last executing test programs: 1m9.141238922s ago: executing program 4 (id=346): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x200, 0x70bd25}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}}, 0x4008840) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = inotify_init() fgetxattr(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0) preadv(r3, &(0x7f0000010540)=[{&(0x7f0000010680)=""/222, 0xde}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1m3.30178988s ago: executing program 4 (id=352): r0 = socket(0x40000000015, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)={0x1e4, 0x9, 0xb, 0x101, 0x70bd2b, 0x25dfdbfe, {0xf, 0x0, 0x4}, [@nested={0xa6, 0xa, 0x0, 0x1, [@nested={0x4, 0xf1}, @generic="540063b490d8c6c7d4400fe1137bdb906d5ac70ef52a408c61777b01124b0cee1cd2ecd5f47407c587185cb876ef891584d013ac3cb99462d45c390ffdcc7e46814becf5392240f349e34f2f60283088c42dc524986e72b3fa161cd71ae26baac0f808e20d6ce98d3f8230e46928264416ebdb117bf5cff3c35d3ecfaf8eda72dd425357e623591519a9", @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x16}}]}, @generic="6b0d0b849e071ff6f9b1c48e5e10689c7fb5af1567b6c6b5eea2204fee98224f9e4debc237e131c1f1a28434e1bd43b2b4cb5b1f387b792f68fcd888c4365da2715dd61430461393edcb824891abcfd4dc079370bcd5162f7af3deb06f66ccbdc5", @generic="301b71c87d2ea5312fb4bae3627e59d930cabac6e4ff42652742f3fcf2e7c3a6b1e9d9f5ba3ef1bf5672c63433622d070985ec79f293218ade2c93b342434320000830f3e8ba402e25ede9cc68ae6362867a2a12661cffce29f3679b4d92356e71a5dcf6d147f495c8340f8f584b253322ccb5716f84eae4c9a1c7ebf5917415e6d4891ea215f950c540248a10e928acc77026c67338fdd230771d318c29d7b4b9ae8d5b0b67fde5c96b68d28df6d4198f15", @generic="60335ffd9d08c1f3acd20a5ece", @typed={0x8, 0x97, 0x0, 0x0, @u32=0xab78}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4008095}, 0x80) recvmmsg$unix(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000007c0)=""/196, 0xc4}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/221, 0xdd}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000001c0)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, &(0x7f0000000280)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}}], 0x1, 0x0, &(0x7f0000000480)={r6, r7+60000000}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc, 0x2, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 58.916201228s ago: executing program 4 (id=358): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x2, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) pipe(0x0) pipe2$watch_queue(0x0, 0x80) syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x200002, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@audit}]}}, 0x0, 0x0, &(0x7f0000000300)="c077dd92883ba59fdb1e5927b36bb5f4249551a7df778f1d4c00664c7b413ca6f3") setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380), 0x4) r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_usb_connect(0x1, 0x3d, &(0x7f0000002880)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78", @ANYRESHEX=r4, @ANYRESHEX=r4, @ANYRES32=r0, @ANYBLOB="3722c21ae14c6e51606b0602e3d26f25fa2d99ceb2ac56b2b3b5bb690276af702c90604a542e75240baa097840797d8851ba10f1a128f928eee4445035e3ba59b55f3e78f7fb66822135f456708ecce20dca8e7d8d64e4cd1b2f76a88f2598cf2c28fd1c5dd5f2d3b4f7eef275c6ccdde41d048be3c84c4189dc24a649c1d6a752bc660ff3e03f2a917622ca7cde7091fca270dc61de96ef6230d96514af0d14f66fea4cb586470920cc176402e61071644f494705889ab27a5655db44e52164e54efcf61be7da8e7dc8917868a83b5056bf0d8f49384d2d14e97685f2b5c8eac04651b8fd263d9e59ba8eac87e1c2a130d2bb2c55237157f1486ce1eca6d3a491ea8a6f89fef4f564c2c81c607270dfb2c4657e60bef4ad5b9ebfaf24aca3ced046b50ab790597333bf734a8b95f1ab32babb960f2663c57ac71c4f2f0b51f4ae5f35fdec748840040eeb2c20097979d2b3bb05a9dbc737ad091a96b2e5c577af5a4b14a679cb2a51675d1190ff5536a9016387087c2132c7d9aab4e0d242263399d61307512c1d62eebff06c0422d08af832ff533af5c989530ad7634fce85ee3fe337c87408824697d7ab86c0a72c6f8be97d11c3efc65d233c9e1b185dbd43a703df2d2afcce394a59a9c402f17d4d86efc53e6ce983194147384e58eac6629c58b2f70951f12d2761dd74f3da352b61f41cf6c96e7eb129736ca2a45aeda5ab542ef9868d1c0a537d7a85eb70b977deef906d5eb874c6c986af3859fa41d9543b741f4472789f77264ffea700a75b4bde9e2f58a98f821c3ce78e4a11da117b8f7f50925172e7d2f43f139647ddbf8ca0f4a913b3d9a12793a7fd131bb09b94cd9d51172c28a3b30bfd68210ac0a44829fdc1fc2b7fe00cd06088407081c6094cb7b57ea12dddd052eb2d5e5b93e0438a783c01791b02a73ff5d4265ed82fc8712afababc17fe7eaa7b663032db4f7cbd709cad4223b1bc4067d01f8fd3556ca846520497a3bd4c16b264e8f641db4832e7a7796b86aa5df0a26a9aa94339b396e2a57d967bfa3b0bc317bfe9e769d378b9908ef9b322078d768c8208d0a415aeaaa23ed28e4ac98e7653b315be3deff359b794380773602fc25fa650550873d40a7848ed363d5741ef5774a95001e6e485ac6c72876115fc1805c791c0edad03dcc56df6034910c8c4c951ec42accda8e4a2c1e942ba54b3e0e5e63ad9c849fb2af29d08179c6944f41a6df3ce7501122e5c46c587c662632fa90cf0db075a53e08d1b705e3e53565bf679eca23b819f5cde19431bf4f91f81f67e5209f2164176ecc5417d2aedd35fff4da0308bebcd1a06c2f26a2018145c602ca7e1369b9063e967d8938a0fced167255639d5b8f4b1c374365e7d6800f784a70e29dab15b3a38d397ce756a4e5ca78d6b343b6cb3ea1d9b4720cf05136f13e544d7274c0a412d99113f4bf9b2143634ae775c8d92bf6d920430b28667aa8eb070596640ce2084b3637151cc09f3c451239ddcf739137761cc067784909047423a0ced5998db8ffd5da0afc3f3710ce0fcbc22e2c9faa533eba72cbc7d6b68243f92ee00fba26a30def39638ce39cc55a0b2b8b8da6988ab12cfe023197d4d14afcc23b0753173cfbe64feedb261d6aab34c26e6f8823837aaf27b7a3be5a50853fe1ecb01f0ee2f8b2beee83933183e5c1295930bea8a9f9fe3a5bd95d0731bfe3cc559881f3232ea951e2c167d7e6bec4c2a5f98526015e6b89f5b6f5711d7a71c422270a92f64a2142fcf542d55df3bef6d6429983bb2ef9975b460228306669bfcac97ada5dab3459e7980799f45c19453e4bca7ef6fbdc2fc8b608334c60803e404d3e5c30435c27cc838cc9384f14ba199287599f0390dce426f738e6e945d5173dadf900edcc6428348a84f3029a4df6612296a88b180a83d3980f314b1a0d2d08c6c3978c13571bb32d01e7de37c81e159b237a3375253c5fa2edf1caba8258dc352b275e14f27221271f1f765b0b20736219ee5562079fb06b828686aa1f92ac2bdf02f3af403433e0536924b00cbc6afa4b1d8724580a2c91f195317255c91bdfd8892b73b4ce9b2af3e66ea733dd887e565f7b9b1f7815bc0896f46f4a67d40266dd073250cf6b666d1fe7ae39ee17f4ec27380970e4e514aaca8e92e06aedb165e7d30198748135f6f2337f186c9c79d709744d45eb3d6e1a64727f730e447a60fc70248d2ca5dc7a98affddbcd8b5965afa63b22a7dc0bd73a2aeccfdfdd3614930beaf781d9f1701f9a2d0ca055df77ad72fabcb55f25b8e940850f0eaa740c37bc7fc795a5270b4a28c0d2d6590fafe3da873bcd866c1808fd649bd5002de669a15881f5db9be7f03ba879f5fa03bb37f7c59d4b7b359b32c0352094ae2c51ffb8606e36d6c139825248c84c32568f1dcd767b080afa62976243900c7681ad490cc087d4edb9675ba05d0dd36fb46a89b61985e666600c4ed320d24b209fab4235bb89faae3326a3cbb6dda9f00785d17c3eea048db5c6e25fc98aea0d16e7e4d9f6e804782698908ba7ec1119965b6fd60d5d71c19867b6e5ffc4b0fe8f9d05a2d62007430544c92945157c836a7bbf680a2a342226e9f50a742ff2c81e5fbfc0f92817eab169daf921b3126960f1339ca3363d83f221d67949e7d62b303d22d1dce254ccf92a14f295b35ad9297af803ec388dade8637bca67012014b54ff3400253cf4a5f94572db78e2e6c59bcea0a7e4cb8fd0472d13610cfa793e30499045bfdc1d60038addd0e3b81b744d4dd07c2e431ded60284ac5f75d10305ee1b2114822e350ce240cf3a51b5a7aa0be0ce220ce777dbbb220622b5da088aebc89ea88ba71d758f72a9ee4145bd4a7e00a43d5b3a5620c9bd4deb5979d5df1a8970bc632de4d12eeba25c85f5e458346f0931f1149669cbca12d16107f0f21f86d39adbf89cc57ed65e19dd4d2f44df0890c25e45c35b9c493863acf97efa4782e1b8d995aa8f36d193446237f7b44597b931de1d2c957be86dd98ca0c3df48c4352517c7738af4654591b684400239b16027c81fb2d75dac84759407c53a15fb2c8108ee5a28711369a6349c898a54f62e62aa2fdb2199bf33fd875b6470fcc8d4f1f016aa6d141cfe42c115871b808783b1114cf79ee97922ec1cd605b37c815cdf689958da103b458f35ced0b2f9c8a26cd2189a4d15dfb56b0f51d38e13ad394027d8736fcbf6da8018afddc3c2d38e3bf406ecb8a84fb7da72ff720f4a36711264220b9fb31c0616278bc054ecd7ffebc47e285768912f42590c7781a1413f9116eecdfdb56c2710b4d0bc5b7bc5a059813268991451f720650decda8714c41abcfc88f9ff67f0061dad00f4cbb3b1dbbd574b6171869b2e2e7f5edfa92f9ea1464633c536079049eaa6372f3f2ec19296e95feb31da651a42b513ed07ec87902f1b1507a086e1a9e2277240e98df556c52b05442d7b9789a90cbad94a25ef468a94e134fc82e0f70ff0bc55a4897c1b3f8418dc439d66e618ec45c43e62646605de4621a3ec0ee636e60f70bb706d856d0671cc45eaa246af5a7410a639caf63c2c682ea4438733996bbb90781e2b760914ecf63102079a37bc82e25cc72f7bfdca171556854df36c3a4446dc5209554443081e145f7b7bf73a81be701dfc821a097b0aa837cb80f7f0a683626f733c789eba892fcb8edceacd5b98141a7e3c009ea7e81bce30487612586aeb3b422f55132d42a74d43498fe37c2b8e4c702509a2287a5d13d3111412c7934eb2518fc5dcbfff8f58e8f151dba856b612b99d8b23aedeb19ff4325771f9f2f598aee5d5e266b140d8fa9e935111b9d3db36ceec6faa4c15c0cff9c190c0f0710367bd53b73a6d2d5a5c7da7d3c00519e9be83d2b30f0d31892f2d7a68ee8f75ae8a2c85c8b593ce2851a2fe0c10157be8016673c73ee2dfbf80d6e338e4d906d4ac7526174e01ede8311e9efdecb8695d102b8ca371f1033f44c8afbed81369e08840c8f558f08e89616ad971fdb0d8293161fead1d285959deb14ac7ed7b77127ade9aa44690ea5d92dae2db8eca20abbf9b04ebfe867ffa4ba77cb8812e7b92466242fd475037c398b347f82192a15c4db65160a2d06ead637ad5503858f37e3834932209910b8c562c1d9b9468d47e43787e83da655bb669adc20e27142c566c3acfe3ccc330b8c06940445c8107c9b35be26eec662940ef083ba455ed6d95b6f41637d12bc2b0eefe6920606a100fa4ae03877c7064bda44713eef30f23eb7c556d329e40e7a6a361d28e55f66c0d3eb947aac0562aafc233ca604d0993613ec691891b5c6e674929e39e122f0ef62b270a074c3a84ceef310f4b538131d5684fafa58fb59e7a156db4f5831685de569e1f1f16fcdc9d6fa840d8e2a93145be9e6860696302fba08e0bcee893b53208b6fb02d2fad471812c369e7bf6d84c11b8afe1e23f8887947353ff9aede59b1e443c5a029dd585c704ed8c4f0de4aab181f9597eb72fda295aa5670eb866eff0423e1e3ca1c8c71d5e2cc41f06c857aabc07391d0a20da83546b2da63b3eaa927cc977dbd8816101368b98af37bc59e9187f0fa183a37c9a6eeba7cfd429edbab0a64ea22e4fa5c1f30130c3af1c719f7a8ab3870bc95dbef622bc45b911dd78f7891c015fd0dbe8fad3dc814b9f0ae314abae5c013f153e6584dc1a20d4da302b264bc5312d3e610acaa48e832266a38ede44746994e13c8714df507d7af0693b02bea2b14ebd979fd6a374f8b5100adc56c4a2e5253e305da460fe6e9132ac3255a753391293d283b6e0a7ff6851a73ece4904c0d31580102a1356d543f877ae6c21e2e56edd5044323c0304ce6debe749855a912746e09076db4d1737260ca03f1671d8110e8b641282e275cae1ce9af684bf170f6b91f039ab8e3fa277e2bfa805cf8d047c71f01cfc4c11dd851cd56a10c803ac2a24493ead3b50940a003a7911d0003106e76fbf2400c35252125de2bfdfbdba95c1ef9ea599a81d6fea0dfe6528d2b222fb710459d0721f8e1848eb45df32189145294f205d99155266c573881485521e2d7a09eab987b69bde5652f76787e20c2cca3b3b0eae82d714a7165ab4d9173928507617de7458e745c66da0ff8a67e21f6a2e2c99d0f5f3c94277172add94e7620acdf16a81cfd0094dbb7103c1a06bcdb611c91fa6e58388b1461a83898fb2569f6b7da488babc481743ebd7716f844b0539b54298e3150bfaf66082273e86ef216969847e5ce5b47510987984d3b18c97230b1697a7d3a8b99dd97f93889097d89ea5a2668bc43082a18a35481498efd5ffb7da31bcfbd9493f7cbead89632f01d57dab200b559c0993f7d8ffda5a518cd6cddc77b352a4507c1f61a874c7f3fea3adac61ffc82be1471b6f59bd358766aeba951f1ca20ae1b0b71e60a319d7c0c1fe6819e30e6ae5d5251bb7f1ec8d0921d9bee365714c74a50525a72db40f2e0afeda2b2012419f5a9d568e36c63f5b1cbbc0f051c1eecee27ef0c06640ece336af7828ebe90864f0d32859e2d35cf6d6d8124f6c0ffb3f8970a220f00166886aa05c320d89025705ba74187acc496b6ebbeb2f8913e74ad5f6ad263ef71411b8beadf7a8ede152cfa945a7557ee4838257c815b109281a2c63c19c18a6454387cafa8ee95f026702929a52a908a0b1fbe58af65f03629ca4947fa42564dd220202bc98af98e312de8a1dd5f469f395ed1294e2460805cb1005cfe9fe65be741fb933a76971edaae52b36611416b82d9", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES64=r4], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r6) pidfd_getfd(r2, r0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) writev(r2, &(0x7f0000001600)=[{&(0x7f0000000340)="955fb275c1f72a8894b1eb540185eda6e4203bd3047a6d184ec161bd79b3d81c974514be9e5ef762a85a02501f783c644c368203b56d", 0x36}, {&(0x7f00000002c0)="1221e2e122", 0x5}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="1f4e8d5568e6a7e0b48154f1d7318e0920c401124f4c54683104bc491292e78eaabddcab97945e3f0799506253980312a9485564e391e0f75d70c6c7c5cc2147b6525cad8087b9056c329fb8063ba850d95f6d8dd8db7fb0beafd639d94a97555a9b0214b265b1d12cc37fc4fa61dd6765487c7c65f14bc739", 0x79}, {&(0x7f0000001640)="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", 0x1b5}, {&(0x7f0000000600)="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", 0xff8}], 0x6) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000111401000000000000000000080001000100000008004a000000000008004b0028"], 0x30}}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="340000aa00000b01f9ffffff00000000000200000a080002400000000008000340000000000d00010081fd7a276c746572000000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 53.693504001s ago: executing program 4 (id=364): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x1) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') fremovexattr(r4, &(0x7f00000000c0)=@random={'user.', '\x00'}) r5 = socket$unix(0x1, 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) io_setup(0x2007, &(0x7f0000000200)=0x0) r7 = eventfd2(0x0, 0x800) fcntl$dupfd(r0, 0x0, r4) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x7ff, r1, &(0x7f0000000680)="1cabe66a055516a56bd83fbe96d83bca72fe0d921a5b686ddfa2185235db9552fb8fb71627069f2849f9f12047b55638d838c57a3c2f1ea06f35e9b9dcef8f291a74a44208c87a189060629fda0bb92631c777ea68e981fb25b06aa06a5d17e2b7f7a04c5bd590614e58009f1d50d9992202b08c1942ebb72395a218d78e2bc2210d1f7fa3460ff52ddd5b0cbc17c4ad09a48c44eb8f9a044c4e84db25e48002157e010000000000008022537f69013733703de101729126ea3d4b8084f6aff0658eecb2471c24f9845947658326020a4583f7869536cf003ce4d0f21d23de886f9897", 0xe3, 0x7fffffffffffffff, 0x0, 0x3, r7}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) io_getevents(r6, 0x0, 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000080)={0x0, 0x989680}) writev(r5, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='net/dev\x00') preadv(r8, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/108, 0x6c}, {&(0x7f0000000340)=""/99, 0x63}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000500)=""/77, 0x4d}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000000600)=""/103, 0x67}, {&(0x7f00000004c0)=""/55, 0x37}], 0x7, 0x0, 0x800) 48.782978513s ago: executing program 4 (id=374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x200, 0x70bd25}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50}}, 0x4008840) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = inotify_init() fgetxattr(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0) preadv(r3, &(0x7f0000010540)=[{&(0x7f0000010680)=""/222, 0xde}], 0x1, 0x0, 0x0) r5 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0xdb4, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 44.225648826s ago: executing program 4 (id=379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @value=0x6}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xce, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 28.821231977s ago: executing program 32 (id=379): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f907, 0x0, '\x00', @value=0x6}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380), 0x8402, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, 0x0, 0x300) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xce, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 28.077415784s ago: executing program 2 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0x63837ba875575fe9, 0x70bd25, 0x25dfdbfe, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0xfffe, {@ip4=@loopback, 0x86dd}}}]}, 0x38}}, 0x0) 27.836260636s ago: executing program 2 (id=433): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) syz_usb_disconnect(r3) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x61}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) 23.012845706s ago: executing program 2 (id=454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x0) 22.891212638s ago: executing program 1 (id=446): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x7, 0x1, 0x3, 0xef53, 0x722, 0x13, 0x7fffffff, 0xff, 0x3e, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x9, 0xed}}) 22.890709029s ago: executing program 2 (id=447): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_bond\x00', &(0x7f0000000000)=@ethtool_channels={0x24, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) 22.789860441s ago: executing program 1 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 22.684794829s ago: executing program 2 (id=449): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0e, &(0x7f0000000040)) syz_usb_disconnect(r3) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, 0xffffffffffffffff, 0x9dffffff}}, 0x48) open$dir(0x0, 0x800, 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x61}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) 22.321154728s ago: executing program 1 (id=451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)='T', 0x1, 0x8910, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000600)) r4 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0x7c81, 0x0) socket$kcm(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x893}, 0x24040084) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) membarrier(0x10, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=@newtfilter={0x4b8, 0x2c, 0x200, 0x4070bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x488, 0x2, [@TCA_CGROUP_EMATCHES={0x484, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x3, 0xf4}, {0x31, 0xd60d, 0xc, 0x4}}}, @TCF_EM_CONTAINER={0xf4, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x8}, "e47bda9fe3ec12fe8431296ebc2c040ed2967d5215290050f97156d764e26626f9f8d93be34a632ae82599e1eb3ba00c5576d7d6a33bdcec97d910c31f165a676a3b906874affa6933bfd356a303f930e6a3ee6ccca10589c65adec6a40837f30f5fe6ab26bbb873e03322d53c332a86f22d4ebd976ca68f5d54505551ecd2e4304c40c5f897c40e6800abb0f164ffffba1b338b04b456d23124f78c3f9cbdec35b4610a634b55210e74e26b4923b72a7839ce65eef89c90cf90e452cebf1bef9bd6553feb5cd655cdd98019ac5dc28b4ce1e3a445ad96ae6960eeaae0e4c7802516726597dd"}}]}, @TCA_EMATCH_TREE_LIST={0x114, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0xb, 0x8, 0xb}, {0xffffffffffffffff, 0x4, 0x2}}}, @TCF_EM_NBYTE={0x1c, 0x2, 0x0, 0x0, {{0x2000, 0x2, 0x7}, {0xffff, 0x9, 0x1, "39e12965764f190dd4"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7}, {{0x2, 0x1, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xd0, 0x3, 0x0, 0x0, {{0x6, 0x0, 