last executing test programs: 2m55.152382815s ago: executing program 2 (id=156): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x2f) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_trie\x00') read$FUSE(r7, &(0x7f0000006180)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x2, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) socket$kcm(0xa, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000840)={{0x12, 0x1, 0x0, 0x75, 0x5f, 0x32, 0x20, 0x17dd, 0x5500, 0xf35e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xf0, 0x42, 0xa4, 0x0, [], [{{0x9, 0x5, 0x2, 0x3}}, {{0x9, 0x5, 0xd, 0x3}}]}}]}}]}}, 0x0) sendto$inet6(r9, &(0x7f0000000040)='H', 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m52.51798268s ago: executing program 2 (id=164): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000ec0)=ANY=[@ANYBLOB="9201010200000010450c1251400001020301090224000101004006090400de010301020b00040600da01228b0e090000000000000400"], &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) 2m48.729728169s ago: executing program 2 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_io_uring_setup(0x10f, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = semget$private(0x0, 0x1, 0x81) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(r1, 0x1, 0x10, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x58}}, 0x0) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x100000000000f7) keyctl$revoke(0x3, r4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0xa0202, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r6, 0x4004510d, &(0x7f0000000000)=0xa) r7 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) 2m42.368558745s ago: executing program 2 (id=192): syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000008a80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x88000100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x14, r4, 0xc8036ab6d6cbef07, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0xd0, r4, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:shell_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcp_state_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20040894}, 0x8004) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44048) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xa0, r6, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vcan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:tape_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="44c4e8a9b70b34a944487b6e64c2bc2c109e87ea80f4fc3f7d6f14794a47bc086ea2c7a3aad7bcb639035b9423b1a2aae7ce9346c64c6ffb754a77271c098cc7c4443824369b0358e52ecde31057354f4321ba3e09a8480bbedf4e50a5dbe6824ee645bc0a64a896b9dfc110ae5808351f8cf22416e58ef323e7b92537991277e93b7741ba5fd63a", @ANYRESDEC=r0, @ANYBLOB="01000000000000000000010000000c00020000000000000000000c0006000101000000000000100007800c00028008000100", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) 2m41.891696774s ago: executing program 2 (id=195): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3, 0x0, 0x0}) unshare(0x8000400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000100000000000000000095"], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='block_bio_remap\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000023c0)={r3, 0x87, &(0x7f0000000800)}, 0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) 2m39.983966796s ago: executing program 2 (id=204): open$dir(&(0x7f0000000280)='./file0\x00', 0x600900, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x40000023, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sync() sync() r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="200000001114"], 0x20}}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 2m24.932856147s ago: executing program 32 (id=204): open$dir(&(0x7f0000000280)='./file0\x00', 0x600900, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r0, 0x0, 0x0, 0x0, 0x40000023, 0x1, {0x2}}) io_uring_enter(r1, 0x6e2, 0x600, 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x4}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sync() sync() r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="200000001114"], 0x20}}, 0x40) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000004}, 0x80) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 15.879206228s ago: executing program 1 (id=562): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x4a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0xbab, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe654, 0x0, 0xae, 0x0, 0x0, 0x88, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0xb8, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xe) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000015cbc5ff54a79cb0f799bd96ab14102468ba2df2d827e0d3d7a3000be8997f767d6268accef3dfe27ae23c1fb1b3139604c9faaa60de71d64b9a9e917a5f414e6a7e034f9a195012a3f9a0321d498278c620cb6617fa0c07dc80e5d3d90415c0cb2e8200654f0e3635b2c0ffc80409af34a3a1e0a61b23f22b840948edb065d0431eefd73acfe0cb06f40ff2a9cd9f0d5698e3108a43d5fdc841395d88aab1135a2266f03c2c1a11dd63ad4e11d9d31a6ad3a1858cac52b63e41b4d"], 0x2c}}, 0x0) 14.217464344s ago: executing program 1 (id=564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000e060d0000000000000000000a000009050001"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) 13.073897202s ago: executing program 1 (id=567): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) 12.763599604s ago: executing program 0 (id=570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x1, 0x0, 0x0, 0x31, 0x0, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000c80)={0x3, &(0x7f0000003480)=[{}, {@fixed}, {@fixed}]}) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d2828"], 0xe0}], 0x1}, 0x40040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x80, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) 11.629691293s ago: executing program 3 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='net/rt_cache\x00') lseek(r1, 0xae7d, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x400, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f00000003c0)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r8, 0x0, 0x0) r9 = socket(0x1d, 0x2, 0x6) close(r9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800657a00000189abd87559184c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000200003801c0000800800034000000002100002800c00028008000180fffffffc140000001000010000000000000000000084000a"], 0xe0}}, 0x4) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f00000006c0)=0x400, 0x4) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4a21, 0x9, @mcast2, 0x4}, 0x1c) 10.490682019s ago: executing program 3 (id=573): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x390, 0x280, 0x280, 0x0, 0x280, 0x390, 0x350, 0x350, 0x390, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fb048abaa303de86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe91e59fb2978f6fc3ede666a84d0f6a748acdf95f03c3555c84f5009700"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) 8.94949933s ago: executing program 1 (id=576): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000240)={0xc, 0xffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000300)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80[fg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:9E\xe9Js=\x97\x9dT\x84t\xeb_\'\b\xd0~\f\v,\xedXQ\xfeK\x93\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x99D\xc4R@\'\n\xa6.y%\x0f8n5t\xdf=\x12\x8e\x85\x8b&x\x19&\xae\xff\xe3\xdc\xb3\x13\'\xeco]\x9f\x82\x13\xb7H', 0x0) r2 = fsopen(&(0x7f0000000200)='jffs2\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000180)='user\x00', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='ocfs2\x00', 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @pix={0x204, 0x20007f, 0x43564548, 0x1, 0x20829, 0x3, 0x4, 0x6, 0x0, 0x3, 0x0, 0x4}}}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80902, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000b0ed1efa00b5a8263184db61b500940711d1dda681cd770000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001], 0x1, 0x3c4210}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) 7.602763591s ago: executing program 5 (id=580): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) io_cancel(0x0, 0x0, 0x0) 7.542957751s ago: executing program 0 (id=581): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mount$9p_xen(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80080, &(0x7f0000000140)={'trans=xen,', {[{@cache_mmap}, {@posixacl}, {@cache_none}], [{@smackfshat={'smackfshat', 0x3d, ')-'}}, {@dont_hash}, {@audit}, {@pcr={'pcr', 0x3d, 0x1d}}, {@smackfshat={'smackfshat', 0x3d, '.'}}]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 7.170522867s ago: executing program 3 (id=582): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x10f) (async) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='./file1\x00', 0x104) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) (async) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x400) (async) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000021) (async) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) (async) r9 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r9, 0x0) (async) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='afs_make_fs_call1\x00', r10, 0x0, 0x9}, 0x18) 6.770275854s ago: executing program 0 (id=583): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x8201, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x3}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffffff, 0x8, 0x0, @void}, 0x10) r4 = gettid() sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="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", 0x8ec0}, {0x0, 0x803e}, {&(0x7f0000000140)="bd", 0x1}], 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000004101002001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000afc9ca0d7aec6118cdf773d8ba3179c6a8d1545d287c9878cedce9d8388bae9f38b9a59717e1462e8000ffdd7dd57b8354d6560b3fac726abc48ec5bfec45303f98e0cf8b8a554f1c72484658a19505b40681fbfcc21aa8e84ad89293349db801025f4bb131b6badc1f0a7c18dec053609a4796771ec1eee45f93a7a162419d9ea1af3681727d557"], 0x60}, 0x0) 6.759375106s ago: executing program 5 (id=584): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0xffffffffffffff01) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x10fffffc, 0x10000, 0x0, 0xfffffffe}, 0x10) write(r2, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000000000800040001000000", 0x24) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x8f2, 0x4) r3 = dup(r1) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@rthdr_2292={{0x18, 0x29, 0x3e, {0x84, 0x0, 0x2, 0x1}}}], 0x18}, 0x24004800) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x100, 0x4}}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000002480)={0x1c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r9, &(0x7f00000000c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000000000800000000000c300000000faff089500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000002780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wf{Ndno=', @ANYRESHEX=r3, @ANYBLOB=',nodevmap,k']) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x9, 0x7ef80dc0, {{0x6, 0x4, 0x1, 0x4, 0x18, 0x67, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop]}}}}}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.69786852s ago: executing program 3 (id=585): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="00000000000000001c001a8008000280080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x9, 0x4) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000) socket$kcm(0x10, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 5.447422639s ago: executing program 4 (id=588): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='vlan0\x00', 0x10) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @empty=0x4c0, @local}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r3, 0x0, 0x1) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f00000000c0)=""/134, 0x86) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x60}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) 4.973794097s ago: executing program 4 (id=589): ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace$setregs(0xd, r1, 0x4, &(0x7f0000000100)="589f8044ecec214d82cfc32736a93061994696d0991329971ba1408ffc74f52e298c0c4975fcfe8c13c672ffdbdd6756a7eb644e526114ba4bb0717b82db433bf25a2d") r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x22020600) r3 = socket(0x40000000015, 0x5, 0x0) vmsplice(r3, &(0x7f00000006c0)=[{&(0x7f0000000300)="ca30b2c86daaf7bf1ab697b6436a3b7fda39b263e5cb00504317", 0x1a}, {&(0x7f0000000440)="db194a796529bec058966fda78036ca1e5df8fd9554e94244ea88a765bafad58fd71de803f5be2ff41cef30d49dab4680bd312256c059133a0bcccc381819d084781020bc5954c691972a3a59de44d9fd30a89de0dfcbec3b9637c0d4fa264f4783c33ef941270a81aa09ea78aaddef46b70fc4e677db4910391626bc555e69cff077163f499118102fdac5b156afd9addf176df9986d621ca2a5c8da79365131626905e31c71786a7da213ed77ae0bfb0713bae0c08b88fbc2ca4c48b0c6ea5959658bc99b2b0cad9342676dd5e5468034257ac78c1a4d9373640c6b1", 0xdd}], 0x2, 0x3) syz_open_dev$mouse(&(0x7f00000002c0), 0x2, 0x141) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r6, 0x0, 0x0, 0x300, 0x0) syz_fuse_handle_req(r2, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r5, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000004300)={0x50, 0x0, r4, {0x7, 0x26, 0x20003, 0xffffffffc7ebca6b, 0x0, 0xfffc, 0x6, 0x6510858d, 0x0, 0x0, 0x10, 0x10001}}, 0x4f) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x16, {{0xffffffffffffffff, 0x2, 0x4, 0x0, 0xfffffffb, 0x3, {0x0, 0x7fff, 0x6, 0xffff, 0x0, 0x1, 0x880, 0x9, 0x0, 0x8000, 0x0, r5, 0xee01, 0xfffffff9, 0x1}}, {0x0, 0x1}}}, 0x0, 0x0}) r7 = getgid() r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) shutdown(r8, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa340800450800280000000000069078ac1414bbe000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c08ffff90780000"], 0x0) keyctl$chown(0x4, 0x0, r5, r7) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a00)={&(0x7f0000000180)={0x50, 0x0, 0xffffffffffffffff, {0x7, 0x29, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$radio(&(0x7f0000000700), 0x2, 0x2) 4.814378622s ago: executing program 0 (id=590): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='oom_score_adj_update\x00'}, 0x18) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async, rerun: 32) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async, rerun: 32) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f00000002c0)) (rerun: 32) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x43, 0x3}, 0x10) (async) getpriority(0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -9'], 0x2d, 0xfffffffffffffff9) (async, rerun: 64) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000340)={0x0, 0x0, 0xa, 0x0, 0x6}) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x4004004) 4.547669012s ago: executing program 1 (id=591): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x1, 0x0, 0x0, 0x31, 0x0, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000c80)={0x3, &(0x7f0000003480)=[{}, {@fixed}, {@fixed}]}) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2d2828"], 0xe0}], 0x1}, 0x40040) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x149802, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x80, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) 4.418813808s ago: executing program 5 (id=592): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) bind(r0, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x8001, @dev={0xfe, 0x80, '\x00', 0x30}, 0x8, 0x6}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) 4.416075552s ago: executing program 0 (id=593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x390, 0x280, 0x280, 0x0, 0x280, 0x390, 0x350, 0x350, 0x390, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0x250, 0x2c0, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'syzkaller1\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1ab618fe, 0x800}}}, @common=@inet=@hashlimit1={{0x58}, {'syzkaller1\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0xa6}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "6f9af9b36fb048abaa303de86137fe234fd9dcb8889ace36894592455cb2b59b1ea7fe91e59fb2978f6fc3ede666a84d0f6a748acdf95f03c3555c84f5009700"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x2, 0x5002) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044884) 4.084328683s ago: executing program 5 (id=594): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x80800}) listen(r5, 0x5) io_uring_enter(r6, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r11 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r11, 0xc0305616, &(0x7f0000000240)) 4.083213432s ago: executing program 3 (id=595): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x1, {0x4e21, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x11, 0x8884}, 0x20081004) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="2000282b8198f1b5092e81f5d7c5e1bd2b5c6f68474fc365d942"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x20040004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r9 = syz_pidfd_open(r0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @any, 0x1, 0x2}, 0xe) r11 = pidfd_getfd(r9, r9, 0x0) setns(r11, 0x66020000) syz_clone(0x498144ee596281c9, 0x0, 0x0, 0x0, 0x0, 0x0) 3.105976514s ago: executing program 4 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r1, 0xd3) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x6000000) 