r1, 0x0, 0x40, 0x27) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000002d9, &(0x7f0000000680)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.619647244s ago: executing program 4 (id=3013): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3b0, 0x0, &(0x7f0000000140)="2b7393b7c6347cd49978d5023a81022d1e7baeea09c5d463b04397f7a66a0f0b769bc097d48d09754d7e15e59224486b3df2c3fc8b3379a1a30fee142bb1a32d4c3b32006571f5de9d846e7e8b8e64c79a66e2ba19f7eca5d0e0517dcd4eba1ab882af481e477e362ceb1fd11c9d50b5e3afd7f60aa6881b2681c53ee87badeeba28eba948324721a382f000917a4a6f6f76d04e0b19396feccdbae7795aaa45818dce2d1f7b4642b09dd40bf4bef9854b631eb821b13a7e475d5c9a9d4bbb3fd9b07650683a35d9557d1e7e6496dd6f6f5ca57a5c43b9863819829430e1607ebf0dbb2308a8181ef5ccdcf1eb157470d54635a1a5b7075c77dfdb97155af8fa282fcc5ca5bad36839e0cad1304c542be170a44da4089a32bc3f35a85a6e30b8d233809335a4274938505517a26728b643c2f04917afe55c68759adea3bb70f5b5c3c59fc24d6e3835c110420cfd6de096f8dec90f5f577744d2d0f3ec21819253cdb102d50678293328726f1c4f7163e28e79ab4767e3054dfa9a11b1fdafb8757b2a91f8283ad01712062048b52b5cfcaf648fe760a98ee82fbb1836c88434e0b36f9b56c4d3cd8b42566cba88ddb7418762cd8495a4ec8de7952789c2a6d37cdbbecde53ffea86db893181d9b5c7d4663d1bd78c9cb87af7cbfa54a1b2c98432ef5ba6f43c358ae873495f46850d56d83f3d7d376b3b6120ffe93c8ab6b6f214316d8c3376a5a65d173b6e4243326c729163050547d49338a737bc894f487bc9b51e75ac2031ea714ed6c917f13e3cc0ee85a75e9a98a42f9aad6f1e244c1daa06ee55b205e11aa3a2982387210bccd26c5108f2a548b06dd0a0520ca8f99532ab0a4fd8c33f0f01ad40b74ef4e9f0d01b7bbc8aa69296cca1f19d92c5be8ffa3264e3951dd318363e02d36fa69ecaa3978b6c471c9dde0052632d1ebe277982fb0c900dd3f461257ad46a69b8f1e9bc36d8992426aa4adddc024bb74a39539f1cf801502cbd0d7acb8b2c5d9778a8253d2c8746d5b252a32f67c94cb8916a6310c1af0c0eb6f09a07d5020948a9c0f147c01d4a8b3af25686eadef9eaed2623cb012521ab86453e71bf351c130b6d33ffc388afdb5b2b7c16c1002a0640dd73e7a7e6a852dd2c75209d711a50363e46116ad2a14483c3729a81e4ef2fed2f18732f0038e079e561eea96eb665219070f42139c627dd5f185d23fdc316d38eb99826bcb63938d6cd1af3b5274f57009f87854ad98bef03025c32e7aa4a721d28e94ec5feff3a279c2e1c18002e39eaaefec3dfd1eae45a61e4283e8a7ef1eaf70d93a0333a9ff9ef048332f3fcc79"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.479193693s ago: executing program 2 (id=3014): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04"], 0x22) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x5, 0x6, 0x8, 0x8, 0x1}}}}, 0x17) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x0, 0x4000, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23b3b6}) r8 = dup3(r2, r7, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa194f}) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f0000000180)={0x18, r10}) r11 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f0000000240)='/de4\x12O\x8e\x9cv/q-\xa8\xb7t\xb5\xbe;\xe2\x028s;\xfa\xb7N\xd1\xdd\xfc\x1c2\xd7^\x82\xcfM\xab\xb8\xb7\x93\xce\xfc\xb8\xad@\xd2c6\x88\x16gX}\xa4\xceO\xf7a\xd7d\xb2\x89Q$\xbf\x98\xfa\x8b\xf1\xc7\xd5\x00\xcdi\x8aT\xfd|\xe0', 0x0, r0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) r12 = memfd_secret(0x0) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r13, 0x0, r12) ioctl$LOOP_SET_STATUS(r12, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x61d6d4e6, 0x3, 0xf4780000, 0x19, "7763a42777876db7d54b45f9d97f1e65b61f41db70ef6c17c7c1aec2b6e5b08ff6c9540c00c825b4e33e705fddf3b05c2a4746015de5cd89e90f3a4995662354", "ec6324a74111bf1f7afe1c89c5fc3da1ce646cc5bd8f5ea59ed90bf016e6cf95", [0xfffffffffffffffb, 0x2]}) r14 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f00000000c0)) 2.02642861s ago: executing program 3 (id=3015): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r0, 0x40184810, &(0x7f0000000000)) 2.015535656s ago: executing program 2 (id=3016): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r1, @ANYRESHEX=r0, @ANYBLOB="732b9bfa4240f7587bc279d6f720fc05358b9594202e467fbff4570f8f9f3e5b09f93f4c50dab6e356ffda8a0b72b8053fba9cce6586191a", @ANYRESOCT=r0], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x14, r4, 0x301, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x403}, 0x20}, 0x1, 0xba01}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="08000000000000000a0001"], 0x2c}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40450, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x6cb, 0x73f5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x13, {[@main=@item_4={0x3, 0x0, 0x8, "2d8107a2"}, @main, @global=@item_012={0x2, 0x1, 0xa, "820d"}, @main=@item_4={0x3, 0x0, 0x9, "16498deb"}, @local=@item_4={0x3, 0x2, 0x5, "19fcbe10"}]}}, 0x0}, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="02c8000c000800010002080400"], 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, 0xffffffffffffffff, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000700)={0x1, "fa02c8098000", 0xffffffffffffffff}) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r8, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r11, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r12, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, &(0x7f0000000100)) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 1.627305533s ago: executing program 0 (id=3017): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xf) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000800)=@nat={'nat\x00', 0x19, 0x4, 0x5f8, [0x20019ec0, 0x0, 0x0, 0x2001a03e, 0x2001a18c], 0x0, &(0x7f00000002c0), &(0x7f0000019ec0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x11, 0x0, 0x7, 'vcan0\x00', 'veth1_virt_wifi\x00', 'virt_wifi0\x00', 'gre0\x00', @multicast, [0xff, 0x0, 0x0, 0x1fe, 0x0, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xde, 0x116, 0x14e, [@stp={{'stp\x00', 0x0, 0x48}, {{0x40, {0x52, 0x0, 0x870a, @random="3893ab6b09b5", [0x0, 0xff, 0xff, 0xff], 0x1, 0x2, 0x200, 0x10, @local, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x4e24, 0x4e22, 0x9, 0x400, 0x101, 0x3, 0x8b, 0x50, 0x0, 0x8}, 0x26, 0x120}}}], [@snat={'snat\x00', 0x10, {{@remote, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x5, 0x3e, 0xf8, 'batadv_slave_0\x00', 'geneve0\x00', 'wg2\x00', 'nicvf0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0xa6, 0x11e, [], [@snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0xfffffffffffffffd}}}], @common=@nflog={'nflog\x00', 0x50, {{0x8001, 0xff68, 0x9, 0x0, 0x0, "0760c848a68f0918b4c0634e98f0efeb0bf57bb6de91574ae3adc10f9cd2fabd93dafc99eee2ad408574db6d13b2276cc3e6df380658091462c4bc53d8d24b59"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x9, 0x12, 0x19, 'rose0\x00', 'pim6reg0\x00', 'vlan0\x00', 'veth1_to_hsr\x00', @random="5a7674fc0f9a", [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xb6, 0x126, 0x15e, [@limit={{'limit\x00', 0x0, 0x20}, {{0x5, 0x7fd9, 0x3, 0xffff97d8, 0x0, 0x2}}}], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffffffffffffffff}}}, @arpreply={'arpreply\x00', 0x10, {{@remote, 0xfffffffffffffffd}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffd}}}}, {0x9, 0x1, 0xe907, 'pimreg1\x00', 'veth1_to_bond\x00', 'pim6reg1\x00', '\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @random="ebffdf40464e", [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0xfe, 0x136, 0x16e, [@arp={{'arp\x00', 0x0, 0x38}, {{0x3, 0x189aa, 0x4, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, @remote, 0x0, @multicast, [0xff, 0xff, 0x0, 0xff, 0xff], @broadcast, [0xff, 0x0, 0x0, 0xff], 0x0, 0x5c}}}, @vlan={{'vlan\x00', 0x0, 0x8}, {{0x0, 0x5, 0x6000, 0x3, 0x3}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@broadcast, 0x10}}}}]}, {0x0, '\x00', 0x4}]}, 0x670) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x38c, 0x0, 0x0) shutdown(r2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000280)=0xc) process_vm_readv(r4, &(0x7f0000000880)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/19, 0x13}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/113, 0x71}, {&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000480)=""/10, 0xa}], 0x6, &(0x7f0000000d80)=[{&(0x7f0000019e00)=""/158, 0x9e}, {&(0x7f0000000940)=""/109, 0x6d}, {&(0x7f00000009c0)=""/169, 0xa9}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000a80)=""/208, 0xd0}, {&(0x7f0000000b80)=""/238, 0xee}, {&(0x7f0000000c80)=""/208, 0xd0}], 0x7, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000e00)=""/102388, 0x18ff4}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000e00)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x20000014}, 0x4040000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414a800000000000000001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0) read$FUSE(r6, &(0x7f0000001b80)={0x2020}, 0x2020) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r6, 0x3b87, &(0x7f00000000c0)={0x18, 0x1, 0x1, 0x0, 0x0, 0x1}) 1.394551239s ago: executing program 3 (id=3018): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000400)=@req3={0x788, 0x101, 0x7fffffff, 0x2, 0x50b, 0xffffffff}, 0x1c) 1.394051001s ago: executing program 0 (id=3019): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x4004551e, &(0x7f0000000380)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x5514, 0x0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ftruncate(r2, 0x97b) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000000)={@local, @multicast1, 0x0, "ea0f38d1a15892def51090fffff3cd08000000e4353d68bcfa00"}, 0x3c) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @local}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xe, 0x4) 1.378356809s ago: executing program 3 (id=3020): r0 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x3a9, 0x0, &(0x7f0000000140)="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"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x91, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5, 0x24, 0x0, 0xfffe}, {0xd}, {0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x1ff}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x0, 0x7}, @network_terminal={0x7, 0x24, 0xa, 0x6d}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x59d}]}}}}}]}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.325853873s ago: executing program 0 (id=3021): socket$packet(0x11, 0x0, 0x300) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e05003d20", @ANYRES32], 0x7) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r2 = syz_open_pts(r1, 0x0) dup3(0xffffffffffffffff, r1, 0x0) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r2, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, "dac7a15f305b57a3"}) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000183afffe80000000000000000000000000f9baff4f"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1.302555699s ago: executing program 1 (id=3022): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@broadcast, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x10, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ffffffffffff60000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000009040000", 0x58}], 0x1) 1.158571117s ago: executing program 1 (id=3023): socket$key(0xf, 0x3, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) close_range(0xffffffffffffffff, r0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000181000/0xf000)=nil, 0xf000}, 0x5}) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x380000, @empty}, 0x1c) 991.312532ms ago: executing program 4 (id=3024): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(r3, 0x0, 0xc8) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15e", 0xbd}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15dba086", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d06e8c3dc885a29d9b5a4c0cdc701c0a", 0x10}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001340)=ANY=[], 0x348}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 817.864441ms ago: executing program 4 (id=3025): mknod(0x0, 0x8000, 0xfffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x82) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000005c0)="8ab6a1a3d9397116c2485dd1a366cd6571a551cf06329df827e60f11f1f7cef32034a69b60add1376d93fe6890e681463944a96a524609fe5d6ae5517e09f20bc6c7928b25f724f6cbaa9e9971453b74752998416bae4dab27b838242c06dcd03a7baa5a48bc9726bcbfaeb743a0afe5a9504a54b1f5492d3ee153ff87ea44cce35929c5ac965debe7cbdfd46b0057392f1f98f8ce6bdfdf3ab6dc024d7489ad23999617c87b615ae0", 0xa9) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 390.387868ms ago: executing program 0 (id=3026): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04"], 0x22) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000140)={0x0, 0xa, 0x2}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="0405"], 0x7) socket(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x1, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x3, 0xa}, {0x5, 0x6, 0x8, 0x8, 0x1}}}}, 0x17) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x0, 0x4000, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23b3b6}) r8 = dup3(r2, r7, 0x0) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r8, 0x3b86, &(0x7f0000000180)={0x18, r10}) r11 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f0000000240)='/de4\x12O\x8e\x9cv/q-\xa8\xb7t\xb5\xbe;\xe2\x028s;\xfa\xb7N\xd1\xdd\xfc\x1c2\xd7^\x82\xcfM\xab\xb8\xb7\x93\xce\xfc\xb8\xad@\xd2c6\x88\x16gX}\xa4\xceO\xf7a\xd7d\xb2\x89Q$\xbf\x98\xfa\x8b\xf1\xc7\xd5\x00\xcdi\x8aT\xfd|\xe0', 0x0, r0) ioctl$IOCTL_VMCI_VERSION(r0, 0x79f, 0x0) r12 = memfd_secret(0x0) r13 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r13, 0x0, r12) ioctl$LOOP_SET_STATUS(r12, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x61d6d4e6, 0x3, 0xf4780000, 0x19, "7763a42777876db7d54b45f9d97f1e65b61f41db70ef6c17c7c1aec2b6e5b08ff6c9540c00c825b4e33e705fddf3b05c2a4746015de5cd89e90f3a4995662354", "ec6324a74111bf1f7afe1c89c5fc3da1ce646cc5bd8f5ea59ed90bf016e6cf95", [0xfffffffffffffffb, 0x2]}) r14 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$TUNGETFEATURES(r14, 0x800454cf, &(0x7f00000000c0)) 252.18189ms ago: executing program 1 (id=3027): r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044325, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000200)=[{0x9, 0x0, 0x0, 0x7ffffff8}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x2, &(0x7f00000005c0)=[{0x0, 0x16, 0x3, 0x7}, {0x16, 0x40}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x1c960f5e}], 0x1, 0x0, 0x0) r3 = creat(0x0, 0x0) syz_open_dev$admmidi(&(0x7f0000000600), 0x8, 0x121700) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000280), &(0x7f0000000180)=r2}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000440)={0xffffffffffffffff, 0x8399, 0x10}, 0xc) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x1) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000300)=""/1, &(0x7f0000000580)=0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000400)='GPL\x00', 0xe, 0xf8, &(0x7f0000000b80)=""/248, 0x21880, 0x24, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000000640)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x100}, 0x10, 0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x6, 0x6}, {0x1, 0x2, 0x3, 0xc}, {0x2, 0x0, 0x1, 0x3}], 0x10, 0x1000}, 0x90) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000040)={0x80, 0x17, 0x303, 0x0, 0x0, 0x0, 0x0}) openat(r1, 0x0, 0x40, 0x27) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000002d9, &(0x7f0000000680)=ANY=[@ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 163.482159ms ago: executing program 0 (id=3028): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x18, &(0x7f0000000240)=ANY=[], 0x8) r1 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000440)="ae", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f00000001c0)={0x0, 0x0, r3, 0xcccccccc}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r1, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000001280)={&(0x7f0000001180), 0xc, 0x0}, 0x20000090) socketpair(0x0, 0x0, 0x28, &(0x7f0000000080)) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005ab05740450c088085e10000000109021200b8dc0000000904"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="4016e6"], 0x0, 0x0, 0x0, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_control_io(r4, &(0x7f0000001540)={0x2c, &(0x7f00000015c0)={0x40, 0x7, 0xdb, {0xdb, 