0x3}, "265404d36d034d5a72935016647d2270abe4e7997ea53f71e4a04f2ef9848073e85682597789558679f6a3c97af0be318a3cbeacdaa15649b05f43aa9e650bfa346c5bd9b48da9a42aa9b6809a4a298d5c648e0f896311d1224ea60aa34d21d6a5fc142f49d17b09699b93a9066d8c92f465290e3cd52c5cac532cb3b5755c5054f581cb9ec7389c12185bfb4d63c2e3936005422b4cca88667da168a27b9ecdd1644a68520cc93f37cfbee100314f3b2b7f99f76785bcea59c2e10ce53ad4e97d7d9147"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x9, 0x8, 0xffd8}, {0x1, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x8001, 0x2, 0x1000}, {0x9309, 0x8, 0x2, "f791c8e19d8b94ae"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x174, 0x2, 0x0, 0x1, [@TCF_EM_META={0x30, 0x1, 0x0, 0x0, {{0x2, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x24, 0x2, [@TCF_META_TYPE_VAR="21255ebe73ef70799e10", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR='U', @TCF_META_TYPE_VAR="167d927bdb0d81", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="d13d483937ec"]}]}}, @TCF_EM_META={0x44, 0x3, 0x0, 0x0, {{0x4ddd, 0x4, 0xa47}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x3364, 0x4}, {0x3, 0x5}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xba9, 0x7, 0x1}, {0x2, 0xd}}}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR='(5`', @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR=' A', @TCF_META_TYPE_VAR="83", @TCF_META_TYPE_VAR='E', @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x1]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xac25, 0x1, 0x8}, {0x4, 0xb, 0xf, 0x6, 0x4, 0x1, 0x1}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x310b, 0x7, 0x5}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x80, 0x3, 0x0, 0x0, {{0x1ff, 0x4, 0x811b}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x1}, {0x6, 0x6, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x5, 0x3}, {0x7fff, 0x8}}}, @TCA_EM_META_RVALUE={0x1c, 0x3, [@TCF_META_TYPE_VAR="acc6ecdc37", @TCF_META_TYPE_VAR="fba9f425f9", @TCF_META_TYPE_VAR, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="787cc79f54b6", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x50, 0x2}, {0x9, 0x80}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7, 0x3}, {0x17bc, 0x9, 0x3}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x2}, {0x2, 0x4}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="91622764"]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x81, 0x1, 0x1ff}, {0x7, 0xfff, 0x80, 0x3, 0x9, 0x2, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x5}, {0x8, 0xddf, 0x0, 0x6, 0x1, 0x2}}}, @TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xfc01, 0x9, 0xd23}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4811}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x7f}, {0x0, 0x4, 0x0, "17648a80"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x4}, {0x7, 0x5, 0x7, 0x1, 0x6, 0x2, 0x3}}}]}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0xff}, {0x601, 0x1, 0x2, 'z'}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6}, {0xfffffffd, 0xa, 0x8001, 0x3, 0x3, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x9, 0x7, 0x7}, {{0x4, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x7fff, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x3, 0x1}, {0x42de, 0xff, 0x1}}}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="8c351da3d5a99f", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8]}]}}]}]}]}}]}, 0x4b8}}, 0x24040084) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d8", 0xe) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050800) ioctl$VT_OPENQRY(r7, 0x5600, &(0x7f00000000c0)) preadv(r7, 0x0, 0x0, 0x80, 0x0) 19.710631883s ago: executing program 1 (id=456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x78}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 19.436686658s ago: executing program 1 (id=458): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) syz_open_dev$media(0x0, 0x0, 0x101d01) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r4, 0x400, 0x1) sendmsg$nl_netfilter(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x25dfdbfe, {0x7a, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x40}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x44}}, 0x0) semget$private(0x0, 0x1, 0x5db) listen(0xffffffffffffffff, 0x2) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r7, 0x1, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ptrace(0x10, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x34, 0x3c, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @u32=0x2}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 18.006050967s ago: executing program 2 (id=464): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 17.628410086s ago: executing program 1 (id=467): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240), 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x614, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0xec, 0x128, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x670) getxattr(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) unshare(0x2000400) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17.162994718s ago: executing program 3 (id=476): shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x2) syz_io_uring_setup(0x5390, &(0x7f0000000100)={0x0, 0xa492, 0x80, 0x1, 0xa7}, &(0x7f00000011c0), &(0x7f0000001200)) 17.003005044s ago: executing program 3 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xdc}}, 0x0) 16.915473292s ago: executing program 3 (id=479): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, 0x0) 16.815339338s ago: executing program 3 (id=481): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xffffffdffffffff8]}}) 16.468881322s ago: executing program 3 (id=483): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x37, 0x28, 0x67, 0x0, 0xb, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x6071, 0x0, 0xe7}}}}}}, 0x0) 16.36083446s ago: executing program 3 (id=485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) cachestat(r2, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000380), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001e40)={[0x6, 0xb, 0xfffffffffffffff8, 0x1, 0xcc, 0x800, 0x1d16, 0x0, 0x1, 0x9, 0x11, 0x0, 0x4, 0x262, 0x6, 0x1], 0xeeee8000, 0x10}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) r8 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x14, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000210}, 0xc, &(0x7f0000000240)={&(0x7f0000003940)=@newtaction={0xac, 0x30, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{0x98, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "4822465c203096db95036335eccab4829040a3942e9530e2d80bf0a2cb025b12986aece51de81695581294cb617482d0d2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x34, 0x20, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) futex(0x0, 0x83, 0x0, 0x0, 0x0, 0xffffff01) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) 16.204941194s ago: executing program 0 (id=487): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x24040400) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb0}, 0x0) 15.856324881s ago: executing program 0 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008000", @ANYRES32=0x0, @ANYRES32=r0], 0x24}}, 0x0) 15.78003759s ago: executing program 0 (id=489): r0 = socket$inet_tcp(0x2, 0x1, 0x0) unshare(0xc000600) getsockopt$inet_tcp_buf(r0, 0x6, 0xe, 0x0, &(0x7f0000000180)) 15.597868168s ago: executing program 0 (id=490): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) nanosleep(&(0x7f0000000180)={0x77359400}, 0x0) 15.490088779s ago: executing program 0 (id=491): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000400)=ANY=[], 0xc64) 15.317590498s ago: executing program 0 (id=492): syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1, 0x40}}]}}]}}]}}, 0x0) 1.997939084s ago: executing program 33 (id=467): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000240), 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, &(0x7f0000000280)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x614, 0xec, 0xec, 0x424, 0x0, 0x1cc, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x118, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x80]}}]}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0xff}}}, {{@uncond, 0x0, 0xec, 0x128, 0x0, {}, [@common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x670) getxattr(0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e1c}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) unshare(0x2000400) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.962141703s ago: executing program 34 (id=464): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xc01, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 991.961464ms ago: executing program 35 (id=485): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) cachestat(r2, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000380), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000001e40)={[0x6, 0xb, 0xfffffffffffffff8, 0x1, 0xcc, 0x800, 0x1d16, 0x0, 0x1, 0x9, 0x11, 0x0, 0x4, 0x262, 0x6, 0x1], 0xeeee8000, 0x10}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) r8 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000000)=0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1, 0x14, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000)) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000210}, 0xc, &(0x7f0000000240)={&(0x7f0000003940)=@newtaction={0xac, 0x30, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{0x98, 0x1, [@m_ipt={0x60, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x35, 0x6, "4822465c203096db95036335eccab4829040a3942e9530e2d80bf0a2cb025b12986aece51de81695581294cb617482d0d2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ipt={0x34, 0x20, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x2}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) futex(0x0, 0x83, 0x0, 0x0, 0x0, 0xffffff01) syz_usb_connect(0x4, 0x36, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0) 0s ago: executing program 36 (id=492): syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1, 0x40}}]}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): _1 [ 93.337581][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.364729][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.385067][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.393037][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.421191][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.435401][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.449034][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.474021][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.481429][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.508876][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.522642][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.530520][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.558474][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.595423][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.603217][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.630410][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.696449][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.703740][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.731073][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.781785][ T5870] hsr_slave_0: entered promiscuous mode [ 93.789971][ T5870] hsr_slave_1: entered promiscuous mode [ 93.800223][ T5876] team0: Port device team_slave_0 added [ 93.867768][ T5876] team0: Port device team_slave_1 added [ 93.881217][ T5872] hsr_slave_0: entered promiscuous mode [ 93.888827][ T5872] hsr_slave_1: entered promiscuous mode [ 93.895114][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 93.901533][ T5872] Cannot create hsr debugfs directory [ 93.931825][ T5871] hsr_slave_0: entered promiscuous mode [ 93.939380][ T5871] hsr_slave_1: entered promiscuous mode [ 93.946299][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 93.953317][ T5871] Cannot create hsr debugfs directory [ 93.966140][ T5875] hsr_slave_0: entered promiscuous mode [ 93.973465][ T5875] hsr_slave_1: entered promiscuous mode [ 93.980340][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 93.986654][ T5875] Cannot create hsr debugfs directory [ 94.064554][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.072028][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.100050][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.192318][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.199703][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.227551][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.510193][ T5876] hsr_slave_0: entered promiscuous mode [ 94.517867][ T5876] hsr_slave_1: entered promiscuous mode [ 94.524173][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 94.530419][ T5876] Cannot create hsr debugfs directory [ 94.834023][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.849753][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.869242][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.877801][ T5183] Bluetooth: hci1: command tx timeout [ 94.900898][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.957185][ T5183] Bluetooth: hci2: command tx timeout [ 94.957222][ T5863] Bluetooth: hci0: command tx timeout [ 95.010991][ T5870] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.035615][ T5870] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.050978][ T5870] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.071024][ T5870] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.117391][ T5863] Bluetooth: hci3: command tx timeout [ 95.161528][ T5872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.175946][ T5872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.189245][ T5872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.196831][ T5863] Bluetooth: hci4: command tx timeout [ 95.206386][ T5872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.312809][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.328551][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.344345][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.364099][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.501738][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.563166][ T5876] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.575293][ T5876] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.587567][ T5876] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.602871][ T5876] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.625224][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.666183][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.674411][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.700856][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.714686][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.722091][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.795210][ T5870] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.839084][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.846804][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.859118][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.866415][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.893921][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.991336][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.014997][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.022743][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.053978][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.061391][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.122115][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.155099][ T5870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.220242][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.240595][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.265060][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.272748][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.309623][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.316932][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.363312][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.376271][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.474599][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.513242][ T5875] veth0_vlan: entered promiscuous mode [ 96.528873][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.573107][ T5870] veth0_vlan: entered promiscuous mode [ 96.584526][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.592566][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.610284][ T5875] veth1_vlan: entered promiscuous mode [ 96.650868][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.658888][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.683588][ T5870] veth1_vlan: entered promiscuous mode [ 96.773488][ T5872] veth0_vlan: entered promiscuous mode [ 96.788209][ T5875] veth0_macvtap: entered promiscuous mode [ 96.812113][ T5872] veth1_vlan: entered promiscuous mode [ 96.825088][ T5870] veth0_macvtap: entered promiscuous mode [ 96.850198][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.873022][ T5870] veth1_macvtap: entered promiscuous mode [ 96.884369][ T5875] veth1_macvtap: entered promiscuous mode [ 96.945396][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.957565][ T5863] Bluetooth: hci1: command tx timeout [ 96.970573][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.006492][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.021161][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.037674][ T5863] Bluetooth: hci2: command tx timeout [ 97.037720][ T5183] Bluetooth: hci0: command tx timeout [ 97.077281][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.102071][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.119949][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.131993][ T5872] veth0_macvtap: entered promiscuous mode [ 97.140191][ T5871] veth0_vlan: entered promiscuous mode [ 97.158993][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.168815][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.188475][ T5872] veth1_macvtap: entered promiscuous mode [ 97.197677][ T5183] Bluetooth: hci3: command tx timeout [ 97.217487][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.228261][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.254758][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.265748][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.280225][ T5871] veth1_vlan: entered promiscuous mode [ 97.287998][ T5183] Bluetooth: hci4: command tx timeout [ 97.397922][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.414267][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.429211][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.460796][ T5876] veth0_vlan: entered promiscuous mode [ 97.484016][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.522220][ T24] cfg80211: failed to load regulatory.db [ 97.544798][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.554874][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.554888][ T5876] veth1_vlan: entered promiscuous mode [ 97.614665][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.618394][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.636439][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.646312][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.661453][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.691211][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.704778][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.725507][ T5871] veth0_macvtap: entered promiscuous mode [ 97.764627][ T5871] veth1_macvtap: entered promiscuous mode [ 97.778946][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.789820][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.925286][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.964162][ T5876] veth0_macvtap: entered promiscuous mode [ 97.975240][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.990552][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.001449][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.065908][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.102588][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.109951][ T5876] veth1_macvtap: entered promiscuous mode [ 98.138843][ T43] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.152152][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.162607][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.180884][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.189856][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.203647][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.312697][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.322292][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 98.345191][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.356313][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.366072][ T43] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.388372][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.397052][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.410821][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.438919][ T1343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.457598][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.477601][ T43] usb 4-1: config 0 descriptor?? [ 98.530584][ T1343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.550749][ T1343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.659679][ T1343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.822655][ T5942] usb 4-1: USB disconnect, device number 2 [ 98.959339][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.973863][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.050209][ T5183] Bluetooth: hci1: command tx timeout [ 99.166896][ T5183] Bluetooth: hci2: command tx timeout [ 99.172469][ T5183] Bluetooth: hci0: command tx timeout [ 99.277214][ T5183] Bluetooth: hci3: command tx timeout [ 99.359824][ T5183] Bluetooth: hci4: command tx timeout [ 99.697341][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.776984][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.147168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 100.158045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.557383][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.833035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 100.967179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 101.165352][ T1343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.192745][ T1343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.734746][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804fb9e800: rx timeout, send abort [ 101.808427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.186273][ T5986] syz_tun: entered allmulticast mode [ 102.244878][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88804fb9e800: abort rx timeout. Force session deactivation [ 102.257521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.297798][ T0] NOHZ tick-stop error: local softirq work is pending, handler #3c2!!! [ 102.417384][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.559260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.766932][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.979213][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 104.986428][ T6009] tipc: Started in network mode [ 105.024852][ T6009] tipc: Node identity ee35881a5752, cluster identity 4711 [ 105.037939][ T6009] tipc: Enabled bearer , priority 0 [ 105.066134][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.138822][ T5945] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.159537][ T6011] syzkaller0: entered promiscuous mode [ 105.166325][ T6011] syzkaller0: entered allmulticast mode [ 105.166633][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.223763][ T5945] usb 4-1: Product: syz [ 105.294035][ T5945] usb 4-1: Manufacturer: syz [ 105.329590][ T5945] usb 4-1: SerialNumber: syz [ 105.384504][ T5945] usb 4-1: config 0 descriptor?? [ 105.434622][ T5945] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 105.474588][ T6011] tipc: Resetting bearer [ 105.493673][ T5945] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 105.555318][ T6021] sit1: entered promiscuous mode [ 105.577424][ T6008] tipc: Resetting bearer [ 105.617808][ T6008] tipc: Disabling bearer [ 105.662833][ T6019] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 105.723465][ T6022] veth3: entered promiscuous mode [ 105.736877][ T6022] veth3: entered allmulticast mode [ 106.091640][ T5945] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 106.513840][ T5945] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 106.534530][ T5945] em28xx 4-1:0.0: board has no eeprom [ 107.613139][ T6005] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 107.727499][ T5945] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 107.737662][ T5945] em28xx 4-1:0.0: dvb set to bulk mode. [ 107.768030][ T5965] em28xx 4-1:0.0: Binding DVB extension [ 108.037711][ T5945] usb 4-1: USB disconnect, device number 3 [ 108.111876][ T5945] em28xx 4-1:0.0: Disconnecting em28xx [ 108.121382][ T5965] em28xx 4-1:0.0: Registering input extension [ 108.185176][ T5945] em28xx 4-1:0.0: Closing input extension [ 108.290818][ T5945] em28xx 4-1:0.0: Freeing device [ 108.342895][ T6061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.167093][ T6090] netlink: 'syz.4.31': attribute type 4 has an invalid length. [ 110.220125][ T6090] netlink: 'syz.4.31': attribute type 4 has an invalid length. [ 110.252451][ T6089] tipc: Enabled bearer , priority 0 [ 110.290615][ T6089] syzkaller0: entered promiscuous mode [ 110.346951][ T6089] syzkaller0: entered allmulticast mode [ 110.627761][ T6089] tipc: Resetting bearer [ 110.690430][ T6088] tipc: Resetting bearer [ 110.866431][ T6088] tipc: Disabling bearer [ 111.807303][ T6106] vivid-001: disconnect [ 112.164374][ T6110] tipc: Started in network mode [ 112.175055][ T6110] tipc: Node identity dedf4e4ad3f5, cluster identity 4711 [ 112.190484][ T6110] tipc: Enabled bearer , priority 0 [ 112.205985][ T6110] syzkaller0: entered promiscuous mode [ 112.326873][ T6110] syzkaller0: entered allmulticast mode [ 112.413554][ T6110] tipc: Resetting bearer [ 112.503751][ T6109] tipc: Resetting bearer [ 112.531524][ T6100] vivid-001: reconnect [ 112.651292][ T6109] tipc: Disabling bearer [ 113.172136][ T6115] tipc: Started in network mode [ 113.180223][ T6115] tipc: Node identity 527fa3157cd, cluster identity 4711 [ 113.217546][ T6115] tipc: Enabled bearer , priority 0 [ 113.253207][ T6117] syzkaller0: entered promiscuous mode [ 113.276345][ T6117] syzkaller0: entered allmulticast mode [ 114.145084][ T6127] tipc: Resetting bearer [ 114.205413][ T6114] tipc: Resetting bearer [ 114.291254][ T6114] tipc: Disabling bearer [ 114.363087][ T6120] tipc: Started in network mode [ 114.376869][ T6120] tipc: Node identity 82cae1ee8cb3, cluster identity 4711 [ 114.421419][ T6120] tipc: Enabled bearer , priority 0 [ 114.535188][ T6130] syzkaller0: entered promiscuous mode [ 114.560856][ T6130] syzkaller0: entered allmulticast mode [ 114.647330][ T6132] syzkaller0: entered promiscuous mode [ 114.654090][ T6132] syzkaller0: entered allmulticast mode [ 114.747547][ T6138] tipc: Resetting bearer [ 114.850082][ T6116] tipc: Resetting bearer [ 114.973185][ T6116] tipc: Disabling bearer [ 115.596411][ T31] audit: type=1800 audit(1755010316.976:2): pid=6148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.49" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 115.777336][ T6151] dummy0: entered promiscuous mode [ 115.787049][ T6151] vlan2: entered promiscuous mode [ 116.143345][ T6156] tipc: Enabled bearer , priority 0 [ 116.221802][ T6153] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 116.261699][ T6158] tipc: Enabling of bearer rejected, failed to enable media [ 116.321569][ T6153] tipc: Resetting bearer [ 116.407085][ T6152] tipc: Disabling bearer [ 117.417014][ T5942] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.806863][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 117.829939][ T5942] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 117.874559][ T5942] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 117.999767][ T5942] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.036798][ T5942] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.560968][ T5942] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.586899][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.293948][ T5942] usb 1-1: GET_CAPABILITIES returned 0 [ 119.367169][ T5942] usbtmc 1-1:16.0: can't read capabilities [ 119.415860][ T6180] tipc: Enabled bearer , priority 0 [ 119.607815][ T6180] syzkaller0: entered promiscuous mode [ 119.892366][ T5965] usb 1-1: USB disconnect, device number 2 [ 119.912734][ T6180] syzkaller0: entered allmulticast mode [ 120.367938][ T6191] tipc: Resetting bearer [ 120.453255][ T6179] tipc: Resetting bearer [ 120.608107][ T5914] tipc: Node number set to 3110570010 [ 121.054036][ T6179] tipc: Disabling bearer [ 122.277260][ T5965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 122.326476][ T6236] tipc: Enabled bearer , priority 0 [ 122.450828][ T6244] netlink: 'syz.4.63': attribute type 4 has an invalid length. [ 122.536038][ T5965] usb 1-1: Using ep0 maxpacket: 8 [ 122.605514][ T6243] syzkaller0: entered promiscuous mode [ 122.615237][ T6243] syzkaller0: entered allmulticast mode [ 122.643939][ T5965] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 122.714670][ T5965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 122.733575][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.746218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.773438][ T5965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 122.815415][ T5965] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.837170][ T5965] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 122.853948][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.936228][ T6236] tipc: Resetting bearer [ 123.013846][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.025952][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.161385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.176397][ T5965] usb 1-1: GET_CAPABILITIES returned 0 [ 123.192456][ T6231] tipc: Resetting bearer [ 123.211630][ T5965] usbtmc 1-1:16.0: can't read capabilities [ 123.444131][ T6231] tipc: Disabling bearer [ 123.692350][ T122] usb 1-1: USB disconnect, device number 3 [ 123.989316][ T6255] tipc: Started in network mode [ 124.009293][ T6255] tipc: Node identity 5e8cc57d441f, cluster identity 4711 [ 124.030939][ T6255] tipc: Enabled bearer , priority 0 [ 124.117136][ T6256] syzkaller0: entered promiscuous mode [ 124.125655][ T6256] syzkaller0: entered allmulticast mode [ 124.214320][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 124.305979][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.60'. [ 124.426879][ T6255] tipc: Resetting bearer [ 124.495508][ T6247] tipc: Resetting bearer [ 124.576374][ T6247] tipc: Disabling bearer [ 125.239459][ T6277] netlink: 48 bytes leftover after parsing attributes in process `syz.3.68'. [ 125.581034][ T6271] sctp: failed to load transform for md5: -2 [ 126.107054][ T5965] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 126.650422][ T6291] netlink: 'syz.0.71': attribute type 4 has an invalid length. [ 127.229099][ T5965] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.250529][ T5965] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 127.725675][ T5965] usb 3-1: can't read configurations, error -71 [ 128.438218][ T6319] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 129.248614][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.257868][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.181950][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.225244][ T6298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.225089][ T6332] tipc: Enabled bearer , priority 0 [ 132.456069][ T6218] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.562273][ T6218] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.604316][ T6338] tipc: Resetting bearer [ 132.667609][ T6218] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.054212][ T6328] tipc: Disabling bearer [ 133.081975][ T6218] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.109323][ T6345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.116839][ T6345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.194162][ T6345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 133.243178][ T6345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.250064][ T6345] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.342039][ T6345] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 133.377239][ T6345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.388914][ T6345] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.436379][ T6345] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 133.516650][ T6345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 133.523411][ T6345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.787994][ T6345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 133.839699][ T6345] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 133.846901][ T6345] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 133.880514][ T6345] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 134.277142][ T5914] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 134.577490][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.590732][ T5914] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 134.640130][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.671669][ T6367] sctp: failed to load transform for md5: -2 [ 134.768848][ T5914] usb 2-1: config 0 descriptor?? [ 134.800391][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 135.257611][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.291788][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.411067][ T6380] tipc: Enabled bearer , priority 0 [ 135.437299][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.458102][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 135.475938][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 135.587391][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 135.600549][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.675602][ T6377] syzkaller0: entered promiscuous mode [ 135.683983][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 135.732827][ T5914] pwc: recv_control_msg error -32 req 04 val 1300 [ 135.752460][ T6377] syzkaller0: entered allmulticast mode [ 135.774162][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 135.793168][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 135.814381][ T5914] pwc: recv_control_msg error -32 req 02 val 2100 [ 135.825124][ T5914] pwc: recv_control_msg error -32 req 04 val 1500 [ 135.835854][ T5914] pwc: recv_control_msg error -32 req 02 val 2500 [ 135.837606][ T6377] tipc: Resetting bearer [ 135.845679][ T5914] pwc: recv_control_msg error -32 req 02 val 2400 [ 135.908956][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz.2.84'. [ 135.919815][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 135.965598][ T6376] tipc: Resetting bearer [ 135.983194][ T6376] tipc: Disabling bearer [ 135.983352][ T5914] pwc: recv_control_msg error -32 req 02 val 2600 [ 136.030853][ T5914] pwc: recv_control_msg error -32 req 02 val 2900 [ 136.551347][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 136.768261][ T5914] pwc: Registered as video103. [ 136.876390][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 137.040441][ T5914] usb 2-1: USB disconnect, device number 2 [ 137.276878][ T5183] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.371461][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.561042][ T6429] netlink: 'syz.4.87': attribute type 9 has an invalid length. [ 137.561605][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 137.676924][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 138.007626][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 138.489395][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.496557][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.092718][ T6445] input: syz0 as /devices/virtual/input/input8 [ 139.360742][ T5183] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.371871][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.3.92'. [ 139.437481][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 139.671007][ T6450] veth0: entered promiscuous mode [ 139.680289][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 139.689328][ T6450] batman_adv: batadv0: Adding interface: macvlan2 [ 139.708339][ T6450] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.737507][ T6450] batman_adv: batadv0: Interface activated: macvlan2 [ 139.756892][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.088706][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 140.126781][ T6310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.327630][ T6310] usb 2-1: Using ep0 maxpacket: 32 [ 140.340268][ T6310] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.354854][ T6310] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 140.371159][ T6310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.401270][ T6310] usb 2-1: Product: syz [ 140.466530][ T6310] usb 2-1: Manufacturer: syz [ 140.518455][ T31] audit: type=1326 audit(1755010341.906:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 140.556473][ T6310] usb 2-1: SerialNumber: syz [ 140.588040][ T6310] usb 2-1: config 0 descriptor?? [ 140.696274][ T31] audit: type=1326 audit(1755010341.