last executing test programs: 20.666906135s ago: executing program 0 (id=118): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000080), 0x6) syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0xfffffffc, 0x80, 0x0, 0x9e}, &(0x7f00000001c0), &(0x7f0000000100)) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000140)) 18.573641149s ago: executing program 0 (id=123): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) io_uring_setup(0x6b6e, &(0x7f0000000080)={0x0, 0x54c1, 0x2, 0xfffffffd, 0x1}) 18.31841846s ago: executing program 0 (id=127): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\\///\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.142922804s ago: executing program 1 (id=166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8.945751094s ago: executing program 1 (id=168): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045003, &(0x7f0000000300)) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) 7.3914711s ago: executing program 1 (id=175): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003"], 0x90}}, 0x0) 7.264880194s ago: executing program 1 (id=177): openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000780), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x1c}}, 0x5) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) 4.997943444s ago: executing program 3 (id=179): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.812799446s ago: executing program 3 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000040)) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r4, 0x200000a, 0x20010, r3, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000140)=""/137) 4.750655788s ago: executing program 2 (id=182): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01030000fe230000000005000000"], 0x14}}, 0x0) 4.583572788s ago: executing program 2 (id=183): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r0, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000000000000000000004"]) 4.513607648s ago: executing program 4 (id=184): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000100)='0E', 0x2) syz_usb_disconnect(r0) 4.425832546s ago: executing program 3 (id=185): r0 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000000000)='8', 0x1) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) read$hidraw(r5, &(0x7f0000000080)=""/210, 0xd2) ioctl$EVIOCREVOKE(r5, 0x40044591, 0x0) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r1) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f00000002c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x6, @string={0x6, 0x3, "be890ee3"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00033a0000003a03d0c0611e30d4a01d78ade1bf132b77cdd40133f3acc05033b2b69b8b065de0c13ab03ea55d49b649f47cdd8fe60531f9b4a91d44fddf255a"], &(0x7f0000000080)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x8, "1d"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x374}}}}, &(0x7f0000000440)={0x2c, &(0x7f0000000200)={0x0, 0x18, 0xb4, "81b8118ab87253f564c7b5296aeae09c8c43c1ac3f036eb264681a903c738f740618dde20c945568f20d69247a35b253c6cbdf58a43ef0d1ae9ad5a0839fa8cc1ab7e07ce3eaa4cb5f50007f77bfa506d0fb5fe0787d3368e0ec2d9989645bc55d35b397f524e9953bf68d7ce4839077a9342a461f484e9ff6b8b57f6b27ff5be90c14ed01d34a52ee8109e1ea6aae16ee7a71b69fe6fb6a5c0251209d2441d483a2bd9f6113274e2f39af743d6b0b6d822f3aa7"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x23}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x3}}) 4.404093744s ago: executing program 2 (id=186): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1d, 0x6, 0xe1, 0x10, 0x18d1, 0x1eaf, 0xa243, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x30, 0xaa}}]}}]}}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 4.113686641s ago: executing program 1 (id=187): syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12011001093c9b0840200265f65e010203010902240001010050000904a7fd02f0719b00090582"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2.807126596s ago: executing program 2 (id=188): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf7, 0x51, 0xae, 0x40, 0x451, 0x3410, 0xef1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xaa, 0xf, 0x60, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 2.671613491s ago: executing program 0 (id=131): socket$nl_netfilter(0x10, 0x3, 0xc) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x5}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000e80)={'vcan0\x00'}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1af) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f00000000c0), 0x14) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r4, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r3, 0x0) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000300)=0x2, 0x1ff, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000003c0)="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", 0x8a7}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) write$binfmt_misc(r5, &(0x7f0000000000), 0xfffffecc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.441514912s ago: executing program 1 (id=189): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00001c0905810900020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb3, 0xb5, 0x46, 0x20, 0x681, 0x10, 0x7f92, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa9, 0x14, 0x5}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) 1.825458282s ago: executing program 4 (id=190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.615401126s ago: executing program 4 (id=191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003"], 0x90}}, 0x0) 1.519782246s ago: executing program 0 (id=192): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000001500), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x3, 0x6, 0xb2, 0x40, 0xfc5, 0x1227, 0xda8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xc7, 0x8f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "a8f46877"}]}}, 0x0}, 0x0) 1.309506692s ago: executing program 4 (id=193): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000feb000/0x3000)=nil, 0x3000}, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x1a, 0x0, 0x0) 671.036787ms ago: executing program 2 (id=194): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084503, &(0x7f0000000000)=0xfffff800) 567.53711ms ago: executing program 2 (id=195): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_usb_connect$uac1(0x3, 0x71, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 492.104767ms ago: executing program 3 (id=196): r0 = io_uring_setup(0x1d7b, &(0x7f00000002c0)={0x0, 0x2466, 0x0, 0x1, 0x14b}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) 342.888624ms ago: executing program 3 (id=197): socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) write$char_usb(r1, &(0x7f00000001c0)="bcfaa926da2a33d6ffeeabe6a751636ab9b96c23dc7eb1fd05d25b3f00d66a55d439a753a0ef9ad85dd6bd6628d30fe919dd0495f2adb0ff369ce601e0b2da28bce21debb3757fc74de2cb1117203f54d86e692f654dfc1f8a38e48f3d71afdb8d49df406f477626", 0x68) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000280)=0x80000001, 0x4) recvmmsg(r0, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket(0x15, 0x4, 0xc4) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r3, &(0x7f00000001c0)="d2", 0x1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)=0x24b1cd8b) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000040)=0x1ff) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) 269.733854ms ago: executing program 4 (id=198): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0xffffffff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = getpid() write$6lowpan_control(0xffffffffffffffff, &(0x7f0000001a40)='connect aa:aa:aa:aa:aa:10 2', 0x1b) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000006180)=""/152, 0x98}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8f0cb979070811"], 0xfdef) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700f00000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, '\x00', "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) write$binfmt_script(r4, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000740)=0x40) writev(r4, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@llu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000100000000001c00090008000000"], 0x4c}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 53.046671ms ago: executing program 3 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000022c0)=""/4096}, {&(0x7f0000000100)=""/60}, {&(0x7f0000000300)=""/120}, {&(0x7f00000003c0)}], 0x0, &(0x7f0000000480)=""/37}, 0xa7}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000940)=""/186}, {&(0x7f0000000a00)=""/106}, {&(0x7f0000000a80)=""/208}, {&(0x7f0000000e40)=""/115}, {&(0x7f0000000c00)=""/79}, {&(0x7f0000000c80)=""/113}, {&(0x7f0000000d00)=""/96}], 0x0, &(0x7f0000000d80)=""/176}, 0x4}], 