2.766295058s ago: executing program 4 (id=597): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)={0x2, 0x400000000000003, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0xfffffffffffffffd}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x400}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xe8}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.744315406s ago: executing program 5 (id=598): syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffff7, 0x4c0201) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000cc0)={@ipv4={""/10, ""/2, @private}, 0x0}, &(0x7f0000000d00)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000dc0)={'ip_vti0\x00', &(0x7f0000000d40)={'ip_vti0\x00', r1, 0x10, 0x20, 0x4, 0x3, {{0x13, 0x4, 0x2, 0x0, 0x4c, 0x66, 0x0, 0x3, 0x4, 0x0, @local, @local, {[@generic={0xd0, 0x7, "4495b24495"}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x24, 0x3, [{0x5, 0xd, "6ad04a0ddb5fbc16da5e69"}, {0x1, 0x11, "9ff53947d761b1ec1a2e0f905205f4"}]}, @ssrr={0x89, 0x7, 0xe3, [@multicast2]}]}}}}}) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0x116c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) lseek(r2, 0x7fff, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000c40)={'\x00', 0x7, 0x6, 0x2, 0x400, 0x7fff, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x7fff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0xe4}) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000e00)) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 1.546372562s ago: executing program 4 (id=599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b703000000000000850000009d00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x90) 481.972688ms ago: executing program 0 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000020000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800008a0000007b8af8ff0000158a16045f7d8e4b0a0f45bbc5f50000bfa200000000000007a92013c91156dcbc4c812fa8bb3cd602ffb7030000820000009500000000000000613a39e83ca723741c9db10d4be925e5ff1adcd905291f6cae096dff4a7eb041aa411606d20500000000000000a6a48618cfdb6b40c597ec942f70b65598cb95ed89e9e8fbf2920000eac6eedffa29"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1000040000000400000002000000000000004bf4776a3843ae8b2728ee1763b38f25d394e880a7a245ceae52bff2f4ce940eb13ede06a32a2f6dec15695c9a757266d11a67de5fb74d14d2576e576bd3e341317b86dd31488def4fb10581bb565be6f6db044698bfb98ffaa483b86f34f9cf4548b1e6aa9b5334dbf63701d60a85b9daec2c4f5050e44f109b58d9733cf1370075be66b03c44ae83e4afec00fc2ae5e019bb3957077d0503a3c9e955ca40ca6f1d84ca2a006ac9b405e1899cc70b5280b33b73d7892b40361dc7927a94f364bf0cd6976e06f7b5781336cdc3a12cf45055e08214c5e454ac2cfdde4e4e5056f7", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240), 0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000300)={'sit0\x00', r3, 0x10, 0x1, 0x1ff, 0x8, {{0x23, 0x4, 0x0, 0x6, 0x8c, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @multicast1, {[@end, @timestamp_addr={0x44, 0x3c, 0xa1, 0x1, 0x8, [{@multicast2, 0x3}, {@empty, 0xfe}, {@loopback, 0x377000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x7}]}, @generic={0x94, 0x11, "1e29b270755ede776dd8b0a487b145"}, @timestamp_addr={0x44, 0x4, 0xa2, 0x1, 0xf}, @timestamp={0x44, 0x20, 0xee, 0x0, 0xb, [0x9, 0x2, 0x7, 0x7, 0x3, 0xda, 0x174000]}, @ra={0x94, 0x4, 0x1}, @end]}}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x26, &(0x7f0000000000)=ANY=[@ANYRES16=r4], 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000003c0007010000000000400000037c00000400fc80100001805f"], 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x2b0187ad7de13586) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x13, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r9, r10, &(0x7f00000003c0)=@IORING_OP_NOP={0x0, 0x65}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x1b, &(0x7f0000001800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$trusted_overlay_upper(&(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000001c0), 0x0, 0x0, 0x3) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) 330.196626ms ago: executing program 5 (id=601): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB="400a060000006e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) recvmsg$can_j1939(0xffffffffffffffff, 0x0, 0x2140) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ftruncate(r4, 0xc17a) (async) ftruncate(r4, 0xc17a) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x1, 0x4}}) (async) ioctl$KVM_HAS_DEVICE_ATTR_vm(r4, 0x4018aee3, &(0x7f0000000180)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000140)={0x1, 0x4}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xfffffffe, 0x13100}, &(0x7f0000000100), &(0x7f0000000000)) (async) r5 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xfffffffe, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) 200.883662ms ago: executing program 4 (id=602): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x1, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0xa92) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x8000000, 0x8, 0x201, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) r3 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0019f5217063342f8c8c000077efad5f5fce22000000000000000032323324ad29e28f2ba063926d85c003052b532f17845eda1e72d61b49efbe4d15333668771cce2835557ba855b956bb62e3506db837e329e7437517", @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000003600)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000002400)="9c", 0x1}], 0x1}, 0x800) syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') read$char_usb(r0, &(0x7f000001c040)=""/4115, 0x6b) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[], 0x50) 140.112745ms ago: executing program 3 (id=603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0xc0042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r6, 0x4040ae9e, &(0x7f0000000100)={0xd080000000000000, 0x8000000, 0x5, 0x9, 0x1b}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfffb, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0xf, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c8}, 0x20004804) r10 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r10, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015"], 0x38}, 0x1, 0x300}, 0x0) r11 = socket(0x10, 0x3, 0x0) syz_open_dev$sndmidi(&(0x7f0000000180), 0x91, 0x40000) sendmmsg$alg(r11, &(0x7f0000000140), 0x4924b68, 0x0) 0s ago: executing program 1 (id=604): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0, 0x0, 0x1}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) fchmod(r1, 0x100) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x28, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) kernel console output (not intermixed with test programs): nterface activated: batadv_slave_0 [ 101.417124][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.479863][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.523117][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.549574][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.570587][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.582349][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.591861][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.602355][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.667609][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.680767][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.686877][ T5849] veth0_vlan: entered promiscuous mode [ 101.752611][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.776473][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.788358][ T5849] veth1_vlan: entered promiscuous mode [ 101.856304][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.910603][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.926379][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.944322][ T5855] veth0_vlan: entered promiscuous mode [ 101.967882][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.991205][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.086700][ T5855] veth1_vlan: entered promiscuous mode [ 102.271233][ T5849] veth0_macvtap: entered promiscuous mode [ 102.379393][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.415126][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.440530][ T5953] ksmbd: Unknown IPC event: 4, ignore. [ 102.453607][ T5849] veth1_macvtap: entered promiscuous mode [ 102.676529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 102.677050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.751113][ T5855] veth0_macvtap: entered promiscuous mode [ 102.796822][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.009432][ T5158] Bluetooth: hci1: command tx timeout [ 103.016365][ T5855] veth1_macvtap: entered promiscuous mode [ 103.063542][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.089735][ T5158] Bluetooth: hci0: command tx timeout [ 103.189197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.599049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.700571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.007867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 104.018979][ T5158] Bluetooth: hci2: command tx timeout [ 104.024482][ T5158] Bluetooth: hci4: command tx timeout [ 104.030048][ T5845] Bluetooth: hci3: command tx timeout [ 104.211297][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.229568][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.238343][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.281984][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.361187][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.439064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.447766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.492371][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.718933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.929374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.414351][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.433005][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.443845][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.452759][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.550836][ T5968] IPv6: sit1: Disabled Multicast RS [ 105.692164][ T3574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.724568][ T3574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.675874][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.716924][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.844444][ T2985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.883134][ T2985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.103906][ T5853] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 107.232703][ T5994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.650649][ T1205] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.726653][ T5853] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.124549][ T5853] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.170655][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.259381][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.269257][ T5853] usb 2-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 108.350156][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.363881][ T1205] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 108.403570][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.454283][ T5853] usb 2-1: config 0 descriptor?? [ 108.466197][ T1205] usb 3-1: Product: syz [ 108.478905][ T1205] usb 3-1: Manufacturer: syz [ 108.504439][ T1205] usb 3-1: SerialNumber: syz [ 108.540154][ T1205] usb 3-1: config 0 descriptor?? [ 108.627082][ T5158] Bluetooth: hci5: urb ffff88814cd07100 submission failed (2) [ 108.752591][ T5922] usb 3-1: USB disconnect, device number 2 [ 108.991763][ T5853] cherry 0003:046A:0023.0001: item fetching failed at offset 1/3 [ 109.452450][ T5853] cherry 0003:046A:0023.0001: probe with driver cherry failed with error -22 [ 109.973806][ T5853] usb 2-1: USB disconnect, device number 2 [ 110.091173][ T6012] Zero length message leads to an empty skb [ 111.181551][ T5853] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.379810][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 111.435319][ T5853] usb 3-1: too many configurations: 60, using maximum allowed: 8 [ 111.810382][ T6031] netlink: 248 bytes leftover after parsing attributes in process `syz.1.19'. [ 112.333726][ T5853] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 112.606450][ T6031] syz.1.19 (6031) used greatest stack depth: 19776 bytes left [ 112.621654][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 112.631391][ T5853] usb 3-1: Product: syz [ 112.635628][ T5853] usb 3-1: Manufacturer: syz [ 112.640587][ T5853] usb 3-1: SerialNumber: syz [ 112.672950][ T5853] usb 3-1: config 0 descriptor?? [ 112.724997][ T5853] pwc: Philips SPC 880NC USB webcam detected. [ 114.877003][ T5853] pwc: Warning: more than 1 configuration available. [ 115.118804][ T5853] pwc: Failed to set LED on/off time (-71) [ 115.148743][ T5853] pwc: send_video_command error -71 [ 115.154381][ T5853] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 115.199856][ T5853] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 115.260395][ T5853] usb 3-1: USB disconnect, device number 3 [ 115.469884][ T5827] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 115.638931][ T5827] usb 2-1: Using ep0 maxpacket: 32 [ 115.649169][ T5158] Bluetooth: hci0: command tx timeout [ 115.689460][ T5827] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.749838][ T5827] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 115.775394][ T5827] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.876103][ T5827] usb 2-1: config 0 descriptor?? [ 116.548700][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.573277][ T6072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.619815][ T6072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.755126][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.797903][ T5827] usb 2-1: string descriptor 0 read error: -71 [ 116.806342][ T5902] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.883672][ T5827] usbhid 2-1:0.0: can't add hid device: -71 [ 116.886229][ T6074] team0: Device gtp0 is of different type [ 116.901015][ T5902] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.905061][ T5827] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 116.933794][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.964612][ T5902] usb 5-1: Product: syz [ 116.970582][ T5902] usb 5-1: Manufacturer: syz [ 116.980880][ T5827] usb 2-1: USB disconnect, device number 3 [ 117.039439][ T6078] nbd0: detected capacity change from 0 to 549764202496 [ 117.087369][ T5902] usb 5-1: SerialNumber: syz [ 117.769895][ T5842] Bluetooth: hci0: command tx timeout [ 117.818965][ T5158] block nbd0: Receive control failed (result -104) [ 117.860527][ T5902] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 117.910505][ T5902] cdc_mbim 5-1:1.0: bind() failure [ 117.995365][ T6087] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.014054][ T5915] usb 5-1: USB disconnect, device number 2 [ 119.808844][ T5158] Bluetooth: hci0: command tx timeout [ 119.844714][ T6093] sctp: failed to load transform for md5: -4 [ 120.248216][ T6130] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 120.254980][ T6130] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.338092][ T6130] vhci_hcd vhci_hcd.0: Device attached [ 120.339186][ T5853] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 120.443095][ T30] audit: type=1326 audit(1754277393.955:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc598eb69 code=0x7ffc0000 [ 120.524767][ T30] audit: type=1326 audit(1754277393.965:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc598eb69 code=0x7ffc0000 [ 120.568674][ T2149] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 120.589253][ T5853] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 120.608768][ T5853] usb 2-1: config 0 has no interface number 0 [ 120.625236][ T5853] usb 2-1: config 0 interface 196 has no altsetting 0 [ 120.632995][ T30] audit: type=1326 audit(1754277393.965:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdc598eb69 code=0x7ffc0000 [ 120.680915][ T5853] usb 2-1: New USB device found, idVendor=05da, idProduct=1018, bcdDevice=6e.b8 [ 120.691211][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.701343][ T30] audit: type=1326 audit(1754277393.965:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc598eb69 code=0x7ffc0000 [ 120.723741][ T5853] usb 2-1: Product: syz [ 120.739216][ T6141] process 'syz.0.42' launched './file0' with NULL argv: empty string added [ 120.750389][ T5853] usb 2-1: Manufacturer: syz [ 120.755063][ T5853] usb 2-1: SerialNumber: syz [ 120.755445][ T6139] tmpfs: Bad value for 'mpol' [ 120.781422][ T30] audit: type=1326 audit(1754277393.975:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdc598eb69 code=0x7ffc0000 [ 120.818136][ T5853] usb 2-1: config 0 descriptor?? [ 120.867805][ T30] audit: type=1326 audit(1754277393.975:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcdc5990a87 code=0x7ffc0000 [ 120.942637][ T30] audit: type=1326 audit(1754277393.975:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcdc59909fc code=0x7ffc0000 [ 121.032621][ T30] audit: type=1326 audit(1754277393.975:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcdc5990934 code=0x7ffc0000 [ 121.076643][ T5853] gspca_main: sunplus-2.14.0 probing 05da:1018 [ 121.119145][ T5853] gspca_sunplus: reg_w_riv err -71 [ 121.127987][ T5853] sunplus 2-1:0.196: probe with driver sunplus failed with error -71 [ 121.146990][ T30] audit: type=1326 audit(1754277393.975:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcdc5990934 code=0x7ffc0000 [ 121.178189][ T5853] usb 2-1: USB disconnect, device number 4 [ 121.222956][ T30] audit: type=1326 audit(1754277393.975:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6135 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcdc598d7ca code=0x7ffc0000 [ 121.260080][ T5950] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.434833][ T5950] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.444596][ T5950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 121.457253][ T5950] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 121.483165][ T5950] usb 5-1: config 1 interface 0 has no altsetting 1 [ 121.501525][ T5950] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 121.511978][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.528823][ T5950] usb 5-1: Product: syz [ 121.537658][ T5950] usb 5-1: Manufacturer: syz [ 121.542669][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.557147][ T5950] usb 5-1: SerialNumber: syz [ 121.607553][ T5950] smsusb:smsusb_probe: board id=8, interface number 0 [ 121.710382][ T5902] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 121.738808][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.772584][ T5902] usb 1-1: config 0 descriptor?? [ 121.818266][ T6162] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 121.888915][ T5158] Bluetooth: hci0: command tx timeout [ 122.029333][ T5902] kaweth 1-1:0.0: Firmware present in device. [ 122.064664][ T5950] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 122.101342][ T5950] smsusb 5-1:1.0: probe with driver smsusb failed with error -71 [ 122.147241][ T5950] usb 5-1: USB disconnect, device number 3 [ 122.215128][ T5902] kaweth 1-1:0.0: Statistics collection: 200 [ 122.260981][ T5902] kaweth 1-1:0.0: Multicast filter limit: 0 [ 122.280844][ T5902] kaweth 1-1:0.0: MTU: 0 [ 122.285588][ T5902] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 122.445855][ T5902] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 122.475647][ T5902] usb 1-1: USB disconnect, device number 2 [ 123.072628][ T6179] netlink: 'syz.1.51': attribute type 1 has an invalid length. [ 123.404868][ T6131] vhci_hcd: connection reset by peer [ 123.426813][ T3583] vhci_hcd: stop threads [ 123.499804][ T3583] vhci_hcd: release socket [ 123.544308][ T3583] vhci_hcd: disconnect device [ 123.968809][ T5158] Bluetooth: hci0: command tx timeout [ 124.080055][ T5950] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.215004][ T6207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.239436][ T5915] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 124.268789][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 124.315922][ T5950] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 124.359810][ T5950] usb 1-1: config 0 has no interface number 0 [ 124.394940][ T5950] usb 1-1: config 0 interface 48 has no altsetting 0 [ 124.404336][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.437971][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.480647][ T5950] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 124.486069][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.654280][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.663039][ T5950] usb 1-1: Product: syz [ 124.667268][ T5950] usb 1-1: Manufacturer: syz [ 124.671962][ T5950] usb 1-1: SerialNumber: syz [ 124.695143][ T5950] usb 1-1: config 0 descriptor?? [ 125.449593][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.460120][ T5915] usb 4-1: Product: syz [ 125.464364][ T5915] usb 4-1: Manufacturer: syz [ 125.469103][ T5915] usb 4-1: SerialNumber: syz [ 125.517372][ T6193] netlink: 'syz.0.56': attribute type 10 has an invalid length. [ 125.741009][ T2149] vhci_hcd: vhci_device speed not set [ 126.059446][ T5158] Bluetooth: hci0: command tx timeout [ 126.170967][ T5915] usb 4-1: 0:2 : does not exist [ 126.213192][ T5950] usb 1-1: USB disconnect, device number 3 [ 126.241983][ T5915] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 126.382471][ T5915] usb 4-1: USB disconnect, device number 2 [ 126.515013][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.611122][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 126.678468][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 127.637030][ T6257] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 127.725953][ T6257] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms [ 127.775673][ T6261] overlayfs: failed to resolve './file1': -2 [ 127.795059][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 127.938842][ T2149] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 127.944893][ T6257] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.128744][ T5158] Bluetooth: hci0: command tx timeout [ 128.147127][ T6259] hsr0: entered promiscuous mode [ 128.172103][ T6262] hsr_slave_0: left promiscuous mode [ 128.188904][ T2149] usb 4-1: Using ep0 maxpacket: 32 [ 128.195388][ T6262] hsr_slave_1: left promiscuous mode [ 128.202366][ T2149] usb 4-1: config 0 has an invalid interface number: 235 but max is 0 [ 128.238689][ T2149] usb 4-1: config 0 has no interface number 0 [ 128.278102][ T2149] usb 4-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 128.297559][ T2149] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.324579][ T6262] hsr0 (unregistering): left promiscuous mode [ 128.351367][ T2149] usb 4-1: Product: syz [ 128.366333][ T2149] usb 4-1: Manufacturer: syz [ 128.373492][ T2149] usb 4-1: SerialNumber: syz [ 128.409968][ T2149] usb 4-1: config 0 descriptor?? [ 128.733621][ T2149] kaweth 4-1:0.235: Firmware present in device. [ 128.915809][ T2149] kaweth 4-1:0.235: Error reading configuration (-71), no net device created [ 129.032198][ T6281] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 129.611682][ T2149] kaweth 4-1:0.235: probe with driver kaweth failed with error -5 [ 129.655928][ T2149] usb 4-1: USB disconnect, device number 3 [ 129.868832][ T5915] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.269427][ T5158] Bluetooth: hci0: command tx timeout [ 130.457563][ T5915] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 130.503661][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.552800][ T5915] usb 1-1: Product: syz [ 130.567279][ T5915] usb 1-1: Manufacturer: syz [ 130.591476][ T5915] usb 1-1: SerialNumber: syz [ 130.622915][ T6295] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 130.648084][ T5915] usb 1-1: config 0 descriptor?? [ 130.681455][ T5915] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 130.698912][ T6297] futex_wake_op: syz.4.79 tries to shift op by -1; fix this program [ 131.063787][ T2149] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 131.231018][ T2149] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 131.252073][ T2149] usb 5-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0x98, changing to 0x88 [ 131.290426][ T2149] usb 5-1: config 32 interface 0 altsetting 0 endpoint 0x88 is Bulk; changing to Interrupt [ 131.317593][ T2149] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 131.344986][ T2149] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.410311][ T6297] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 131.629034][ T5915] gspca_sunplus: reg_r err -110 [ 131.635124][ T2149] usb 5-1: string descriptor 0 read error: -71 [ 131.669985][ T5915] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 131.797723][ T2149] usb 5-1: USB disconnect, device number 4 [ 132.289863][ T5158] Bluetooth: hci0: command tx timeout [ 132.450591][ T5827] usb 1-1: USB disconnect, device number 4 [ 133.009123][ T5827] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 133.289146][ T5827] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.497819][ T5827] usb 1-1: config 0 has no interface number 0 [ 133.510403][ T5827] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.780729][ T6327] netlink: 248 bytes leftover after parsing attributes in process `syz.4.87'. [ 134.342206][ T5827] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 134.379053][ T5158] Bluetooth: hci0: command tx timeout [ 134.543142][ T5827] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 134.597016][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.788962][ T5827] usb 1-1: Product: syz [ 134.793211][ T5827] usb 1-1: Manufacturer: syz [ 134.797824][ T5827] usb 1-1: SerialNumber: syz [ 134.813901][ T5827] usb 1-1: config 0 descriptor?? [ 135.044071][ T6334] netlink: 248 bytes leftover after parsing attributes in process `syz.3.86'. [ 135.263141][ T5827] yurex 1-1:0.50: Could not submitting URB [ 135.271420][ T5827] yurex 1-1:0.50: probe with driver yurex failed with error -5 [ 135.669858][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.695911][ T6332] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.719143][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.204224][ T6332] vxfs: WRONG superblock magic 00000000 at 1 [ 136.210712][ T6332] vxfs: WRONG superblock magic 00000000 at 8 [ 136.216765][ T6332] vxfs: can't find superblock. [ 136.273180][ T6338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.299359][ T6317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.410368][ T6338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.447422][ T6317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.479694][ T5158] Bluetooth: hci0: command tx timeout [ 136.616415][ T5915] usb 1-1: USB disconnect, device number 5 [ 136.886521][ T6347] loop7: detected capacity change from 0 to 79 [ 137.510179][ T6340] loop7: detected capacity change from 79 to 78 [ 138.225115][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.234377][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.363305][ T6371] vlan2: entered promiscuous mode [ 138.373862][ T6371] bridge0: entered promiscuous mode [ 138.398310][ T6371] vlan2: entered allmulticast mode [ 138.435641][ T6371] bridge0: entered allmulticast mode [ 138.506002][ T6368] bridge_slave_0: left allmulticast mode [ 138.528873][ T5158] Bluetooth: hci0: command tx timeout [ 138.538841][ T5915] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.556155][ T6368] bridge_slave_0: left promiscuous mode [ 138.630868][ T6368] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.710785][ T6368] bridge_slave_1: left allmulticast mode [ 138.725028][ T6368] bridge_slave_1: left promiscuous mode [ 138.743147][ T6368] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.793855][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 138.812515][ T6368] bond0: (slave bond_slave_0): Releasing backup interface [ 138.871522][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.181814][ T6368] bond0: (slave bond_slave_1): Releasing backup interface [ 139.190364][ T5915] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 139.226494][ T5915] usb 1-1: config 1 interface 1 has no altsetting 0 [ 139.333055][ T5915] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.362028][ T6368] team0: Port device team_slave_0 removed [ 139.389513][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.418894][ T5915] usb 1-1: Product: syz [ 139.419577][ T6368] team0: Port device team_slave_1 removed [ 139.423110][ T5915] usb 1-1: Manufacturer: syz [ 139.474179][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.485961][ T5915] usb 1-1: SerialNumber: syz [ 139.508704][ T5853] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.526814][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.585986][ T6368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.637908][ T6368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.681262][ T5853] usb 2-1: Using ep0 maxpacket: 16 [ 139.703771][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.727311][ T5853] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 139.783340][ T5853] usb 2-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 139.816273][ T5853] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.832252][ T5915] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 139.853744][ T5853] usb 2-1: config 0 descriptor?? [ 139.905322][ T5915] usb 1-1: USB disconnect, device number 6 [ 139.979873][ T5827] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.001880][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.171552][ T5827] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.184582][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.232285][ T5827] usb 4-1: config 0 descriptor?? [ 140.273549][ T5827] cp210x 4-1:0.0: cp210x converter detected [ 140.317890][ T5853] smartjoyplus 0003:0925:0005.0002: hidraw0: USB HID v0.05 Device [HID 0925:0005] on usb-dummy_hcd.1-1/input0 [ 140.383003][ T5853] smartjoyplus 0003:0925:0005.0002: no output reports found [ 140.400000][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 140.482857][ T6401] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=9 (18 ns) > initial count (2 ns). Using initial count to start timer. [ 140.563546][ T5853] usb 2-1: USB disconnect, device number 5 [ 140.609981][ T5158] Bluetooth: hci0: command tx timeout [ 140.662667][ T5827] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 141.286942][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.98'. [ 141.749148][ T6403] fido_id[6403]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 141.764943][ T5827] usb 4-1: cp210x converter now attached to ttyUSB0 [ 141.878807][ T6420] syz.4.103 uses obsolete (PF_INET,SOCK_PACKET) [ 142.022365][ T6426] netlink: 'syz.0.104': attribute type 9 has an invalid length. [ 142.040523][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 142.144975][ T6414] hsr_slave_0 (unregistering): left promiscuous mode [ 142.699624][ T5158] Bluetooth: hci0: command tx timeout [ 142.745999][ T5853] usb 4-1: USB disconnect, device number 4 [ 142.803058][ T5853] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.909381][ T5853] cp210x 4-1:0.0: device disconnected [ 143.179151][ T6445] Bluetooth: MGMT ver 1.23 [ 143.537716][ T6451] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 144.768790][ T5158] Bluetooth: hci0: command tx timeout [ 144.997076][ T6469] 8021q: VLANs not supported on wg0 [ 146.632030][ T6495] input: syz1 as /devices/virtual/input/input6 [ 146.788850][ T2149] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 146.848725][ T5158] Bluetooth: hci0: command tx timeout [ 147.196601][ T2149] usb 2-1: device descriptor read/64, error -71 [ 147.254544][ T6506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.438959][ T2149] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 147.448682][ T5915] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 147.588701][ T2149] usb 2-1: device descriptor read/64, error -71 [ 147.612432][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.640930][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.655226][ T5915] usb 4-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 147.675041][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.702247][ T5915] usb 4-1: config 0 descriptor?? [ 147.709054][ T2149] usb usb2-port1: attempt power cycle [ 147.820565][ T55] block nbd0: Possible stuck request ffff88802560e000: control (read@0,4096B). Runtime 30 seconds [ 147.996446][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.030070][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.110589][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.147179][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.219027][ T2149] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 148.479516][ T2149] usb 2-1: device descriptor read/8, error -71 [ 148.806558][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 148.843541][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 148.918894][ T2149] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.928368][ T5915] usb 4-1: USB disconnect, device number 5 [ 148.929043][ T5158] Bluetooth: hci0: command tx timeout [ 149.188733][ T2149] usb 2-1: device not accepting address 9, error -71 [ 149.238960][ T2149] usb usb2-port1: unable to enumerate USB device [ 150.532824][ T5922] kernel write not supported for file bpf-prog (pid: 5922 comm: kworker/0:6) [ 150.706984][ T24] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 151.008812][ T5158] Bluetooth: hci0: command tx timeout [ 151.031419][ T24] usb 1-1: config 0 has an invalid interface number: 189 but max is 0 [ 151.334873][ T24] usb 1-1: config 0 has no interface number 0 [ 151.351809][ T24] usb 1-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 151.363513][ T24] usb 1-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 151.375739][ T24] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64 [ 151.410691][ T24] usb 1-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 151.422663][ T24] usb 1-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 151.459269][ T24] usb 1-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 151.468852][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.476964][ T2149] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.492513][ T24] usb 1-1: Product: syz [ 151.535590][ T24] usb 1-1: Manufacturer: syz [ 151.550868][ T24] usb 1-1: SerialNumber: syz [ 151.621084][ T24] usb 1-1: config 0 descriptor?? [ 151.628751][ T6548] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 151.664883][ T2149] usb 3-1: Using ep0 maxpacket: 16 [ 