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 140.867917][ T31] audit: type=1326 audit(1755010341.936:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 140.965094][ T31] audit: type=1326 audit(1755010341.936:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 141.019088][ T6459] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 141.085578][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 141.094970][ T31] audit: type=1326 audit(1755010341.936:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 141.120976][ T31] audit: type=1326 audit(1755010342.046:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 141.160858][ T31] audit: type=1326 audit(1755010342.046:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 141.190800][ T6459] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.199406][ T6459] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.273167][ T31] audit: type=1326 audit(1755010342.116:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 141.346978][ T6459] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.354296][ T6459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.363034][ T6459] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.370397][ T6459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.430212][ T31] audit: type=1326 audit(1755010342.256:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6458 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 141.740069][ T6459] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 141.980525][ T6457] bridge_slave_1: left allmulticast mode [ 141.996041][ T6457] bridge_slave_1: left promiscuous mode [ 142.005586][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.032247][ T31] audit: type=1326 audit(1755010342.336:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6456 comm="syz.3.94" exe="/root/syz-executor" sig=0 arch=40000003 syscall=284 compat=1 ip=0xf7f31539 code=0x7ffc0000 [ 142.279041][ T6457] bridge_slave_0: left allmulticast mode [ 142.321049][ T6457] bridge_slave_0: left promiscuous mode [ 142.345375][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.415832][ T6457] bond0: (slave bridge0): Releasing backup interface [ 142.522326][ T6467] warning: `syz.0.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.549921][ T6310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 142.739450][ T6310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.782680][ T6310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.855134][ T6480] netlink: 'syz.3.99': attribute type 3 has an invalid length. [ 142.863763][ T6310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.930285][ T6310] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.943058][ T6310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.968724][ T6310] usb 3-1: config 0 descriptor?? [ 143.223466][ T6485] netlink: 196 bytes leftover after parsing attributes in process `syz.0.100'. [ 143.413926][ T6310] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 144.251448][ T5922] usb 3-1: USB disconnect, device number 4 [ 144.410071][ T6491] netlink: 48 bytes leftover after parsing attributes in process `syz.3.101'. [ 144.468662][ T5914] usb 2-1: USB disconnect, device number 3 [ 144.615403][ T6486] fido_id[6486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 147.231038][ T6310] IPVS: starting estimator thread 0... [ 147.356975][ T6524] IPVS: using max 36 ests per chain, 86400 per kthread [ 147.776771][ T5929] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.172629][ T6310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.209841][ T5929] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 148.263007][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.369384][ T6310] usb 3-1: Using ep0 maxpacket: 8 [ 148.424347][ T6310] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.432776][ T5929] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.444631][ T6310] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.444666][ T6310] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 148.444692][ T6310] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.444739][ T6310] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.444764][ T6310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.701449][ T6310] usb 3-1: GET_CAPABILITIES returned 0 [ 148.707671][ T6310] usbtmc 3-1:16.0: can't read capabilities [ 148.954718][ T6310] usb 3-1: USB disconnect, device number 5 [ 148.954934][ T5929] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 149.172926][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.541477][ T5929] usb 5-1: config 0 descriptor?? [ 150.159197][ T5929] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 150.282705][ T5929] dragonrise 0003:0079:0006.0002: unknown main item tag 0x0 [ 150.451756][ T5929] dragonrise 0003:0079:0006.0002: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 150.557052][ T5929] dragonrise 0003:0079:0006.0002: no inputs found [ 150.637321][ T5929] dragonrise 0003:0079:0006.0002: force feedback init failed [ 150.669148][ T6551] netlink: 48 bytes leftover after parsing attributes in process `syz.1.114'. [ 152.258075][ T6571] mmap: syz.2.117 (6571) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.333186][ T6305] usb 5-1: USB disconnect, device number 2 [ 155.886223][ T6606] netlink: 48 bytes leftover after parsing attributes in process `syz.0.120'. [ 156.767627][ T6616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.122'. [ 157.683567][ T6623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.123'. [ 157.764236][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 157.828095][ T6626] netlink: 'syz.3.123': attribute type 10 has an invalid length. [ 157.911192][ T6626] bridge0: port 1(team0) entered blocking state [ 157.938753][ T6626] bridge0: port 1(team0) entered disabled state [ 157.982383][ T6626] team0: entered allmulticast mode [ 158.060307][ T6626] team_slave_0: entered allmulticast mode [ 158.076970][ T6626] team_slave_1: entered allmulticast mode [ 158.098643][ T6626] team_slave_0: entered promiscuous mode [ 158.104798][ T6626] team_slave_1: entered promiscuous mode [ 158.166459][ T6626] bridge0: port 1(team0) entered blocking state [ 158.173876][ T6626] bridge0: port 1(team0) entered forwarding state [ 159.087745][ T5914] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 159.137165][ T5929] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 159.421111][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 159.447052][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 159.494147][ T5914] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.509001][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.555568][ T5914] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.573920][ T5914] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.598795][ T5914] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.637590][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.037515][ T5929] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.082757][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.123436][ T5929] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.283805][ T5929] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.298578][ T5929] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 160.309832][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.340055][ T5914] usb 4-1: GET_CAPABILITIES returned 0 [ 160.346149][ T5914] usbtmc 4-1:16.0: can't read capabilities [ 160.581002][ T6310] usb 4-1: USB disconnect, device number 4 [ 160.939872][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.126'. [ 160.956815][ T5929] usb 5-1: usb_control_msg returned -71 [ 160.974066][ T5929] usbtmc 5-1:16.0: can't read capabilities [ 161.021172][ T5929] usb 5-1: USB disconnect, device number 3 [ 162.556794][ T6310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.127867][ T6310] usb 1-1: Using ep0 maxpacket: 8 [ 163.292544][ T6310] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 163.322006][ T6310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 163.342105][ T6310] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.379638][ T6310] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.490963][ T6310] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.520598][ T6310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.827285][ T5862] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.891755][ T6669] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 164.011270][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 164.033162][ T6310] usb 1-1: GET_CAPABILITIES returned 0 [ 164.068374][ T5862] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 164.079132][ T5862] usb 3-1: config 0 has no interface number 0 [ 164.087928][ T5862] usb 3-1: config 0 interface 184 has no altsetting 0 [ 164.105305][ T5862] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 164.119319][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.143347][ T6310] usbtmc 1-1:16.0: can't read capabilities [ 164.200093][ T5862] usb 3-1: Product: syz [ 164.286773][ T5862] usb 3-1: Manufacturer: syz [ 164.310278][ T5862] usb 3-1: SerialNumber: syz [ 164.390857][ T6680] netlink: 48 bytes leftover after parsing attributes in process `syz.4.134'. [ 164.428320][ T5862] usb 3-1: config 0 descriptor?? [ 164.473306][ T6671] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 164.662993][ T6679] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.665449][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 164.799909][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'. [ 164.842554][ T5862] smsc75xx v1.0.0 [ 164.846548][ T5862] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 164.859817][ T6211] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 165.075368][ T5862] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22 [ 165.320503][ T6671] veth3: entered promiscuous mode [ 167.621690][ T5922] usb 3-1: USB disconnect, device number 6 [ 167.723653][ T6310] usb 1-1: USB disconnect, device number 4 [ 168.396566][ T6711] process 'syz.4.138' launched './file1' with NULL argv: empty string added [ 168.851432][ T5862] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 169.301496][ T6708] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 169.367723][ T6708] batadv0: entered promiscuous mode [ 169.504842][ T6708] vlan2: entered promiscuous mode [ 169.741171][ T5862] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.752446][ T5862] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 169.827902][ T5862] usb 1-1: can't read configurations, error -71 [ 170.168325][ T6716] Zero length message leads to an empty skb [ 170.232539][ T6718] netlink: 120 bytes leftover after parsing attributes in process `syz.4.143'. [ 170.842554][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 170.955516][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.147'. [ 171.146894][ T6305] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 171.226861][ T5862] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 171.378578][ T6743] netlink: 48 bytes leftover after parsing attributes in process `syz.4.148'. [ 171.432151][ T6305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.444080][ T6305] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 171.480521][ T6305] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 171.494568][ T6305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.505751][ T6305] usb 2-1: Product: syz [ 171.514879][ T6305] usb 2-1: Manufacturer: syz [ 171.556174][ T6305] usb 2-1: SerialNumber: syz [ 171.850463][ T6305] usb 2-1: config 0 descriptor?? [ 172.197674][ T5862] usb 1-1: Using ep0 maxpacket: 8 [ 172.445015][ T5862] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.556405][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.597465][ T5862] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.735647][ T5862] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.750988][ T5922] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 173.141100][ T5862] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.168487][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.255047][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 174.127031][ T6752] syz.4.150 uses obsolete (PF_INET,SOCK_PACKET) [ 174.447541][ T5914] usb 2-1: USB disconnect, device number 4 [ 174.650545][ T5922] usb 3-1: device descriptor read/all, error -71 [ 174.805775][ T6756] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.118999][ T6305] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 175.256065][ T5862] usb 1-1: can't set config #16, error -71 [ 175.265777][ T5862] usb 1-1: USB disconnect, device number 7 [ 175.313043][ T6305] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.354250][ T6305] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 175.424591][ T6305] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 175.431278][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 175.532513][ T6305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.652442][ T43] usb 5-1: config 0 has no interfaces? [ 175.668062][ T43] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.669614][ T6305] usb 2-1: config 0 descriptor?? [ 175.716219][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.729348][ T6305] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 175.744743][ T6305] dvb-usb: bulk message failed: -22 (3/0) [ 175.783037][ T6305] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 175.809330][ T6305] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 175.838663][ T6305] usb 2-1: media controller created [ 175.838665][ T43] usb 5-1: Product: syz [ 176.116778][ T43] usb 5-1: Manufacturer: syz [ 176.120727][ T6305] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.121891][ T43] usb 5-1: SerialNumber: syz [ 176.189496][ T43] usb 5-1: config 0 descriptor?? [ 176.278217][ T6305] dvb-usb: bulk message failed: -22 (6/0) [ 176.304968][ T6305] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 176.449325][ T6305] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 176.605364][ T6305] dvb-usb: schedule remote query interval to 150 msecs. [ 176.613458][ T6305] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 176.768602][ T6310] dvb-usb: bulk message failed: -22 (1/0) [ 176.774643][ T6310] dvb-usb: error while querying for an remote control event. [ 177.068257][ T6305] dvb-usb: bulk message failed: -22 (1/0) [ 177.074249][ T6305] dvb-usb: error while querying for an remote control event. [ 177.077245][ T43] usb 2-1: USB disconnect, device number 5 [ 177.135372][ T6758] [U]  [ 177.908803][ T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 178.472657][ T6305] usb 5-1: USB disconnect, device number 4 [ 178.496829][ T6310] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 178.747667][ T6776] vlan2: entered promiscuous mode [ 178.752881][ T6776] batadv0: entered promiscuous mode [ 179.062522][ T6310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.149228][ T6310] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 179.212212][ T6310] usb 2-1: can't read configurations, error -71 [ 179.321928][ T6788] netlink: 48 bytes leftover after parsing attributes in process `syz.3.159'. [ 182.986789][ T6308] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 183.156910][ T6308] usb 3-1: Using ep0 maxpacket: 8 [ 183.179508][ T6308] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.432007][ T6308] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.496935][ T6305] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 183.878060][ T6308] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.978702][ T6308] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.996925][ T6305] usb 4-1: Using ep0 maxpacket: 16 [ 184.029800][ T6305] usb 4-1: config 0 has no interfaces? [ 184.077060][ T6308] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.089403][ T6308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.104898][ T6305] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 184.167597][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.534794][ T6305] usb 4-1: Product: syz [ 184.543910][ T6305] usb 4-1: Manufacturer: syz [ 184.555725][ T6305] usb 4-1: SerialNumber: syz [ 184.745803][ T6305] usb 4-1: config 0 descriptor?? [ 185.046861][ T6308] usb 3-1: GET_CAPABILITIES returned 0 [ 185.167110][ T6308] usbtmc 3-1:16.0: can't read capabilities [ 185.664413][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.163'. [ 185.808373][ T6308] usb 3-1: USB disconnect, device number 9 [ 187.708794][ T6308] usb 4-1: USB disconnect, device number 5 [ 187.856781][ T5922] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 188.036501][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 188.069336][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 