0xe51b, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000ec0)={0x20c, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x1d8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x69f}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x24}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f00000000c0)={0x3, 0x481c7094, 0x3, 0x4}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r7, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r4) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 0s ago: executing program 4 (id=200): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000006c0)={{0x2, 0x3, 0x54, 0x1, 0x4, 0x9}, 0x3eb, [0x80000000, 0x7ff, 0x5, 0x9, 0x4, 0x2b1, 0x2, 0xc, 0x101, 0x80000001, 0x3, 0x5, 0x7, 0x1, 0x4a70b2dc, 0x1000, 0x3e0, 0xe787, 0x40, 0x5, 0x1bc, 0x10000, 0xff, 0x3, 0xa, 0x3, 0x49c, 0x1, 0x10001, 0x200, 0x3, 0x6, 0x2, 0x900000, 0x0, 0x10, 0x0, 0x5, 0x6, 0x1, 0x7c, 0xcc1, 0x7, 0x1, 0x8, 0x4, 0x7, 0x5, 0xaa78, 0x3c4, 0x6dc0, 0x8, 0xef31, 0x2, 0x10001, 0x1, 0x1, 0x0, 0x81, 0x4, 0x3, 0x3, 0x9, 0x7, 0xff, 0x9, 0x40, 0x2, 0x4, 0x5, 0x7ff, 0xa24, 0xff, 0x4, 0xf, 0x2, 0x0, 0x4, 0x1, 0x6, 0x10001, 0x9, 0x57, 0xd1, 0x4, 0x6, 0x4, 0x59bb6727, 0x1, 0x200, 0xd, 0x3, 0x6, 0x2, 0x6, 0x4, 0xcae3, 0x7f2e8000, 0x6, 0x81, 0x5, 0x8, 0x9, 0x4, 0x5, 0x852, 0x8001, 0x3, 0x9, 0x4, 0x3, 0x3, 0x8, 0x80000001, 0x9, 0x8, 0xc832, 0x8, 0x2, 0xd, 0xfffffff0, 0x6, 0xfffffffe, 0x68, 0x3, 0x7f, 0x8, 0x81, 0x6, 0x5, 0x2, 0x0, 0xef92, 0x0, 0xffff0000, 0x349175d9, 0x7d0, 0x4, 0x2, 0x3, 0x8001, 0x3, 0x4, 0x8d7, 0x89c, 0xd1, 0x5, 0x0, 0xfffffffa, 0x5, 0x3, 0x5, 0x6, 0x3, 0x7, 0x9, 0x80000000, 0x0, 0x2, 0x7b8, 0xc1, 0x5, 0x8, 0x2, 0x82, 0x1, 0x7f, 0x9, 0x6, 0x3, 0xd, 0x3, 0x8000, 0x20000, 0x2, 0xca09, 0x5, 0x40, 0xe84, 0x1, 0x1, 0xb, 0x2, 0xfff, 0x400, 0xfffffff7, 0x5, 0x4, 0x5, 0x5, 0x7ff, 0x1, 0x0, 0x20, 0xfffffff8, 0x5, 0xffff7bf9, 0x10000, 0x40, 0x4, 0x9, 0x43, 0x3, 0x6, 0x7, 0x7, 0xfffffffe, 0xffffffff, 0x3, 0x0, 0x9, 0x5, 0x2, 0x9, 0x5, 0x8, 0x0, 0x8, 0x6c, 0x8000, 0x2e, 0x2, 0x52, 0x8, 0x10000, 0x1000, 0x8, 0x25, 0x9, 0x4, 0x5, 0xffff1bb8, 0xfffffffd, 0x5, 0x1000, 0x521aef36, 0x5, 0x0, 0x45ea1f35, 0xb, 0xffffeae5, 0x800, 0x4, 0x5, 0x8, 0x9, 0x2, 0x5, 0xfffe, 0x0, 0x55ed, 0x80, 0xae800000, 0x3, 0xba1, 0x101, 0x5, 0x6, 0x66d, 0x1, 0x9, 0x5ca0, 0x0, 0xfff, 0x5, 0x2, 0x8, 0x79283876, 0x1, 0x6, 0x4, 0x5, 0xc22, 0xfffffff7, 0x80, 0xff, 0x4000, 0x8, 0x3, 0x7fffffff, 0x8, 0x1, 0xd3, 0x8, 0xc99b, 0x80000001, 0x7, 0x10001, 0x6, 0x8, 0x3b5, 0x1000, 0x0, 0x9dd, 0x1, 0x7, 0xe, 0x4, 0x7, 0xffff9b3f, 0x1, 0xffff, 0x7fffffff, 0x7, 0x7, 0x1e1, 0x5, 0x8, 0x3, 0x10001, 0x5, 0x800, 0x0, 0x28e88f9b, 0xb36, 0xd, 0x80000000, 0xa, 0x1, 0x6, 0x9, 0x4, 0x80000001, 0x3, 0xe, 0xfdb9, 0x9, 0x200, 0x8, 0x10, 0xfffffff4, 0x8, 0x5, 0x0, 0x2, 0x401, 0x9, 0x1, 0xfffffffc, 0x2b3a, 0x8383, 0x5387, 0x6, 0x6, 0x6, 0x5, 0x1, 0x2, 0x1, 0x1, 0x1, 0x8001, 0x80000000, 0x4, 0x6, 0x8000, 0x101, 0x5, 0x7, 0x6, 0x8, 0x5, 0x7fffffff, 0x5, 0xfff, 0x3, 0x9, 0x9, 0x7, 0x101, 0x4, 0x2, 0x0, 0x4, 0x8, 0x7, 0x6, 0x9, 0x1, 0xfffffffd, 0x7, 0x18000000, 0x7, 0x7, 0x7, 0x10001, 0x9, 0x9, 0x6c, 0x7, 0x10000, 0x4, 0x74, 0xea, 0x2, 0xffffff42, 0x51, 0x5, 0xf, 0x6, 0x0, 0xf15, 0x5cf, 0x10001, 0x8, 0x6ae, 0xc62, 0x10, 0x75aca70, 0x5a, 0x9, 0xd, 0x101, 0xf, 0x16b37584, 0x80000, 0xcb, 0x3, 0x1, 0x11, 0x6, 0x0, 0xd, 0x101, 0xd, 0x0, 0x40, 0x2, 0x0, 0x3a, 0x4, 0xd0, 0x2, 0x9, 0x6, 0x1c2, 0x3, 0x10001, 0x6, 0x3, 0x9, 0x1, 0x0, 0x1, 0x4, 0x6034, 0x10001, 0xb7, 0x3fa, 0x8, 0x6, 0x10, 0x7d, 0x6, 0x7fff, 0x7fffffff, 0x1, 0x1, 0x4, 0x4b3, 0xea, 0x5, 0x40, 0x5, 0xfffffff9, 0x1, 0x3, 0x7, 0x3c, 0x8000, 0x3, 0x3, 0x3, 0x3, 0x1, 0x5, 0x2e, 0x6, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0xffff, 0xf, 0x8001, 0x7, 0x5f37, 0xcd, 0x2, 0x4, 0x2, 0xfffffff8, 0x5, 0x1, 0x6, 0x4, 0x2, 0xf, 0x7, 0x5, 0x667b6536, 0x1, 0x9, 0xc1, 0x2, 0x7, 0x7f77, 0x3, 0x2, 0x9, 0x2, 0x4, 0x9f6, 0xd, 0x3, 0xfff, 0x5, 0x10000, 0x5, 0x8f, 0x3, 0x8, 0x80000000, 0x666, 0x401, 0x41, 0xfffffff9, 0x6, 0xd, 0x400, 0x8, 0xd4, 0x3f681b61, 0x1, 0x641d, 0x838, 0x1, 0x1, 0x4, 0x1, 0x5ef, 0x0, 0x8, 0xd, 0x200, 0xad1, 0x0, 0xffff, 0x8, 0x8cc0, 0x0, 0x4, 0x7, 0x1, 0xf9e, 0x40, 0x8, 0x8, 0x0, 0x5c42, 0xa86c, 0x9, 0x2, 0x0, 0x2, 0x4, 0x2, 0x6, 0xbb, 0x7, 0x2, 0x4, 0xfffffffe, 0x84e, 0x5, 0x0, 0x8, 0x40, 0x3, 0xee, 0x3, 0x200, 0x80000000, 0x3, 0x8000, 0x947, 0xb, 0x3ff, 0x2, 0xffffffff, 0x7, 0xffff, 0x1, 0x10, 0x1, 0x80, 0x0, 0x7, 0xbb34, 0xffffffff, 0x2, 0xffff, 0xb, 0x10001, 0x8, 0x5, 0x19f, 0x8, 0x7, 0x2, 0x61, 0x2, 0x1000, 0x5, 0x0, 0x39, 0x4f8435bc, 0x40, 0x1, 0x8000, 0xff, 0x6, 0x81, 0x3, 0x8000, 0x6, 0x3, 0x6, 0x10000, 0x3, 0x80000001, 0x5, 0x6, 0x6755, 0xffff, 0x1, 0x80000001, 0x40, 0xc, 0x0, 0x0, 0xb0, 0x7, 0x5, 0x8, 0x2, 0x4, 0x2, 0x7, 0xfffffffd, 0x0, 0x5783d24c, 0x1000, 0xb, 0xe92f, 0x10, 0xc0000000, 0x80000001, 0x81, 0xf, 0x3f, 0x3, 0xd02, 0x3, 0x3, 0x2, 0x8, 0x5, 0x7, 0x4, 0x8, 0x16b1, 0x1, 0x9, 0x2, 0xa17, 0x1, 0xd, 0x1ff, 0x9, 0x10, 0x1000, 0x8, 0x10001, 0x2, 0x9, 0xd12d, 0xb, 0x80000000, 0x10, 0x7, 0x7, 0x5, 0x0, 0x4, 0x10000, 0x2, 0x6, 0x2, 0x1, 0x5, 0x2, 0xfffffffd, 0x800, 0xc30, 0x6, 0x1, 0x401, 0x7, 0x4, 0x2, 0x1, 0x14bb21e8, 0x6, 0x7, 0x9, 0x2, 0x6, 0x0, 0x7, 0x9, 0x10000, 0x7, 0x9, 0xc3, 0x9, 0x33, 0x7, 0x2, 0x8, 0xfffffdc7, 0x10001, 0x1000, 0x1, 0x8, 0x3, 0x0, 0x0, 0x200, 0x80000000, 0x8, 0x80000001, 0x6, 0x0, 0x10000, 0x4, 0xd2ae, 0x8001, 0x7f, 0x3, 0x9, 0xfffffff8, 0xecc, 0xf7b7, 0x0, 0x2, 0x8, 0x8, 0x39, 0x4745b028, 0xb1, 0xffc, 0x6, 0x7ff, 0x7088, 0x5, 0x5, 0x9, 0x9dd, 0x8, 0xffff6c24, 0x6, 0x3, 0x40, 0x1, 0x2, 0x2, 0x80000001, 0x4, 0x3ff00000, 0x5, 0xb, 0x1ff, 0x34, 0x6, 0x8710, 0x10001, 0x8, 0x9, 0x8, 0xb, 0x9, 0x5, 0x7ff, 0x1000, 0xb, 0x7, 0x9, 0x0, 0x7, 0x9, 0x5, 0x5, 0x0, 0x0, 0x7, 0x6, 0x4, 0x8, 0x89df, 0x6, 0x8, 0x32, 0x8, 0x5, 0x8, 0x4, 0x40, 0x4, 0x80, 0x8, 0x0, 0x6, 0x0, 0xdef, 0x5, 0x312, 0x3, 0x2, 0x200000, 0x8, 0x7, 0x7f, 0xb4, 0x0, 0x219, 0x4, 0x5, 0x5, 0x10000, 0x3152aec6, 0x3, 0x1, 0x1ff, 0xfffffff8, 0x5a, 0x401, 0x101, 0x72, 0x5, 0x7, 0x9, 0x8000, 0xc, 0x1, 0x7, 0x5, 0x5, 0x1ff, 0x0, 0x46e1e3bd, 0x0, 0xfff, 0xfffffffb, 0x8, 0x8, 0x2, 0x4, 0x1, 0xfffffffb, 0x448bf557, 0x6, 0x7, 0x98f1, 0x8, 0x361, 0x7, 0x12, 0x8001, 0xf2, 0x2, 0x6, 0x7, 0x3, 0x6c4, 0xe181, 0x1, 0x1, 0x4, 0x10001, 0x400, 0xff, 0xae90, 0x8, 0x10000, 0x1, 0x40, 0x9, 0x8, 0x1000, 0x40, 0xd, 0xcf3, 0x2, 0xbf8, 0x0, 0x8, 0x9, 0x800, 0x9, 0x54, 0xb, 0xa49, 0x3f, 0xfffffff7, 0x4, 0x12c70, 0xcb4, 0x4, 0x4, 0x5, 0x0, 0xffff, 0x601, 0x7, 0x7, 0x4, 0xfffffffa, 0x0, 0x7, 0x0, 0xff00, 0x7, 0xffffff80, 0x6, 0x1ff, 0x10, 0xe, 0x7fffffff, 0x8a, 0xf, 0x9, 0x5, 0x2, 0x401, 0x4, 0x2, 0xc3, 0x0, 0x6, 0x4, 0x1, 0xe62, 0x1, 0x6, 0xfffffffb, 0xb, 0x6, 0x1, 0xc, 0x8000, 0xfc, 0x8, 0x0, 0x0, 0x5, 0x5, 0x400, 0xa, 0x6, 0x6, 0x80000001, 0x10, 0x18000, 0x400, 0x80000000, 0xb51, 0x3, 0x3, 0x8, 0x3, 0xfffffff7, 0x40, 0x9b59, 0x4, 0xffffffff, 0x8000, 0x3, 0x8, 0x3, 0x7, 0x1, 0x6, 0x8, 0x14e6, 0x7, 0x80, 0x9, 0x3, 0xfffffffd, 0xe, 0x4, 0x9, 0x3, 0x5, 0x9937, 0x1000, 0x7, 0x0, 0xfffffffc, 0x3, 0x1, 0x81, 0x79e74c8e, 0x8, 0xb, 0x53e, 0x5, 0x80000001, 0x5, 0x0, 0x9]}) syz_usb_connect(0x2, 0x2d, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES16], 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a\x00\x00\x00\tZ'], 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. [ 51.077306][ T5220] cgroup: Unknown subsys name 'net' [ 51.205936][ T5220] cgroup: Unknown subsys name 'cpuset' [ 51.214200][ T5220] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.501349][ T5220] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.499334][ T5246] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.508229][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.511263][ T5247] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.516343][ T5246] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.524406][ T5247] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.530536][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.537197][ T5247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.545205][ T5246] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.551448][ T5247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.566125][ T5246] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.566265][ T5247] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.581404][ T5247] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.585343][ T5246] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.589669][ T5247] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.602889][ T5247] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.611290][ T5246] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.615448][ T5250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.625501][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.626472][ T5250] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.633780][ T4626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.640478][ T5250] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.646676][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.661814][ T5246] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.663761][ T5250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.670241][ T4626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.683140][ T5246] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.691401][ T4626] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.696499][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.702706][ T4626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.705860][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.112782][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 57.184968][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 57.235235][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 57.249849][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 57.332073][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 57.365549][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.372805][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.381252][ T5239] bridge_slave_0: entered allmulticast mode [ 57.389265][ T5239] bridge_slave_0: entered promiscuous mode [ 57.415631][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.422801][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.430588][ T5239] bridge_slave_1: entered allmulticast mode [ 57.437351][ T5239] bridge_slave_1: entered promiscuous mode [ 57.459150][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.466411][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.473852][ T5230] bridge_slave_0: entered allmulticast mode [ 57.481014][ T5230] bridge_slave_0: entered promiscuous mode [ 57.519756][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.527360][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.535120][ T5230] bridge_slave_1: entered allmulticast mode [ 57.541806][ T5230] bridge_slave_1: entered promiscuous mode [ 57.548610][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.555868][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.563019][ T5232] bridge_slave_0: entered allmulticast mode [ 57.569636][ T5232] bridge_slave_0: entered promiscuous mode [ 57.577396][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.584667][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.591867][ T5232] bridge_slave_1: entered allmulticast mode [ 57.599510][ T5232] bridge_slave_1: entered promiscuous mode [ 57.619373][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.632345][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.700607][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.710362][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.718151][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.725828][ T5233] bridge_slave_0: entered allmulticast mode [ 57.732342][ T5233] bridge_slave_0: entered promiscuous mode [ 57.759078][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.770020][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.796075][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.803542][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.810712][ T5233] bridge_slave_1: entered allmulticast mode [ 57.817556][ T5233] bridge_slave_1: entered promiscuous mode [ 57.835132][ T5239] team0: Port device team_slave_0 added [ 57.842431][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.863337][ T5232] team0: Port device team_slave_0 added [ 57.886515][ T5239] team0: Port device team_slave_1 added [ 57.892516][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.899881][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.907631][ T5231] bridge_slave_0: entered allmulticast mode [ 57.914714][ T5231] bridge_slave_0: entered promiscuous mode [ 57.930051][ T5232] team0: Port device team_slave_1 added [ 57.962406][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.970291][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.977958][ T5231] bridge_slave_1: entered allmulticast mode [ 57.985148][ T5231] bridge_slave_1: entered promiscuous mode [ 57.995155][ T5230] team0: Port device team_slave_0 added [ 58.009843][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.017060][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.043583][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.057158][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.069576][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.079164][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.086368][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.112408][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.131408][ T5230] team0: Port device team_slave_1 added [ 58.137976][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.145049][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.171193][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.198653][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.206049][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.232335][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.276943][ T5233] team0: Port device team_slave_0 added [ 58.287864][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.307784][ T5233] team0: Port device team_slave_1 added [ 58.339537][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.358485][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.365588][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.392525][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.405613][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.412598][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.438844][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.451186][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.458207][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.484318][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.527241][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.534680][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.561538][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.576922][ T5239] hsr_slave_0: entered promiscuous mode [ 58.583556][ T5239] hsr_slave_1: entered promiscuous mode [ 58.592305][ T5231] team0: Port device team_slave_0 added [ 58.601169][ T5232] hsr_slave_0: entered promiscuous mode [ 58.607700][ T5232] hsr_slave_1: entered promiscuous mode [ 58.614045][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.621737][ T5232] Cannot create hsr debugfs directory [ 58.644316][ T5231] team0: Port device team_slave_1 added [ 58.663891][ T53] Bluetooth: hci1: command tx timeout [ 58.722859][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.732164][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.758439][ T53] Bluetooth: hci3: command tx timeout [ 58.763211][ T4626] Bluetooth: hci0: command tx timeout [ 58.764453][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.781806][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.788861][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.814797][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.825461][ T4626] Bluetooth: hci4: command tx timeout [ 58.825499][ T53] Bluetooth: hci2: command tx timeout [ 58.847470][ T5230] hsr_slave_0: entered promiscuous mode [ 58.856437][ T5230] hsr_slave_1: entered promiscuous mode [ 58.862433][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.870042][ T5230] Cannot create hsr debugfs directory [ 58.897209][ T5233] hsr_slave_0: entered promiscuous mode [ 58.903685][ T5233] hsr_slave_1: entered promiscuous mode [ 58.909579][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.917757][ T5233] Cannot create hsr debugfs directory [ 59.025477][ T5231] hsr_slave_0: entered promiscuous mode [ 59.031528][ T5231] hsr_slave_1: entered promiscuous mode [ 59.038451][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.046403][ T5231] Cannot create hsr debugfs directory [ 59.255016][ T5232] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.268987][ T5232] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.279497][ T5232] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.289873][ T5232] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.329434][ T5239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.341526][ T5239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.351525][ T5239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.366881][ T5239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.425965][ T5233] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.440605][ T5233] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.457248][ T5233] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.467993][ T5233] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.519318][ T5230] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.529314][ T5230] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.541293][ T5230] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.560337][ T5230] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.669365][ T5231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.697721][ T5231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.709948][ T5231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.721529][ T5231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.752803][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.777489][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.798252][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.814788][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.836300][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.861927][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.869177][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.885299][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.892422][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.907300][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.914425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.938286][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.958934][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.966115][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.985462][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.000859][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.039202][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.046403][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.059249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.066364][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.095022][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.102154][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.136296][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.143452][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.258870][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.324602][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.367936][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.375107][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.421259][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.428442][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.570115][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.626329][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.668297][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.688871][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.744028][ T53] Bluetooth: hci1: command tx timeout [ 60.790451][ T5239] veth0_vlan: entered promiscuous mode [ 60.798185][ T5232] veth0_vlan: entered promiscuous mode [ 60.824316][ T53] Bluetooth: hci0: command tx timeout [ 60.824405][ T4626] Bluetooth: hci3: command tx timeout [ 60.866885][ T5239] veth1_vlan: entered promiscuous mode [ 60.903948][ T4626] Bluetooth: hci4: command tx timeout [ 60.904851][ T53] Bluetooth: hci2: command tx timeout [ 60.918594][ T5233] veth0_vlan: entered promiscuous mode [ 60.934113][ T5233] veth1_vlan: entered promiscuous mode [ 60.960978][ T5233] veth0_macvtap: entered promiscuous mode [ 60.971750][ T5233] veth1_macvtap: entered promiscuous mode [ 60.982065][ T5232] veth1_vlan: entered promiscuous mode [ 60.992509][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.019174][ T5239] veth0_macvtap: entered promiscuous mode [ 61.047426][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.071650][ T5239] veth1_macvtap: entered promiscuous mode [ 61.090050][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.110372][ T5233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.119870][ T5233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.129473][ T5233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.139437][ T5233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.165557][ T5232] veth0_macvtap: entered promiscuous mode [ 61.172033][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.184020][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.196109][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.206070][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.217010][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.228247][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.258745][ T5231] veth0_vlan: entered promiscuous mode [ 61.266564][ T5232] veth1_macvtap: entered promiscuous mode [ 61.284921][ T5239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.293949][ T5239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.302633][ T5239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.312028][ T5239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.333628][ T5231] veth1_vlan: entered promiscuous mode [ 61.365620][ T5230] veth0_vlan: entered promiscuous mode [ 61.414319][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.425545][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.435569][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.448724][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.460429][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.487009][ T5230] veth1_vlan: entered promiscuous mode [ 61.503932][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.514562][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.524445][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.534970][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.545854][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.565117][ T5232] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.574663][ T5232] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.583713][ T5232] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.592437][ T5232] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.619485][ T5231] veth0_macvtap: entered promiscuous mode [ 61.656861][ T5230] veth0_macvtap: entered promiscuous mode [ 61.672697][ T5230] veth1_macvtap: entered promiscuous mode [ 61.686352][ T5231] veth1_macvtap: entered promiscuous mode [ 61.693471][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.701465][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.748854][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.756643][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.767905][ T5296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.771563][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.787005][ T5296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.787460][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.807031][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.817574][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.827636][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.839233][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.850223][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.877312][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.888090][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.899504][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.910419][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.921727][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.933943][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.947224][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.956279][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.970915][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.981238][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.991921][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.002003][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.014083][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.025743][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.036255][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.048372][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.072724][ T5233] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.103655][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.111613][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.139832][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.150681][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.169386][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.198932][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.234018][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.249818][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.261139][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.285720][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.300618][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.315339][ T5231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.331898][ T5231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.341224][ T5231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.361331][ T5231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.393990][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.428809][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.438543][ T5230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.447539][ T5230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.456337][ T5230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.465090][ T5230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.248253][ T53] Bluetooth: hci1: command tx timeout [ 63.274229][ T4626] Bluetooth: hci0: command tx timeout [ 63.279698][ T4626] Bluetooth: hci3: command tx timeout [ 63.290177][ T5236] Bluetooth: hci2: command tx timeout [ 63.295744][ T5236] Bluetooth: hci4: command tx timeout [ 63.391091][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.399253][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.481020][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.489204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.589879][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.598084][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.616046][ T5331] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.676970][ T5299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.694754][ T5299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.703935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.735765][ T5325] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6'. [ 63.777013][ T5325] nbd: must specify a device to reconfigure [ 63.859034][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.873412][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.006810][ T5336] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 64.189994][ T5336] bridge_slave_1: left allmulticast mode [ 64.247533][ T5336] bridge_slave_1: left promiscuous mode [ 64.278675][ T5336] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.307161][ T5344] tmpfs: Bad value for 'mpol' [ 64.385807][ T5345] Invalid ELF header magic: != ELF [ 65.024893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.053478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.313906][ T5245] Bluetooth: hci1: command tx timeout [ 65.320714][ T5245] Bluetooth: hci3: command tx timeout [ 65.326445][ T5245] Bluetooth: hci4: command tx timeout [ 65.331900][ T5245] Bluetooth: hci2: command tx timeout [ 65.338351][ T5245] Bluetooth: hci0: command tx timeout [ 66.202366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 66.545970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.555636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 66.576389][ T5363] random: crng reseeded on system resumption [ 66.624605][ T5362] binder: 5361:5362 ioctl c0306201 0 returned -14 [ 68.899139][ T5382] process 'syz.2.17' launched './file0' with NULL argv: empty string added [ 68.996537][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.093382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.377077][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.635520][ T5412] block nbd2: shutting down sockets [ 70.043380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.337646][ T5420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 71.624186][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.631308][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.485163][ T5464] vivid-000: disconnect [ 76.875310][ T940] cfg80211: failed to load regulatory.db [ 76.921498][ T5452] vivid-000: reconnect [ 81.211870][ T5284] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.580418][ T5284] usb 1-1: Using ep0 maxpacket: 8 [ 81.599103][ T5284] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.611775][ T5284] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 81.642632][ T5284] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 81.656394][ T5284] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.670071][ T5284] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 81.673180][ T5473] syz.3.34 (5473) used greatest stack depth: 18232 bytes left [ 81.679728][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.815788][ T5518] syz.2.52 uses obsolete (PF_INET,SOCK_PACKET) [ 82.010942][ T5284] usb 1-1: GET_CAPABILITIES returned 0 [ 82.016838][ T5284] usbtmc 1-1:16.0: can't read capabilities [ 82.967030][ T46] usb 1-1: USB disconnect, device number 2 [ 83.344634][ T5545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.63'. [ 83.688774][ T5555] 9pnet_virtio: no channels available for device syz [ 84.359672][ T5558] Bluetooth: MGMT ver 1.23 [ 84.628862][ T5570] netlink: 40 bytes leftover after parsing attributes in process `syz.3.74'. [ 84.742573][ T5577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.76'. [ 84.830587][ T5287] IPVS: starting estimator thread 0... [ 84.832612][ T5583] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 85.024976][ T5587] IPVS: using max 22 ests per chain, 52800 per kthread [ 85.240613][ T5608] netlink: 20 bytes leftover after parsing attributes in process `syz.3.87'. [ 85.565921][ T5624] Zero length message leads to an empty skb [ 85.704967][ T5630] warning: `syz.3.99' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.499590][ T5668] 9pnet_virtio: no channels available for device syz [ 87.519740][ T5668] overlay: Unknown parameter '/dev/snd/pcmC#D#p' [ 87.663857][ T5673] netlink: 3 bytes leftover after parsing attributes in process `syz.3.114'. [ 88.457738][ T5673] 0ªX¹¦À: renamed from caif0 [ 88.478056][ T5673] 0ªX¹¦À: entered allmulticast mode [ 88.483515][ T5673] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 89.958525][ T5703] cgroup: fork rejected by pids controller in /syz0 [ 90.628487][ T5720] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 91.162828][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.281904][ T29] audit: type=1326 audit(1728898614.658:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5734 comm="syz.2.132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f300c97dff9 code=0x0 [ 91.310906][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.425100][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.454903][ T5245] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.468896][ T5245] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.476866][ T5245] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.498086][ T5245] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.517729][ T5245] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 91.525665][ T5245] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.643157][ T5287] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 91.711420][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.811671][ T5287] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 91.821552][ T5287] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 91.919690][ T5287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 91.964483][ T5287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 91.976416][ T5287] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 92.001316][ T5287] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 92.004239][ T5738] chnl_net:caif_netlink_parms(): no params data found [ 92.012365][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 92.028851][ T5287] usb 3-1: Product: syz [ 92.033990][ T5287] usb 3-1: Manufacturer: syz [ 92.042990][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 92.049418][ T5287] cdc_wdm 3-1:1.0: skipping garbage [ 92.080660][ T5287] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 92.088604][ T12] bridge_slave_1: left allmulticast mode [ 92.094902][ T12] bridge_slave_1: left promiscuous mode [ 92.101690][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.113476][ T5287] cdc_wdm 3-1:1.0: Unknown control protocol [ 92.146673][ T12] bridge_slave_0: left allmulticast mode [ 92.152473][ T12] bridge_slave_0: left promiscuous mode [ 92.160032][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.279120][ T5287] usb 3-1: USB disconnect, device number 2 [ 93.046054][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.081278][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.128088][ T12] bond0 (unregistering): Released all slaves [ 93.543781][ T5245] Bluetooth: hci3: command tx timeout [ 93.771675][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.802383][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.824685][ T5738] bridge_slave_0: entered allmulticast mode [ 93.858544][ T5738] bridge_slave_0: entered promiscuous mode [ 93.899293][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.922581][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.948258][ T5738] bridge_slave_1: entered allmulticast mode [ 93.980815][ T5738] bridge_slave_1: entered promiscuous mode [ 94.124551][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.170591][ T12] hsr_slave_0: left promiscuous mode [ 94.199075][ T12] hsr_slave_1: left promiscuous mode [ 94.681607][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.708547][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.745495][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.759528][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.819592][ T12] veth1_macvtap: left promiscuous mode [ 94.828277][ T12] veth0_macvtap: left promiscuous mode [ 94.853224][ T12] veth1_vlan: left promiscuous mode [ 94.860045][ T12] veth0_vlan: left promiscuous mode [ 95.624067][ T5245] Bluetooth: hci3: command tx timeout [ 95.922673][ T12] team0 (unregistering): Port device team_slave_1 removed [ 95.995664][ T12] team0 (unregistering): Port device team_slave_0 removed [ 96.271290][ T5843] syz.3.156: attempt to access beyond end of device [ 96.271290][ T5843] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 96.286612][ T5843] (syz.3.156,5843,0):ocfs2_get_sector:1769 ERROR: status = -5 [ 96.294475][ T5843] (syz.3.156,5843,0):ocfs2_sb_probe:749 ERROR: status = -5 [ 96.305199][ T5843] (syz.3.156,5843,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 96.314525][ T5843] (syz.3.156,5843,0):ocfs2_fill_super:1178 ERROR: status = -5 [ 96.423120][ T5843] syz.3.156: attempt to access beyond end of device [ 96.423120][ T5843] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 96.438010][ T5843] syz.3.156: attempt to access beyond end of device [ 96.438010][ T5843] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 96.451495][ T5843] Mount JFS Failure: -5 [ 96.455842][ T5843] jfs_mount failed w/return code = -5 [ 96.907140][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.938726][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.965421][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.972875][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.982756][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.990831][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.999322][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.007070][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.014998][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.026581][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.034331][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.052067][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.059825][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.073107][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.081642][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.094855][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.108368][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.119984][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.131994][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.145445][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.152914][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.170903][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.181250][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.196681][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.206631][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.226642][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.240578][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.252560][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.261810][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.275723][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.288753][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.299183][ T940] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 97.326713][ T940] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 97.487707][ T5855] Bluetooth: MGMT ver 1.23 [ 97.499008][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.593530][ T5812] team0: No ports can be present during mode change [ 97.657614][ T5738] team0: Port device team_slave_0 added [ 97.688358][ T5738] team0: Port device team_slave_1 added [ 97.706976][ T5245] Bluetooth: hci3: command tx timeout [ 98.932327][ T5876] Invalid ELF header magic: != ELF [ 99.301108][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.386162][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.469414][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.531325][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.558534][ T5888] netlink: 32 bytes leftover after parsing attributes in process `syz.2.169'. [ 99.567397][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.674837][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.795830][ T5245] Bluetooth: hci3: command tx timeout [ 99.906162][ T5738] hsr_slave_0: entered promiscuous mode [ 99.940655][ T5738] hsr_slave_1: entered promiscuous mode [ 99.960374][ T5738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.970637][ T5738] Cannot create hsr debugfs directory [ 100.361511][ T5913] 9pnet_virtio: no channels available for device syz [ 101.038537][ T5918] netlink: 124 bytes leftover after parsing attributes in process `syz.1.175'. [ 101.049790][ T5918] nbd: must specify a device to reconfigure [ 103.396425][ T5738] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.456330][ T5738] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.472454][ T5738] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.520087][ T5738] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.803447][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.861200][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.954187][ T2927] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.961336][ T2927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.017907][ T2927] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.025111][ T2927] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.197362][ T46] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.273199][ T5319] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.323457][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.365471][ T46] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 104.384244][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.393780][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.421761][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.432935][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.443706][ T5319] usb 4-1: Using ep0 maxpacket: 8 [ 104.452229][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.453635][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.471607][ T5319] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 104.493341][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 104.499298][ T5319] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.506612][ T5738] veth0_vlan: entered promiscuous mode [ 104.514261][ T25] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=a2.43 [ 104.531305][ T5319] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.541854][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.546085][ T5738] veth1_vlan: entered promiscuous mode [ 104.549388][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.563185][ T5316] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.571849][ T25] usb 3-1: Product: syz [ 104.578161][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.589229][ T5319] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.599327][ T25] usb 3-1: Manufacturer: syz [ 104.604539][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.615709][ T25] usb 3-1: SerialNumber: syz [ 104.621404][ T5319] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.633800][ T5738] veth0_macvtap: entered promiscuous mode [ 104.636681][ T25] usb 3-1: config 0 descriptor?? [ 104.645737][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.655044][ T5319] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.667883][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.677757][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.679011][ T5738] veth1_macvtap: entered promiscuous mode [ 104.689175][ T5319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.724469][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.732599][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.743304][ T5316] usb 2-1: Using ep0 maxpacket: 8 [ 104.751257][ T5316] usb 2-1: config 1 has an invalid interface number: 167 but max is 0 [ 104.761588][ T5316] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.769173][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.772562][ T5316] usb 2-1: config 1 has no interface number 0 [ 104.788825][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.796137][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.798444][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.824232][ T5316] usb 2-1: config 1 interface 167 altsetting 253 endpoint 0x82 has invalid wMaxPacketSize 0 [ 104.834807][ T5316] usb 2-1: config 1 interface 167 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.848250][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.850543][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.856246][ T5316] usb 2-1: config 1 interface 167 has no altsetting 0 [ 104.873265][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 104.882338][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.884566][ T25] usb 3-1: Cannot retrieve CPort count: -71 [ 