151.683571][ T24] ums-alauda 1-1:0.189: USB Mass Storage device detected [ 151.702316][ T2149] usb 3-1: config 0 has an invalid descriptor of length 79, skipping remainder of the config [ 151.732520][ T2149] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.764344][ T24] scsi host1: usb-storage 1-1:0.189 [ 151.773011][ T2149] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 151.785175][ T2149] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.877813][ T6576] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 151.897979][ T2149] usb 3-1: config 0 descriptor?? [ 151.910635][ T6548] netlink: 36 bytes leftover after parsing attributes in process `syz.0.128'. [ 151.957833][ T6548] binder: 6547:6548 ioctl 541b 200000000140 returned -22 [ 151.999594][ T5922] usb 1-1: USB disconnect, device number 7 [ 152.213480][ T2149] usb 3-1: USB disconnect, device number 4 [ 153.089555][ T5158] Bluetooth: hci0: command tx timeout [ 154.254645][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 154.254666][ T30] audit: type=1326 audit(1754277427.755:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.406257][ T30] audit: type=1326 audit(1754277427.805:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.438668][ T30] audit: type=1326 audit(1754277427.805:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.495462][ T30] audit: type=1326 audit(1754277427.845:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.601090][ T30] audit: type=1326 audit(1754277427.845:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.694987][ T30] audit: type=1326 audit(1754277427.875:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.786745][ T30] audit: type=1326 audit(1754277427.875:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.809820][ T30] audit: type=1326 audit(1754277427.885:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6593 comm="syz.2.139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5368d8eb69 code=0x7ffc0000 [ 154.831820][ T5950] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 154.996418][ T5950] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 155.028659][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.048131][ T5950] usb 5-1: config 0 descriptor?? [ 155.062369][ T5950] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 155.168798][ T5158] Bluetooth: hci0: command tx timeout [ 155.174754][ T6640] capability: warning: `syz.1.149' uses deprecated v2 capabilities in a way that may be insecure [ 155.472491][ T5950] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 156.718524][ T5950] gspca_cpia1: usb_control_msg 02, error -110 [ 156.735342][ T5950] gspca_cpia1: usb_control_msg 05, error -32 [ 156.758961][ T5950] gspca_cpia1: usb_control_msg 05, error -32 [ 156.779793][ T5950] gspca_cpia1: usb_control_msg 05, error -32 [ 156.796352][ T5950] gspca_cpia1: usb_control_msg 05, error -32 [ 156.825173][ T5950] cpia1 5-1:0.0: unexpected systemstate: 00 [ 156.923655][ T6662] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 157.078803][ T5922] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 157.188828][ T5950] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 157.249241][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 157.254979][ T5158] Bluetooth: hci0: command tx timeout [ 157.273867][ T5922] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 157.301032][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.309365][ T5922] usb 1-1: Product: syz [ 157.313587][ T5922] usb 1-1: Manufacturer: syz [ 157.318218][ T5922] usb 1-1: SerialNumber: syz [ 157.340826][ T5922] usb 1-1: config 0 descriptor?? [ 157.353039][ T5950] usb 4-1: device descriptor read/64, error -71 [ 157.612601][ T5950] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 157.682866][ T24] usb 5-1: USB disconnect, device number 5 [ 157.828724][ T5950] usb 4-1: device descriptor read/64, error -71 [ 157.918699][ T2149] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.942773][ T5922] gspca_main: se401-2.14.0 probing 047d:5003 [ 157.993044][ T5950] usb usb4-port1: attempt power cycle [ 158.168670][ T2149] usb 3-1: Using ep0 maxpacket: 32 [ 158.188033][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 158.220514][ T6696] trusted_key: syz.4.160 sent an empty control message without MSG_MORE. [ 158.247475][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 158.281917][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 158.348642][ T2149] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 158.358991][ T5950] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 158.410497][ T2149] usb 3-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 158.420120][ T5950] usb 4-1: device descriptor read/8, error -71 [ 158.438322][ T2149] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.456699][ T2149] usb 3-1: Product: syz [ 158.466514][ T2149] usb 3-1: Manufacturer: syz [ 158.476636][ T2149] usb 3-1: SerialNumber: syz [ 158.497551][ T2149] usb 3-1: config 0 descriptor?? [ 158.508272][ T2149] cypress_m8 3-1:0.0: HID->COM RS232 Adapter converter detected [ 158.544269][ T2149] cyphidcom ttyUSB0: required endpoint is missing [ 158.668886][ T5950] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 158.720649][ T5922] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 158.721600][ T5950] usb 4-1: device descriptor read/8, error -71 [ 158.773362][ T5995] usb 3-1: USB disconnect, device number 5 [ 158.785228][ T5995] cypress_m8 3-1:0.0: device disconnected [ 158.882141][ T5950] usb usb4-port1: unable to enumerate USB device [ 158.900613][ T5922] usb 1-1: device firmware changed [ 158.942492][ T5922] gspca_se401: read req failed req 0x06 error -19 [ 158.974084][ T5922] usb 1-1: USB disconnect, device number 8 [ 159.164784][ T5922] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.365077][ T5158] Bluetooth: hci0: command tx timeout [ 160.010140][ T5922] usb 1-1: Using ep0 maxpacket: 8 [ 160.072731][ T5922] usb 1-1: device descriptor read/all, error -71 [ 160.326130][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 161.041843][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 161.082149][ T30] audit: type=1400 audit(1754277434.595:33): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=6740 comm="syz.3.168" name="35" dev="tmpfs" ino=208 [ 161.083778][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 161.232395][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.270534][ T9] usb 3-1: config 1 interface 0 altsetting 222 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.335564][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 161.369735][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 161.388316][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.414021][ T9] usb 3-1: Product: syz [ 161.423912][ T9] usb 3-1: Manufacturer: syz [ 161.609279][ T5158] Bluetooth: hci0: command tx timeout [ 161.642315][ T9] usb 3-1: SerialNumber: syz [ 162.075337][ T6761] netlink: 248 bytes leftover after parsing attributes in process `syz.0.171'. [ 163.678743][ T5158] Bluetooth: hci0: command tx timeout [ 163.701634][ T9] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 163.801991][ T9] usb 3-1: USB disconnect, device number 6 [ 164.161321][ T5922] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 164.678781][ T5922] usb 2-1: device descriptor read/64, error -71 [ 164.782044][ T6782] syz_tun: entered allmulticast mode [ 164.944475][ T5922] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 164.947204][ T6782] syz_tun: left allmulticast mode [ 165.119911][ T5922] usb 2-1: device descriptor read/64, error -71 [ 165.292329][ T5922] usb usb2-port1: attempt power cycle [ 165.659140][ T5922] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 165.690400][ T5922] usb 2-1: device descriptor read/8, error -71 [ 165.732644][ T5158] Bluetooth: hci0: command tx timeout [ 166.740396][ T6815] ksmbd: Unknown IPC event: 4, ignore. [ 166.919867][ T5922] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 167.100645][ T5922] usb 2-1: device descriptor read/8, error -71 [ 167.306280][ T5922] usb usb2-port1: unable to enumerate USB device [ 167.808654][ T5158] Bluetooth: hci0: command tx timeout [ 168.689118][ T6831] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 168.712344][ T6831] syzkaller0: linktype set to 7 [ 169.342956][ T6842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.484878][ T6842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.599179][ T1205] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.783451][ T1205] usb 4-1: Using ep0 maxpacket: 8 [ 169.808454][ T1205] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 169.826013][ T1205] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.842696][ T1205] usb 4-1: Product: syz [ 169.861941][ T1205] usb 4-1: Manufacturer: syz [ 169.877998][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'. [ 169.889059][ T5158] Bluetooth: hci0: command tx timeout [ 169.902888][ T1205] usb 4-1: SerialNumber: syz [ 169.982640][ T1205] usb 4-1: config 0 descriptor?? [ 170.264878][ T6859] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 170.611725][ T5950] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 171.108923][ T1205] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 171.118751][ T1205] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 171.171760][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 171.171763][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 171.195574][ T5950] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 171.217282][ T5950] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.264868][ T5950] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 171.287590][ T5950] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.303363][ T5950] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.316132][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.354910][ T5950] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 171.373431][ T5950] usb 2-1: invalid MIDI out EP 0 [ 171.598483][ T6060] udevd[6060]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.761490][ T2149] usb 4-1: USB disconnect, device number 10 [ 171.772877][ T5950] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 171.823529][ T5950] usb 2-1: USB disconnect, device number 14 [ 172.040404][ T5158] Bluetooth: hci0: command tx timeout [ 172.109997][ T6890] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 173.265925][ T6909] xt_nat: multiple ranges no longer supported [ 174.056975][ T5158] Bluetooth: hci0: command tx timeout [ 174.395758][ T6923] netlink: 248 bytes leftover after parsing attributes in process `syz.0.206'. [ 175.677537][ T6929] overlayfs: failed to resolve './file0': -2 [ 175.792885][ T6907] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.172793][ T5158] Bluetooth: hci0: command tx timeout [ 177.890710][ T55] block nbd0: Possible stuck request ffff88802560e000: control (read@0,4096B). Runtime 60 seconds [ 178.209778][ T5158] Bluetooth: hci0: command tx timeout [ 179.958968][ T1205] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.298703][ T5158] Bluetooth: hci0: command tx timeout [ 180.848775][ T1205] usb 1-1: Using ep0 maxpacket: 16 [ 180.869580][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.924290][ T1205] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.948671][ T1205] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 1.00 [ 180.997631][ T1205] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.025703][ T1205] usb 1-1: config 0 descriptor?? [ 182.301997][ T6986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.339084][ T6986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.368780][ T5158] Bluetooth: hci0: command tx timeout [ 183.004807][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 183.013947][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 183.709427][ T5158] Bluetooth: min 0 < 6 [ 184.448930][ T5158] Bluetooth: hci0: command tx timeout [ 185.216224][ T1205] usbhid 1-1:0.0: can't add hid device: -71 [ 185.222741][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 185.235495][ T1205] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.254342][ T7035] netlink: 'syz.4.228': attribute type 7 has an invalid length. [ 185.269146][ T1205] usb 1-1: USB disconnect, device number 11 [ 185.807069][ T7044] netlink: 248 bytes leftover after parsing attributes in process `syz.3.229'. [ 186.530182][ T7044] syz.3.229 (7044) used greatest stack depth: 19552 bytes left [ 186.664701][ T5158] Bluetooth: hci4: command tx timeout [ 186.670346][ T5842] Bluetooth: hci0: command tx timeout [ 186.986561][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 187.008921][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 187.081833][ T7058] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073201722423) [ 187.118234][ T7058] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 187.225493][ T9] usb 1-1: config 5 has no interfaces? [ 187.287146][ T9] usb 1-1: New USB device found, idVendor=06a3, idProduct=4c02, bcdDevice=2d.2e [ 187.306956][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.346720][ T9] usb 1-1: Product: syz [ 187.388857][ T9] usb 1-1: Manufacturer: syz [ 187.428771][ T9] usb 1-1: SerialNumber: syz [ 187.611339][ T7069] warning: `syz.1.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 188.346987][ T9] usb 1-1: USB disconnect, device number 12 [ 188.688848][ T5158] Bluetooth: hci0: command tx timeout [ 190.139252][ T7104] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 190.156475][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 190.172980][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 190.182038][ T7104] netlink: 224 bytes leftover after parsing attributes in process `syz.3.244'. [ 190.192145][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 190.205590][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 190.224196][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 190.584049][ T7115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.245'. [ 190.768854][ T5845] Bluetooth: hci0: command tx timeout [ 190.976064][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 192.288790][ T5845] Bluetooth: hci5: command tx timeout [ 192.291990][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.360693][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.368013][ T7103] bridge_slave_0: entered allmulticast mode [ 192.415685][ T7103] bridge_slave_0: entered promiscuous mode [ 192.441339][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.459074][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.466483][ T7103] bridge_slave_1: entered allmulticast mode [ 192.494848][ T7103] bridge_slave_1: entered promiscuous mode [ 192.716449][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.748090][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.860334][ T5845] Bluetooth: hci0: command tx timeout [ 193.183634][ T7103] team0: Port device team_slave_0 added [ 193.215565][ T7103] team0: Port device team_slave_1 added [ 193.461192][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.488637][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.559777][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.622445][ T7157] mkiss: ax0: crc mode is auto. [ 193.633420][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.674693][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.739865][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.212215][ T7172] Cannot find add_set index 0 as target [ 194.368686][ T5845] Bluetooth: hci5: command tx timeout [ 194.717993][ T7103] hsr_slave_0: entered promiscuous mode [ 194.724926][ T7103] hsr_slave_1: entered promiscuous mode [ 194.737536][ T7103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.746116][ T7103] Cannot create hsr debugfs directory [ 195.746294][ T5845] Bluetooth: hci0: command tx timeout [ 196.435485][ T7188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.258'. [ 196.458959][ T5845] Bluetooth: hci5: command tx timeout [ 196.683516][ T7194] comedi comedi0: ni_at_a2150: I/O port conflict (0xf2,28) [ 197.811167][ T5845] Bluetooth: hci0: command tx timeout [ 197.832826][ T5902] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 198.010417][ T5902] usb 2-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 198.034157][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.169889][ T5902] usb 2-1: config 0 descriptor?? [ 198.385869][ T7103] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 198.407989][ T5902] usb 2-1: can't set first interface for hiFace device. [ 198.455038][ T5902] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 198.482815][ T7103] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.511220][ T5902] usb 2-1: USB disconnect, device number 15 [ 198.529185][ T5845] Bluetooth: hci5: command tx timeout [ 198.543787][ T7103] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.589891][ T7103] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.679514][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 198.686739][ T7224] NILFS (nbd4): device size too small [ 198.839405][ T7225] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 198.852654][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 198.881911][ T9] usb 4-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 198.898050][ T7225] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 198.916350][ T9] usb 4-1: config 0 has no interfaces? [ 198.938671][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.979617][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 199.007259][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.055660][ T7225] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 199.067677][ T7103] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.082780][ T9] usb 4-1: Product: syz [ 199.087019][ T9] usb 4-1: Manufacturer: syz [ 199.099324][ T7225] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 199.129879][ T9] usb 4-1: SerialNumber: syz [ 199.146101][ T7225] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 199.150000][ T9] usb 4-1: config 0 descriptor?? [ 199.174958][ T7225] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 199.191047][ T7225] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 199.255665][ T7225] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 199.301062][ T7225] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 199.317453][ T7225] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 199.338417][ T7225] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 199.367785][ T7225] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 199.387467][ T7225] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 199.387635][ T7214] program syz.3.