0x3, "d8b9060f54b0c2ef7bf6e764420aa2596385a50f8baf6744cd32a50855c02e4da05b6b900041d06d410c685c8be371e55ea1849296474cbcc5c6493df239a71763ba7e597fafbcb1fb4a963247e98ec2179899e75a9a83ab561e71cb0d0e4425bdc9c8b31168f72cd2500245553b3f2a5c8792b5d84f2d88e75018dec0b0866a28390904a9317e1a08805d1e427c40bc15c9d990492e0cef2c79d0aaef8525ee1ad8522f33c396b0a87c2aaa9c465e55d37fe0fbd12f4e5e8364c9ca1def550019928e9e18f55deb594490d1562f748a8aae07e8e9a68dce22"}}, &(0x7f0000001140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x424}}, &(0x7f00000014c0)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x3, 0xf}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x6, 0x9, 0xf1, 0x87}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x0, 0xff00, 0x1, [0xff3fff, 0xff00c0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x0, 0x6, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x7, 0x3, 0x6}]}}, &(0x7f00000011c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x8, 0x2, 0x4, "35fe3e1d", "36d95334"}}, &(0x7f0000001440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x5, 0x8, 0x2, 0xc0d7, 0x9}}}, &(0x7f0000001ac0)={0x84, &(0x7f00000016c0)={0x0, 0xe, 0x29, "9aa8f0ed571fe805c51b91c700864452b7b2acc572ccfb9f4e19fad76c593dd41a670cc19dd09e3364"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f00000017c0)={0x20, 0x0, 0x8, {0x20, 0x1, [0xf0]}}, &(0x7f0000001800)={0x40, 0x7, 0x2, 0x40}, &(0x7f0000001840)={0x40, 0x9, 0x1}, &(0x7f0000001880)={0x40, 0xb, 0x2, "864d"}, &(0x7f00000018c0)={0x40, 0xf, 0x2, 0x400}, &(0x7f0000001900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, &(0x7f0000001940)={0x40, 0x17, 0x6, @local}, &(0x7f0000001980)={0x40, 0x19, 0x2, "b1d1"}, &(0x7f00000019c0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000001a00)={0x40, 0x1c, 0x1, 0xc4}, &(0x7f0000001a40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000001a80)={0x40, 0x21, 0x1, 0xe}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001200)={0xffffffffffffffff, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001440), &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000001400)=[{}], 0x8, 0x0, 0x0, &(0x7f0000001240), 0x8, 0x48, 0x8, 0x8, &(0x7f0000001580)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r5 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) fadvise64(r5, 0x0, 0x0, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="54010000100013070000000000000000fe880000000000000000000000000001ac1414bb0000000016000000000000d9901eca0e2ad12b000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="200100000000000000000000000000020000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400210000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0) 0s ago: executing program 2 (id=3029): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)) kernel console output (not intermixed with test programs): 326 audit(1720373867.824:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.2750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 777.382420][ T6053] usb 4-1: Using ep0 maxpacket: 8 [ 777.404962][ T5104] Bluetooth: hci0: command tx timeout [ 777.413366][ T6053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 777.423892][ T6053] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 777.455328][ T6053] usb 4-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 777.477730][ T6053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.488628][ T6053] usb 4-1: Product: syz [ 777.493221][ T6053] usb 4-1: Manufacturer: syz [ 777.497836][ T6053] usb 4-1: SerialNumber: syz [ 777.505250][ T6053] usb 4-1: config 0 descriptor?? [ 778.023476][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 778.107570][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 778.355153][ T5104] Bluetooth: hci1: command tx timeout [ 778.954524][T18825] : entered promiscuous mode [ 779.154969][T18735] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.192874][T18735] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.200458][T18735] bridge_slave_0: entered allmulticast mode [ 779.238580][T18735] bridge_slave_0: entered promiscuous mode [ 779.260244][T18735] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.284398][T18735] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.296901][T18735] bridge_slave_1: entered allmulticast mode [ 779.309863][T18735] bridge_slave_1: entered promiscuous mode [ 779.355527][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 779.473475][ T5104] Bluetooth: hci0: command tx timeout [ 779.560216][T18735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.678734][T18735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.746366][ T45] usb 4-1: USB disconnect, device number 92 [ 779.787223][T18863] input: syz1 as /devices/virtual/input/input60 [ 780.038868][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 780.096380][T18863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2758'. [ 780.119973][T18757] chnl_net:caif_netlink_parms(): no params data found [ 780.241752][T18735] team0: Port device team_slave_0 added [ 780.279758][T18735] team0: Port device team_slave_1 added [ 780.442599][ T5104] Bluetooth: hci1: command tx timeout [ 780.580911][T18735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.610110][T18735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.678294][T18735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.743128][T18735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.799018][T18735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.825015][ C0] vkms_vblank_simulate: vblank timer overrun [ 780.834238][T18735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.053805][T18735] hsr_slave_0: entered promiscuous mode [ 781.081132][T18735] hsr_slave_1: entered promiscuous mode [ 781.171682][ T2930] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.249194][T18757] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.281874][T18757] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.314100][T18757] bridge_slave_0: entered allmulticast mode [ 781.321635][T18757] bridge_slave_0: entered promiscuous mode [ 781.402460][ T2930] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.445506][T18757] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.462512][T18757] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.470091][T18757] bridge_slave_1: entered allmulticast mode [ 781.481606][T18757] bridge_slave_1: entered promiscuous mode [ 781.496945][T18904] macvlan0: entered promiscuous mode [ 781.509398][T18904] macvlan0: left promiscuous mode [ 781.553271][ T5104] Bluetooth: hci0: command tx timeout [ 781.583263][T18757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.650206][ T2930] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.733118][T18757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.772766][ T5148] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 781.862430][ T2930] bond0: (slave netdevsim0): Releasing backup interface [ 781.884777][ T2930] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.962463][ T5148] usb 4-1: Using ep0 maxpacket: 8 [ 781.979404][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 781.980884][T18757] team0: Port device team_slave_0 added [ 782.005063][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 782.044958][ T5148] usb 4-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 782.060558][T18757] team0: Port device team_slave_1 added [ 782.073040][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.097767][ T5148] usb 4-1: Product: syz [ 782.111126][ T5148] usb 4-1: Manufacturer: syz [ 782.129872][ T5148] usb 4-1: SerialNumber: syz [ 782.151054][ T5148] usb 4-1: config 0 descriptor?? [ 782.162145][T18757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.162810][T13089] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 782.179190][T13089] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 782.184587][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.215123][T13089] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 782.241351][T18757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.256648][T13089] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 782.264336][T13089] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 782.271615][T13089] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 782.387733][T18757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.417868][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 782.417886][ T29] audit: type=1326 audit(1720373873.334:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18900 comm="syz.3.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 782.452726][T18757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.487127][ T29] audit: type=1326 audit(1720373873.394:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18900 comm="syz.3.2767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x0 [ 782.518151][T18757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 782.536767][ T5104] Bluetooth: hci1: command tx timeout [ 782.766469][T18927] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 782.781188][T18927] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 782.954454][ T2930] bridge_slave_0: left allmulticast mode [ 782.960241][ T2930] bridge_slave_0: left promiscuous mode [ 782.969855][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.559616][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.571805][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.588391][ T2930] bond0 (unregistering): Released all slaves [ 783.642555][ T5104] Bluetooth: hci0: command tx timeout [ 783.751200][T18757] hsr_slave_0: entered promiscuous mode [ 783.766805][T18757] hsr_slave_1: entered promiscuous mode [ 783.778966][T18757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 783.788126][T18757] Cannot create hsr debugfs directory [ 784.002436][ T6054] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 784.087458][ T2930] hsr_slave_0: left promiscuous mode [ 784.101235][ T2930] hsr_slave_1: left promiscuous mode [ 784.110848][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 784.126554][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.140176][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 784.150235][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.191269][ T2930] veth1_macvtap: left promiscuous mode [ 784.200316][ T2930] veth0_macvtap: left promiscuous mode [ 784.209721][ T2930] veth1_vlan: left promiscuous mode [ 784.217633][ T2930] veth0_vlan: left promiscuous mode [ 784.222429][ T6054] usb 3-1: Using ep0 maxpacket: 32 [ 784.236752][ T6054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.257686][ T6054] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.277249][ T6054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 784.296619][ T6054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 784.318684][ T6054] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 784.342580][ T6054] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 784.352763][ T5104] Bluetooth: hci5: command tx timeout [ 784.364707][ T6054] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.376382][ T6054] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.401902][ T6054] usb 3-1: Product: syz [ 784.428647][ T6054] usb 3-1: Manufacturer: syz [ 784.434124][ T6054] usb 3-1: SerialNumber: syz [ 784.443058][ T8] usb 4-1: USB disconnect, device number 93 [ 784.603711][ T5104] Bluetooth: hci6: command 0x0419 tx timeout [ 784.722625][T18936] ======================================================= [ 784.722625][T18936] WARNING: The mand mount option has been deprecated and [ 784.722625][T18936] and is ignored by this kernel. Remove the mand [ 784.722625][T18936] option from the mount to silence this warning. [ 784.722625][T18936] ======================================================= [ 784.789654][T18936] fuse: Bad value for 'fd' [ 784.976812][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 785.030380][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 785.738549][ T6054] cdc_ncm 3-1:1.0: bind() failure [ 785.747978][ T6054] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 785.770868][ T6054] cdc_ncm 3-1:1.1: bind() failure [ 785.786502][ T6054] usb 3-1: USB disconnect, device number 91 [ 785.929005][T18735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 786.049197][T18735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 786.137529][T18735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 786.148949][T18735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 786.214901][T18919] chnl_net:caif_netlink_parms(): no params data found [ 786.432774][ T5104] Bluetooth: hci5: command tx timeout [ 786.494169][ T2930] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.553837][T18919] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.583305][T18919] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.607525][T18919] bridge_slave_0: entered allmulticast mode [ 786.620303][T18919] bridge_slave_0: entered promiscuous mode [ 786.679846][ T2930] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.699789][T18919] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.709153][T18919] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.727620][T18919] bridge_slave_1: entered allmulticast mode [ 786.752171][T18919] bridge_slave_1: entered promiscuous mode [ 786.835263][ T2930] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.956996][ T2930] bond0: (slave netdevsim0): Releasing backup interface [ 786.976354][ T2930] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.007263][T18919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.056973][T18919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.103120][T18757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 787.148443][T18757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 787.219217][T18757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 787.244766][T18757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 787.286395][T18919] team0: Port device team_slave_0 added [ 787.306752][T18735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.328570][T18919] team0: Port device team_slave_1 added [ 787.470989][T18735] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.534452][T18919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.558725][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.596728][T18919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 787.687234][T13089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 787.696706][T13089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 787.704673][T13089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 787.716410][T13089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 787.729438][T13089] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 787.737985][T13089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 787.817520][T18919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 787.840990][T18919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 787.869082][T18919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.978109][ T6054] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.985298][ T6054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.061595][ T2930] bridge_slave_1: left allmulticast mode [ 788.068410][ T2930] bridge_slave_1: left promiscuous mode [ 788.077391][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.096542][ T2930] bridge_slave_0: left allmulticast mode [ 788.102257][ T2930] bridge_slave_0: left promiscuous mode [ 788.112589][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.516743][ T5104] Bluetooth: hci5: command tx timeout [ 788.592833][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.608703][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.620616][ T2930] bond0 (unregistering): Released all slaves [ 788.667271][T18919] hsr_slave_0: entered promiscuous mode [ 788.703488][T18919] hsr_slave_1: entered promiscuous mode [ 788.717976][T18919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 788.728980][T18919] Cannot create hsr debugfs directory [ 788.741976][ T6054] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.749093][ T6054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.783726][ T2930] tipc: Disabling bearer [ 788.789046][ T2930] tipc: Left network mode [ 788.843743][ T2930] IPVS: stopping master sync thread 16273 ... [ 789.296958][T18979] chnl_net:caif_netlink_parms(): no params data found [ 789.592226][ T29] audit: type=1326 audit(1720373880.504:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.616187][ T29] audit: type=1326 audit(1720373880.504:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.640124][ T29] audit: type=1326 audit(1720373880.504:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.682080][ T29] audit: type=1326 audit(1720373880.504:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.707281][ T29] audit: type=1326 audit(1720373880.504:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.714160][T19008] macvlan0: entered promiscuous mode [ 789.747372][ T29] audit: type=1326 audit(1720373880.504:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.770072][T19008] macvlan0: left promiscuous mode [ 789.771711][ T29] audit: type=1326 audit(1720373880.504:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.798192][ T29] audit: type=1326 audit(1720373880.504:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.820746][ T5104] Bluetooth: hci6: command tx timeout [ 789.820870][ T29] audit: type=1326 audit(1720373880.504:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.849435][ T29] audit: type=1326 audit(1720373880.504:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19004 comm="syz.3.