188.087989][ T5922] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 188.145818][ T5922] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.230798][ T5922] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 188.342527][ T5922] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 188.352245][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.362079][ T5922] usb 5-1: Product: syz [ 188.603287][ T6860] vti0: entered promiscuous mode [ 188.616927][ T43] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 188.628111][ T6860] vti0: entered allmulticast mode [ 188.667250][ T5922] usb 5-1: Manufacturer: syz [ 188.676342][ T5922] usb 5-1: SerialNumber: syz [ 188.796939][ T5862] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 188.906759][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 188.940745][ T43] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.024276][ T6845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.048646][ T6863] netlink: 'syz.1.168': attribute type 25 has an invalid length. [ 189.068954][ T6845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.098786][ T5862] usb 3-1: Using ep0 maxpacket: 8 [ 189.212602][ T43] usb 1-1: config 0 has no interface number 0 [ 189.376770][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 189.422403][ T6863] netlink: 184 bytes leftover after parsing attributes in process `syz.1.168'. [ 189.436068][ T43] usb 1-1: config 0 interface 184 has no altsetting 0 [ 189.486415][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 189.545525][ T5862] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.559852][ T5862] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.593526][ T5862] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 189.594519][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.625520][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.680994][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.788925][ T43] usb 1-1: Product: syz [ 189.814956][ T43] usb 1-1: Manufacturer: syz [ 189.839997][ T43] usb 1-1: SerialNumber: syz [ 189.869488][ T43] usb 1-1: config 0 descriptor?? [ 189.932700][ T43] smsc75xx v1.0.0 [ 189.948584][ T43] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 190.026144][ T43] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 190.142447][ T5862] usb 3-1: GET_CAPABILITIES returned 0 [ 190.148718][ T5862] usbtmc 3-1:16.0: can't read capabilities [ 190.393735][ T5862] usb 3-1: USB disconnect, device number 10 [ 190.827042][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.171'. [ 191.948675][ T5922] usb 5-1: 0:2 : does not exist [ 192.140289][ T5922] usb 5-1: USB disconnect, device number 5 [ 192.230919][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.475823][ T6308] usb 1-1: USB disconnect, device number 8 [ 194.506804][ T5862] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 194.686763][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 194.701796][ T5862] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.713307][ T5862] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 194.726002][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.934980][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.954223][ T5862] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.964843][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.996091][ T5862] usb 4-1: Product: syz [ 195.083193][ T5862] usb 4-1: Manufacturer: syz [ 195.096703][ T5862] usb 4-1: SerialNumber: syz [ 195.555160][ T6890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.572514][ T6890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.629270][ T6907] netlink: 'syz.4.179': attribute type 3 has an invalid length. [ 198.910904][ T5862] usb 4-1: 0:2 : does not exist [ 199.117899][ T5862] usb 4-1: USB disconnect, device number 6 [ 199.314637][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.733657][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 199.939987][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.948056][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.006777][ T5945] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 203.645017][ T5945] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 203.662908][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.694462][ T5945] usb 3-1: Product: syz [ 203.710632][ T5945] usb 3-1: Manufacturer: syz [ 203.729079][ T5945] usb 3-1: SerialNumber: syz [ 203.800772][ T5945] usb 3-1: config 0 descriptor?? [ 204.277938][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.353244][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.711464][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.186'. [ 205.144456][ T6947] batadv0: entered promiscuous mode [ 205.297406][ T6947] macvtap1: entered promiscuous mode [ 205.303741][ T6947] macvtap1: entered allmulticast mode [ 205.313189][ T6947] batadv0: entered allmulticast mode [ 205.324720][ T6947] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 205.456505][ T6965] batadv0: left allmulticast mode [ 205.465398][ T6965] batadv0: left promiscuous mode [ 205.996837][ T5862] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 206.176936][ T5862] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 206.210922][ T5862] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 206.227290][ T5862] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 206.246980][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.632323][ T5945] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 206.647400][ T5945] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 206.734789][ T5945] usb 3-1: USB disconnect, device number 11 [ 207.613139][ T6985] netlink: 'syz.1.204': attribute type 10 has an invalid length. [ 207.715719][ T6985] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 208.638787][ T5929] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 208.875112][ T7002] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 208.922442][ T5862] usb 4-1: USB disconnect, device number 7 [ 208.938360][ T5929] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 209.001571][ T5929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 209.026742][ T7000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.197'. [ 209.141779][ T5929] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 209.197864][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 209.220983][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.270153][ T5929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 209.603739][ T5929] usb 3-1: invalid MIDI out EP 0 [ 210.233811][ T5929] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 210.500964][ T5929] usb 3-1: USB disconnect, device number 12 [ 210.996749][ T5922] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.246801][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 211.570243][ T5922] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.706838][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.706878][ T5922] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.706903][ T5922] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.706961][ T5922] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.706987][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.677211][ T5922] usb 5-1: GET_CAPABILITIES returned 0 [ 212.683231][ T5922] usbtmc 5-1:16.0: can't read capabilities [ 213.518009][ T5945] usb 5-1: USB disconnect, device number 6 [ 214.299791][ T7042] netlink: 28 bytes leftover after parsing attributes in process `syz.4.200'. [ 216.617182][ T7056] PKCS7: Unknown OID: [5] (bad) [ 216.622293][ T7056] PKCS7: Only support pkcs7_signedData type [ 217.376883][ T5945] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 217.578018][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 217.663403][ T5945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 9 [ 217.680377][ T5945] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 217.727779][ T5945] usb 2-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 218.106495][ T5945] usb 2-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 218.234698][ T5945] usb 2-1: config 1 interface 0 has no altsetting 0 [ 218.846743][ T6308] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 219.134919][ T6308] usb 1-1: config 0 has no interfaces? [ 219.354037][ T5945] usb 2-1: string descriptor 0 read error: -71 [ 219.406775][ T6310] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.434074][ T5945] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 219.773432][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.794841][ T6308] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 219.858299][ T6308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.868719][ T5945] usb 2-1: can't set config #1, error -71 [ 219.876099][ T6310] usb 5-1: Using ep0 maxpacket: 32 [ 219.887827][ T6308] usb 1-1: Product: syz [ 219.892857][ T6308] usb 1-1: Manufacturer: syz [ 219.898417][ T5945] usb 2-1: USB disconnect, device number 8 [ 219.919718][ T6308] usb 1-1: SerialNumber: syz [ 219.963484][ T6308] usb 1-1: config 0 descriptor?? [ 220.038362][ T6310] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.049264][ T6310] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.129816][ T6310] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.158737][ T6310] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.173624][ T6310] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.196009][ T6310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.259517][ T6310] usb 5-1: Product: syz [ 220.265606][ T6310] usb 5-1: Manufacturer: syz [ 220.271086][ T6310] usb 5-1: SerialNumber: syz [ 220.547038][ T6305] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 221.506771][ T6305] usb 4-1: Using ep0 maxpacket: 16 [ 221.569460][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.619803][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.019894][ T6308] usb 1-1: USB disconnect, device number 9 [ 223.372393][ T7099] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'. [ 224.741927][ T6310] usb 5-1: 0:2 : does not exist [ 224.872708][ T6305] usb 4-1: unable to get BOS descriptor or descriptor too short [ 224.883704][ T6310] usb 5-1: USB disconnect, device number 7 [ 224.907925][ T6305] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 224.920880][ T6305] usb 4-1: can't read configurations, error -71 [ 225.057654][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.456891][ T6305] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 226.854072][ T6305] usb 4-1: Using ep0 maxpacket: 16 [ 226.978833][ T6305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 227.004643][ T6305] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 227.014981][ T6305] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.037055][ T6305] usb 4-1: Product: syz [ 227.056318][ T6305] usb 4-1: Manufacturer: syz [ 227.076609][ T6305] usb 4-1: SerialNumber: syz [ 227.092073][ T6305] usb 4-1: config 0 descriptor?? [ 227.152338][ T6305] hub 4-1:0.0: bad descriptor, ignoring hub [ 227.195881][ T6305] hub 4-1:0.0: probe with driver hub failed with error -5 [ 227.212509][ T6305] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 230.162295][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 230.747606][ T6308] usb 4-1: USB disconnect, device number 10 [ 235.093621][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.214717][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.686776][ T6305] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 236.920405][ T6305] usb 3-1: config 0 has no interfaces? [ 236.950922][ T6305] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 236.968939][ T6305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.998931][ T6305] usb 3-1: Product: syz [ 237.003487][ T6305] usb 3-1: Manufacturer: syz [ 237.043098][ T6305] usb 3-1: SerialNumber: syz [ 237.151535][ T6305] usb 3-1: config 0 descriptor?? [ 237.235528][ T7209] fuse: Bad value for 'fd' [ 239.438570][ T7214] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 239.458870][ T7214] fuse: Unknown parameter '0x0000000000000008' [ 239.469865][ T7214] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 240.121696][ T7220] PKCS7: Unknown OID: [5] (bad) [ 240.126904][ T7220] PKCS7: Only support pkcs7_signedData type [ 240.566468][ T7222] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 240.573517][ T7222] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.878660][ T7225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 240.907587][ T7226] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17) [ 240.914420][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 240.948567][ T7222] vhci_hcd vhci_hcd.0: Device attached [ 240.983851][ T6305] usb 3-1: USB disconnect, device number 13 [ 240.988376][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 241.022538][ T7222] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 241.029554][ T7222] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.144621][ T7222] vhci_hcd vhci_hcd.0: Device attached [ 241.150729][ T5945] vhci_hcd: vhci_device speed not set [ 241.171294][ T7225] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(19) [ 241.178666][ T7225] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.252311][ T7225] vhci_hcd vhci_hcd.0: Device attached [ 241.264078][ T7226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 241.716898][ T5945] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 241.730663][ T7222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 242.590017][ T7222] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 243.192529][ T7227] vhci_hcd: connection closed [ 243.193528][ T7223] vhci_hcd: connection reset by peer [ 243.207331][ T7230] vhci_hcd: connection closed [ 243.246854][ T7236] vhci_hcd: connection closed [ 243.252079][ T49] vhci_hcd: stop threads [ 243.268783][ T49] vhci_hcd: release socket [ 243.281152][ T49] vhci_hcd: disconnect device [ 243.328299][ T49] vhci_hcd: stop threads [ 243.332877][ T49] vhci_hcd: release socket [ 243.366439][ T49] vhci_hcd: disconnect device [ 243.397343][ T49] vhci_hcd: stop threads [ 243.402037][ T49] vhci_hcd: release socket [ 243.483783][ T49] vhci_hcd: disconnect device [ 243.504324][ T49] vhci_hcd: stop threads [ 243.536875][ T49] vhci_hcd: release socket [ 243.575225][ T49] vhci_hcd: disconnect device [ 245.533314][ T7274] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 245.544545][ T7274] team_slave_0: left promiscuous mode [ 245.551402][ T7274] team_slave_1: left promiscuous mode [ 245.566239][ T7274] bridge0: port 1(team0) entered disabled state [ 245.575442][ T7274] team0: left allmulticast mode [ 245.580801][ T7274] team_slave_0: left allmulticast mode [ 245.633419][ T7274] team_slave_1: left allmulticast mode [ 245.642031][ T7274] bridge0: port 1(team0) entered disabled state [ 245.746935][ T6310] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 245.822386][ T7274] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.855473][ T7274] bond0: (slave team0): Enslaving as an active interface with an up link [ 246.118676][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.246'. [ 246.557767][ T6310] usb 1-1: Using ep0 maxpacket: 32 [ 246.568361][ T6310] usb 1-1: unable to get BOS descriptor or descriptor too short [ 246.582111][ T6310] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 246.603127][ T6310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.651414][ T6310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.892458][ T6310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 246.903876][ T6310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.912486][ T6310] usb 1-1: Product: syz [ 246.917102][ T6310] usb 1-1: Manufacturer: syz [ 246.963528][ T5945] vhci_hcd: vhci_device speed not set [ 247.034450][ T6310] usb 1-1: SerialNumber: syz [ 247.517380][ T7282] binder: 7281:7282 ioctl 4001af72 80001140 returned -22 [ 248.071496][ T6310] usb 1-1: can't set config #1, error -71 [ 248.190817][ T6310] usb 1-1: USB disconnect, device number 10 [ 248.317149][ T5929] usb usb40-port3: attempt power cycle [ 248.366963][ T5922] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 248.445921][ T7296] netlink: 48 bytes leftover after parsing attributes in process `syz.0.251'. [ 248.628718][ T5922] usb 4-1: config 0 has no interfaces? [ 248.653768][ T5922] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 248.669516][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.366997][ T5922] usb 4-1: Product: syz [ 249.375254][ T5922] usb 4-1: Manufacturer: syz [ 249.398508][ T5922] usb 4-1: SerialNumber: syz [ 249.438227][ T5922] usb 4-1: config 0 descriptor?? [ 249.889777][ T5929] usb usb40-port3: unable to enumerate USB device [ 250.917022][ T5929] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 251.076854][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 251.087001][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 251.156956][ T5929] usb 3-1: unable to get BOS descriptor or descriptor too short [ 251.241742][ T5929] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 251.259747][ T43] usb 1-1: config 0 has no interfaces? [ 251.281211][ T43] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 251.311731][ T5929] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.526809][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.552074][ T43] usb 1-1: Product: syz [ 251.558535][ T5929] usb 3-1: config 1 interface 0 has no altsetting 0 [ 251.591729][ T43] usb 1-1: Manufacturer: syz [ 251.625225][ T5929] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 251.635336][ T43] usb 1-1: SerialNumber: syz [ 251.653150][ T7318] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 251.659900][ T7318] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 251.669455][ T43] usb 1-1: config 0 descriptor?? [ 251.674543][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.700104][ T5929] usb 3-1: Product: syz [ 251.712920][ T5929] usb 3-1: Manufacturer: syz [ 251.721153][ T5929] usb 3-1: SerialNumber: syz [ 251.737871][ T7318] vhci_hcd vhci_hcd.0: Device attached [ 251.793359][ T7318] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(13) [ 251.800104][ T7318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 251.833887][ T7319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 251.842587][ T7318] vhci_hcd vhci_hcd.0: Device attached [ 251.864090][ T7324] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(15) [ 251.870773][ T7324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 251.879920][ T7324] vhci_hcd vhci_hcd.0: Device attached [ 251.916899][ T43] vhci_hcd: vhci_device speed not set [ 251.928046][ T7318] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(18) [ 251.935156][ T7318] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 251.991051][ T43] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 252.041921][ T7319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.083342][ T7319] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.359006][ T7324] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 252.402142][ T7318] vhci_hcd vhci_hcd.0: Device attached [ 252.427568][ T5945] usb 4-1: USB disconnect, device number 11 [ 252.775986][ T7327] vhci_hcd: connection closed [ 252.777306][ T7320] vhci_hcd: connection reset by peer [ 252.777619][ T7325] vhci_hcd: connection closed [ 252.788462][ T7322] vhci_hcd: connection closed [ 252.797688][ T6221] vhci_hcd: stop threads [ 252.842920][ T5945] IPVS: starting estimator thread 0... [ 252.880050][ T6221] vhci_hcd: release socket [ 252.888139][ T6221] vhci_hcd: disconnect device [ 252.893605][ T6221] vhci_hcd: stop threads [ 252.901338][ T6221] vhci_hcd: release socket [ 252.906396][ T6221] vhci_hcd: disconnect device [ 252.925070][ T6221] vhci_hcd: stop threads [ 252.943900][ T6221] vhci_hcd: release socket [ 252.955559][ T6221] vhci_hcd: disconnect device [ 252.968691][ T6221] vhci_hcd: stop threads [ 252.989935][ T6221] vhci_hcd: release socket [ 253.031745][ T6221] vhci_hcd: disconnect device [ 253.087341][ T7333] IPVS: using max 37 ests per chain, 88800 per kthread [ 254.836935][ T5922] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 254.936276][ T5922] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 255.001915][ T24] usb 1-1: USB disconnect, device number 11 [ 255.081160][ T7344] fuse: Bad value for 'fd' [ 255.496245][ T7348] fido_id[7348]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 256.937549][ T5929] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 257.005907][ T5929] usb 3-1: USB disconnect, device number 14 [ 257.116768][ T43] vhci_hcd: vhci_device speed not set [ 257.337645][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 257.357380][ T7371] netlink: 48 bytes leftover after parsing attributes in process `syz.2.264'. [ 257.536830][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 257.553881][ T24] usb 4-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 257.594226][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64256, setting to 64 [ 257.685753][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 258.167916][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 258.177970][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.198049][ T24] usb 4-1: Product: syz [ 258.202644][ T24] usb 4-1: Manufacturer: syz [ 258.211464][ T7375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.236899][ T24] usb 4-1: SerialNumber: syz [ 258.281795][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 258.318056][ T24] usbtest 4-1:1.0: couldn't get endpoints, -22 [ 258.638832][ T24] usbtest 4-1:1.0: probe with driver usbtest failed with error -22 [ 258.749955][ T7365] loop2: detected capacity change from 0 to 7 [ 258.765436][ T5862] usb usb42-port2: attempt power cycle [ 258.860447][ T6308] usb 4-1: USB disconnect, device number 12 [ 259.250687][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.266'. [ 259.378991][ T5862] usb usb42-port2: unable to enumerate USB device [ 260.377128][ T6308] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 260.666754][ T6308] usb 3-1: Using ep0 maxpacket: 16 [ 261.377672][ T7389] netlink: 32 bytes leftover after parsing attributes in process `syz.4.267'. [ 261.448890][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.455433][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.610601][ T6308] usb 3-1: unable to get BOS descriptor or descriptor too short [ 261.666471][ T6308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.711500][ T6308] usb 3-1: config 0 has no interfaces? [ 261.741134][ T6308] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 261.750967][ T6308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.761060][ T6308] usb 3-1: Product: syz [ 261.765918][ T6308] usb 3-1: Manufacturer: syz [ 261.872738][ T6308] usb 3-1: SerialNumber: syz [ 261.927448][ T6308] usb 3-1: config 0 descriptor?? [ 263.587963][ T6308] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 264.106787][ T6308] usb 4-1: Using ep0 maxpacket: 16 [ 264.120684][ T6308] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.147219][ T6308] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 264.213553][ T6308] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 264.236734][ T6308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.263172][ T6308] usb 4-1: Product: syz [ 264.276723][ T6308] usb 4-1: Manufacturer: syz [ 264.281847][ T6308] usb 4-1: SerialNumber: syz [ 264.308601][ T6308] usb 4-1: config 0 descriptor?? [ 266.267604][ T6310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 266.460548][ T5862] usb 3-1: USB disconnect, device number 15 [ 266.577890][ T6310] usb 2-1: Using ep0 maxpacket: 8 [ 266.629694][ T6310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.663138][ T6310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.711350][ T6308] usb 4-1: USB disconnect, device number 13 [ 266.754987][ T6310] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.805001][ T6310] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.933551][ T6310] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.970831][ T6310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.339776][ T6310] usb 2-1: usb_control_msg returned -71 [ 267.352044][ T6310] usbtmc 2-1:16.0: can't read capabilities [ 267.374704][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 267.406876][ T6308] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 267.546491][ T7436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 267.553333][ T6310] usb 2-1: USB disconnect, device number 9 [ 268.026039][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.273'. [ 268.080195][ T6308] usb 4-1: Using ep0 maxpacket: 8 [ 268.225229][ T6308] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.456901][ T6308] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.488326][ T6308] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 268.515169][ T6308] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.662164][ T6308] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 268.682473][ T6308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.952077][ T6308] usb 4-1: GET_CAPABILITIES returned 0 [ 268.959507][ T6308] usbtmc 4-1:16.0: can't read capabilities [ 269.175940][ T6308] usb 4-1: USB disconnect, device number 14 [ 269.289940][ T43] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 269.453379][ T7445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.275'. [ 269.577366][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 270.661430][ T7467] vti0: entered promiscuous mode [ 270.667230][ T7467] vti0: entered allmulticast mode [ 272.945119][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.959326][ T43] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 273.044058][ T43] usb 5-1: can't read configurations, error -71 [ 274.897530][ T6308] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 274.919820][ T7504] netlink: 'syz.0.288': attribute type 13 has an invalid length. [ 274.928222][ T7504] netlink: 'syz.0.288': attribute type 17 has an invalid length. [ 275.067687][ T6308] usb 3-1: Using ep0 maxpacket: 16 [ 275.078524][ T6308] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.133456][ T6308] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.290058][ T7504] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.359272][ T6308] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 275.386806][ T6308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.469679][ T6308] usb 3-1: Product: syz [ 275.474155][ T6308] usb 3-1: Manufacturer: syz [ 275.490793][ T6308] usb 3-1: SerialNumber: syz [ 275.549685][ T6308] usb 3-1: config 0 descriptor?? [ 278.464199][ T7523] netlink: 'syz.0.291': attribute type 1 has an invalid length. [ 278.566365][ T24] usb 3-1: USB disconnect, device number 16 [ 278.605549][ T7524] binder: 7510:7524 ioctl 4018620d 0 returned -22 [ 280.036889][ T5922] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 280.266899][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 280.282860][ T5922] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 280.291781][ T5922] usb 3-1: config 0 has no interface number 0 [ 280.304321][ T5922] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 280.314360][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.326712][ T5922] usb 3-1: Product: syz [ 280.331144][ T5922] usb 3-1: Manufacturer: syz [ 280.336243][ T5922] usb 3-1: SerialNumber: syz [ 280.412380][ T5922] usb 3-1: config 0 descriptor?? [ 281.116903][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 281.507004][ T5922] peak_usb 3-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 281.546843][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 281.662505][ T5922] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 281.680879][ T5922] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 281.726288][ T5922] peak_usb 3-1:0.56 can0: sending command failure: -22 [ 281.793702][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.862498][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 282.322080][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 282.341433][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 282.372931][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.514337][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.589074][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.595185][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.797604][ T5922] peak_usb 3-1:0.56: probe with driver peak_usb failed with error -22 [ 284.209320][ T7509] syz.3.289 (7509): drop_caches: 2 [ 284.623375][ T43] usb 1-1: usb_control_msg returned -71 [ 284.646311][ T43] usbtmc 1-1:16.0: can't read capabilities [ 284.666867][ T43] usb 1-1: USB disconnect, device number 12 [ 285.506487][ T7563] input: syz1 as /devices/virtual/input/input12 [ 285.549437][ T5862] usb 3-1: USB disconnect, device number 17 [ 286.408759][ T7563] netlink: 'syz.3.300': attribute type 4 has an invalid length. [ 286.417342][ T7563] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.300'. [ 290.960125][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 291.190294][ T7612] program syz.1.309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.323230][ T7630] capability: warning: `syz.3.313' uses 32-bit capabilities (legacy support in use) [ 292.479316][ T5945] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 292.856783][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 293.492881][ T5945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 293.983955][ T5945] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 294.094950][ T5945] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 294.176100][ T5945] usb 1-1: config 1 interface 0 has no altsetting 0 [ 294.755196][ T5945] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 294.764891][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.779854][ T5945] usb 1-1: Product: syz [ 294.785388][ T5945] usb 1-1: Manufacturer: syz [ 294.791242][ T5945] usb 1-1: SerialNumber: syz [ 297.468246][ T5945] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 297.580988][ T5945] usb 1-1: USB disconnect, device number 13 [ 298.053659][ T3522] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 298.246755][ T3522] usb 5-1: Using ep0 maxpacket: 16 [ 298.265236][ T3522] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.297051][ T3522] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 298.329438][ T3522] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.794244][ T3522] usb 5-1: config 0 descriptor?? [ 299.267366][ T5922] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 299.295582][ T3522] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 299.327848][ T3522] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 299.335404][ T3522] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 299.459104][ T3522] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 299.512976][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 299.539828][ T5922] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 299.548811][ T5922] usb 1-1: config 0 has no interface number 0 [ 299.565345][ T3522] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 299.565387][ T5922] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 299.609639][ T3522] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 299.676133][ T5922] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 299.736668][ T5922] usb 1-1: config 0 interface 126 has no altsetting 0 [ 299.781938][ T5922] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 299.791906][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.800937][ T5922] usb 1-1: Product: syz [ 299.816880][ T5922] usb 1-1: Manufacturer: syz [ 299.833647][ T5922] usb 1-1: SerialNumber: syz [ 299.872163][ T5922] usb 1-1: config 0 descriptor?? [ 299.900807][ T7675] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 299.914710][ T7675] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 301.576940][ T3522] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 301.909279][ T3522] usb 3-1: config 0 has no interfaces? [ 302.013561][ T3522] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 302.151753][ T3522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.436842][ T3522] usb 3-1: Product: syz [ 302.446434][ T5862] usb 5-1: USB disconnect, device number 10 [ 302.483421][ T3522] usb 3-1: Manufacturer: syz [ 302.595204][ T3522] usb 3-1: SerialNumber: syz [ 302.697810][ T3522] usb 3-1: config 0 descriptor?? [ 303.066727][ T3522] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 303.155138][ T7684] : entered promiscuous mode [ 303.229672][ T3522] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.308590][ T3522] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.325172][ T5922] ir_usb 1-1:0.126: IR Dongle converter detected [ 303.343636][ T3522] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 303.365632][ T3522] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 303.393529][ T3522] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 303.425211][ T5922] usb 1-1: IRDA class descriptor not found, device not bound [ 303.482299][ T3522] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.509592][ T3522] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.542165][ T5922] usb 1-1: USB disconnect, device number 14 [ 303.551533][ T3522] usb 5-1: Product: syz [ 303.566872][ T3522] usb 5-1: Manufacturer: syz [ 303.704080][ T3522] cdc_wdm 5-1:1.0: skipping garbage [ 304.141057][ T7690] netlink: 'syz.4.326': attribute type 1 has an invalid length. [ 304.149239][ T3522] cdc_wdm 5-1:1.0: skipping garbage [ 304.187143][ T7706] ======================================================= [ 304.187143][ T7706] WARNING: The mand mount option has been deprecated and [ 304.187143][ T7706] and is ignored by this kernel. Remove the mand [ 304.187143][ T7706] option from the mount to silence this warning. [ 304.187143][ T7706] ======================================================= [ 304.250642][ T3522] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 304.259779][ T3522] cdc_wdm 5-1:1.0: Unknown control protocol [ 304.375424][ T3522] usb 5-1: USB disconnect, device number 11 [ 305.653152][ T24] usb 3-1: USB disconnect, device number 18 [ 306.829569][ T7725] input: syz1 as /devices/virtual/input/input13 [ 307.854658][ T7736] netlink: 48 bytes leftover after parsing attributes in process `syz.2.333'. [ 310.376812][ T6310] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 310.804591][ T6310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.835884][ T6310] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 310.855911][ T6310] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 310.900361][ T6310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.018221][ T6310] usb 3-1: config 0 descriptor?? [ 311.052398][ T6310] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 311.104883][ T6310] dvb-usb: bulk message failed: -22 (3/0) [ 311.160674][ T6310] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 311.272478][ T7755] dibusb: i2c wr: len=61 is too big! [ 311.272478][ T7755] [ 311.294065][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 311.344804][ T7755] netlink: 'syz.2.336': attribute type 7 has an invalid length. [ 311.362864][ T6310] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 311.402937][ T7755] netlink: 'syz.2.336': attribute type 8 has an invalid length. [ 311.476764][ T6310] usb 3-1: media controller created [ 311.489862][ T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 311.520352][ T6310] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.526912][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 311.617973][ T24] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.773587][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 311.843255][ T6310] dvb-usb: bulk message failed: -22 (6/0) [ 311.886545][ T6310] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 311.893899][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.937199][ T6310] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 311.962458][ T7766] Invalid option length (64407) for dns_resolver key [ 311.982851][ T6310] dvb-usb: schedule remote query interval to 150 msecs. [ 311.985478][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 312.070749][ T6310] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 