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.427274][ T7225] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 199.439649][ T9] usb 4-1: USB disconnect, device number 11 [ 199.477397][ T7225] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 199.489517][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.496828][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.519026][ T7225] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 199.554078][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.561353][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.657004][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.663881][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.675796][ T7225] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 200.850557][ T5845] Bluetooth: hci0: command 0x0409 tx timeout [ 200.959510][ T7263] dvmrp0: entered allmulticast mode [ 201.101149][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 201.246473][ T7271] ksmbd: Unknown IPC event: 4, ignore. [ 201.260021][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 201.329918][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 201.418697][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 201.489651][ T5845] Bluetooth: hci5: command 0x0c1a tx timeout [ 201.644615][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.982200][ T7284] ksmbd: Unknown IPC event: 4, ignore. [ 202.100220][ T7283] mmap: syz.4.277 (7283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 202.388530][ T5902] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 202.501982][ T7288] bridge0: port 1(team0) entered blocking state [ 202.518949][ T7288] bridge0: port 1(team0) entered disabled state [ 202.563678][ T7288] team0: entered allmulticast mode [ 202.600772][ T5902] usb 2-1: Using ep0 maxpacket: 8 [ 202.613591][ T5902] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.617633][ T7288] team0: entered promiscuous mode [ 202.652217][ T5902] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 202.727203][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.758662][ T5902] usb 2-1: Product: syz [ 202.771788][ T5902] usb 2-1: Manufacturer: syz [ 202.786847][ T5902] usb 2-1: SerialNumber: syz [ 202.847897][ T5902] usb 2-1: config 0 descriptor?? [ 202.888507][ T5902] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 202.928803][ T5845] Bluetooth: hci0: command 0x0409 tx timeout [ 203.248700][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 203.327027][ T5902] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 203.841834][ T5902] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 203.853765][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 203.854401][ T5158] Bluetooth: hci3: command 0x0c1a tx timeout [ 203.862395][ T5845] Bluetooth: hci4: command 0x0c1a tx timeout [ 203.866327][ T5158] Bluetooth: hci5: command 0x0c1a tx timeout [ 204.229741][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.282'. [ 204.246141][ T7103] veth0_vlan: entered promiscuous mode [ 204.301591][ T7103] veth1_vlan: entered promiscuous mode [ 204.428360][ T7103] veth0_macvtap: entered promiscuous mode [ 204.460028][ T7103] veth1_macvtap: entered promiscuous mode [ 204.505377][ T7322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.550259][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.678734][ T5950] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 204.746329][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.840033][ T5922] usb 2-1: USB disconnect, device number 16 [ 204.928045][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 204.998673][ T5853] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 205.009348][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 205.010587][ T7103] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.062453][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 205.110948][ T7103] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.145350][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 205.146613][ T7103] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.200545][ T5853] usb 4-1: device descriptor read/64, error -71 [ 205.219440][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 205.227603][ T7329] ksmbd: Unknown IPC event: 4, ignore. [ 205.236146][ T7103] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.343586][ T5158] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.378462][ T5950] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 205.458823][ T5853] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 205.555264][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.662392][ T5950] usb 5-1: Product: syz [ 205.717945][ T5950] usb 5-1: Manufacturer: syz [ 205.764646][ T5950] usb 5-1: SerialNumber: syz [ 205.794820][ T5950] usb 5-1: config 0 descriptor?? [ 205.828686][ T5853] usb 4-1: device descriptor read/64, error -71 [ 205.837345][ T5950] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 205.888898][ T5158] Bluetooth: hci5: command 0x0c1a tx timeout [ 205.895257][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 205.895294][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 205.903083][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 205.944830][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.945520][ T5853] usb usb4-port1: attempt power cycle [ 205.954778][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.056309][ T5950] scsi host1: usb-storage 5-1:0.0 [ 206.081682][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.104156][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.409255][ T5853] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 206.704185][ T5853] usb 4-1: device descriptor read/8, error -71 [ 207.069295][ T5853] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 207.095297][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 207.097275][ T5853] usb 4-1: device descriptor read/8, error -71 [ 207.284315][ T5853] usb usb4-port1: unable to enumerate USB device [ 207.368489][ T7346] tty tty31: ldisc open failed (-12), clearing slot 30 [ 207.377070][ T7345] tty tty1: ldisc open failed (-12), clearing slot 0 [ 207.405823][ T7347] tty tty31: ldisc open failed (-12), clearing slot 30 [ 207.673709][ T7355] netlink: 12 bytes leftover after parsing attributes in process `syz.0.289'. [ 208.227195][ T7362] netlink: 248 bytes leftover after parsing attributes in process `syz.5.291'. [ 208.919015][ T55] block nbd0: Possible stuck request ffff88802560e000: control (read@0,4096B). Runtime 90 seconds [ 208.972358][ T7355] netlink: 32 bytes leftover after parsing attributes in process `syz.0.289'. [ 209.178927][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 210.205033][ T7389] ksmbd: Unknown IPC event: 4, ignore. [ 210.381319][ T7337] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 211.193749][ T7337] usb 5-1: device descriptor read/64, error -71 [ 211.248661][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 211.459259][ T7337] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 211.668702][ T7337] usb 5-1: device descriptor read/64, error -71 [ 212.091152][ T7337] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 212.161260][ T7337] usb 5-1: device descriptor read/8, error -71 [ 212.335038][ T7414] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20003 [ 212.349659][ T7414] hfs: can't find a HFS filesystem on dev nullb0 [ 212.359481][ T7414] netlink: 14 bytes leftover after parsing attributes in process `syz.3.302'. [ 212.428703][ T5902] IPVS: starting estimator thread 0... [ 212.468695][ T7337] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 212.527554][ T7337] usb 5-1: device descriptor read/8, error -71 [ 212.558798][ T7415] IPVS: using max 29 ests per chain, 69600 per kthread [ 212.736864][ T5853] usb 5-1: USB disconnect, device number 6 [ 212.968457][ T7425] netlink: 'syz.0.307': attribute type 30 has an invalid length. [ 213.330073][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 213.812915][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 214.030584][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.051292][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 214.096676][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 214.118721][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 214.178613][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.204800][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 214.214461][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.228631][ T9] usb 6-1: Product: syz [ 214.228701][ T5950] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 214.232831][ T9] usb 6-1: Manufacturer: syz [ 214.232849][ T9] usb 6-1: SerialNumber: syz [ 214.237075][ T9] usb 6-1: config 0 descriptor?? [ 214.264315][ T5902] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 214.327467][ T7429] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 214.441307][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.453262][ T5902] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xB2, changing to 0x82 [ 214.478684][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.515291][ T5902] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 214.568759][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.582425][ T5902] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.593397][ T5950] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 214.604646][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.614082][ T5902] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice= 0.06 [ 214.623543][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 214.628763][ T9] rc_core: IR keymap rc-xbox-dvd not found [ 214.634859][ T5902] usb 1-1: SerialNumber: syz [ 214.647648][ T5950] usb 5-1: config 0 descriptor?? [ 214.658327][ T9] Registered IR keymap rc-empty [ 214.790115][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 214.801610][ T9] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 214.824748][ C0] xbox_remote 6-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 214.832950][ T9] usb 6-1: USB disconnect, device number 2 [ 215.193551][ T7452] sctp: [Deprecated]: syz.5.311 (pid 7452) Use of int in max_burst socket option deprecated. [ 215.193551][ T7452] Use struct sctp_assoc_value instead [ 215.409243][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 215.567885][ T7453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.686287][ T7453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.696829][ T5902] yealink 1-1:36.0: invalid payload size 0, expected 16 [ 215.750778][ T5902] input: Yealink usb-p1k as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:36.0/input/input11 [ 215.871256][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.878333][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.885589][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.892786][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.899878][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.906893][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.913921][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.921003][ C1] yealink 1-1:36.0: urb_ctl_callback - urb status -71 [ 215.927791][ C1] yealink 1-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 215.940014][ T5950] usbhid 5-1:0.0: can't add hid device: -71 [ 215.946122][ T5950] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 216.022874][ T5950] usb 5-1: USB disconnect, device number 7 [ 216.052886][ T5902] usb 1-1: USB disconnect, device number 13 [ 216.254779][ T7464] ksmbd: Unknown IPC event: 4, ignore. [ 216.952250][ T7470] syz.0.314 (7470): /proc/7469/oom_adj is deprecated, please use /proc/7469/oom_score_adj instead. [ 217.337720][ T7473] libceph: resolve '4.' (ret=-3): failed [ 217.489976][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 217.977353][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.4.316'. [ 218.209610][ T2149] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 218.474780][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 219.054100][ T2149] usb 6-1: device descriptor read/64, error -71 [ 219.409004][ T2149] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 219.578790][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 219.919075][ T2149] usb 6-1: device descriptor read/64, error -71 [ 220.049245][ T2149] usb usb6-port1: attempt power cycle [ 220.142943][ T9] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 220.350832][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.381373][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 220.420961][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.459177][ T9] usb 1-1: Product: syz [ 220.474061][ T9] usb 1-1: Manufacturer: syz [ 220.498671][ T9] usb 1-1: SerialNumber: syz [ 220.526640][ T7508] 9pnet_fd: Insufficient options for proto=fd [ 220.559252][ T9] usb 1-1: config 0 descriptor?? [ 220.582334][ T2149] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 220.618945][ T2149] usb 6-1: device descriptor read/8, error -71 [ 220.869450][ T2149] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 221.269023][ T7525] can0: slcan on ttyS3. [ 221.651632][ T51] Bluetooth: hci0: command 0x0409 tx timeout [ 222.077086][ T7527] netlink: 'syz.1.325': attribute type 2 has an invalid length. [ 222.085044][ T7527] netlink: 'syz.1.325': attribute type 11 has an invalid length. [ 222.093081][ T7527] netlink: 132 bytes leftover after parsing attributes in process `syz.1.325'. [ 222.463802][ T2149] usb 6-1: device descriptor read/8, error -71 [ 222.519729][ T7525] can0 (unregistered): slcan off ttyS3. [ 222.619186][ T2149] usb usb6-port1: unable to enumerate USB device [ 222.948919][ T2149] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 223.718669][ T1205] usb 1-1: USB disconnect, device number 14 [ 223.729884][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 223.849618][ T2149] usb 6-1: device descriptor read/64, error -71 [ 224.220537][ T2149] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 224.418730][ T2149] usb 6-1: device descriptor read/64, error -71 [ 224.658421][ T2149] usb usb6-port1: attempt power cycle [ 224.712201][ T7563] (syz.1.332,7563,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 224.720986][ T7563] (syz.1.332,7563,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 224.738429][ T7563] Bluetooth: Invalid esc byte 0x02 [ 224.818665][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 224.853048][ T13] Bluetooth: (null): Invalid header checksum [ 224.998425][ T13] Bluetooth: (null): Invalid header checksum [ 225.162502][ T2149] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 225.183322][ T13] Bluetooth: (null): Invalid header checksum [ 225.183492][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 225.326919][ T13] Bluetooth: (null): Invalid header checksum [ 225.527410][ T2149] usb 6-1: device descriptor read/8, error -71 [ 225.541931][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.562483][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 225.690248][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 225.704531][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.726504][ T9] usb 4-1: Product: syz [ 225.752818][ T9] usb 4-1: Manufacturer: syz [ 225.757492][ T9] usb 4-1: SerialNumber: syz [ 225.808720][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 226.421019][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.336'. [ 227.031652][ T9] usb 4-1: cannot find UAC_HEADER [ 227.057479][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 227.074129][ T9] usb 4-1: USB disconnect, device number 16 [ 227.116585][ T1205] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 227.192162][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.318949][ T1205] usb 2-1: device descriptor read/64, error -71 [ 227.568748][ T1205] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 227.737370][ T1205] usb 2-1: device descriptor read/64, error -71 [ 227.889267][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 228.050636][ T1205] usb usb2-port1: attempt power cycle [ 228.223616][ T9] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 228.379391][ T7606] fuse: Bad value for 'fd' [ 228.430418][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.450754][ T9] usb 6-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 