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x7ffc0000 [ 789.886987][T18757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.982419][ T6054] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 790.017399][T18979] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.024657][T18979] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.031781][T18979] bridge_slave_0: entered allmulticast mode [ 790.040223][T18979] bridge_slave_0: entered promiscuous mode [ 790.052133][ T2930] hsr_slave_0: left promiscuous mode [ 790.058851][ T2930] hsr_slave_1: left promiscuous mode [ 790.068219][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.076964][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.085213][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.092885][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.112218][ T2930] veth1_macvtap: left promiscuous mode [ 790.117937][ T2930] veth0_macvtap: left promiscuous mode [ 790.125520][ T2930] veth1_vlan: left promiscuous mode [ 790.130798][ T2930] veth0_vlan: left promiscuous mode [ 790.172377][ T6054] usb 4-1: Using ep0 maxpacket: 8 [ 790.179516][ T6054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.190921][ T6054] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 790.203778][ T6054] usb 4-1: New USB device found, idVendor=044f, idProduct=a01c, bcdDevice=bb.13 [ 790.215511][ T6054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.223972][ T6054] usb 4-1: Product: syz [ 790.228243][ T6054] usb 4-1: Manufacturer: syz [ 790.233348][ T6054] usb 4-1: SerialNumber: syz [ 790.249398][ T6054] usb 4-1: config 0 descriptor?? [ 790.593875][ T5104] Bluetooth: hci5: command tx timeout [ 790.600277][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 790.648340][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 791.051810][T18757] 8021q: adding VLAN 0 to HW filter on device team0 [ 791.092486][T18979] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.099618][T18979] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.108161][T18979] bridge_slave_1: entered allmulticast mode [ 791.115313][T18979] bridge_slave_1: entered promiscuous mode [ 791.216460][T18979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.260457][T18979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.287374][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 791.294652][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 791.365774][T18735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.390426][T18979] team0: Port device team_slave_0 added [ 791.423342][ T5135] bridge0: port 2(bridge_slave_1) entered blocking state [ 791.430527][ T5135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 791.453028][T18979] team0: Port device team_slave_1 added [ 791.558828][T18979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.574547][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.608974][T18979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.637426][T18979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 791.646787][T18979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 791.675166][T18979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 791.779319][ T2930] IPVS: stop unused estimator thread 0... [ 791.781962][T18979] hsr_slave_0: entered promiscuous mode [ 791.813276][T18979] hsr_slave_1: entered promiscuous mode [ 791.821350][T18979] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 791.830531][T18979] Cannot create hsr debugfs directory [ 791.873722][ T5104] Bluetooth: hci6: command tx timeout [ 791.992850][T18919] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 792.011207][T18919] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 792.050844][T18919] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 792.120392][T18919] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 792.146364][T18735] veth0_vlan: entered promiscuous mode [ 792.190062][ T2930] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.297873][ T2930] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.379773][ T2930] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.401353][T18735] veth1_vlan: entered promiscuous mode [ 792.471252][ T2930] bond0: (slave netdevsim0): Releasing backup interface [ 792.491911][ T2930] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.540607][T18757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.559715][ T5148] usb 4-1: USB disconnect, device number 94 [ 792.636955][T18735] veth0_macvtap: entered promiscuous mode [ 792.671876][T18735] veth1_macvtap: entered promiscuous mode [ 792.760394][T19056] input: syz1 as /devices/virtual/input/input62 [ 792.787245][T19056] syz_tun: entered allmulticast mode [ 792.860512][T19056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2784'. [ 792.935203][T19056] syz_tun (unregistering): left allmulticast mode [ 792.981927][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.028050][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.060345][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.081295][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.099710][T18735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.134850][T18757] veth0_vlan: entered promiscuous mode [ 793.148844][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.162145][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.173053][T18735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.184023][T18735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.200610][T18735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.277258][T18919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.290560][T18735] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.301412][T18735] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.318354][T18735] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.329871][T18735] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.348262][ T2930] bridge_slave_1: left allmulticast mode [ 793.358734][ T2930] bridge_slave_1: left promiscuous mode [ 793.372381][ T2930] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.387295][ T2930] bridge_slave_0: left allmulticast mode [ 793.412526][ T2930] bridge_slave_0: left promiscuous mode [ 793.423176][ T2930] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.962491][ T5104] Bluetooth: hci6: command tx timeout [ 794.122916][ T2930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 794.164714][ T2930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 794.193263][ T2930] bond0 (unregistering): Released all slaves [ 794.270939][T18919] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.308953][ T2930] : left promiscuous mode [ 794.345742][T18757] veth1_vlan: entered promiscuous mode [ 794.435219][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.442381][ T6053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.570818][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.577936][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.766624][T14608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.777012][T14608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.851641][ T2930] hsr_slave_0: left promiscuous mode [ 794.879327][ T2930] hsr_slave_1: left promiscuous mode [ 794.896170][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.903868][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.922258][ T2930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.931333][ T2930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.978913][ T2930] veth1_macvtap: left promiscuous mode [ 794.985009][ T2930] veth0_macvtap: left promiscuous mode [ 794.990770][ T2930] veth1_vlan: left promiscuous mode [ 795.006258][ T2930] veth0_vlan: left promiscuous mode [ 795.725774][ T2930] team0 (unregistering): Port device team_slave_1 removed [ 795.786348][ T2930] team0 (unregistering): Port device team_slave_0 removed [ 796.042499][ T5104] Bluetooth: hci6: command tx timeout [ 796.323470][T18757] veth0_macvtap: entered promiscuous mode [ 796.331547][T18757] veth1_macvtap: entered promiscuous mode [ 796.386912][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.395883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.421573][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.438283][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.449548][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.461263][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.514083][T18757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.565864][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.586161][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.598633][T18757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.609536][T18757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.629196][T18757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.728469][T18757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.745189][T18757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.757402][T18757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.767915][T18757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.907383][T18979] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 796.935107][T18979] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 796.977026][T18979] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 797.031123][T18979] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 797.080221][T18919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.148273][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.163970][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.240383][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.261703][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.306953][T18919] veth0_vlan: entered promiscuous mode [ 797.374697][T18919] veth1_vlan: entered promiscuous mode [ 797.471879][T18979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.500539][T18919] veth0_macvtap: entered promiscuous mode [ 797.516177][T18919] veth1_macvtap: entered promiscuous mode [ 797.549201][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.561864][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.574807][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.587596][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.598971][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.630934][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.650082][ T5148] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 797.662111][T18919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.670287][T19118] fuse: Unknown parameter '&d' [ 797.702911][T18979] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.714883][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.727623][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.738962][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.749818][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.760049][T18919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 797.771596][T18919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.824032][T18919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.832545][ T5148] usb 5-1: Using ep0 maxpacket: 32 [ 797.841905][T18919] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.853150][T18919] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.861915][T18919] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.862947][T19120] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 797.870690][T18919] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.894510][ T5148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.910022][ T5148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.935005][ T5148] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 797.948591][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.955761][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.967771][ T5148] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 797.980828][ T5148] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 798.000893][ T5148] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 798.013168][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.020329][ T6053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.044951][ T5148] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.057327][ T5148] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.071375][ T5148] usb 5-1: Product: syz [ 798.099764][ T5148] usb 5-1: Manufacturer: syz [ 798.104633][ T5148] usb 5-1: SerialNumber: syz [ 798.142529][T19126] input: syz1 as /devices/virtual/input/input63 [ 798.213107][T19126] lo: entered allmulticast mode [ 798.241143][T19126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2791'. [ 798.268274][T18979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.278354][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.299742][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.322713][ T6053] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 798.366596][T14608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.385935][T14608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.400341][ T5148] cdc_ncm 5-1:1.0: bind() failure [ 798.427616][ T5148] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 798.443599][ T5148] cdc_ncm 5-1:1.1: bind() failure [ 798.463941][T18979] veth0_vlan: entered promiscuous mode [ 798.472047][ T5148] usb 5-1: USB disconnect, device number 98 [ 798.529151][T18979] veth1_vlan: entered promiscuous mode [ 798.548107][ T6053] usb 2-1: Using ep0 maxpacket: 16 [ 798.565341][ T6053] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 798.591240][ T6053] usb 2-1: config 0 has no interface number 0 [ 798.614103][ T6053] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 798.630836][T18979] veth0_macvtap: entered promiscuous mode [ 798.647441][ T6053] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 798.679454][T18979] veth1_macvtap: entered promiscuous mode [ 798.683548][ T6053] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 798.726003][ T6053] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 798.735069][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.751053][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.752427][ T6053] usb 2-1: Product: syz [ 798.774948][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.785958][ T6053] usb 2-1: Manufacturer: syz [ 798.792973][ T6053] usb 2-1: SerialNumber: syz [ 798.817104][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.822060][ T6053] usb 2-1: config 0 descriptor?? [ 798.837232][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.844403][ T6053] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 798.859390][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.866098][ T6053] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 798.886009][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.893111][ T6053] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 798.898657][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.938972][ T6053] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 798.965551][T18979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.973174][ T6053] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 