312.234543][ T6310] dvb-usb: bulk message failed: -22 (1/0) [ 312.344999][ T6310] dvb-usb: error while querying for an remote control event. [ 312.387168][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.338'. [ 312.489204][ T7759] delete_channel: no stack [ 312.528642][ T6310] dvb-usb: bulk message failed: -22 (1/0) [ 312.536564][ T6310] dvb-usb: error while querying for an remote control event. [ 312.568133][ T24] usb 2-1: invalid MIDI out EP 0 [ 312.712939][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.340'. [ 312.769320][ T3522] dvb-usb: bulk message failed: -22 (1/0) [ 312.777796][ T3522] dvb-usb: error while querying for an remote control event. [ 312.947044][ T3522] dvb-usb: bulk message failed: -22 (1/0) [ 312.961537][ T3522] dvb-usb: error while querying for an remote control event. [ 313.136728][ T3522] dvb-usb: bulk message failed: -22 (1/0) [ 313.143913][ T3522] dvb-usb: error while querying for an remote control event. [ 313.316705][ T5862] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 313.316876][ T3522] dvb-usb: bulk message failed: -22 (1/0) [ 313.347468][ T6310] usb 3-1: USB disconnect, device number 19 [ 313.394472][ T3522] dvb-usb: error while querying for an remote control event. [ 313.514798][ T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 313.553326][ T5862] usb 5-1: Using ep0 maxpacket: 32 [ 313.576974][ T5862] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.649978][ T24] usb 2-1: USB disconnect, device number 10 [ 313.664653][ T5862] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 313.686526][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.704094][ T6310] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 313.739971][ T5862] usb 5-1: Product: syz [ 313.746559][ T5862] usb 5-1: Manufacturer: syz [ 313.758462][ T5862] usb 5-1: SerialNumber: syz [ 313.838112][ T5862] usb 5-1: config 0 descriptor?? [ 313.910509][ T7780] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 313.981471][ T7780] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.006041][ T7780] bond0: (slave team0): Enslaving as an active interface with an up link [ 314.064834][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 314.329212][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.374885][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.760878][ T7775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.771495][ T7775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.827631][ T24] usb 5-1: USB disconnect, device number 12 [ 315.046541][ T7785] binder: 7782:7785 ioctl c0306201 80000300 returned -14 [ 315.250647][ T7783] qrtr: Invalid version 97 [ 316.087138][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 316.087156][ T31] audit: type=1800 audit(1755010517.236:16): pid=7796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.345" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 316.450775][ T7808] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 316.544342][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'. [ 320.196834][ T6310] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 320.290559][ T7839] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 320.415929][ T7835] netlink: 24 bytes leftover after parsing attributes in process `syz.3.349'. [ 320.548545][ T6310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.548572][ T6310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.548589][ T6310] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 320.548697][ T6310] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 320.548715][ T6310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.550940][ T6310] usb 2-1: config 0 descriptor?? [ 321.499047][ T6310] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 321.549196][ T6310] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 321.976700][ T5922] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 322.385990][ T5922] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 322.386031][ T5922] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 322.386048][ T5922] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.386080][ T5922] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 322.386097][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.399020][ T5922] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.407038][ T7860] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 322.436308][ T7855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.353'. [ 322.677841][ T5922] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 323.028841][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.028946][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.104248][ T5862] usb 2-1: USB disconnect, device number 11 [ 323.516324][ T24] usb 5-1: USB disconnect, device number 13 [ 324.659703][ T7889] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.973935][ T7889] IPv6: Can't replace route, no match found [ 325.137030][ T3522] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 325.566778][ T3522] usb 2-1: Using ep0 maxpacket: 16 [ 325.914305][ T3522] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.036980][ T3522] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.049440][ T3522] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.249064][ T3522] usb 2-1: config 0 descriptor?? [ 326.758367][ T7902] fuse: Bad value for 'fd' [ 326.830138][ T3522] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 326.866131][ T3522] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 326.911270][ T3522] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 326.965774][ T3522] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 327.055739][ T3522] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 327.095092][ T3522] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 327.156828][ T5929] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 327.492341][ T5929] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 327.516521][ T5929] usb 5-1: config 0 has no interface number 0 [ 327.552557][ T5929] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.617069][ T5929] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 327.636253][ T5929] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 327.653304][ T7908] input: syz1 as /devices/virtual/input/input15 [ 327.671239][ T5929] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 12408, setting to 8 [ 327.868796][ T5929] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 327.906939][ T5929] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 328.015727][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.066366][ T5929] usb 5-1: config 0 descriptor?? [ 328.079801][ T7902] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 328.157509][ T7902] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 328.261596][ T5929] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 328.649023][ T6310] usb 5-1: USB disconnect, device number 14 [ 328.649077][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 328.697648][ T6310] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 328.766861][ T7908] netlink: 'syz.2.359': attribute type 4 has an invalid length. [ 328.775443][ T7908] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.359'. [ 328.870300][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 328.903862][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 328.935987][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.360'. [ 329.067960][ T31] audit: type=1326 audit(1755010530.446:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 329.068031][ T31] audit: type=1326 audit(1755010530.446:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7898 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x7ffc0000 [ 329.890959][ T5945] usb 2-1: USB disconnect, device number 12 [ 331.656860][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 331.843615][ T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 331.858689][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.896786][ T5862] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 331.909100][ T24] usb 5-1: Product: syz [ 331.941027][ T24] usb 5-1: Manufacturer: syz [ 331.948437][ T24] usb 5-1: SerialNumber: syz [ 331.964221][ T24] usb 5-1: config 0 descriptor?? [ 332.118429][ T5862] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.149675][ T5862] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.235362][ T5862] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.283067][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.697286][ T5862] usb 3-1: GET_CAPABILITIES returned 0 [ 332.739815][ T5862] usbtmc 3-1:16.0: can't read capabilities [ 333.545809][ T7973] pim6reg: entered allmulticast mode [ 333.566812][ T7973] pim6reg: left allmulticast mode [ 334.645411][ T7974] pim6reg: entered allmulticast mode [ 335.239773][ T24] usb 3-1: USB disconnect, device number 20 [ 335.656543][ T7959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.684272][ T24] usb 5-1: USB disconnect, device number 15 [ 336.364699][ T5862] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 336.951101][ T5862] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 336.974245][ T5862] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 337.623862][ T8017] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'. [ 338.474624][ T5862] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.532413][ T5862] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.573553][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.484024][ T5862] usb 1-1: can't set config #27, error -71 [ 339.546821][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 339.567017][ T7998] delete_channel: no stack [ 339.595261][ T5862] usb 1-1: USB disconnect, device number 16 [ 339.716750][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 339.733166][ T24] usb 2-1: config 0 has an invalid interface number: 56 but max is 0 [ 339.772791][ T24] usb 2-1: config 0 has no interface number 0 [ 339.834649][ T24] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=c7.76 [ 339.844715][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.981371][ T24] usb 2-1: Product: syz [ 339.985766][ T24] usb 2-1: Manufacturer: syz [ 340.017736][ T24] usb 2-1: SerialNumber: syz [ 340.064389][ T24] usb 2-1: config 0 descriptor?? [ 340.566542][ T24] peak_usb 2-1:0.56: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 340.762259][ T31] audit: type=1800 audit(1755010542.146:19): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.381" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 340.783549][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.893057][ T24] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 340.917116][ T24] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 340.926756][ T24] peak_usb 2-1:0.56 can0: sending command failure: -22 [ 341.018765][ T8050] binder: 8038:8050 ioctl c0306201 80000300 returned -14 [ 341.313388][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.347155][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.398529][ T24] peak_usb 2-1:0.56: probe with driver peak_usb failed with error -22 [ 341.779434][ T8051] netlink: 'syz.0.380': attribute type 33 has an invalid length. [ 341.787772][ T8051] netlink: 152 bytes leftover after parsing attributes in process `syz.0.380'. [ 341.808143][ T5945] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 341.848134][ T8042] qrtr: Invalid version 97 [ 342.104222][ T8063] input: syz0 as /devices/virtual/input/input16 [ 342.950481][ T6310] usb 2-1: USB disconnect, device number 13 [ 343.221823][ T5945] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 343.416904][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 343.450990][ T5945] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 343.466831][ T5945] usb 3-1: config 0 has no interface number 0 [ 343.670714][ T5945] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 343.696777][ T31] audit: type=1800 audit(1755010545.076:20): pid=8090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.384" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 343.826659][ T5945] usb 3-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 343.886716][ T5945] usb 3-1: config 0 interface 126 has no altsetting 0 [ 343.903111][ T5945] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 344.095535][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.125388][ T5945] usb 3-1: Product: syz [ 344.143934][ T5945] usb 3-1: Manufacturer: syz [ 344.167246][ T5945] usb 3-1: SerialNumber: syz [ 344.167317][ T5183] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.196759][ T24] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 344.220135][ T24] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 344.396825][ T5945] usb 3-1: config 0 descriptor?? [ 344.719377][ T8075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.729767][ T8075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 345.401185][ T5945] ir_usb 3-1:0.126: IR Dongle converter detected [ 345.454365][ T5945] usb 3-1: IRDA class descriptor not found, device not bound [ 345.514149][ T5945] usb 3-1: USB disconnect, device number 22 [ 346.319566][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 346.326039][ T5183] Bluetooth: hci1: command 0x0c1a tx timeout [ 346.335270][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 346.486722][ T5922] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 347.111133][ T5922] usb 1-1: config 0 has no interfaces? [ 347.152570][ T5922] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 347.520126][ T8123] netlink: 48 bytes leftover after parsing attributes in process `syz.3.390'. [ 347.549938][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.659524][ T5922] usb 1-1: Product: syz [ 347.663845][ T5922] usb 1-1: Manufacturer: syz [ 347.673554][ T5922] usb 1-1: SerialNumber: syz [ 347.737863][ T5922] usb 1-1: config 0 descriptor?? [ 348.086238][ T8112] : entered promiscuous mode [ 348.399784][ T5183] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.406384][ T24] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 348.414983][ T24] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 348.946720][ T5922] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 349.261196][ T8145] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 349.303848][ T5922] usb 3-1: config 0 has no interfaces? [ 349.321459][ T5929] usb 1-1: USB disconnect, device number 17 [ 349.363128][ T5922] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 349.380555][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.414654][ T5922] usb 3-1: Product: syz [ 349.430110][ T5922] usb 3-1: Manufacturer: syz [ 349.434784][ T5922] usb 3-1: SerialNumber: syz [ 349.472131][ T5922] usb 3-1: config 0 descriptor?? [ 349.480159][ T31] audit: type=1326 audit(1755010550.866:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.1.402" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 349.956837][ T8163] input: syz1 as /devices/virtual/input/input17 [ 349.975086][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.1.405'. [ 350.492180][ T5183] Bluetooth: hci3: command 0x0c1a tx timeout [ 350.511411][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 350.526999][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 350.537822][ T8168] netlink: 'syz.0.406': attribute type 4 has an invalid length. [ 350.607154][ T8168] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.406'. [ 351.823463][ T3522] usb 3-1: USB disconnect, device number 23 [ 352.265095][ T8186] netlink: 48 bytes leftover after parsing attributes in process `syz.0.411'. [ 353.121022][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 353.136890][ T5183] Bluetooth: hci4: command 0x0c1a tx timeout [ 353.146745][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 353.356845][ T6310] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 353.521195][ T43] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 353.561589][ T6310] usb 2-1: config 0 has no interfaces? [ 353.571460][ T6310] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 353.580850][ T6310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.589971][ T6310] usb 2-1: Product: syz [ 353.594433][ T6310] usb 2-1: Manufacturer: syz [ 353.609521][ T6310] usb 2-1: SerialNumber: syz [ 353.624966][ T6310] usb 2-1: config 0 descriptor?? [ 353.684982][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 353.701668][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 353.715810][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.727624][ T43] usb 3-1: config 0 descriptor?? [ 353.952067][ T43] usb 3-1: USB disconnect, device number 24 [ 353.988212][ T8189] : entered promiscuous mode [ 355.121831][ T8217] binder: 8212:8217 ioctl c0306201 80000300 returned -14 [ 355.230266][ T8213] qrtr: Invalid version 97 [ 355.359595][ T5922] usb 2-1: USB disconnect, device number 14 [ 356.596967][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 356.804868][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 356.822486][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.848840][ T43] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 356.865842][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.882124][ T43] usb 4-1: Product: syz [ 356.891916][ T43] usb 4-1: Manufacturer: syz [ 356.901415][ T43] usb 4-1: SerialNumber: syz [ 357.496377][ T43] usb 4-1: config 0 descriptor?? [ 357.847052][ T5945] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 357.892763][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.905570][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.006872][ T5945] usb 3-1: Using ep0 maxpacket: 8 [ 358.230738][ T8230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.256032][ T8230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.355810][ T5945] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.371850][ T3522] usb 4-1: USB disconnect, device number 15 [ 358.383916][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.423559][ T5945] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.446459][ T5945] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.507019][ T5945] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.534164][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.850050][ T5945] usb 3-1: GET_CAPABILITIES returned 0 [ 358.856171][ T5945] usbtmc 3-1:16.0: can't read capabilities [ 359.050896][ T43] usb 3-1: USB disconnect, device number 25 [ 359.188816][ T8264] netlink: 48 bytes leftover after parsing attributes in process `syz.1.438'. [ 359.246818][ T5945] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 359.323634][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.2.433'. [ 359.421859][ T5945] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.478777][ T5945] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.494377][ T5945] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.508109][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.736428][ T5945] usb 1-1: GET_CAPABILITIES returned 0 [ 359.746549][ T5945] usbtmc 1-1:16.0: can't read capabilities [ 360.664789][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 362.048699][ T43] usb 1-1: USB disconnect, device number 18 [ 362.202246][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.450'. [ 362.247409][ T3522] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 362.768895][ T5929] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 362.792786][ T3522] usb 4-1: config 0 has no interfaces? [ 362.812416][ T3522] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 362.822425][ T3522] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.832272][ T3522] usb 4-1: Product: syz [ 362.845346][ T3522] usb 4-1: Manufacturer: syz [ 362.857449][ T3522] usb 4-1: SerialNumber: syz [ 362.920824][ T3522] usb 4-1: config 0 descriptor?? [ 363.027147][ T5929] usb 3-1: Using ep0 maxpacket: 8 [ 363.087222][ T5929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 363.329543][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 363.390343][ T5929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 363.533362][ T5929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 363.703003][ T5929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 363.727928][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.010035][ T5929] usb 3-1: GET_CAPABILITIES returned 0 [ 364.082463][ T5929] usbtmc 3-1:16.0: can't read capabilities [ 364.318686][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.335294][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.347262][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.361789][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.387408][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.399689][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.411336][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.423340][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.435329][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.444775][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.457969][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.472106][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.484127][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.496133][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.507902][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.519327][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 364.582583][ T5929] usb 3-1: USB disconnect, device number 26 [ 364.973379][ T8320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.449'. [ 365.002898][ T5929] usb 4-1: USB disconnect, device number 16 [ 365.017996][ T8324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.852674][ T8339] tipc: New replicast peer: 0.0.0.0 [ 365.859046][ T8339] tipc: Enabled bearer , priority 10 [ 365.873732][ T8339] ptrace attach of "./syz-executor exec"[5876] was attempted by "./syz-executor exec"[8339] [ 365.888034][ T8339] netlink: 'syz.1.458': attribute type 2 has an invalid length. [ 367.864401][ T8386] loop2: detected capacity change from 0 to 7 [ 367.890821][ T8067] Dev loop2: unable to read RDB block 7 [ 367.897088][ T8067] loop2: unable to read partition table [ 367.907439][ T8067] loop2: partition table beyond EOD, truncated [ 367.945033][ T8386] Dev loop2: unable to read RDB block 7 [ 367.950999][ T8386] loop2: unable to read partition table [ 367.965491][ T8386] loop2: partition table beyond EOD, truncated [ 367.978808][ T8386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 368.972729][ T31] audit: type=1326 audit(1755010570.356:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 369.034051][ T31] audit: type=1326 audit(1755010570.356:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 369.066103][ T31] audit: type=1326 audit(1755010570.356:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 369.206972][ T31] audit: type=1326 audit(1755010570.386:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 369.341330][ T31] audit: type=1326 audit(1755010570.386:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 369.410191][ T31] audit: type=1326 audit(1755010570.386:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8407 comm="syz.0.490" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000 [ 384.240175][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.246750][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.679529][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.686209][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 495.607051][ T32] INFO: task kworker/1:3:5862 blocked for more than 143 seconds. [ 495.614942][ T32] Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 [ 495.625847][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.634969][ T32] task:kworker/1:3 state:D stack:21656 pid:5862 tgid:5862 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 495.648287][ T32] Workqueue: events rfkill_global_led_trigger_worker [ 495.655377][ T32] Call Trace: [ 495.658764][ T32] [ 495.661912][ T32] __schedule+0x1798/0x4cc0 [ 495.666873][ T32] ? __pfx___schedule+0x10/0x10 [ 495.671791][ T32] ? schedule+0x91/0x360 [ 495.676319][ T32] schedule+0x165/0x360 [ 495.680598][ T32] schedule_preempt_disabled+0x13/0x30 [ 495.686244][ T32] __mutex_lock+0x7e6/0x1360 [ 495.691125][ T32] ? __mutex_lock+0x5b6/0x1360 [ 495.696038][ T32] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.702481][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 495.707747][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 495.713532][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 495.719434][ T32] rfkill_global_led_trigger_worker+0x27/0xd0 [ 495.725574][ T32] ? process_scheduled_works+0x9ef/0x17b0 [ 495.731554][ T32] process_scheduled_works+0xade/0x17b0 [ 495.737947][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 495.744003][ T32] worker_thread+0x8a0/0xda0 [ 495.751599][ T32] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 495.759503][ T32] ? __kthread_parkme+0x7b/0x200 [ 495.764519][ T32] kthread+0x70e/0x8a0 [ 495.769370][ T32] ? __pfx_worker_thread+0x10/0x10 [ 495.774818][ T32] ? __pfx_kthread+0x10/0x10 [ 495.781288][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 495.786943][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.792553][ T32] ? __pfx_kthread+0x10/0x10 [ 495.797280][ T32] ret_from_fork+0x3f9/0x770 [ 495.801993][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 495.807372][ T32] ? __switch_to_asm+0x39/0x70 [ 495.812358][ T32] ? __switch_to_asm+0x33/0x70 [ 495.817275][ T32] ? __pfx_kthread+0x10/0x10 [ 495.821987][ T32] ret_from_fork_asm+0x1a/0x30 [ 495.826943][ T32] [ 495.830559][ T32] INFO: task syz.4.379:8047 blocked for more than 143 seconds. [ 495.838757][ T32] Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 [ 495.846408][ T32] Blocked by coredump. [ 495.851316][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.860287][ T32] task:syz.4.379 state:D stack:24056 pid:8047 tgid:8041 ppid:5872 task_flags:0x40044c flags:0x20004006 [ 495.872638][ T32] Call Trace: [ 495.876039][ T32] [ 495.879338][ T32] __schedule+0x1798/0x4cc0 [ 495.884235][ T32] ? __pfx___schedule+0x10/0x10 [ 495.889276][ T32] ? schedule+0x91/0x360 [ 495.893839][ T32] schedule+0x165/0x360 [ 495.898194][ T32] schedule_preempt_disabled+0x13/0x30 [ 495.903783][ T32] __mutex_lock+0x7e6/0x1360 [ 495.908854][ T32] ? __mutex_lock+0x5b6/0x1360 [ 495.913776][ T32] ? rfkill_unregister+0xc8/0x220 [ 495.918990][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 495.924176][ T32] ? __pfx_device_del+0x10/0x10 [ 495.931177][ T32] rfkill_unregister+0xc8/0x220 [ 495.936643][ T32] nfc_unregister_device+0x96/0x2a0 [ 495.941948][ T32] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 495.947976][ T32] virtual_ncidev_close+0x56/0x90 [ 495.953258][ T32] __fput+0x449/0xa70 [ 495.957540][ T32] task_work_run+0x1d4/0x260 [ 495.962187][ T32] ? __pfx_task_work_run+0x10/0x10 [ 495.967535][ T32] do_exit+0x6b5/0x2300 [ 495.971745][ T32] ? do_raw_spin_lock+0x121/0x290 [ 495.976958][ T32] ? __pfx_do_exit+0x10/0x10 [ 495.981665][ T32] do_group_exit+0x21c/0x2d0 [ 495.986287][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.991915][ T32] get_signal+0x1286/0x1340 [ 495.996544][ T32] arch_do_signal_or_restart+0x9a/0x750 [ 496.002154][ T32] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 496.008523][ T32] ? __sys_recvmmsg+0x19d/0x280 [ 496.013636][ T32] ? ret_from_fork_asm+0x1a/0x30 [ 496.018680][ T32] ? exit_to_user_mode_loop+0x40/0x110 [ 496.024351][ T32] exit_to_user_mode_loop+0x75/0x110 [ 496.029827][ T32] __do_fast_syscall_32+0x1f4/0x2b0 [ 496.035118][ T32] do_fast_syscall_32+0x34/0x80 [ 496.040269][ T32] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.046706][ T32] RIP: 0023:0xf703e539 [ 496.050827][ T32] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 496.059659][ T32] RAX: 0000000000010106 RBX: 0000000000000003 RCX: 00000000800000c0 [ 496.067822][ T32] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 496.075904][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.084268][ T32] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 496.092587][ T32] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.100910][ T32] [ 496.103993][ T32] [ 496.103993][ T32] Showing all locks held in the system: [ 496.111953][ T32] 4 locks held by kworker/1:0/24: [ 496.117072][ T32] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.128174][ T32] #1: ffffc900001e7bc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.139308][ T32] #2: ffffffff8f8117a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 496.149299][ T32] #3: ffff8880249e9100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 496.159694][ T32] 1 lock held by khungtaskd/32: [ 496.164582][ T32] #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 496.174710][ T32] 6 locks held by kworker/u8:7/1157: [ 496.180286][ T32] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 496.190657][ T32] #1: ffff8880b8724008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 496.199649][ T32] #2: ffff8880b8725918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 496.208827][ T32] #3: ffffffff99d41ea0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 496.219557][ T32] #4: ffffffff8dfe63a8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30 [ 496.230522][ T32] #5: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: ___pte_offset_map+0x29/0x250 [ 496.240560][ T32] 2 locks held by getty/5630: [ 496.245364][ T32] #0: ffff88802fd370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.255277][ T32] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 496.265548][ T32] 3 locks held by kworker/1:3/5862: [ 496.271063][ T32] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.282237][ T32] #1: ffffc9000410fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.295835][ T32] #2: ffffffff8f8117a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 496.307428][ T32] 1 lock held by syz-executor/5872: [ 496.312664][ T32] #0: ffffffff8f8117a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 496.323019][ T32] 2 locks held by syz.4.379/8047: [ 496.328196][ T32] #0: ffff8880249e9100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 496.338433][ T32] #1: ffffffff8f8117a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 496.348894][ T32] 2 locks held by syz-executor/8223: [ 496.354243][ T32] #0: ffff88802d2ad918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 496.364368][ T32] #1: ffffffff8f8117a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 496.374593][ T32] 2 locks held by syz.2.464/8348: [ 496.379688][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.388341][ T32] #1: ffffffff8f8117a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 496.399040][ T32] 1 lock held by syz.1.467/8366: [ 496.404019][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.413137][ T32] 1 lock held by syz.3.485/8400: [ 496.418507][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.427381][ T32] 1 lock held by syz.3.485/8406: [ 496.432451][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.441061][ T32] 1 lock held by syz.0.492/8413: [ 496.446127][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.454848][ T32] 1 lock held by syz-executor/8414: [ 496.460236][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.468867][ T32] 1 lock held by syz-executor/8415: [ 496.474196][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.482728][ T32] 1 lock held by syz-executor/8416: [ 496.488039][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.496639][ T32] 1 lock held by syz-executor/8417: [ 496.501966][ T32] #0: ffffffff8e9c1308 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 496.510588][ T32] [ 496.512972][ T32] ============================================= [ 496.512972][ T32] [ 496.521831][ T32] NMI backtrace for cpu 0 [ 496.521863][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 496.521887][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.521898][ T32] Call Trace: [ 496.521906][ T32] [ 496.521914][ T32] dump_stack_lvl+0x189/0x250 [ 496.521947][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.521972][ T32] ? __pfx__printk+0x10/0x10 [ 496.522014][ T32] nmi_cpu_backtrace+0x39e/0x3d0 [ 496.522041][ T32] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 496.522066][ T32] ? __pfx__printk+0x10/0x10 [ 496.522102][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.522139][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 496.522168][ T32] watchdog+0xf93/0xfe0 [ 496.522204][ T32] ? watchdog+0x1de/0xfe0 [ 496.522241][ T32] kthread+0x70e/0x8a0 [ 496.522272][ T32] ? __pfx_watchdog+0x10/0x10 [ 496.522301][ T32] ? __pfx_kthread+0x10/0x10 [ 496.522331][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.522358][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.522405][ T32] ? __pfx_kthread+0x10/0x10 [ 496.522434][ T32] ret_from_fork+0x3f9/0x770 [ 496.522460][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 496.522490][ T32] ? __switch_to_asm+0x39/0x70 [ 496.522517][ T32] ? __switch_to_asm+0x33/0x70 [ 496.522543][ T32] ? __pfx_kthread+0x10/0x10 [ 496.522571][ T32] ret_from_fork_asm+0x1a/0x30 [ 496.522617][ T32] [ 496.522625][ T32] Sending NMI from CPU 0 to CPUs 1: [ 496.676160][ C1] NMI backtrace for cpu 1 [ 496.676180][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 496.676202][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.676214][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 496.676245][ C1] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 f7 0e 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 496.676262][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 496.676278][ C1] RAX: 9f3c045ea4d94300 RBX: ffffffff81968308 RCX: 9f3c045ea4d94300 [ 496.676293][ C1] RDX: 0000000000000001 RSI: ffffffff8d9b6d6c RDI: ffffffff8be33380 [ 496.676312][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 496.676325][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fa37e30 [ 496.676339][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110039d5b40 [ 496.676350][ C1] FS: 0000000000000000(0000) GS:ffff888125d1c000(0000) knlGS:0000000000000000 [ 496.676364][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.676375][ C1] CR2: 000055c7a6245168 CR3: 000000000df36000 CR4: 00000000003526f0 [ 496.676391][ C1] Call Trace: [ 496.676400][ C1] [ 496.676406][ C1] default_idle+0x13/0x20 [ 496.676435][ C1] default_idle_call+0x74/0xb0 [ 496.676452][ C1] do_idle+0x1e8/0x510 [ 496.676473][ C1] ? __pfx_do_idle+0x10/0x10 [ 496.676499][ C1] cpu_startup_entry+0x44/0x60 [ 496.676523][ C1] start_secondary+0x101/0x110 [ 496.676552][ C1] common_startup_64+0x13e/0x147 [ 496.676639][ C1] [ 496.677136][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 496.677156][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(full) [ 496.677187][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 496.677203][ T32] Call Trace: [ 496.677214][ T32] [ 496.677227][ T32] dump_stack_lvl+0x99/0x250 [ 496.677261][ T32] ? __asan_memcpy+0x40/0x70 [ 496.677292][ T32] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.677323][ T32] ? __pfx__printk+0x10/0x10 [ 496.677384][ T32] vpanic+0x281/0x750 [ 496.677417][ T32] ? __pfx_vpanic+0x10/0x10 [ 496.677447][ T32] ? tick_nohz_tick_stopped+0x86/0xb0 [ 496.677477][ T32] ? __irq_work_queue_local+0x1de/0x550 [ 496.677521][ T32] panic+0xb9/0xc0 [ 496.677551][ T32] ? __pfx_panic+0x10/0x10 [ 496.677583][ T32] ? irq_work_queue+0xbc/0x140 [ 496.677622][ T32] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 496.677654][ T32] watchdog+0xfd2/0xfe0 [ 496.677696][ T32] ? watchdog+0x1de/0xfe0 [ 496.677736][ T32] kthread+0x70e/0x8a0 [ 496.677772][ T32] ? __pfx_watchdog+0x10/0x10 [ 496.677807][ T32] ? __pfx_kthread+0x10/0x10 [ 496.677839][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.677872][ T32] ? lockdep_hardirqs_on+0x9c/0x150 [ 496.677903][ T32] ? __pfx_kthread+0x10/0x10 [ 496.677937][ T32] ret_from_fork+0x3f9/0x770 [ 496.677966][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 496.678000][ T32] ? __switch_to_asm+0x39/0x70 [ 496.678031][ T32] ? __switch_to_asm+0x33/0x70 [ 496.678062][ T32] ? __pfx_kthread+0x10/0x10 [ 496.678096][ T32] ret_from_fork_asm+0x1a/0x30 [ 496.678147][ T32] [ 497.005899][ T32] Kernel Offset: disabled [ 497.010257][ T32] Rebooting in 86400 seconds..