228.461665][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.479431][ T9] usb 6-1: config 0 descriptor?? [ 228.608974][ T1205] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 228.669131][ T1205] usb 2-1: device descriptor read/8, error -71 [ 228.747431][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.756733][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.928966][ T1205] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 229.007994][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 229.057496][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 229.119483][ T9] usb 6-1: USB disconnect, device number 11 [ 229.178797][ T1205] usb 2-1: device not accepting address 20, error -71 [ 229.192807][ T7627] netlink: 'syz.1.345': attribute type 5 has an invalid length. [ 229.218509][ T1205] usb usb2-port1: unable to enumerate USB device [ 229.242373][ T7628] netlink: 'syz.1.345': attribute type 5 has an invalid length. [ 229.978735][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 231.976532][ T7645] x_tables: duplicate underflow at hook 2 [ 232.293311][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 232.992248][ T5902] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 233.209205][ T5902] usb 6-1: Invalid ep0 maxpacket: 32 [ 233.278754][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 233.349206][ T5902] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 233.559576][ T7682] netlink: 536 bytes leftover after parsing attributes in process `syz.4.355'. [ 233.593476][ T5902] usb 6-1: Invalid ep0 maxpacket: 32 [ 233.658305][ T5902] usb usb6-port1: attempt power cycle [ 233.769406][ T5915] usb 2-1: Using ep0 maxpacket: 8 [ 233.890980][ T5915] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 233.932027][ T5915] usb 2-1: config 0 has no interface number 0 [ 233.952849][ T5915] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 233.983369][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.997618][ T5915] usb 2-1: Product: syz [ 234.009808][ T5853] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 234.041700][ T5915] usb 2-1: Manufacturer: syz [ 234.046384][ T5915] usb 2-1: SerialNumber: syz [ 234.070219][ T5915] usb 2-1: config 0 descriptor?? [ 234.079522][ T5902] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 234.083836][ T5915] kobil_sct 2-1:0.148: required endpoints missing [ 234.140221][ T5902] usb 6-1: Invalid ep0 maxpacket: 32 [ 234.208490][ T5853] usb 5-1: config 0 has an invalid descriptor of length 242, skipping remainder of the config [ 234.228639][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 234.238418][ T5853] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 234.272395][ T5853] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 234.311687][ T5853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 234.330262][ T5902] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 234.368851][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 234.370405][ T5902] usb 6-1: Invalid ep0 maxpacket: 32 [ 234.570222][ T5915] usb 2-1: USB disconnect, device number 21 [ 234.593905][ T5853] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 234.617493][ T5902] usb usb6-port1: unable to enumerate USB device [ 234.702865][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.958930][ T5853] usb 5-1: Product: syz [ 234.979180][ T5853] usb 5-1: Manufacturer: syz [ 234.984177][ T5853] usb 5-1: SerialNumber: syz [ 234.998948][ T5853] usb 5-1: config 0 descriptor?? [ 235.004798][ T7682] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 235.076666][ T5853] usb 5-1: ucan: probing device on interface #0 [ 235.098733][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 235.107477][ T5853] usb 5-1: ucan: invalid endpoint configuration [ 235.128852][ T5853] usb 5-1: ucan: probe failed; try to update the device firmware [ 235.275422][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 235.307801][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 235.335910][ T9] usb 1-1: config 179 has no interface number 0 [ 235.361905][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 235.398646][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 235.421515][ T5853] usb 5-1: USB disconnect, device number 8 [ 235.466554][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 235.493769][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 235.514925][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 235.533724][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 235.547824][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.562788][ T7692] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 235.574521][ T9] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 235.789032][ T9] usb 1-1: USB disconnect, device number 15 [ 235.838087][ T30] audit: type=1326 audit(1754277509.355:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7715 comm="syz.3.361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x0 [ 235.956496][ T7728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.007776][ T7728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.139670][ T30] audit: type=1326 audit(1754277509.665:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c198eb69 code=0x7ffc0000 [ 236.216133][ T30] audit: type=1326 audit(1754277509.695:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90c1990a87 code=0x7ffc0000 [ 236.247360][ T5902] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 236.280359][ T30] audit: type=1326 audit(1754277509.695:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f90c19909fc code=0x7ffc0000 [ 236.374023][ T30] audit: type=1326 audit(1754277509.705:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f90c1990934 code=0x7ffc0000 [ 236.454411][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 236.516563][ T7742] ksmbd: Unknown IPC event: 4, ignore. [ 236.681866][ T30] audit: type=1326 audit(1754277509.705:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f90c1990934 code=0x7ffc0000 [ 236.779601][ T30] audit: type=1326 audit(1754277509.705:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f90c198d7ca code=0x7ffc0000 [ 237.077703][ T30] audit: type=1326 audit(1754277509.715:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c198eb69 code=0x7ffc0000 [ 237.124990][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.366'. [ 237.194768][ T30] audit: type=1326 audit(1754277509.715:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c198eb69 code=0x7ffc0000 [ 237.438693][ T30] audit: type=1326 audit(1754277509.715:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7730 comm="syz.1.363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90c198eb69 code=0x7ffc0000 [ 237.518173][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.367'. [ 238.306800][ T7767] ISOFS: Unable to identify CD-ROM format. [ 238.494456][ T5827] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 238.549118][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 238.689102][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 238.707916][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 238.734990][ T7770] binder: BC_ATTEMPT_ACQUIRE not supported [ 238.734993][ T5827] usb 4-1: config 14 has an invalid interface number: 115 but max is 0 [ 238.758939][ T7754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.792703][ T7774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 238.807326][ T7770] binder: 7769:7770 ioctl c0306201 2000000001c0 returned -22 [ 238.809079][ T5827] usb 4-1: config 14 has no interface number 0 [ 238.845740][ T5827] usb 4-1: config 14 interface 115 has no altsetting 0 [ 238.867623][ T5827] usb 4-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= 2.73 [ 238.887916][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.957608][ T5827] usb 4-1: Product: syz [ 238.968884][ T5827] usb 4-1: Manufacturer: syz [ 238.974819][ T5827] usb 4-1: SerialNumber: syz [ 239.237597][ T7754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.336276][ T55] block nbd0: Possible stuck request ffff88802560e000: control (read@0,4096B). Runtime 120 seconds [ 239.366879][ T7789] netdevsim netdevsim5: Direct firmware load for þ failed with error -2 [ 239.375944][ T7789] netdevsim netdevsim5: Falling back to sysfs fallback for: þ [ 239.561097][ T7754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.674673][ T7797] ======================================================= [ 239.674673][ T7797] WARNING: The mand mount option has been deprecated and [ 239.674673][ T7797] and is ignored by this kernel. Remove the mand [ 239.674673][ T7797] option from the mount to silence this warning. [ 239.674673][ T7797] ======================================================= [ 240.430461][ T5950] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 240.468712][ T7754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.618454][ T5950] usb 2-1: device descriptor read/64, error -71 [ 240.630940][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 240.908921][ T5950] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 241.148995][ T5950] usb 2-1: device descriptor read/64, error -71 [ 241.270620][ T5950] usb usb2-port1: attempt power cycle [ 241.540987][ T7754] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.607339][ T7754] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.668305][ T7754] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.713028][ T5950] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 241.746798][ T7754] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.784518][ T5950] usb 2-1: device descriptor read/8, error -71 [ 242.012849][ T5827] xr_serial 4-1:14.115: More than one union descriptor, skipping ... [ 242.147609][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.381'. [ 242.218914][ T5950] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 242.470123][ T5950] usb 2-1: device descriptor read/8, error -71 [ 242.689210][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 242.713737][ T5827] usb 4-1: USB disconnect, device number 17 [ 242.734890][ T5950] usb usb2-port1: unable to enumerate USB device [ 243.649411][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 244.122729][ T24] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 244.420760][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.470470][ T24] usb 6-1: config 0 descriptor?? [ 244.524280][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 244.769302][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 244.970014][ T24] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 245.139091][ T5915] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 245.383773][ T24] gspca_cpia1: usb_control_msg 02, error -71 [ 245.386073][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 245.391724][ T24] gspca_cpia1: usb_control_msg 05, error -71 [ 245.407107][ T24] cpia1 6-1:0.0: unexpected systemstate: 00 [ 245.433042][ T24] usb 6-1: USB disconnect, device number 17 [ 245.456763][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 245.480394][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 245.508682][ T5915] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 245.539017][ T5915] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 245.548404][ T5915] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 245.561776][ T5853] libceph: connect (1)[c::]:6789 error -101 [ 245.570133][ T5915] usb 4-1: config 1 has no interface number 0 [ 245.576582][ T5853] libceph: mon0 (1)[c::]:6789 connect error [ 245.583618][ T5915] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.597918][ T5915] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 245.612809][ T5915] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 245.629380][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.651910][ T7882] ceph: No mds server is up or the cluster is laggy [ 245.664109][ T5915] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 245.769780][ T5950] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 245.928733][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 245.942489][ T5950] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 245.964265][ T5950] usb 1-1: config 0 has no interface number 0 [ 245.983949][ T5950] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 246.011227][ T5950] usb 1-1: config 0 interface 89 has no altsetting 0 [ 246.031880][ T5950] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=2e.4e [ 246.052280][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.083916][ T5950] usb 1-1: Product: syz [ 246.088164][ T5950] usb 1-1: Manufacturer: syz [ 246.106649][ T5950] usb 1-1: SerialNumber: syz [ 246.137175][ T5950] usb 1-1: config 0 descriptor?? [ 246.171797][ T5950] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 246.201718][ T5950] em28xx 1-1:0.89: Video interface 89 found: isoc [ 246.207012][ T7901] netlink: 196 bytes leftover after parsing attributes in process `syz.5.394'. [ 246.368405][ T5158] Bluetooth: hci3: Malformed Event: 0x02 [ 246.707672][ T7909] netlink: 12 bytes leftover after parsing attributes in process `syz.4.395'. [ 246.908841][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 248.778479][ T5950] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 248.949311][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 249.955557][ T5915] snd_usb_pod 4-1:1.1: set_interface failed [ 250.107710][ T5915] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 250.380286][ T5915] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 250.726838][ T5915] usb 4-1: USB disconnect, device number 18 [ 250.773458][ T5827] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 251.038967][ T5827] usb 5-1: device descriptor read/64, error -71 [ 251.069463][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 251.331647][ T5950] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 251.348677][ T5950] em28xx 1-1:0.89: board has no eeprom [ 251.368803][ T5827] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 251.408651][ T5950] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 251.415964][ T5950] em28xx 1-1:0.89: analog set to isoc mode. [ 251.425215][ T2149] em28xx 1-1:0.89: Registering V4L2 extension [ 251.473212][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 251.511430][ T5950] usb 1-1: USB disconnect, device number 16 [ 251.535949][ T5950] em28xx 1-1:0.89: Disconnecting em28xx [ 251.556349][ T2149] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 251.564693][ T2149] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 251.579558][ T7922] vlan2: entered promiscuous mode [ 251.584668][ T7922] bridge0: entered promiscuous mode [ 251.593041][ T5827] usb 5-1: device descriptor read/64, error -71 [ 251.627210][ T2149] em28xx 1-1:0.89: No AC97 audio processor [ 252.080450][ T5827] usb usb5-port1: attempt power cycle [ 252.159240][ T2149] usb 1-1: Decoder not found [ 252.197610][ T2149] em28xx 1-1:0.89: failed to create media graph [ 252.233930][ T2149] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 252.422332][ T2149] em28xx 1-1:0.89: Registering snapshot button... [ 252.453700][ T2149] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input13 [ 252.564986][ T2149] em28xx 1-1:0.89: Remote control support is not available for this card. [ 252.636834][ T5950] em28xx 1-1:0.89: Closing input extension [ 252.677987][ T5950] em28xx 1-1:0.89: Deregistering snapshot button [ 253.055413][ T5950] em28xx 1-1:0.89: Freeing device [ 253.088848][ T5158] Bluetooth: hci0: command 0x0409 tx timeout [ 253.768669][ T5915] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 253.919388][ T5915] usb 6-1: Using ep0 maxpacket: 8 [ 253.957549][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.983620][ T5915] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 254.514560][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.566201][ T5915] usb 6-1: config 0 descriptor?? [ 255.103522][ T5915] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 256.339023][ T5915] usb 6-1: USB disconnect, device number 18 [ 258.218740][ T5915] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 258.370036][ T8002] genirq: Flags mismatch irq 4. 