799.006062][ T6053] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 799.031135][ T6053] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 799.039844][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.093546][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.094409][ T6053] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 799.130167][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.153262][ T6053] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 799.168060][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.169296][ T6053] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 799.189440][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.228952][ T6053] usb 2-1: USB disconnect, device number 115 [ 799.248354][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.254242][ T6053] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 799.286846][T18979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 799.299322][T18979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.322020][ T6053] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 799.326431][T18979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.378741][T18979] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.396968][ T6053] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 799.403487][ T5146] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 799.442239][T18979] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.445308][ T6053] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 799.467553][T18979] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.498310][T18979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.510913][ T6053] keyspan 2-1:0.107: device disconnected [ 799.616449][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 799.641007][ T5146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 799.681117][ T5146] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 799.700372][ T5146] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 799.766725][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.799210][ T5146] usb 5-1: config 0 descriptor?? [ 799.883672][ T2895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.914303][ T2895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.018652][T14608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 800.050963][T14608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 800.251057][ T5146] plantronics 0003:047F:FFFF.001A: ignoring exceeding usage max [ 800.300575][ T5146] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 800.380587][ T5146] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 800.867099][T19163] hub 9-0:1.0: USB hub found [ 800.879462][T19163] hub 9-0:1.0: 8 ports detected [ 800.966877][ T6053] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 801.118736][T19166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2801'. [ 801.182677][ T6053] usb 2-1: Using ep0 maxpacket: 32 [ 801.204552][ T6053] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.257901][ T6053] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 801.278519][ T6053] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 801.293089][ T6053] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 801.318692][ T6053] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 801.348281][T19170] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2803'. [ 801.348873][ T6053] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 801.405157][ T6053] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 801.420504][ T6053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.429413][ T6053] usb 2-1: Product: syz [ 801.443704][ T6053] usb 2-1: Manufacturer: syz [ 801.448428][ T6053] usb 2-1: SerialNumber: syz [ 801.625126][T19174] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 801.722191][ T6053] cdc_ncm 2-1:1.0: bind() failure [ 801.741161][ T6053] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 801.752147][ T6053] cdc_ncm 2-1:1.1: bind() failure [ 801.764130][ T6053] usb 2-1: USB disconnect, device number 116 [ 801.774077][ T5188] udevd[5188]: setting mode of /dev/bus/usb/002/116 to 020664 failed: No such file or directory [ 801.786907][ T5188] udevd[5188]: setting owner of /dev/bus/usb/002/116 to uid=0, gid=0 failed: No such file or directory [ 801.832667][ T5142] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 802.033477][ T5142] usb 1-1: Using ep0 maxpacket: 32 [ 802.042255][ T5142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.042640][ T5148] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 802.068557][ T5142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.080953][ T5142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 802.093766][ T5142] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 802.103651][ T5142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 802.115287][ T5142] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 802.145333][ T5142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 802.164654][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.177061][ T5142] usb 1-1: Product: syz [ 802.181247][ T5142] usb 1-1: Manufacturer: syz [ 802.212500][ T5142] usb 1-1: SerialNumber: syz [ 802.282917][ T5148] usb 3-1: Using ep0 maxpacket: 16 [ 802.306025][ T5148] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 802.342531][ T5148] usb 3-1: config 0 has no interface number 0 [ 802.348679][ T5148] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 802.388909][ T5135] usb 5-1: USB disconnect, device number 99 [ 802.395191][ T5148] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 25189, setting to 1024 [ 802.452519][ T5148] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 802.461608][ T5148] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 802.492190][ T5142] cdc_ncm 1-1:1.0: bind() failure [ 802.508074][ T5148] usb 3-1: Product: syz [ 802.516511][ T5142] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 802.526069][ T5148] usb 3-1: Manufacturer: syz [ 802.530718][ T5148] usb 3-1: SerialNumber: syz [ 802.538381][ T5142] cdc_ncm 1-1:1.1: bind() failure [ 802.557494][ T5148] usb 3-1: config 0 descriptor?? [ 802.573441][ T5142] usb 1-1: USB disconnect, device number 95 [ 802.588555][ T5148] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 802.610041][ T5148] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 802.621042][ T5148] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 802.631597][ T5148] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 802.681898][ T5148] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 802.722980][ T5148] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 802.743001][ T5148] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 802.778445][ T5148] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 802.793164][ T5148] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 802.821749][ T5148] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 802.866677][ T5148] usb 3-1: USB disconnect, device number 92 [ 802.894073][ T5148] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 802.944418][ T5148] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 802.962788][T19193] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 802.969398][T19193] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 802.990556][ T5148] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 803.023081][T19193] vhci_hcd vhci_hcd.0: Device attached [ 803.094901][ T5148] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 803.292430][ T5142] usb 11-1: new low-speed USB device number 8 using vhci_hcd [ 803.325513][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 803.325531][ T29] audit: type=1326 audit(1720373894.084:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19202 comm="syz.4.2813" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d6a175bd9 code=0x0 [ 803.361744][ T5148] keyspan 3-1:0.107: device disconnected [ 803.366038][T19196] vhci_hcd: connection closed [ 803.372673][T19197] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 803.389072][T14608] vhci_hcd: stop threads [ 803.393945][T14608] vhci_hcd: release socket [ 803.409144][T14608] vhci_hcd: disconnect device [ 803.540767][T19211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2815'. [ 803.982745][ T6053] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 803.992457][ T5135] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 804.192741][ T6053] usb 4-1: Using ep0 maxpacket: 32 [ 804.201623][ T6053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.213936][ T6053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.225238][ T6053] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 804.235475][ T6053] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 804.248822][ T6053] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.316360][ T6053] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 804.318052][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 804.328346][ T6053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.362673][ T6053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.370113][ T5135] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 804.370669][ T6053] usb 4-1: Product: syz [ 804.384746][ T6053] usb 4-1: Manufacturer: syz [ 804.389353][ T6053] usb 4-1: SerialNumber: syz [ 804.396693][ T5135] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 804.469445][ T5135] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 804.495381][ T5135] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.509983][ T5135] usb 1-1: config 0 descriptor?? [ 804.532520][ T5148] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 804.625095][ T6053] cdc_ncm 4-1:1.0: bind() failure [ 804.637894][ T6053] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 804.647970][ T6053] cdc_ncm 4-1:1.1: bind() failure [ 804.684196][ T6053] usb 4-1: USB disconnect, device number 95 [ 804.712680][ T5148] usb 3-1: Using ep0 maxpacket: 32 [ 804.739066][ T5148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.768170][ T5148] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.791039][ T5148] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 804.801767][ T5148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 804.812819][ T5148] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.822991][ T5148] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 804.836774][ T5148] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.852011][ T5148] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.862201][ T5148] usb 3-1: Product: syz [ 804.876676][ T5148] usb 3-1: Manufacturer: syz [ 804.881474][ T5148] usb 3-1: SerialNumber: syz [ 804.980965][ T5135] plantronics 0003:047F:FFFF.001B: ignoring exceeding usage max [ 805.004264][ T5135] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 805.060061][ T5135] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 805.139250][ T5148] cdc_ncm 3-1:1.0: bind() failure [ 805.171514][ T5148] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 805.189260][ T5148] cdc_ncm 3-1:1.1: bind() failure [ 805.199764][ T45] usb 1-1: USB disconnect, device number 96 [ 805.221047][ T5148] usb 3-1: USB disconnect, device number 93 [ 805.862144][T19245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2826'. [ 806.182176][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 806.452956][ T29] audit: type=1326 audit(1720373897.374:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19256 comm="syz.3.2831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x0 [ 806.635127][T19266] vxcan1: tx address claim with dlc 1 [ 806.745215][T19269] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2834'. [ 806.795354][T19269] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2834'. [ 806.807730][T19269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2834'. [ 806.908960][ T5104] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 806.957340][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 807.092426][ T5135] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 807.313250][ T5135] usb 2-1: Using ep0 maxpacket: 32 [ 807.333773][ T5135] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.361943][ T5135] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.387177][ T5135] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 807.412409][ T5135] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 807.441490][ T5135] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 807.462148][ T5135] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 807.479127][ T5135] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.508349][ T5135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.520962][ T5135] usb 2-1: Product: syz [ 807.525457][ T45] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 807.536353][ T5135] usb 2-1: Manufacturer: syz [ 807.542193][ T5135] usb 2-1: SerialNumber: syz [ 807.597963][T19294] FAULT_INJECTION: forcing a failure. [ 807.597963][T19294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.642449][T19294] CPU: 0 PID: 19294 Comm: syz.4.2842 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 807.652633][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 807.662702][T19294] Call Trace: [ 807.665999][T19294] [ 807.668921][T19294] dump_stack_lvl+0x241/0x360 [ 807.673599][T19294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.678803][T19294] ? __pfx__printk+0x10/0x10 [ 807.683401][T19294] ? snprintf+0xda/0x120 [ 807.687656][T19294] should_fail_ex+0x3b0/0x4e0 [ 807.692339][T19294] _copy_to_user+0x2f/0xb0 [ 807.696778][T19294] simple_read_from_buffer+0xca/0x150 [ 807.702158][T19294] proc_fail_nth_read+0x1e9/0x250 [ 807.707201][T19294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.712747][T19294] ? rw_verify_area+0x520/0x6b0 [ 807.717598][T19294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 807.723147][T19294] vfs_read+0x204/0xbc0 [ 807.727301][T19294] ? __pfx_lock_release+0x10/0x10 [ 807.732331][T19294] ? __pfx_vfs_read+0x10/0x10 [ 807.737013][T19294] ? __fget_files+0x29/0x470 [ 807.741600][T19294] ? __fget_files+0x3f6/0x470 [ 807.746284][T19294] ksys_read+0x1a0/0x2c0 [ 807.750528][T19294] ? __pfx_ksys_read+0x10/0x10 [ 807.755461][T19294] ? do_syscall_64+0x100/0x230 [ 807.760233][T19294] ? do_syscall_64+0xb6/0x230 [ 807.764908][T19294] do_syscall_64+0xf3/0x230 [ 807.769410][T19294] ? clear_bhb_loop+0x35/0x90 [ 807.774084][T19294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.779977][T19294] RIP: 0033:0x7f4d6a1746bc [ 807.784388][T19294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 807.803990][T19294] RSP: 002b:00007f4d6af22040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 807.812399][T19294] RAX: ffffffffffffffda RBX: 00007f4d6a303f60 RCX: 00007f4d6a1746bc [ 807.820362][T19294] RDX: 000000000000000f RSI: 00007f4d6af220b0 RDI: 0000000000000004 [ 807.828329][T19294] RBP: 00007f4d6af220a0 R08: 0000000000000000 R09: 0000000000000000 [ 807.836298][T19294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.844265][T19294] R13: 000000000000000b R14: 00007f4d6a303f60 R15: 00007f4d6a42fa68 [ 807.852239][T19294] [ 807.855384][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 807.926746][ T45] usb 3-1: config 6 has an invalid interface number: 119 but max is 0 [ 807.941768][ T45] usb 3-1: config 6 has no interface number 0 [ 807.975196][ T45] usb 3-1: config 6 interface 119 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 807.993039][ T5135] cdc_ncm 2-1:1.0: bind() failure [ 808.001737][ T45] usb 3-1: config 6 interface 119 has no altsetting 0 [ 808.027444][ T5135] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 808.051014][ T5135] cdc_ncm 2-1:1.1: bind() failure [ 808.062858][ T5135] usb 2-1: USB disconnect, device number 117 [ 808.072052][ T45] usb 3-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= b.48 [ 808.082536][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.094763][ T45] usb 3-1: Manufacturer: 탻짹჎슦弮䃮⽡쳤嫮㉦ꭴ湏扏퍐鷸㉾椁ꁩ૪機虁극⡡๺卨葅ႊ᠌䂫⸃쟽븤夞췆秛灆钬륗᳂撝歴紆쥝ꩌ䀹嘧幌ㅰ滻켨뿝鑓Β퉼㉢좹⥗际侀ᗯ♣쨑氾棚겎롿訯ᢛ [ 808.120324][ T45] usb 3-1: SerialNumber: С [ 808.330336][T19303] FAULT_INJECTION: forcing a failure. [ 808.330336][T19303] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.369411][T19303] CPU: 0 PID: 19303 Comm: syz.4.2845 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 808.379578][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 