104.896343][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.902272][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 104.915723][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.922967][ T5319] usb 4-1: GET_CAPABILITIES returned 0 [ 104.936058][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.939284][ T25] usb 3-1: Cannot retrieve CPort count: -71 [ 104.954712][ T25] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -71 [ 104.956112][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.965154][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.978153][ T5316] usb 2-1: New USB device found, idVendor=2040, idProduct=6502, bcdDevice=5e.f6 [ 104.978553][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.987701][ T5319] usbtmc 4-1:16.0: can't read capabilities [ 105.005207][ T5316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.014935][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.015596][ T5316] usb 2-1: Product: syz [ 105.031677][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.033381][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.042736][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.054613][ T25] usb 3-1: USB disconnect, device number 3 [ 105.067989][ T5316] usb 2-1: Manufacturer: syz [ 105.072622][ T5316] usb 2-1: SerialNumber: syz [ 105.088099][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.094791][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.109213][ T5316] hub 2-1:1.167: bad descriptor, ignoring hub [ 105.116207][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.126482][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.137149][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.149496][ T5316] hub 2-1:1.167: probe with driver hub failed with error -5 [ 105.155269][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.162345][ T46] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 105.169225][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.190601][ T5316] em28xx 2-1:1.167: New device syz syz @ 480 Mbps (2040:6502, interface 167, class 167) [ 105.202285][ T46] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 105.214340][ T5316] em28xx 2-1:1.167: Video interface 167 found: [ 105.220872][ T5738] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.220935][ T5738] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.220964][ T5738] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.220991][ T5738] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.258357][ T46] usb 5-1: config 0 interface 0 has no altsetting 0 [ 105.270554][ T46] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 105.280236][ T46] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 105.290389][ T46] usb 5-1: Product: syz [ 105.297325][ T46] usb 5-1: Manufacturer: syz [ 105.302024][ T46] usb 5-1: SerialNumber: syz [ 105.351341][ T46] usb 5-1: config 0 descriptor?? [ 105.368708][ T46] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 105.380408][ T25] usb 4-1: USB disconnect, device number 2 [ 105.386725][ T5977] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 105.395039][ T5316] em28xx 2-1:1.167: unknown em28xx chip ID (0) [ 105.432940][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.453437][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.497867][ T5316] em28xx 2-1:1.167: reading from i2c device at 0xa0 failed (error=-5) [ 105.523175][ T5296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.530780][ T5316] em28xx 2-1:1.167: board has no eeprom [ 105.552534][ T5296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.595213][ T5316] em28xx 2-1:1.167: Identified as Hauppauge WinTV HVR 900 (R2) (card=18) [ 105.615160][ T25] usb 5-1: USB disconnect, device number 2 [ 105.637216][ T5316] em28xx 2-1:1.167: analog set to bulk mode. [ 105.645506][ T25] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 105.675214][ T5319] em28xx 2-1:1.167: Registering V4L2 extension [ 105.705343][ T5316] usb 2-1: USB disconnect, device number 2 [ 105.727376][ T5316] em28xx 2-1:1.167: Disconnecting em28xx [ 105.841169][ T5319] em28xx 2-1:1.167: Config register raw data: 0xffffffed [ 105.848883][ T5319] em28xx 2-1:1.167: AC97 chip type couldn't be determined [ 105.856172][ T5319] em28xx 2-1:1.167: No AC97 audio processor [ 105.862112][ T5319] em28xx 2-1:1.167: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 105.871515][ T5319] em28xx 2-1:1.167: Binding DVB extension [ 105.877789][ T5319] em28xx 2-1:1.167: no endpoint for DVB mode and transfer type 0 [ 105.886570][ T5319] em28xx 2-1:1.167: failed to pre-allocate USB transfer buffers for DVB. [ 105.895510][ T5319] em28xx 2-1:1.167: Registering input extension [ 105.905835][ T5316] em28xx 2-1:1.167: Closing input extension [ 105.908368][ T5283] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.923487][ T5316] em28xx 2-1:1.167: Freeing device [ 105.974922][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.092008][ T6023] overlayfs: missing 'lowerdir' [ 106.136947][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 106.170596][ T46] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 106.180029][ T46] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.191113][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.249575][ T46] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.269489][ T46] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.294292][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 106.295612][ T46] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.315938][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.321715][ T5283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 106.349734][ T6023] Unsupported ieee802154 address type: 0 [ 106.504345][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.610991][ T5283] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 106.796826][ T940] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.811251][ T5283] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 106.819921][ T46] usb 4-1: usb_control_msg returned -32 [ 106.820459][ T5283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.834583][ T5283] usb 3-1: Product: syz [ 106.840137][ T5283] usb 3-1: Manufacturer: syz [ 106.843297][ T46] usbtmc 4-1:16.0: can't read capabilities [ 106.844992][ T5283] usb 3-1: SerialNumber: syz [ 106.894083][ T5283] usb 3-1: config 0 descriptor?? [ 106.919107][ T5283] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 106.959321][ T5283] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 106.967457][ T6034] netlink: 124 bytes leftover after parsing attributes in process `syz.4.191'. [ 107.015962][ T6034] nbd: must specify a device to reconfigure [ 107.121895][ T46] usb 3-1: USB disconnect, device number 4 [ 107.151806][ T46] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 107.180377][ T46] ti_usb_3410_5052 3-1:0.0: device disconnected [ 107.210157][ T940] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.221111][ T940] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.240979][ T940] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 107.251646][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.260521][ T940] usb 2-1: Product: syz [ 107.267256][ T940] usb 2-1: Manufacturer: syz [ 107.271888][ T940] usb 2-1: SerialNumber: syz [ 107.313769][ T5284] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 107.476245][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.493277][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.510039][ T5284] usb 1-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 107.521952][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.541327][ T5284] usb 1-1: config 0 descriptor?? [ 107.875942][ T46] usb 4-1: USB disconnect, device number 3 [ 107.984175][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.037723][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.065586][ T5284] ryos 0003:1E7D:3138.0002: unknown main item tag 0x0 [ 108.105741][ T5284] ryos 0003:1E7D:3138.