808.389626][T19303] Call Trace: [ 808.392905][T19303] [ 808.395843][T19303] dump_stack_lvl+0x241/0x360 [ 808.400538][T19303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.405738][T19303] ? __pfx__printk+0x10/0x10 [ 808.410337][T19303] ? __pfx_lock_release+0x10/0x10 [ 808.415365][T19303] should_fail_ex+0x3b0/0x4e0 [ 808.420061][T19303] _copy_from_iter+0x1f6/0x1960 [ 808.424911][T19303] ? __virt_addr_valid+0x183/0x520 [ 808.430037][T19303] ? __pfx_lock_release+0x10/0x10 [ 808.435085][T19303] ? __alloc_skb+0x28f/0x440 [ 808.439680][T19303] ? __pfx__copy_from_iter+0x10/0x10 [ 808.444966][T19303] ? __virt_addr_valid+0x183/0x520 [ 808.450070][T19303] ? __virt_addr_valid+0x183/0x520 [ 808.455188][T19303] ? __virt_addr_valid+0x44e/0x520 [ 808.460311][T19303] ? __check_object_size+0x49c/0x900 [ 808.465606][T19303] netlink_sendmsg+0x743/0xcb0 [ 808.470404][T19303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.475711][T19303] ? __import_iovec+0x536/0x820 [ 808.480574][T19303] ? aa_sock_msg_perm+0x91/0x160 [ 808.485520][T19303] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 808.490817][T19303] ? security_socket_sendmsg+0x87/0xb0 [ 808.496305][T19303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 808.501609][T19303] __sock_sendmsg+0x221/0x270 [ 808.506317][T19303] ____sys_sendmsg+0x525/0x7d0 [ 808.511110][T19303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 808.512526][ T5142] vhci_hcd: vhci_device speed not set [ 808.516439][T19303] __sys_sendmsg+0x2b0/0x3a0 [ 808.526386][T19303] ? __pfx___sys_sendmsg+0x10/0x10 [ 808.531519][T19303] ? vfs_write+0x7c4/0xc90 [ 808.535995][T19303] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 808.542347][T19303] ? do_syscall_64+0x100/0x230 [ 808.547138][T19303] ? do_syscall_64+0xb6/0x230 [ 808.551843][T19303] do_syscall_64+0xf3/0x230 [ 808.556368][T19303] ? clear_bhb_loop+0x35/0x90 [ 808.561065][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.566980][T19303] RIP: 0033:0x7f4d6a175bd9 [ 808.571415][T19303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 808.591097][T19303] RSP: 002b:00007f4d6af22048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 808.599538][T19303] RAX: ffffffffffffffda RBX: 00007f4d6a303f60 RCX: 00007f4d6a175bd9 [ 808.607557][T19303] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 808.615526][T19303] RBP: 00007f4d6af220a0 R08: 0000000000000000 R09: 0000000000000000 [ 808.623500][T19303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.631476][T19303] R13: 000000000000000b R14: 00007f4d6a303f60 R15: 00007f4d6a42fa68 [ 808.639474][T19303] [ 808.785802][ T45] digi_acceleport 3-1:6.119: required endpoints missing [ 808.834984][ T5104] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 808.880515][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 808.881706][ T45] usb 3-1: USB disconnect, device number 94 [ 808.915372][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.921755][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.980791][ T29] audit: type=1326 audit(1720373899.894:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19315 comm="syz.3.2850" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c85775bd9 code=0x0 [ 809.350649][T19331] input: syz1 as /devices/virtual/input/input64 [ 809.398686][T19331] syz_tun: entered allmulticast mode [ 809.434586][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2855'. [ 809.483818][T19331] syz_tun (unregistering): left allmulticast mode [ 809.492501][ T45] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 809.694540][ T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 809.730196][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.771548][ T45] usb 1-1: config 0 descriptor?? [ 809.790221][ T45] cp210x 1-1:0.0: cp210x converter detected [ 810.298290][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 810.313633][ T5142] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 810.532938][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 810.546423][ T5142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.558633][ T5142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.571756][ T5142] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 810.585689][ T5142] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 810.598079][ T5142] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 810.608626][ T5142] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 810.622954][ T5142] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 810.633847][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.650540][ T5142] usb 5-1: Product: syz [ 810.655348][ T5142] usb 5-1: Manufacturer: syz [ 810.660152][ T5142] usb 5-1: SerialNumber: syz [ 810.702442][T10766] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 810.907815][T10766] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 810.923009][T10766] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 810.923242][ T5142] cdc_ncm 5-1:1.0: bind() failure [ 810.938594][T10766] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 810.957933][T10766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.973646][ T5142] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 810.985649][ T5142] cdc_ncm 5-1:1.1: bind() failure [ 811.004779][T10766] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 811.023457][ T5142] usb 5-1: USB disconnect, device number 100 [ 811.201610][T10766] gspca_sn9c2028: read1 error -32 [ 811.210630][T10766] gspca_sn9c2028: read1 error -32 [ 811.557941][ T5104] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 811.630185][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 811.985237][T19373] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 811.991873][T19373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 812.016827][T19373] vhci_hcd vhci_hcd.0: Device attached [ 812.261066][ T45] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 812.282619][ T6053] usb 17-1: new low-speed USB device number 4 using vhci_hcd [ 812.286911][ T45] cp210x 1-1:0.0: querying part number failed [ 812.321514][ T45] usb 1-1: cp210x converter now attached to ttyUSB0 [ 812.360466][ T45] usb 1-1: USB disconnect, device number 97 [ 812.391662][T19378] FAULT_INJECTION: forcing a failure. [ 812.391662][T19378] name failslab, interval 1, probability 0, space 0, times 0 [ 812.423423][ T45] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 812.452440][ T45] cp210x 1-1:0.0: device disconnected [ 812.506858][T19378] CPU: 1 PID: 19378 Comm: syz.0.2866 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 812.517050][T19378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 812.527118][T19378] Call Trace: [ 812.530411][T19378] [ 812.533356][T19378] dump_stack_lvl+0x241/0x360 [ 812.538065][T19378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.543292][T19378] ? __pfx__printk+0x10/0x10 [ 812.547910][T19378] ? ref_tracker_alloc+0x332/0x490 [ 812.553049][T19378] should_fail_ex+0x3b0/0x4e0 [ 812.557753][T19378] ? skb_clone+0x20c/0x390 [ 812.562189][T19378] should_failslab+0x9/0x20 [ 812.566704][T19378] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 812.572075][T19378] skb_clone+0x20c/0x390 [ 812.576328][T19378] __netlink_deliver_tap+0x3cc/0x7c0 [ 812.581622][T19378] ? netlink_deliver_tap+0x2e/0x1b0 [ 812.586815][T19378] netlink_deliver_tap+0x19d/0x1b0 [ 812.591923][T19378] netlink_unicast+0x7b8/0x980 [ 812.596693][T19378] ? __pfx_netlink_unicast+0x10/0x10 [ 812.601966][T19378] ? __virt_addr_valid+0x183/0x520 [ 812.607073][T19378] ? __check_object_size+0x49c/0x900 [ 812.612355][T19378] ? bpf_lsm_netlink_send+0x9/0x10 [ 812.617475][T19378] netlink_sendmsg+0x8db/0xcb0 [ 812.622243][T19378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.627550][T19378] ? __import_iovec+0x536/0x820 [ 812.632403][T19378] ? aa_sock_msg_perm+0x91/0x160 [ 812.637356][T19378] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 812.642650][T19378] ? security_socket_sendmsg+0x87/0xb0 [ 812.648100][T19378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.653376][T19378] __sock_sendmsg+0x221/0x270 [ 812.658048][T19378] ____sys_sendmsg+0x525/0x7d0 [ 812.662813][T19378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.668107][T19378] __sys_sendmsg+0x2b0/0x3a0 [ 812.672690][T19378] ? __pfx___sys_sendmsg+0x10/0x10 [ 812.677789][T19378] ? vfs_write+0x7c4/0xc90 [ 812.682224][T19378] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 812.688540][T19378] ? do_syscall_64+0x100/0x230 [ 812.693314][T19378] ? do_syscall_64+0xb6/0x230 [ 812.697993][T19378] do_syscall_64+0xf3/0x230 [ 812.702501][T19378] ? clear_bhb_loop+0x35/0x90 [ 812.707185][T19378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.713077][T19378] RIP: 0033:0x7f5bfdb75bd9 [ 812.717482][T19378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.737074][T19378] RSP: 002b:00007f5bfe8c3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.745483][T19378] RAX: ffffffffffffffda RBX: 00007f5bfdd03f60 RCX: 00007f5bfdb75bd9 [ 812.753446][T19378] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 812.761402][T19378] RBP: 00007f5bfe8c30a0 R08: 0000000000000000 R09: 0000000000000000 [ 812.769368][T19378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.777332][T19378] R13: 000000000000000b R14: 00007f5bfdd03f60 R15: 00007f5bfde2fa68 [ 812.785306][T19378] [ 812.829295][T19374] vhci_hcd: connection reset by peer [ 812.861441][ T35] vhci_hcd: stop threads [ 812.866861][ T35] vhci_hcd: release socket [ 812.871386][ T35] vhci_hcd: disconnect device [ 812.904172][T19382] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.908861][T19381] input: syz1 as /devices/virtual/input/input65 [ 812.911528][T19382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 812.951033][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 813.203420][T19393] FAULT_INJECTION: forcing a failure. [ 813.203420][T19393] name failslab, interval 1, probability 0, space 0, times 0 [ 813.216187][T19393] CPU: 1 PID: 19393 Comm: syz.3.2872 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 813.226360][T19393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 813.236436][T19393] Call Trace: [ 813.239728][T19393] [ 813.242678][T19393] dump_stack_lvl+0x241/0x360 [ 813.247386][T19393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 813.252615][T19393] ? __pfx__printk+0x10/0x10 [ 813.257232][T19393] ? ref_tracker_alloc+0x332/0x490 [ 813.262370][T19393] should_fail_ex+0x3b0/0x4e0 [ 813.267076][T19393] ? skb_clone+0x20c/0x390 [ 813.271508][T19393] should_failslab+0x9/0x20 [ 813.276032][T19393] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 813.281428][T19393] skb_clone+0x20c/0x390 [ 813.285693][T19393] __netlink_deliver_tap+0x3cc/0x7c0 [ 813.291011][T19393] ? netlink_deliver_tap+0x2e/0x1b0 [ 813.294506][ T8] usb 2-1: USB disconnect, device number 118 [ 813.296206][T19393] netlink_deliver_tap+0x19d/0x1b0 [ 813.296239][T19393] netlink_unicast+0x7b8/0x980 [ 813.312070][T19393] ? __pfx_netlink_unicast+0x10/0x10 [ 813.317368][T19393] ? __virt_addr_valid+0x183/0x520 [ 813.322501][T19393] ? __check_object_size+0x49c/0x900 [ 813.327806][T19393] ? bpf_lsm_netlink_send+0x9/0x10 [ 813.332940][T19393] netlink_sendmsg+0x8db/0xcb0 [ 813.337736][T19393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.343045][T19393] ? __import_iovec+0x536/0x820 [ 813.347910][T19393] ? aa_sock_msg_perm+0x91/0x160 [ 813.352872][T19393] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 813.358171][T19393] ? security_socket_sendmsg+0x87/0xb0 [ 813.363650][T19393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 813.368957][T19393] __sock_sendmsg+0x221/0x270 [ 813.373660][T19393] ____sys_sendmsg+0x525/0x7d0 [ 813.378450][T19393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 813.383770][T19393] __sys_sendmsg+0x2b0/0x3a0 [ 813.388383][T19393] ? __pfx___sys_sendmsg+0x10/0x10 [ 813.393512][T19393] ? vfs_write+0x7c4/0xc90 [ 813.397994][T19393] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 813.404339][T19393] ? do_syscall_64+0x100/0x230 [ 813.409130][T19393] ? do_syscall_64+0xb6/0x230 [ 813.413828][T19393] do_syscall_64+0xf3/0x230 [ 813.418348][T19393] ? clear_bhb_loop+0x35/0x90 [ 813.423041][T19393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.428956][T19393] RIP: 0033:0x7f2c85775bd9 [ 813.433384][T19393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 813.452999][T19393] RSP: 002b:00007f2c86548048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 813.461433][T19393] RAX: ffffffffffffffda RBX: 00007f2c85903f60 RCX: 00007f2c85775bd9 [ 813.469422][T19393] RDX: 0000000000000000 RSI: 00000000200035c0 RDI: 0000000000000003 [ 813.477410][T19393] RBP: 00007f2c865480a0 R08: 0000000000000000 R09: 0000000000000000 [ 813.485397][T19393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 813.493396][T19393] R13: 000000000000004d R14: 00007f2c85903f60 R15: 00007f2c85a2fa68 [ 813.501399][T19393] [ 813.521222][T19401] program syz.1.2874 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.609059][T19401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 813.624261][T19405] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 813.631770][ T5148] IPVS: starting estimator thread 0... [ 813.724388][T19407] IPVS: using max 28 ests per chain, 67200 per kthread [ 813.825135][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 813.931162][ T8] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 813.965622][T14608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.146572][T14608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.163879][ T8] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 814.183181][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.214842][ T8] usb 5-1: config 0 descriptor?? [ 814.236327][ T8] cp210x 5-1:0.0: cp210x converter detected [ 814.299979][T14608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.384305][T13089] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 814.398063][T13089] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 814.406876][T13089] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 814.412358][ T5152] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 814.433318][T13089] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 814.445838][T14608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.460607][T13089] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 814.468136][T13089] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 814.555104][T19430] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 814.561729][T19430] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 814.592548][ T5152] usb 1-1: device descriptor read/64, error -71 [ 814.622495][T19430] vhci_hcd vhci_hcd.0: Device attached [ 814.882638][ T5152] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 814.882648][ T45] usb 15-1: new low-speed USB device number 7 using vhci_hcd [ 814.952524][T10766] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 814.988977][T14608] bridge_slave_1: left allmulticast mode [ 815.004846][T14608] bridge_slave_1: left promiscuous mode [ 815.018726][T14608] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.032055][T14608] bridge_slave_0: left allmulticast mode [ 815.041488][T14608] bridge_slave_0: left promiscuous mode [ 815.050353][T14608] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.112451][ T5152] usb 1-1: device descriptor read/64, error -71 [ 815.160737][T10766] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 815.209893][T10766] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 815.247277][T10766] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 815.284289][ T5152] usb usb1-port1: attempt power cycle [ 815.293263][T10766] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.380266][T10766] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 815.403778][T19431] vhci_hcd: connection reset by peer [ 815.420427][ T35] vhci_hcd: stop threads [ 815.430184][ T35] vhci_hcd: release socket [ 815.448636][ T35] vhci_hcd: disconnect device [ 815.581981][T10766] gspca_sn9c2028: read1 error -32 [ 815.592877][T10766] gspca_sn9c2028: read1 error -32 [ 815.772528][ T5152] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 815.848996][ T5152] usb 1-1: device descriptor read/8, error -71 [ 815.995880][T14608] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.027863][T14608] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.046706][T14608] bond0 (unregistering): Released all slaves [ 816.142467][ T5152] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 816.193292][ T5152] usb 1-1: device descriptor read/8, error -71 [ 816.344008][ T5152] usb usb1-port1: unable to enumerate USB device [ 816.592842][ T5104] Bluetooth: hci6: command tx timeout [ 816.624089][ T8] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 816.645334][ T8] cp210x 5-1:0.0: querying part number failed [ 816.672702][ T8] usb 5-1: cp210x converter now attached to ttyUSB0 [ 816.701689][ T8] usb 5-1: USB disconnect, device number 101 [ 816.735605][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 816.764123][ T8] cp210x 5-1:0.0: device disconnected [ 816.923868][T14608] hsr_slave_0: left promiscuous mode [ 816.980681][T14608] hsr_slave_1: left promiscuous mode [ 817.016030][T14608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.043878][T14608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.079381][T14608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.112543][T14608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.205692][T14608] veth1_macvtap: left promiscuous mode [ 817.242361][T14608] veth0_macvtap: left promiscuous mode [ 817.258869][T14608] veth1_vlan: left promiscuous mode [ 817.272193][T14608] veth0_vlan: left promiscuous mode [ 817.465288][ T5104] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 817.478302][ T6053] vhci_hcd: vhci_device speed not set [ 817.509506][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 817.549439][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 817.561704][T10766] usb 2-1: USB disconnect, device number 119 [ 818.036651][ T5135] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 818.182568][ T8] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 818.222950][ T5135] usb 1-1: Using ep0 maxpacket: 32 [ 818.239876][ T5135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.266127][ T5135] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.286133][ T5135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 818.301912][ T5135] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 818.318764][T14608] team0 (unregistering): Port device team_slave_1 removed [ 818.327112][ T5135] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 818.344855][ T5135] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 818.362823][ T5135] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 818.384337][ T5135] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.392500][ T5135] usb 1-1: Product: syz [ 818.402017][ T5135] usb 1-1: Manufacturer: syz [ 818.407772][ T5135] usb 1-1: SerialNumber: syz [ 818.413493][T14608] team0 (unregistering): Port device team_slave_0 removed [ 818.427955][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 818.450516][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 818.460421][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 818.475384][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 818.485922][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.496877][ T8] usb 5-1: config 0 descriptor?? [ 818.682577][ T5104] Bluetooth: hci6: command tx timeout [ 818.916819][ T8] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 818.927436][ T8] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 818.951723][ T8] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 819.109325][T19434] chnl_net:caif_netlink_parms(): no params data found [ 819.135143][ T5135] cdc_ncm 1-1:1.0: bind() failure [ 819.176992][ T5135] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 819.215537][ T5135] cdc_ncm 1-1:1.1: bind() failure [ 819.246422][ T5135] usb 1-1: USB disconnect, device number 102 [ 819.251778][ T5145] usb 5-1: USB disconnect, device number 102 [ 819.306948][T19499] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 819.313594][T19499] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 819.327250][T19499] vhci_hcd vhci_hcd.0: Device attached [ 819.404257][T19434] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.430356][T19434] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.442990][ T8] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 819.452595][T19434] bridge_slave_0: entered allmulticast mode [ 819.460020][T19434] bridge_slave_0: entered promiscuous mode [ 819.487911][T19434] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.500911][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.512255][T19434] bridge_slave_1: entered allmulticast mode [ 819.521615][T19434] bridge_slave_1: entered promiscuous mode [ 819.536349][T19504] vhci_hcd: connection closed [ 819.536713][ T12] vhci_hcd: stop threads [ 819.558568][ T12] vhci_hcd: release socket [ 819.563736][ T12] vhci_hcd: disconnect device [ 819.594886][ T6053] usb 11-1: new low-speed USB device number 9 using vhci_hcd [ 819.604931][T19434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 819.622482][ T6053] usb 11-1: enqueue for inactive port 0 [ 819.644809][T19434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 819.667432][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 819.691761][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.704447][ T6053] vhci_hcd: vhci_device speed not set [ 819.721284][ T8] usb 4-1: config 0 descriptor?? [ 819.733347][ T8] cp210x 4-1:0.0: cp210x converter detected [ 819.798131][T19434] team0: Port device team_slave_0 added [ 819.812459][T19434] team0: Port device team_slave_1 added [ 819.871379][T19434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.886205][T19434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.936426][T19434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.965471][T19434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.977517][T19434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 820.003530][ C0] vkms_vblank_simulate: vblank timer overrun [ 820.018081][T19434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.048586][ T45] vhci_hcd: vhci_device speed not set [ 820.102815][ T5152] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 820.282044][T19434] hsr_slave_0: entered promiscuous mode [ 820.296259][T19434] hsr_slave_1: entered promiscuous mode [ 820.310882][T19434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 820.322110][T19434] Cannot create hsr debugfs directory [ 820.332416][ T5152] usb 1-1: Using ep0 maxpacket: 32 [ 820.363630][ T5152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.409388][ T5152] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.449143][ T5152] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.469137][ T5152] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 820.486690][ T5142] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 820.489172][ T5152] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.546835][ T5152] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 820.627000][ T5152] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 820.637748][ T5152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.646656][ T5152] usb 1-1: Product: syz [ 820.651744][ T5152] usb 1-1: Manufacturer: syz [ 820.659909][ T5152] usb 1-1: SerialNumber: syz [ 820.722473][ T5142] usb 5-1: Using ep0 maxpacket: 32 [ 820.748403][ T5142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.763766][ T5104] Bluetooth: hci6: command tx timeout [ 820.779549][ T5142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.807276][ T5142] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.869626][ T5142] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 820.894976][T19518] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2898'. [ 820.930035][ T5152] cdc_ncm 1-1:1.0: bind() failure [ 820.941809][ T5142] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 820.976511][ T5152] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 820.978920][ T5142] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 821.012819][ T5152] cdc_ncm 1-1:1.1: bind() failure [ 821.060623][ T5152] usb 1-1: USB disconnect, device number 103 [ 821.063372][ T5142] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 821.118340][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.163931][ T5142] usb 5-1: Product: syz [ 821.200654][ T5142] usb 5-1: Manufacturer: syz [ 821.218365][ T5142] usb 5-1: SerialNumber: syz [ 821.483553][ T5142] cdc_ncm 5-1:1.0: bind() failure [ 821.515687][ T5142] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 821.547988][ T5142] cdc_ncm 5-1:1.1: bind() failure [ 821.591215][ T5142] usb 5-1: USB disconnect, device number 103 [ 822.099186][T19434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 822.172948][T19434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 822.194273][T19434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 822.265109][ T8] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 822.286666][T19434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 822.305084][ T8] cp210x 4-1:0.0: querying part number failed [ 822.328877][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 822.375139][ T8] usb 4-1: USB disconnect, device number 96 [ 822.409862][T19559] netlink: 'syz.3.2905': attribute type 8 has an invalid length. [ 822.412425][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 822.438873][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 822.507198][ T8] cp210x 4-1:0.0: device disconnected [ 822.711492][T19434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.829846][T19434] 8021q: adding VLAN 0 to HW filter on device team0 [ 822.843151][ T5104] Bluetooth: hci6: command tx timeout [ 822.912172][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.919361][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 822.994201][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.001446][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.052613][ T6053] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 823.205673][T19434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 823.255010][ T6053] usb 2-1: Using ep0 maxpacket: 32 [ 823.273026][ T6053] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.292433][ T6053] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.319142][ T6053] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.341808][ T6053] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 823.361120][T19434] veth0_vlan: entered promiscuous mode [ 823.363446][ T6053] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.399320][T19434] veth1_vlan: entered promiscuous mode [ 823.402323][ T6053] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 823.450078][ T6053] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 823.466382][ T8] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 823.487391][ T6053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.507037][ T6053] usb 2-1: Product: syz [ 823.517112][T19434] veth0_macvtap: entered promiscuous mode [ 823.522654][ T6053] usb 2-1: Manufacturer: syz [ 823.538427][ T6053] usb 2-1: SerialNumber: syz [ 823.560480][T19434] veth1_macvtap: entered promiscuous mode [ 823.619523][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.652088][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.679254][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.682377][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 823.719702][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.719809][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.747517][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.758263][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.759756][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.785220][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 823.800986][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.803265][ T5152] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 823.821214][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 823.846147][T19434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 823.855176][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 823.881419][ T6053] cdc_ncm 2-1:1.0: bind() failure [ 823.889702][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.898587][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 823.913677][ T6053] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 823.924827][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.928608][ T6053] cdc_ncm 2-1:1.1: bind() failure [ 823.943942][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 823.957972][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.964585][ T6053] usb 2-1: USB disconnect, device number 120 [ 823.996968][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.998024][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 824.026554][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.038586][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.047045][ T5152] usb 4-1: Using ep0 maxpacket: 32 [ 824.062618][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.063327][ T5152] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.089054][ T8] usb 5-1: Product: syz [ 824.091987][T19434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.093269][ T8] usb 5-1: Manufacturer: syz [ 824.093290][ T8] usb 5-1: SerialNumber: syz [ 824.094456][ T5152] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.133745][ T5152] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 824.144915][T19434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.152983][ T5152] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 824.170268][T19434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.174120][ T5152] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 824.195708][T19434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.222876][T19434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.223047][ T5152] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 824.245945][ T5152] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 824.255195][T19434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.255983][ T5152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.281431][ T5152] usb 4-1: Product: syz [ 824.287459][T19434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.290287][ T5152] usb 4-1: Manufacturer: syz [ 824.302836][ T5152] usb 4-1: SerialNumber: syz [ 824.336323][T19606] netlink: 'syz.0.2912': attribute type 21 has an invalid length. [ 824.358215][T19606] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2912'. [ 824.399530][ T8] cdc_ncm 5-1:1.0: bind() failure [ 824.421203][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 824.441078][ T8] cdc_ncm 5-1:1.1: bind() failure [ 824.492610][ T8] usb 5-1: USB disconnect, device number 104 [ 824.518183][T19594] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2911'. [ 824.545836][ T5152] cdc_ncm 4-1:1.0: bind() failure [ 824.595022][ T5152] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 824.609017][ T5152] cdc_ncm 4-1:1.1: bind() failure [ 824.613363][T19612] tipc: Can't bind to reserved service type 0 [ 824.636982][ T5152] usb 4-1: USB disconnect, device number 97 [ 824.694115][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.757197][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.864975][ T2852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 824.875052][ T2852] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 824.996662][T19619] input: syz1 as /devices/virtual/input/input66 [ 825.024781][T19619] syz_tun: entered allmulticast mode [ 825.045333][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2881'. [ 825.122620][ T5135] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 825.260222][T19619] syz_tun (unregistering): left allmulticast mode [ 825.345422][ T5135] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 825.373963][ T5135] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.411752][ T5135] usb 2-1: config 0 descriptor?? [ 825.425772][ T5135] cp210x 2-1:0.0: cp210x converter detected [ 826.043594][ T8] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 826.092862][ T5148] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 826.237921][ T8] usb 5-1: device descriptor read/64, error -71 [ 826.286778][ T5148] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 826.311171][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 826.341242][ T5148] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 826.364763][ T5148] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 826.390672][ T5148] usb 4-1: Manufacturer: syz [ 826.404750][ T5148] usb 4-1: config 0 descriptor?? [ 826.532701][ T8] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 826.535296][ T5148] rc_core: IR keymap rc-hauppauge not found [ 826.569288][ T5148] Registered IR keymap rc-empty [ 826.587241][ T5148] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 826.645175][ T5148] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input67 [ 826.690723][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 826.702696][ T8] usb 5-1: device descriptor read/64, error -71 [ 826.844721][ T8] usb usb5-port1: attempt power cycle [ 827.238600][ T5152] usb 4-1: USB disconnect, device number 98 [ 827.299781][ T8] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 827.358720][ T8] usb 5-1: device descriptor read/8, error -71 [ 827.491195][ T5104] Bluetooth: Unexpected continuation frame (len 18) [ 827.662380][ T8] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 827.724913][ T8] usb 5-1: device descriptor read/8, error -71 [ 827.848599][ T8] usb usb5-port1: unable to enumerate USB device [ 827.851548][ T45] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 827.924364][ T5135] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 827.942217][ T5135] cp210x 2-1:0.0: querying part number failed [ 827.951827][ T5135] usb 2-1: cp210x converter now attached to ttyUSB0 [ 827.970384][ T5135] usb 2-1: USB disconnect, device number 121 [ 827.976727][ T5148] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 827.999971][ T5135] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 828.014478][ T5135] cp210x 2-1:0.0: device disconnected [ 828.122926][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 828.141753][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.163984][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.182699][ T5148] usb 1-1: Using ep0 maxpacket: 32 [ 828.188075][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.208946][ T5148] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 828.230318][ T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 828.252430][ T5148] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 828.262640][ T45] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 828.282627][ T5148] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 828.294559][ T45] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 828.307836][ T5148] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 828.330159][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.339552][ T5148] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 828.352407][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.363413][ T5148] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 828.373576][ T45] usb 3-1: Product: syz [ 828.378284][ T45] usb 3-1: Manufacturer: syz [ 828.386436][ T45] usb 3-1: SerialNumber: syz [ 828.394654][ T5148] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.413339][ T5148] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.438644][ T5148] usb 1-1: Product: syz [ 828.454695][ T5148] usb 1-1: Manufacturer: syz [ 828.475782][ T5148] usb 1-1: SerialNumber: syz [ 828.496740][T19717] input: syz1 as /devices/virtual/input/input68 [ 828.529830][T19717] lo: entered allmulticast mode [ 828.542768][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2935'. [ 828.645282][ T45] cdc_ncm 3-1:1.0: bind() failure [ 828.661856][ T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 828.675213][ T45] cdc_ncm 3-1:1.1: bind() failure [ 828.693657][ T45] usb 3-1: USB disconnect, device number 95 [ 828.727897][T19697] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.2926'. [ 828.749128][ T5148] cdc_ncm 1-1:1.0: bind() failure [ 828.763673][ T5143] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 828.775520][ T5148] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 828.785035][ T5148] cdc_ncm 1-1:1.1: bind() failure [ 828.794228][ T5148] usb 1-1: USB disconnect, device number 104 [ 828.812417][ T8] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 828.982407][ T5143] usb 2-1: Using ep0 maxpacket: 32 [ 828.989541][ T5143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 829.000777][ T5143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.010723][ T5143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 829.021984][ T5143] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 829.034145][ T5143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 829.044509][ T8] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 829.054583][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.064404][ T5143] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 829.075719][ T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 829.084956][ T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 829.093164][ T8] usb 4-1: Manufacturer: syz [ 829.098650][ T5143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 829.107738][ T5143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.116553][ T5143] usb 2-1: Product: syz [ 829.121334][ T8] usb 4-1: config 0 descriptor?? [ 829.128216][ T5143] usb 2-1: Manufacturer: syz [ 829.133139][ T5143] usb 2-1: SerialNumber: syz [ 829.212461][ T8] rc_core: IR keymap rc-hauppauge not found [ 829.221557][ T8] Registered IR keymap rc-empty [ 829.236934][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 829.252169][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input69 [ 829.343209][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 829.411439][ T5143] cdc_ncm 2-1:1.0: bind() failure [ 829.426566][T19732] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 829.448045][ T5143] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 829.461816][T19732] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 829.464822][ T5143] cdc_ncm 2-1:1.1: bind() failure [ 829.504534][ T5143] usb 2-1: USB disconnect, device number 122 [ 830.027467][T19748] netlink: 'syz.0.2944': attribute type 21 has an invalid length. [ 830.068848][ T45] usb 4-1: USB disconnect, device number 99 [ 830.421648][T19760] input: syz1 as /devices/virtual/input/input70 [ 830.461724][T19760] lo: entered allmulticast mode [ 830.477879][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2948'. [ 830.541367][T19762] binder: 19757:19762 ioctl 4018620d 0 returned -22 [ 830.722073][ T5143] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 830.922409][ T5143] usb 2-1: Using ep0 maxpacket: 32 [ 830.929826][ T5143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 830.976046][ T5143] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 830.997991][ T5143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 831.009143][ T5143] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 831.023229][ T5143] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 831.036647][ T5143] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 831.092222][ T5143] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 831.101910][ T5143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.131809][ T5143] usb 2-1: Product: syz [ 831.136305][ T5143] usb 2-1: Manufacturer: syz [ 831.141164][ T5143] usb 2-1: SerialNumber: syz [ 831.198112][T19780] kvm: pic: non byte write [ 831.232592][ T5104] Bluetooth: hci6: command tx timeout [ 831.388995][ T5104] Bluetooth: hci0: unexpected event 0x0f length: 17 > 4 [ 831.433856][ T5143] cdc_ncm 2-1:1.0: bind() failure [ 831.501407][ T5143] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 831.516092][ T5143] cdc_ncm 2-1:1.1: bind() failure [ 831.540329][ T5143] usb 2-1: USB disconnect, device number 123 [ 832.032469][ T5104] Bluetooth: hci5: command tx timeout [ 832.107574][ T5104] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 832.402460][ T8] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 832.425558][T19802] input: syz1 as /devices/virtual/input/input71 [ 832.469393][T19802] syz_tun: entered allmulticast mode [ 832.483237][T19802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2963'. [ 832.562203][T19802] syz_tun (unregistering): left allmulticast mode [ 832.636417][ T8] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 832.662680][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.692214][ T8] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 832.722594][ T8] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 832.730602][ T8] usb 3-1: Manufacturer: syz [ 832.755223][ T8] usb 3-1: config 0 descriptor?? [ 832.888882][ T8] rc_core: IR keymap rc-hauppauge not found [ 832.913679][ T8] Registered IR keymap rc-empty [ 832.939965][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 832.960133][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input72 [ 832.996050][ C0] igorplugusb 3-1:0.0: Error: urb status = -32 [ 833.392398][ T5104] Bluetooth: hci0: command tx timeout [ 833.567189][T10766] usb 3-1: USB disconnect, device number 96 [ 833.798833][T19839] xt_nfacct: accounting object `sy' does not exists [ 833.992438][ T5148] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 834.203965][ T5148] usb 4-1: Using ep0 maxpacket: 32 [ 834.234263][ T5148] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 834.263941][ T5148] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 834.276855][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 834.285382][ T5148] usb 4-1: Product: syz [ 834.290732][ T5148] usb 4-1: Manufacturer: syz [ 834.298619][ T5148] usb 4-1: SerialNumber: syz [ 834.307161][ T5148] usb 4-1: config 0 descriptor?? [ 834.316800][T19837] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 834.432563][ T5143] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 834.600902][ T8] usb 4-1: USB disconnect, device number 100 [ 834.644179][ T5143] usb 2-1: config 220 has too many interfaces: 184, using maximum allowed: 32 [ 834.676401][ T5143] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 184 [ 834.706958][ T5143] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 834.731265][ T5143] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.806602][ T5143] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 835.020928][ T5143] gspca_sn9c2028: read1 error -32 [ 835.254942][ T5143] gspca_sn9c2028: read1 error -71 [ 835.272794][ T5143] sn9c2028 2-1:220.0: probe with driver sn9c2028 failed with error -71 [ 835.316706][ T5143] usb 2-1: USB disconnect, device number 124 [ 836.072918][T19868] kvm: pic: non byte write [ 836.512484][ T5104] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 836.521324][ T5104] Bluetooth: hci5: Injecting HCI hardware error event [ 836.530495][ T5104] Bluetooth: hci5: hardware error 0x00 [ 837.372865][ T5143] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 837.383667][T19895] kvm: pic: non byte write [ 837.412393][ T8] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 837.583462][ T5143] usb 1-1: Using ep0 maxpacket: 16 [ 837.592225][ T5143] usb 1-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 837.607421][ T5143] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.620747][ T5143] usb 1-1: Product: syz [ 837.630524][ T5143] usb 1-1: Manufacturer: syz [ 837.637656][ T5143] usb 1-1: SerialNumber: syz [ 837.648584][ T8] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 837.657631][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.678696][ T5143] usb 1-1: config 0 descriptor?? [ 837.692219][ T8] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 837.705916][ T5143] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 837.716742][ T8] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 837.728777][ T5143] pctv452e: pctv452e_power_ctrl: 1 [ 837.728777][ T5143] [ 837.736843][ T8] usb 4-1: Manufacturer: syz [ 837.748882][ T5143] usb 1-1: selecting invalid altsetting 3 [ 837.756481][ T8] usb 4-1: config 0 descriptor?? [ 837.763318][ T5143] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 837.763318][ T5143] [ 837.775231][ T5143] dvb-usb: bulk message failed: -22 (5/0) [ 837.819548][ T5143] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 837.866019][ T5143] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 837.879520][ T5143] usb 1-1: media controller created [ 837.913216][ T8] rc_core: IR keymap rc-hauppauge not found [ 837.923778][ T5143] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 837.950012][ T8] Registered IR keymap rc-empty [ 837.958137][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 837.987296][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input73 [ 838.018754][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 838.152189][T19909] input: syz1 as /devices/virtual/input/input74 [ 838.183819][ T5143] DVB: Unable to find symbol stb0899_attach() [ 838.192051][ T5143] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 838.244149][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2989'. [ 838.331147][T19914] FAULT_INJECTION: forcing a failure. [ 838.331147][T19914] name failslab, interval 1, probability 0, space 0, times 0 [ 838.390093][T19914] CPU: 1 PID: 19914 Comm: syz.4.2991 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 838.400284][T19914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 838.410355][T19914] Call Trace: [ 838.413649][T19914] [ 838.416591][T19914] dump_stack_lvl+0x241/0x360 [ 838.421294][T19914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 838.426511][T19914] ? __pfx__printk+0x10/0x10 [ 838.431212][T19914] ? __pfx___might_resched+0x10/0x10 [ 838.436527][T19914] ? kmem_cache_alloc_bulk_noprof+0x54d/0x770 [ 838.442619][T19914] should_fail_ex+0x3b0/0x4e0 [ 838.447323][T19914] ? getname_flags+0xbd/0x4f0 [ 838.452016][T19914] should_failslab+0x9/0x20 [ 838.452347][ T5143] rc_core: IR keymap rc-dib0700-rc5 not found [ 838.456517][T19914] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 838.467982][T19914] getname_flags+0xbd/0x4f0 [ 838.472501][T19914] io_mkdirat_prep+0x1d7/0x320 [ 838.477270][T19914] io_submit_sqes+0x9c4/0x1bf0 [ 838.482049][T19914] __se_sys_io_uring_enter+0x2d4/0x2670 [ 838.487593][T19914] ? vfs_write+0x7c4/0xc90 [ 838.492007][T19914] ? __pfx_vfs_write+0x10/0x10 [ 838.496769][T19914] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 838.502745][T19914] ? __fget_files+0x3f6/0x470 [ 838.507431][T19914] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 838.513407][T19914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 838.519729][T19914] ? do_syscall_64+0x100/0x230 [ 838.524489][T19914] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 838.530028][T19914] do_syscall_64+0xf3/0x230 [ 838.534530][T19914] ? clear_bhb_loop+0x35/0x90 [ 838.539199][T19914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.545092][T19914] RIP: 0033:0x7f4d6a175bd9 [ 838.549502][T19914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.569101][T19914] RSP: 002b:00007f4d6af22048 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 838.577515][T19914] RAX: ffffffffffffffda RBX: 00007f4d6a303f60 RCX: 00007f4d6a175bd9 [ 838.585478][T19914] RDX: 0000000000000000 RSI: 0000000000000054 RDI: 0000000000000003 [ 838.593450][T19914] RBP: 00007f4d6af220a0 R08: 0000000000000000 R09: 0000000000000000 [ 838.601418][T19914] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 838.609382][T19914] R13: 000000000000004d R14: 00007f4d6a303f60 R15: 00007f4d6a42fa68 [ 838.617359][T19914] [ 838.625279][ T5104] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 838.743104][ T5143] Registered IR keymap rc-empty [ 838.771145][ T5143] rc rc1: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 838.804792][ T5143] input: PCTV HDTV USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input75 [ 838.838534][ T5143] dvb-usb: schedule remote query interval to 100 msecs. [ 838.915244][ T5143] pctv452e: pctv452e_power_ctrl: 0 [ 838.915244][ T5143] [ 838.926691][ T5148] usb 4-1: USB disconnect, device number 101 [ 838.929347][ T5143] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 838.977720][ T5143] usb 1-1: USB disconnect, device number 105 [ 839.108652][ T5143] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 839.142571][T10766] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 839.342401][T10766] usb 3-1: Using ep0 maxpacket: 32 [ 839.355558][T10766] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.377660][T10766] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.391297][T10766] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 839.409854][T10766] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 839.421885][T10766] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 839.437405][T10766] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 839.460626][T10766] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 839.477727][T10766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.487042][T10766] usb 3-1: Product: syz [ 839.491357][T10766] usb 3-1: Manufacturer: syz [ 839.501278][T10766] usb 3-1: SerialNumber: syz [ 839.562548][ T5104] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 839.573813][ T5104] Bluetooth: hci7: Injecting HCI hardware error event [ 839.582236][T13089] Bluetooth: hci7: hardware error 0x00 [ 839.784617][T10766] cdc_ncm 3-1:1.0: bind() failure [ 839.805382][T10766] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 839.824804][T10766] cdc_ncm 3-1:1.1: bind() failure [ 839.857413][T10766] usb 3-1: USB disconnect, device number 97 [ 840.052426][ T5148] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 840.152475][ T6053] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 840.262515][ T5148] usb 4-1: Using ep0 maxpacket: 16 [ 840.269635][ T5148] usb 4-1: config 6 has an invalid interface number: 119 but max is 0 [ 840.278453][ T5148] usb 4-1: config 6 has no interface number 0 [ 840.286874][ T5148] usb 4-1: config 6 interface 119 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 840.300208][ T5148] usb 4-1: config 6 interface 119 has no altsetting 0 [ 840.314548][ T5148] usb 4-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= b.48 [ 840.323822][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.331892][ T5148] usb 4-1: Manufacturer: 탻짹჎슦弮䃮⽡쳤嫮㉦ꭴ湏扏퍐鷸㉾椁ꁩ૪機虁극⡡๺卨葅ႊ᠌䂫⸃쟽븤夞췆秛灆钬륗᳂撝歴紆쥝ꩌ䀹嘧幌ㅰ滻켨뿝鑓Β퉼㉢좹⥗际侀ᗯ♣쨑氾棚겎롿訯ᢛ [ 840.366164][ T5148] usb 4-1: SerialNumber: С [ 840.373691][ T6053] usb 1-1: Using ep0 maxpacket: 32 [ 840.397222][ T6053] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.416658][ T6053] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.431420][ T6053] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.459161][ T6053] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 840.476217][ T6053] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 840.491322][ T6053] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 840.511022][ T6053] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 840.512604][T19953] mac80211_hwsim hwsim147 wlan0: entered promiscuous mode [ 840.520249][ T6053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.542217][ T6053] usb 1-1: Product: syz [ 840.546647][ T6053] usb 1-1: Manufacturer: syz [ 840.551262][ T6053] usb 1-1: SerialNumber: syz [ 840.712378][ T45] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 840.736863][ T5148] digi_acceleport 4-1:6.119: required endpoints missing [ 840.800848][ T5148] usb 4-1: USB disconnect, device number 102 [ 840.847136][ T6053] cdc_ncm 1-1:1.0: bind() failure [ 840.876070][ T6053] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 840.900317][ T6053] cdc_ncm 1-1:1.1: bind() failure [ 840.915622][ T6053] usb 1-1: USB disconnect, device number 106 [ 840.942470][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 840.976051][ T45] usb 3-1: New USB device found, idVendor=2304, idProduct=021f, bcdDevice=5f.af [ 840.988567][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.007883][ T45] usb 3-1: Product: syz [ 841.014473][ T45] usb 3-1: Manufacturer: syz [ 841.019109][ T45] usb 3-1: SerialNumber: syz [ 841.028285][ T45] usb 3-1: config 0 descriptor?? [ 841.035906][ T45] dvb-usb: found a 'PCTV HDTV USB' in warm state. [ 841.046443][ T45] pctv452e: pctv452e_power_ctrl: 1 [ 841.046443][ T45] [ 841.056141][ T45] usb 3-1: selecting invalid altsetting 3 [ 841.062201][ T45] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 841.062201][ T45] [ 841.080384][ T45] dvb-usb: bulk message failed: -22 (5/0) [ 841.094214][ T45] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 841.107928][ T45] dvbdev: DVB: registering new adapter (PCTV HDTV USB) [ 841.117222][ T45] usb 3-1: media controller created [ 841.165230][ T45] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 841.172374][ T5143] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 841.272036][ T45] DVB: Unable to find symbol stb0899_attach() [ 841.284351][ T45] dvb-usb: no frontend was attached by 'PCTV HDTV USB' [ 841.373164][ T45] rc_core: IR keymap rc-dib0700-rc5 not found [ 841.385276][ T45] Registered IR keymap rc-empty [ 841.385362][ T5143] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 841.400419][ T45] rc rc0: PCTV HDTV USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 841.405633][ T5143] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 841.438301][ T45] input: PCTV HDTV USB as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input76 [ 841.460469][ T5143] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 841.472985][ T5143] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 841.490677][ T45] dvb-usb: schedule remote query interval to 100 msecs. [ 841.524586][ T45] pctv452e: pctv452e_power_ctrl: 0 [ 841.524586][ T45] [ 841.548894][ T5143] usb 2-1: Manufacturer: syz [ 841.560988][ T45] dvb-usb: PCTV HDTV USB successfully initialized and connected. [ 841.570154][ T5091] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 841.580146][ T5091] Bluetooth: hci6: Injecting HCI hardware error event [ 841.584161][ T45] usb 3-1: USB disconnect, device number 98 [ 841.588601][ T5091] Bluetooth: hci6: hardware error 0x00 [ 841.632680][T13089] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 841.648936][ T5143] usb 2-1: config 0 descriptor?? [ 841.808316][ T45] dvb-usb: PCTV HDTV USB successfully deinitialized and disconnected. [ 841.882942][ T5143] rc_core: IR keymap rc-hauppauge not found [ 841.902161][ T5143] Registered IR keymap rc-empty [ 841.926257][ T5143] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 841.966315][ T5143] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input77 [ 842.000564][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 842.044724][ T29] audit: type=1326 audit(1720373932.964:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19981 comm="syz.0.3012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5bfdb75bd9 code=0x0 [ 842.170787][T13089] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 842.369065][ T45] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 842.610898][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 842.618547][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.629967][ T45] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.641614][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 842.655709][ T45] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 842.666140][ T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 842.675926][ T45] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 842.689346][ T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 842.702858][ T5146] usb 2-1: USB disconnect, device number 125 [ 842.708887][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.722134][ T45] usb 5-1: Product: syz [ 842.728209][ T45] usb 5-1: Manufacturer: syz [ 842.733741][ T45] usb 5-1: SerialNumber: syz [ 842.872548][ T5148] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 842.977342][ T45] cdc_ncm 5-1:1.0: bind() failure [ 842.995727][ T45] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 843.002894][ T45] cdc_ncm 5-1:1.1: bind() failure [ 843.011817][ T45] usb 5-1: USB disconnect, device number 109 [ 843.059769][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.071083][ T5148] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.086914][ T5148] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 843.102362][ T5148] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.131298][ T5148] usb 3-1: config 0 descriptor?? [ 843.200276][T20006] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.3019' resets device [ 843.492393][ T6053] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 843.567891][ T5148] itetech 0003:06CB:73F5.001D: unknown main item tag 0x0 [ 843.591367][ T5148] itetech 0003:06CB:73F5.001D: item fetching failed at offset 9/11 [ 843.600254][ T5148] itetech 0003:06CB:73F5.001D: probe with driver itetech failed with error -22 [ 843.682551][ T6053] usb 4-1: Using ep0 maxpacket: 32 [ 843.690818][ T6053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.712400][ T5091] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 843.721526][ T6053] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.744463][ T6053] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 843.755676][ T6053] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 843.767585][ T6053] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 843.779216][ T6053] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 843.791187][ T6053] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.800992][ T6053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.816927][ T6053] usb 4-1: Product: syz [ 843.824870][ T6053] usb 4-1: Manufacturer: syz [ 843.839858][ T6053] usb 4-1: SerialNumber: syz [ 843.928100][ T5148] usb 3-1: USB disconnect, device number 99 [ 844.032615][ T5091] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 844.042666][ T5091] Bluetooth: hci0: Injecting HCI hardware error event [ 844.051506][T13089] Bluetooth: hci0: hardware error 0x00 [ 844.071715][ T6053] cdc_ncm 4-1:1.0: bind() failure [ 844.088961][ T6053] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 844.123931][ T6053] cdc_ncm 4-1:1.1: bind() failure [ 844.153983][ T6053] usb 4-1: USB disconnect, device number 103 [ 844.402959][ T29] audit: type=1326 audit(1720373935.324:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20030 comm="syz.1.3027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d25975bd9 code=0x0 [ 844.589799][ T12] ------------[ cut here ]------------ [ 844.596186][ T12] WARNING: CPU: 0 PID: 12 at net/wireless/nl80211.c:19473 cfg80211_bss_color_notify+0x5f6/0x8b0 [ 844.606906][ T12] Modules linked in: [ 844.610822][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 844.621207][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 844.631587][ T12] Workqueue: phy143 ieee80211_color_collision_detection_work [ 844.639405][ T12] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 844.646146][ T12] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 c9 dd b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 bb dd b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ad dd b8 f6 c6 05 94 83 ba 04 01 90 48 [ 844.665859][ T12] RSP: 0018:ffffc90000117aa0 EFLAGS: 00010293 [ 844.671956][ T12] RAX: ffffffff8add49f5 RBX: 0000000000000000 RCX: ffff8880176c5a00 [ 844.680183][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 844.688968][ T12] RBP: ffffc90000117bb0 R08: ffffffff8add4522 R09: 1ffffffff1f5a925 [ 844.697961][ T12] R10: dffffc0000000000 R11: ffffffff8af8c3f0 R12: 1ffff92000022f5c [ 844.706108][ T12] R13: ffff88805e430000 R14: ffff88805e430cb0 R15: dffffc0000000000 [ 844.714189][ T12] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 844.723203][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.729801][ T12] CR2: 0000000020076000 CR3: 00000000225b6000 CR4: 00000000003526f0 [ 844.737824][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 844.745834][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 844.753944][ T12] Call Trace: [ 844.757227][ T12] [ 844.760167][ T12] ? __warn+0x163/0x4e0 [ 844.764424][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 844.770253][ T12] ? report_bug+0x2b3/0x500 [ 844.774871][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 844.780711][ T12] ? handle_bug+0x3e/0x70 [ 844.785102][ T12] ? exc_invalid_op+0x1a/0x50 [ 844.790290][ T12] ? asm_exc_invalid_op+0x1a/0x20 [ 844.796096][ T12] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 844.803804][ T12] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 844.809633][ T12] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 844.815498][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 844.821411][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 844.826498][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 844.832575][ T12] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 844.838751][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 844.845146][ T12] ? process_scheduled_works+0x945/0x1830 [ 844.850881][ T12] process_scheduled_works+0xa2c/0x1830 [ 844.856534][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 844.862610][ T12] ? assign_work+0x364/0x3d0 [ 844.862928][ T5148] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 844.867247][ T12] worker_thread+0x86d/0xd50 [ 844.879536][ T12] ? __kthread_parkme+0x169/0x1d0 [ 844.884624][ T12] ? __pfx_worker_thread+0x10/0x10 [ 844.889746][ T12] kthread+0x2f0/0x390 [ 844.894532][ T12] ? __pfx_worker_thread+0x10/0x10 [ 844.899648][ T12] ? __pfx_kthread+0x10/0x10 [ 844.905313][ T12] ret_from_fork+0x4b/0x80 [ 844.909747][ T12] ? __pfx_kthread+0x10/0x10 [ 844.914409][ T12] ret_from_fork_asm+0x1a/0x30 [ 844.919193][ T12] [ 844.922205][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 844.929466][ T12] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc6-syzkaller-00223-gc6653f49e4fd #0 [ 844.939511][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 844.949554][ T12] Workqueue: phy143 ieee80211_color_collision_detection_work [ 844.956918][ T12] Call Trace: [ 844.960180][ T12] [ 844.963103][ T12] dump_stack_lvl+0x241/0x360 [ 844.967873][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.973084][ T12] ? __pfx__printk+0x10/0x10 [ 844.977696][ T12] ? vscnprintf+0x5d/0x90 [ 844.982027][ T12] panic+0x349/0x860 [ 844.985911][ T12] ? __warn+0x172/0x4e0 [ 844.990055][ T12] ? __pfx_panic+0x10/0x10 [ 844.994482][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 844.999430][ T12] __warn+0x346/0x4e0 [ 845.003410][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 845.009218][ T12] report_bug+0x2b3/0x500 [ 845.013537][ T12] ? cfg80211_bss_color_notify+0x5f6/0x8b0 [ 845.019335][ T12] handle_bug+0x3e/0x70 [ 845.023488][ T12] exc_invalid_op+0x1a/0x50 [ 845.028017][ T12] asm_exc_invalid_op+0x1a/0x20 [ 845.032862][ T12] RIP: 0010:cfg80211_bss_color_notify+0x5f6/0x8b0 [ 845.039262][ T12] Code: 00 e8 3e 33 b8 fe 48 83 c4 08 89 c1 c1 f8 1f 21 c8 e9 08 fd ff ff e8 c9 dd b8 f6 90 0f 0b 90 e9 71 fb ff ff e8 bb dd b8 f6 90 <0f> 0b 90 e9 38 fb ff ff e8 ad dd b8 f6 c6 05 94 83 ba 04 01 90 48 [ 845.058857][ T12] RSP: 0018:ffffc90000117aa0 EFLAGS: 00010293 [ 845.064913][ T12] RAX: ffffffff8add49f5 RBX: 0000000000000000 RCX: ffff8880176c5a00 [ 845.073048][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 845.081009][ T12] RBP: ffffc90000117bb0 R08: ffffffff8add4522 R09: 1ffffffff1f5a925 [ 845.088969][ T12] R10: dffffc0000000000 R11: ffffffff8af8c3f0 R12: 1ffff92000022f5c [ 845.096937][ T12] R13: ffff88805e430000 R14: ffff88805e430cb0 R15: dffffc0000000000 [ 845.104915][ T12] ? __pfx_ieee80211_color_collision_detection_work+0x10/0x10 [ 845.112367][ T12] ? cfg80211_bss_color_notify+0x122/0x8b0 [ 845.118162][ T12] ? cfg80211_bss_color_notify+0x5f5/0x8b0 [ 845.123960][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 845.128973][ T12] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 845.134939][ T12] ? __pfx_cfg80211_bss_color_notify+0x10/0x10 [ 845.141080][ T12] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 845.147413][ T12] ? process_scheduled_works+0x945/0x1830 [ 845.153119][ T12] process_scheduled_works+0xa2c/0x1830 [ 845.158669][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 845.164728][ T12] ? assign_work+0x364/0x3d0 [ 845.169309][ T12] worker_thread+0x86d/0xd50 [ 845.173899][ T12] ? __kthread_parkme+0x169/0x1d0 [ 845.178914][ T12] ? __pfx_worker_thread+0x10/0x10 [ 845.184013][ T12] kthread+0x2f0/0x390 [ 845.188070][ T12] ? __pfx_worker_thread+0x10/0x10 [ 845.193167][ T12] ? __pfx_kthread+0x10/0x10 [ 845.197745][ T12] ret_from_fork+0x4b/0x80 [ 845.202156][ T12] ? __pfx_kthread+0x10/0x10 [ 845.206743][ T12] ret_from_fork_asm+0x1a/0x30 [ 845.211510][ T12] [ 845.214780][ T12] Kernel Offset: disabled [ 845.219172][ T12] Rebooting in 86400 seconds..