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:3138] on usb-dummy_hcd.0-1/input0 [ 108.183146][ T5287] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 108.270792][ T5284] usb 1-1: USB disconnect, device number 3 [ 108.353471][ T5287] usb 3-1: Using ep0 maxpacket: 32 [ 108.361005][ T5287] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.384328][ T5287] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.406224][ T5287] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.427707][ T5287] usb 3-1: Product: syz [ 108.439300][ T5287] usb 3-1: Manufacturer: syz [ 108.445539][ T5287] usb 3-1: SerialNumber: syz [ 108.460232][ T5287] usb 3-1: config 0 descriptor?? [ 108.485157][ T6077] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.589323][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.600494][ T940] cdc_ncm 2-1:1.0: bind() failure [ 108.645405][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.683258][ T5237] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 108.709513][ T6075] [ 108.711889][ T6075] ============================================ [ 108.718060][ T6075] WARNING: possible recursive locking detected [ 108.724241][ T6075] 6.12.0-rc2-next-20241011-syzkaller #0 Not tainted [ 108.730839][ T6075] -------------------------------------------- [ 108.737000][ T6075] syz.2.195/6075 is trying to acquire lock: [ 108.742952][ T6075] ffffffff8f69c328 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_release+0x169/0x2f0 [ 108.752584][ T6075] [ 108.752584][ T6075] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 108.759950][ T6075] ffffffff8f69c328 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_release+0x79/0x2f0 [ 108.769469][ T6075] [ 108.769469][ T6075] other info that might help us debug this: [ 108.777538][ T6075] Possible unsafe locking scenario: [ 108.777538][ T6075] [ 108.784993][ T6075] CPU0 [ 108.788283][ T6075] ---- [ 108.791568][ T6075] lock(chaoskey_list_lock); [ 108.796256][ T6075] lock(chaoskey_list_lock); [ 108.800954][ T6075] [ 108.800954][ T6075] *** DEADLOCK *** [ 108.800954][ T6075] [ 108.809103][ T6075] May be due to missing lock nesting notation [ 108.809103][ T6075] [ 108.817430][ T6075] 1 lock held by syz.2.195/6075: [ 108.822373][ T6075] #0: ffffffff8f69c328 (chaoskey_list_lock){+.+.}-{3:3}, at: chaoskey_release+0x79/0x2f0 [ 108.832329][ T6075] [ 108.832329][ T6075] stack backtrace: [ 108.838240][ T6075] CPU: 1 UID: 0 PID: 6075 Comm: syz.2.195 Not tainted 6.12.0-rc2-next-20241011-syzkaller #0 [ 108.848325][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.858396][ T6075] Call Trace: [ 108.861677][ T6075] [ 108.864602][ T6075] dump_stack_lvl+0x241/0x360 [ 108.869285][ T6075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.874478][ T6075] ? __pfx__printk+0x10/0x10 [ 108.879065][ T6075] ? lockdep_unlock+0x16a/0x300 [ 108.883916][ T6075] print_deadlock_bug+0x483/0x620 [ 108.888931][ T6075] validate_chain+0x15e2/0x5920 [ 108.893777][ T6075] ? __pfx_validate_chain+0x10/0x10 [ 108.898962][ T6075] ? __pfx_lock_release+0x10/0x10 [ 108.903977][ T6075] ? unwind_next_frame+0x18e6/0x22d0 [ 108.909249][ T6075] ? validate_chain+0x11e/0x5920 [ 108.914186][ T6075] ? preempt_count_add+0x93/0x190 [ 108.919217][ T6075] ? __kernel_text_address+0xd/0x40 [ 108.924409][ T6075] ? unwind_get_return_address+0x4d/0x90 [ 108.930036][ T6075] ? mark_lock+0x9a/0x360 [ 108.934355][ T6075] __lock_acquire+0x1384/0x2050 [ 108.939196][ T6075] lock_acquire+0x1ed/0x550 [ 108.943687][ T6075] ? chaoskey_release+0x169/0x2f0 [ 108.948704][ T6075] ? __pfx_lock_acquire+0x10/0x10 [ 108.953717][ T6075] ? __pfx___might_resched+0x10/0x10 [ 108.958996][ T6075] ? chaoskey_release+0x15b/0x2f0 [ 108.964023][ T6075] ? __pfx_lock_release+0x10/0x10 [ 108.969040][ T6075] __mutex_lock+0x136/0xd70 [ 108.973532][ T6075] ? chaoskey_release+0x169/0x2f0 [ 108.978546][ T6075] ? __mutex_unlock_slowpath+0x21d/0x750 [ 108.984207][ T6075] ? chaoskey_release+0x169/0x2f0 [ 108.989230][ T6075] ? __pfx___mutex_lock+0x10/0x10 [ 108.994249][ T6075] ? __pfx___fsnotify_parent+0x10/0x10 [ 108.999715][ T6075] chaoskey_release+0x169/0x2f0 [ 109.004558][ T6075] ? __pfx_chaoskey_release+0x10/0x10 [ 109.009927][ T6075] __fput+0x23c/0xa50 [ 109.013908][ T6075] task_work_run+0x24f/0x310 [ 109.018502][ T6075] ? _raw_spin_unlock+0x28/0x50 [ 109.023347][ T6075] ? __pfx_task_work_run+0x10/0x10 [ 109.028452][ T6075] ? syscall_exit_to_user_mode+0xa3/0x370 [ 109.034166][ T6075] syscall_exit_to_user_mode+0x168/0x370 [ 109.039800][ T6075] do_syscall_64+0x100/0x230 [ 109.044384][ T6075] ? clear_bhb_loop+0x35/0x90 [ 109.049051][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.054945][ T6075] RIP: 0033:0x7f300c97dff9 [ 109.059355][ T6075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.078949][ T6075] RSP: 002b:00007ffcf0b97d28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.087351][ T6075] RAX: 0000000000000000 RBX: 000000000001a564 RCX: 00007f300c97dff9 [ 109.095315][ T6075] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 109.103272][ T6075] RBP: 00007f300cb37a80 R08: 0000000000000001 R09: 00007ffcf0b9801f [ 109.111230][ T6075] R10: 00007f300c800000 R11: 0000000000000246 R12: 000000000001a8b6 [ 109.119195][ T6075] R13: 00007ffcf0b97e30 R14: 0000000000000032 R15: ffffffffffffffff [ 109.127163][ T6075] [ 109.140237][ T940] usb 2-1: USB disconnect, device number 3 [ 109.451137][ T5237] usb 5-1: device descriptor read/all, error -71 [ 109.487308][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.586502][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.655375][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.716867][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.796505][ T12] bridge_slave_1: left allmulticast mode [ 109.802776][ T12] bridge_slave_1: left promiscuous mode [ 109.808633][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.816963][ T12] bridge_slave_0: left allmulticast mode [ 109.822624][ T12] bridge_slave_0: left promiscuous mode [ 109.829188][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.948702][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.958788][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.968525][ T12] bond0 (unregistering): Released all slaves [ 110.184636][ T12] hsr_slave_0: left promiscuous mode [ 110.190596][ T12] hsr_slave_1: left promiscuous mode [ 110.198191][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.205710][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.215079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.222508][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.231975][ T12] veth1_macvtap: left promiscuous mode [ 110.239157][ T12] veth0_macvtap: left promiscuous mode [ 110.260118][ T12] veth1_vlan: left promiscuous mode [ 110.266274][ T12] veth0_vlan: left promiscuous mode [ 110.431319][ T12] team0 (unregistering): Port device team_slave_1 removed [ 110.452085][ T12] team0 (unregistering): Port device team_slave_0 removed [ 110.739451][ T12] IPVS: stop unused estimator thread 0... [ 110.784086][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.842655][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.896863][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.941387][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.040176][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.079662][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.131073][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.177764][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.251370][ T12] bridge_slave_1: left allmulticast mode [ 111.260267][ T12] bridge_slave_1: left promiscuous mode [ 111.267548][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.276445][ T12] bridge_slave_0: left allmulticast mode [ 111.282108][ T12] bridge_slave_0: left promiscuous mode [ 111.289734][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.299131][ T12] bridge_slave_0: left allmulticast mode [ 111.305346][ T12] bridge_slave_0: left promiscuous mode [ 111.311021][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.488646][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.498919][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.508518][ T12] bond0 (unregistering): Released all slaves [ 111.519931][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.529848][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.539557][ T12] bond0 (unregistering): Released all slaves [ 111.808466][ T12] hsr_slave_0: left promiscuous mode [ 111.814338][ T12] hsr_slave_1: left promiscuous mode [ 111.822836][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.831318][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.840566][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.849225][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.860080][ T12] hsr_slave_0: left promiscuous mode [ 111.868070][ T12] hsr_slave_1: left promiscuous mode [ 111.874107][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.881501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.889462][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.897230][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.908757][ T12] veth1_macvtap: left promiscuous mode [ 111.915676][ T12] veth0_macvtap: left promiscuous mode [ 111.921243][ T12] veth1_vlan: left promiscuous mode [ 111.927472][ T12] veth0_vlan: left promiscuous mode [ 111.934248][ T12] veth1_macvtap: left promiscuous mode [ 111.939756][ T12] veth0_macvtap: left promiscuous mode [ 111.946742][ T12] veth1_vlan: left promiscuous mode [ 111.952066][ T12] veth0_vlan: left promiscuous mode [ 112.122630][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.138896][ T12] team0 (unregistering): Port device team_slave_0 removed [ 112.277736][ T12] team0 (unregistering): Port device team_slave_1 removed [ 112.299326][ T12] team0 (unregistering): Port device team_slave_0 removed