00200000 (das16m1) vs. 00200080 (ttyS0) [ 260.037714][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.058676][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.069802][ T5915] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 260.079082][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.090453][ T5915] usb 4-1: config 0 descriptor?? [ 260.468694][ T2149] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 260.706910][ T8031] input input14: cannot allocate more than FF_MAX_EFFECTS effects [ 261.039466][ T5915] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 261.096672][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.156879][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.435826][ T5915] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 263.734472][ T5915] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0004/input/input15 [ 264.076650][ T5915] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 264.093965][ T5915] usb 4-1: USB disconnect, device number 19 [ 264.364835][ T8039] fuse: Unknown parameter '' [ 264.487405][ T2149] usb 6-1: device descriptor read/all, error -61 [ 264.789161][ T2149] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 264.834192][ T8036] fido_id[8036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 264.926727][ T8050] netlink: 92 bytes leftover after parsing attributes in process `syz.3.422'. [ 265.678732][ T2149] usb 6-1: device descriptor read/64, error -71 [ 265.797230][ T2149] usb usb6-port1: attempt power cycle [ 265.825437][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 265.825456][ T30] audit: type=1326 audit(1754277795.340:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 265.961885][ T30] audit: type=1326 audit(1754277795.340:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 266.021206][ T8058] Bluetooth: MGMT ver 1.23 [ 266.026931][ T8058] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 266.158770][ T2149] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 266.200905][ T30] audit: type=1326 audit(1754277795.340:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 266.489309][ T2149] usb 6-1: device not accepting address 21, error -71 [ 266.494525][ T30] audit: type=1326 audit(1754277795.340:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 266.868770][ T30] audit: type=1326 audit(1754277795.340:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 266.990774][ T30] audit: type=1326 audit(1754277795.340:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 267.063944][ T30] audit: type=1326 audit(1754277795.340:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 267.163610][ T30] audit: type=1326 audit(1754277795.340:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 267.245732][ T30] audit: type=1326 audit(1754277795.340:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 267.368759][ T5915] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 267.395747][ T30] audit: type=1326 audit(1754277795.340:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8051 comm="syz.3.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf5f98eb69 code=0x7ffc0000 [ 267.458401][ T5158] Bluetooth: hci4: unexpected event for opcode 0x200c [ 268.434821][ T5915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.553869][ T5915] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 269.115000][ T5915] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 269.124275][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.222119][ T5915] usb 2-1: Product: syz [ 269.226464][ T5915] usb 2-1: Manufacturer: syz [ 269.231304][ T5915] usb 2-1: SerialNumber: syz [ 269.239428][ T5915] usb 2-1: config 0 descriptor?? [ 269.255281][ T5915] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 269.409752][ T5965] block nbd0: Possible stuck request ffff88802560e000: control (read@0,4096B). Runtime 150 seconds [ 271.132611][ T5902] usb 2-1: USB disconnect, device number 26 [ 271.681695][ T2149] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 271.864881][ T8114] sp0: Synchronizing with TNC [ 271.938799][ T2149] usb 6-1: Using ep0 maxpacket: 8 [ 271.957293][ T2149] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.991293][ T8116] hsr0: entered allmulticast mode [ 271.996406][ T8116] hsr_slave_0: entered allmulticast mode [ 272.012192][ T2149] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.097770][ T2149] usb 6-1: config 0 interface 0 has no altsetting 0 [ 272.099333][ T8116] hsr_slave_1: entered allmulticast mode [ 272.111376][ T2149] usb 6-1: New USB device found, idVendor=a038, idProduct=3809, bcdDevice=60.a8 [ 272.231149][ T2149] usb 6-1: New USB device strings: Mfr=132, Product=109, SerialNumber=160 [ 272.260334][ T2149] usb 6-1: Product: syz [ 272.267350][ T8117] hsr_slave_0: left promiscuous mode [ 272.271065][ T2149] usb 6-1: Manufacturer: syz [ 272.278977][ T2149] usb 6-1: SerialNumber: syz [ 272.298013][ T2149] usb 6-1: config 0 descriptor?? [ 272.329942][ T8117] hsr_slave_1: left promiscuous mode [ 272.465118][ T8117] hsr0 (unregistering): left allmulticast mode [ 272.590504][ T8123] netlink: 'syz.3.437': attribute type 13 has an invalid length. [ 272.629922][ T8114] Falling back ldisc for ttyS3. [ 272.641355][ T8128] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 272.671148][ T8123] macvtap0: entered promiscuous mode [ 272.714191][ T8123] macvtap0: refused to change device tx_queue_len [ 272.815992][ T8108] dvmrp0: entered allmulticast mode [ 272.918277][ T2149] usbhid 6-1:0.0: can't add hid device: -71 [ 273.133241][ T2149] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 273.144866][ T2149] usb 6-1: USB disconnect, device number 23 [ 273.273603][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.4.444'. [ 274.511422][ T8151] block device autoloading is deprecated and will be removed. [ 274.941473][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.446'. [ 277.625244][ T8175] tmpfs: Unknown parameter 'Ë.×»ap' [ 277.704420][ T8181] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 277.900992][ T8189] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 278.563693][ T8211] netlink: 'syz.5.458': attribute type 29 has an invalid length. [ 278.688850][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 279.178681][ T2149] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 279.360859][ T2149] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.405854][ T2149] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.482314][ T2149] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.537669][ T2149] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.589592][ T2149] usb 2-1: Product: syz [ 279.593832][ T2149] usb 2-1: Manufacturer: syz [ 279.635562][ T2149] usb 2-1: SerialNumber: syz [ 279.883078][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.460'. [ 279.908775][ T8216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 280.011491][ T2149] usb 2-1: 0:2 : does not exist [ 280.085518][ T2149] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 280.230290][ T2149] usb 2-1: USB disconnect, device number 27 [ 280.374123][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.598694][ T5950] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 280.788639][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 280.827597][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.863390][ T5950] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 280.917046][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.970646][ T5950] usb 5-1: config 0 descriptor?? [ 281.438808][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 281.485424][ T5950] lenovo 0003:17EF:6062.0005: item fetching failed at offset 2/5 [ 281.498931][ T5950] lenovo 0003:17EF:6062.0005: hid_parse failed [ 281.505336][ T5950] lenovo 0003:17EF:6062.0005: probe with driver lenovo failed with error -22 [ 281.608603][ T43] usb 2-1: device descriptor read/64, error -71 [ 281.858888][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 282.018897][ T43] usb 2-1: device descriptor read/64, error -71 [ 282.131317][ T8266] netlink: 52 bytes leftover after parsing attributes in process `syz.0.472'. [ 282.133803][ T43] usb usb2-port1: attempt power cycle [ 282.271420][ T8266] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 282.549599][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 282.619598][ T43] usb 2-1: device descriptor read/8, error -71 [ 282.748748][ T5950] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 282.918900][ T43] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 282.926822][ T5950] usb 4-1: device descriptor read/64, error -71 [ 283.042356][ T43] usb 2-1: device descriptor read/8, error -71 [ 283.186816][ T43] usb usb2-port1: unable to enumerate USB device [ 283.229086][ T5950] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 283.409483][ T5950] usb 4-1: device descriptor read/64, error -71 [ 283.506444][ T9] usb 5-1: USB disconnect, device number 12 [ 283.571383][ T5950] usb usb4-port1: attempt power cycle [ 283.950984][ T5950] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 284.013205][ T5950] usb 4-1: device descriptor read/8, error -71 [ 284.298983][ T5950] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.376167][ T8292] io-wq is not configured for unbound workers [ 284.381886][ T5950] usb 4-1: device descriptor read/8, error -71 [ 284.559967][ T5950] usb usb4-port1: unable to enumerate USB device [ 284.971689][ T5915] kernel write not supported for file /amidi2 (pid: 5915 comm: kworker/0:5) [ 285.208848][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 285.519525][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 285.550573][ T9] usb 6-1: config 249 has an invalid interface number: 117 but max is 0 [ 285.570406][ T9] usb 6-1: config 249 has no interface number 0 [ 285.585244][ T9] usb 6-1: config 249 interface 117 has no altsetting 0 [ 285.601112][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=44.bf [ 285.620791][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.642007][ T9] usb 6-1: Product: syz [ 285.653886][ T9] usb 6-1: Manufacturer: syz [ 285.666868][ T9] usb 6-1: SerialNumber: syz [ 286.141662][ T8329] ksmbd: Unknown IPC event: 4, ignore. [ 286.282945][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 286.298113][ T9] ttusb-dec 6-1:249.117: probe with driver ttusb-dec failed with error -22 [ 286.326221][ T9] usb 6-1: USB disconnect, device number 24 [ 286.819846][ T6004] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 286.959626][ T6004] usb 5-1: device descriptor read/64, error -71 [ 287.064785][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.496'. [ 287.178706][ T5827] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 287.209276][ T6004] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 287.348814][ T6004] usb 5-1: device descriptor read/64, error -71 [ 287.357721][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.373181][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.386773][ T5827] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 287.396959][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.415902][ T5827] usb 1-1: config 0 descriptor?? [ 287.461291][ T6004] usb usb5-port1: attempt power cycle [ 287.539003][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 287.699983][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 287.717674][ T9] usb 6-1: config 0 has no interfaces? [ 287.732322][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 287.748894][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.757842][ T9] usb 6-1: Product: syz [ 287.768052][ T9] usb 6-1: Manufacturer: syz [ 287.776987][ T9] usb 6-1: SerialNumber: syz [ 287.806258][ T9] usb 6-1: config 0 descriptor?? [ 287.819875][ T6004] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 287.859773][ T5827] hkems 0003:2006:0118.0006: unbalanced delimiter at end of report description [ 287.884361][ T5827] hkems 0003:2006:0118.0006: parse failed [ 287.900161][ T5827] hkems 0003:2006:0118.0006: probe with driver hkems failed with error -22 [ 287.909448][ T6004] usb 5-1: device descriptor read/8, error -71 [ 288.049936][ T5902] usb 1-1: USB disconnect, device number 17 [ 288.054498][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.5.499'. [ 288.065696][ T8360] netlink: 28 bytes leftover after parsing attributes in process `syz.5.499'. [ 288.148977][ T6004] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 288.180845][ T6004] usb 5-1: device descriptor read/8, error -71 [ 288.215564][ T5827] usb 6-1: USB disconnect, device number 25 [ 288.289116][ T6004] usb usb5-port1: unable to enumerate USB device [ 288.474021][ T8371] xt_policy: output policy not valid in PREROUTING and INPUT [ 288.759053][ T5853] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 289.365171][ T5853] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.405534][ T5853] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 289.437168][ T5853] usb 4-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 289.467972][ T5853] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.527856][ T5853] usb 4-1: config 0 descriptor?? [ 291.768470][ T5827] usb 4-1: USB disconnect, device number 24 [ 292.539817][ T8403] bond0: entered promiscuous mode [ 292.550616][ T8403] bond0: entered allmulticast mode [ 295.276216][ T43] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 295.629191][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 295.739742][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 295.886240][ T43] usb 6-1: config 127 has an invalid interface number: 36 but max is 1 [ 296.013451][ T43] usb 6-1: config 127 has an invalid interface number: 51 but max is 1 [ 296.154375][ T43] usb 6-1: config 127 has no interface number 0 [ 296.243782][ T43] usb 6-1: config 127 has no interface number 1 [ 296.340891][ T43] usb 6-1: config 127 interface 36 has no altsetting 0 [ 296.443826][ T43] usb 6-1: config 127 interface 51 has no altsetting 0 [ 296.505374][ T43] usb 6-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4 [ 296.556011][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.748635][ T43] usb 6-1: Product: syz [ 296.752986][ T43] usb 6-1: Manufacturer: syz [ 296.779142][ T43] usb 6-1: SerialNumber: syz [ 297.938047][ T43] usb 6-1: unknown number of interfaces: 2 [ 298.074832][ T43] usb 6-1: USB disconnect, device number 26 [ 298.720480][ T8447] Bluetooth: hci0: invalid len left 7, exp >= 255 [ 299.814361][ T55] block nbd0: Possible stuck request ffff88802560e000: control (read@0,4096B). Runtime 180 seconds [ 300.328727][ T2149] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 300.481191][ T2149] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.482626][ T2149] usb 1-1: config 13 has an invalid interface number: 50 but max is 3 [ 300.482655][ T2149] usb 1-1: config 13 has an invalid interface number: 242 but max is 3 [ 300.482678][ T2149] usb 1-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 300.482701][ T2149] usb 1-1: config 13 has 2 interfaces, different from the descriptor's value: 4 [ 300.482725][ T2149] usb 1-1: config 13 has no interface number 0 [ 300.482743][ T2149] usb 1-1: config 13 has no interface number 1 [ 300.482806][ T2149] usb 1-1: config 13 interface 50 altsetting 4 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 300.482838][ T2149] usb 1-1: config 13 interface 50 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 1024 [ 300.482871][ T2149] usb 1-1: config 13 interface 50 altsetting 4 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 300.482900][ T2149] usb 1-1: config 13 interface 50 altsetting 4 endpoint 0x89 has an invalid bInterval 209, changing to 7 [ 300.482930][ T2149] usb 1-1: config 13 interface 50 altsetting 4 endpoint 0x89 has invalid maxpacket 25705, setting to 1024 [ 300.482960][ T2149] usb 1-1: config 13 interface 50 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 300.482986][ T2149] usb 1-1: config 13 interface 50 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 300.483011][ T2149] usb 1-1: config 13 interface 50 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 300.483036][ T2149] usb 1-1: config 13 interface 50 altsetting 4 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 300.483078][ T2149] usb 1-1: config 13 interface 242 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 300.483103][ T2149] usb 1-1: config 13 interface 242 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 300.483133][ T2149] usb 1-1: config 13 interface 50 has no altsetting 0 [ 300.483154][ T2149] usb 1-1: config 13 interface 242 has no altsetting 0 [ 300.488703][ T2149] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 300.488737][ T2149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.488760][ T2149] usb 1-1: Product: syz [ 300.488777][ T2149] usb 1-1: Manufacturer: syz [ 300.488794][ T2149] usb 1-1: SerialNumber: syz [ 300.516516][ T8461] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 300.803787][ T3574] usb 1-1: Failed to submit usb control message: -71 [ 300.803868][ T3574] usb 1-1: unable to send the bmi data to the device: -71 [ 300.803890][ T3574] usb 1-1: unable to get target info from device [ 300.803916][ T3574] usb 1-1: could not get target info (-71) [ 300.804125][ T3574] usb 1-1: could not probe fw (-71) [ 300.804957][ T2149] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 300.986329][ T2149] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 301.005173][ T49] usb 1-1: Failed to submit usb control message: -71 [ 301.250226][ T2149] usb 1-1: USB disconnect, device number 18 [ 301.399533][ T49] usb 1-1: unable to send the bmi data to the device: -71 [ 301.399560][ T49] usb 1-1: unable to get target info from device [ 301.399575][ T49] usb 1-1: could not get target info (-71) [ 301.399593][ T49] usb 1-1: could not probe fw (-71) [ 301.838704][ T5827] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 301.988833][ T5827] usb 4-1: Using ep0 maxpacket: 8 [ 302.001456][ T5827] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 302.188616][ T5827] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 302.304649][ T8498] netlink: 92 bytes leftover after parsing attributes in process `syz.4.534'. [ 302.872266][ T5827] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 302.896601][ T5827] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 302.928262][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 302.968691][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 302.998234][ T8497] kvm: pic: non byte write [ 303.077565][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 303.188090][ T5827] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 303.199385][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.218951][ T5827] usb 4-1: Product: syz [ 303.223390][ T5827] usb 4-1: Manufacturer: syz [ 303.228026][ T5827] usb 4-1: SerialNumber: syz [ 303.250948][ T5827] usb 4-1: config 0 descriptor?? [ 303.325824][ T5827] hub 4-1:0.0: bad descriptor, ignoring hub [ 303.332457][ T5827] hub 4-1:0.0: probe with driver hub failed with error -5 [ 303.373408][ T5827] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 303.524921][ T8490] NILFS (nullb0): couldn't find nilfs on the device [ 303.556767][ T5827] usb 4-1: USB disconnect, device number 25 [ 304.971511][ T8527] netlink: 12 bytes leftover after parsing attributes in process `syz.5.540'. [ 305.439639][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 305.848470][ T9] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 305.980488][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.114158][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 306.217686][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 306.384964][ T9] usb 1-1: SerialNumber: syz [ 306.415196][ T9] usb 1-1: 0:2 : does not exist [ 306.433366][ T9] usb 1-1: unit 48 not found! [ 306.612358][ T9] usb 1-1: USB disconnect, device number 19 [ 306.856443][ T6041] udevd[6041]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 312.328372][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 312.341605][ T5208] udevd[5208]: worker [5841] /devices/virtual/block/nbd0 timeout; kill it [ 312.561496][ T5208] udevd[5208]: seq 11223 '/devices/virtual/block/nbd0' killed [ 312.868835][ T5915] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 313.043543][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 313.089926][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.553'. [ 313.145396][ T5915] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 313.163217][ T5915] usb 2-1: can't read configurations, error -61 [ 313.409151][ T5915] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 313.608613][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 313.644144][ T5915] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 313.674721][ T5915] usb 2-1: can't read configurations, error -61 [ 313.719491][ T5915] usb usb2-port1: attempt power cycle [ 314.098727][ T5915] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 314.130181][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 314.144493][ T8579] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.555'. [ 314.161538][ T5915] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 314.177803][ T5915] usb 2-1: can't read configurations, error -61 [ 314.436672][ T5915] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 314.470278][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 314.480080][ T5915] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 314.489947][ T5915] usb 2-1: can't read configurations, error -61 [ 314.499304][ T5915] usb usb2-port1: unable to enumerate USB device [ 315.268023][ T8581] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.278012][ T8581] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.285390][ T8581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.560140][ T8604] input: syz1 as /devices/virtual/input/input19 [ 316.599151][ T5915] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 316.615231][ T8604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.562'. [ 317.944725][ T5915] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 317.954155][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.972771][ T5915] usb 1-1: Product: syz [ 317.985267][ T5915] usb 1-1: Manufacturer: syz [ 318.013818][ T5915] usb 1-1: SerialNumber: syz [ 318.038988][ T5915] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 318.119705][ T5853] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 318.456988][ T8616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 319.198916][ T5915] usb 1-1: USB disconnect, device number 20 [ 319.208249][ T5853] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 319.252160][ T5853] ath9k_htc: Failed to initialize the device [ 319.265028][ T5915] usb 1-1: ath9k_htc: USB layer deinitialized [ 319.579475][ T8627] netlink: 56 bytes leftover after parsing attributes in process `syz.4.566'. [ 319.591576][ T8630] FAT-fs (nullb0): bogus number of reserved sectors [ 319.599447][ T8630] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 320.798606][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 320.798628][ T30] audit: type=1326 audit(1754277850.300:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f525432ad69 code=0x7ffc0000 [ 321.805442][ T30] audit: type=1326 audit(1754277850.300:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f525432ad69 code=0x7ffc0000 [ 321.838811][ T30] audit: type=1326 audit(1754277850.300:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525438eb69 code=0x7ffc0000 [ 321.860483][ T30] audit: type=1326 audit(1754277850.300:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f525432ad69 code=0x7ffc0000 [ 321.954531][ T30] audit: type=1326 audit(1754277850.300:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525438eb69 code=0x7ffc0000 [ 321.987851][ T30] audit: type=1326 audit(1754277850.300:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f525432ad69 code=0x7ffc0000 [ 322.024071][ T30] audit: type=1326 audit(1754277850.300:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525438eb69 code=0x7ffc0000 [ 322.117900][ T30] audit: type=1326 audit(1754277850.550:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f525432ad69 code=0x7ffc0000 [ 322.412821][ T8655] netlink: 'syz.3.573': attribute type 4 has an invalid length. [ 322.420705][ T8655] netlink: 152 bytes leftover after parsing attributes in process `syz.3.573'. [ 322.517290][ T8655] : renamed from bond0 (while UP) [ 322.600004][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.612477][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.070180][ T30] audit: type=1326 audit(1754277850.550:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f525432ad69 code=0x7ffc0000 [ 323.153224][ T30] audit: type=1326 audit(1754277850.550:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8641 comm="syz.5.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f525432ad69 code=0x7ffc0000 [ 323.788650][ T6004] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 323.948779][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 323.964231][ T6004] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 323.990829][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.022412][ T6004] usb 2-1: Product: syz [ 324.036317][ T6004] usb 2-1: Manufacturer: syz [ 324.082276][ T6004] usb 2-1: SerialNumber: syz [ 324.104961][ T6004] usb 2-1: config 0 descriptor?? [ 324.114291][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.5.578'. [ 324.991965][ T8655] syz.3.573 (8655) used greatest stack depth: 19464 bytes left [ 325.184710][ T6004] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 325.213369][ T6004] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -110 [ 326.078797][ T5950] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 326.093370][ T5915] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 326.326085][ T5915] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.345282][ T5915] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 326.357617][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.396796][ T5915] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 326.416518][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.460939][ T5950] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 326.476292][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.543397][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.630197][ T5915] usb 1-1: config 0 descriptor?? [ 326.634471][ T5950] usb 6-1: config 0 descriptor?? [ 326.688130][ T5915] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 326.706490][ T8746] @: renamed from vlan0 (while UP) [ 326.731917][ T5915] dvb-usb: bulk message failed: -22 (3/0) [ 326.768449][ T5915] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 326.840180][ T5915] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 326.851954][ T8736] dvb-usb: bulk message failed: -22 (2/0) [ 326.893142][ T5915] usb 1-1: media controller created [ 326.916495][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 327.032572][ T5915] dvb-usb: bulk message failed: -22 (6/0) [ 327.085196][ T5915] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 327.096722][ T5950] samsung 0003:0419:0600.0007: item fetching failed at offset 5/7 [ 327.135403][ T5915] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 327.139298][ T5950] samsung 0003:0419:0600.0007: parse failed [ 327.207367][ T5950] samsung 0003:0419:0600.0007: probe with driver samsung failed with error -22 [ 327.208045][ T5915] dvb-usb: schedule remote query interval to 150 msecs. [ 327.278798][ T5915] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 327.364700][ T5950] usb 6-1: USB disconnect, device number 27 [ 327.399092][ T5915] usb 1-1: USB disconnect, device number 21 [ 327.590582][ T5915] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 327.754791][ T43] usb 2-1: USB disconnect, device number 36 [ 328.369164][ T8776] netlink: 'syz.0.593': attribute type 4 has an invalid length. [ 328.377111][ T8776] netlink: 152 bytes leftover after parsing attributes in process `syz.0.593'. [ 328.418619][ T8776] : renamed from bond0 (while UP) [ 329.241834][ T8782] syz.3.595: attempt to access beyond end of device [ 329.241834][ T8782] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 329.305552][ T8782] syz.3.595: attempt to access beyond end of device [ 329.305552][ T8782] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 329.466306][ T8782] Mount JFS Failure: -5 [ 329.515580][ T8782] tipc: Can't bind to reserved service type 1 [ 330.298655][ T55] block nbd0: Possible stuck request ffff88802560e000: control (read@0,4096B). Runtime 210 seconds [ 332.154080][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 332.775929][ T31] INFO: task syz.2.204:6917 blocked for more than 143 seconds. [ 332.798901][ T31] Not tainted 6.16.0-syzkaller #0 [ 332.844408][ T5915] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 332.848984][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 332.937243][ T31] task:syz.2.204 state:D stack:26312 pid:6917 tgid:6904 ppid:5843 task_flags:0x400040 flags:0x00004006 [ 332.976597][ T31] Call Trace: [ 332.981863][ T31] [ 332.984949][ T31] __schedule+0x16aa/0x4c90 [ 332.990085][ T31] ? schedule+0x165/0x360 [ 332.994668][ T31] ? __pfx___schedule+0x10/0x10 [ 333.056839][ T31] ? schedule+0x91/0x360 [ 333.067524][ T31] schedule+0x165/0x360 [ 333.128430][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.135754][ T5915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 333.147521][ T31] __mutex_lock+0x724/0xe80 [ 333.165011][ T31] ? __mutex_lock+0x51b/0xe80 [ 333.185718][ T31] ? sync_bdevs+0x1ac/0x340 [ 333.188624][ T5915] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 333.192045][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.209735][ T31] ? iput+0x398/0x9d0 [ 333.212730][ T5915] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 333.213964][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 333.223526][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.234021][ T31] sync_bdevs+0x1ac/0x340 [ 333.242663][ T31] ksys_sync+0xb9/0x150 [ 333.247121][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 333.252560][ T31] __ia32_sys_sync+0xe/0x20 [ 333.258283][ T31] do_syscall_64+0xfa/0x3b0 [ 333.262987][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.271260][ T31] ? asm_sysvec_call_function_single+0x1a/0x20 [ 333.277560][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.287204][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.297604][ T31] RIP: 0033:0x7f5368d8eb69 [ 333.302303][ T5915] usb 6-1: Product: syz [ 333.302356][ T31] RSP: 002b:00007f5366bf6038 EFLAGS: 00000246 [ 333.306491][ T5915] usb 6-1: Manufacturer: syz [ 333.306511][ T5915] usb 6-1: SerialNumber: syz [ 333.320393][ T31] ORIG_RAX: 00000000000000a2 [ 333.327022][ T31] RAX: ffffffffffffffda RBX: 00007f5368fb6160 RCX: 00007f5368d8eb69 [ 333.340056][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.351591][ T5915] usb 6-1: config 0 descriptor?? [ 333.360548][ T31] RBP: 00007f5368fb6160 R08: 0000000000000000 R09: 0000000000000000 [ 333.364428][ T8810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.376026][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.376605][ T8810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.389920][ T31] R13: 0000000000000000 R14: 00007f5368fb6160 R15: 00007ffe5c20a338 [ 333.401984][ T31] [ 333.414706][ T31] INFO: task syz.2.204:6921 blocked for more than 144 seconds. [ 333.424296][ T31] Not tainted 6.16.0-syzkaller #0 [ 333.430421][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.441970][ T31] task:syz.2.204 state:D stack:26888 pid:6921 tgid:6904 ppid:5843 task_flags:0x400040 flags:0x00004006 [ 333.454846][ T31] Call Trace: [ 333.458306][ T31] [ 333.462484][ T31] __schedule+0x16aa/0x4c90 [ 333.467348][ T31] ? schedule+0x165/0x360 [ 333.472087][ T31] ? __pfx___schedule+0x10/0x10 [ 333.477548][ T31] ? schedule+0x91/0x360 [ 333.482195][ T31] schedule+0x165/0x360 [ 333.493805][ T31] schedule_preempt_disabled+0x13/0x30 [ 333.499988][ T31] __mutex_lock+0x724/0xe80 [ 333.504649][ T31] ? __mutex_lock+0x51b/0xe80 [ 333.516020][ T31] ? sync_bdevs+0x1ac/0x340 [ 333.520945][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 333.526250][ T31] ? iput+0x398/0x9d0 [ 333.535598][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 333.543097][ T31] sync_bdevs+0x1ac/0x340 [ 333.547582][ T31] ksys_sync+0xb9/0x150 [ 333.556845][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 333.561806][ T31] ? do_syscall_64+0xbe/0x3b0 [ 333.566964][ T31] __ia32_sys_sync+0xe/0x20 [ 333.576372][ T31] do_syscall_64+0xfa/0x3b0 [ 333.581250][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.586588][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.601120][ T31] ? clear_bhb_loop+0x60/0xb0 [ 333.606120][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.614011][ T31] RIP: 0033:0x7f5368d8eb69 [ 333.624914][ T31] RSP: 002b:00007f53667d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 333.635539][ T31] RAX: ffffffffffffffda RBX: 00007f5368fb6240 RCX: 00007f5368d8eb69 [ 333.647102][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 333.662330][ T31] RBP: 00007f5368fb6240 R08: 0000000000000000 R09: 0000000000000000 [ 333.669357][ T8810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.671756][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.688391][ T8810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 333.690044][ T31] R13: 0000000000000001 R14: 00007f5368fb6240 R15: 00007ffe5c20a338 [ 333.710375][ T31] [ 333.720098][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.3.603'. [ 333.731425][ T31] [ 333.731425][ T31] Showing all locks held in the system: [ 333.745701][ T31] 1 lock held by khungtaskd/31: [ 333.754241][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 333.782233][ T31] 1 lock held by udevd/5208: [ 333.787046][ T31] 2 locks held by getty/5600: [ 333.797966][ T31] #0: ffff8880310f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.823844][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 333.839090][ T31] 1 lock held by udevd/5841: [ 333.843823][ T31] #0: ffff8880254be358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 333.859398][ T31] 5 locks held by kworker/0:5/5915: [ 333.864752][ T31] #0: ffff888140eb3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 333.878443][ T31] #1: ffffc9000452fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 333.890944][ T31] #2: ffff88802844c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 333.901962][ T31] #3: ffff88807e49e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 333.911497][ T31] #4: ffff88807ab2d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 333.921589][ T31] 3 locks held by kworker/0:8/6004: [ 333.927036][ T31] 4 locks held by udevd/6041: [ 333.932367][ T31] #0: ffff888051a9b8b8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 333.941432][ T31] #1: ffff888032ca4488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 333.951447][ T31] #2: ffff8880318212d8 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 333.961680][ T31] #3: ffff88807e49e198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 333.971439][ T31] 1 lock held by syz.2.204/6917: [ 333.976624][ T31] #0: ffff8880254be358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 333.986558][ T31] 1 lock held by syz.2.204/6921: [ 333.991768][ T31] #0: ffff8880254be358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 334.002813][ T31] 4 locks held by kworker/u8:16/8700: [ 334.008240][ T31] #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 334.018304][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 334.029959][ T31] #2: ffff888023f38768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460 [ 334.040143][ T31] #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc3/0x330 [ 334.050589][ T31] 5 locks held by kworker/u8:17/8702: [ 334.056039][ T31] 4 locks held by kworker/u8:19/8706: [ 334.061549][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 334.074625][ T31] #1: ffffc90003abfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 334.085411][ T31] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 334.094958][ T31] #3: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 334.107647][ T31] 1 lock held by syz.4.602/8820: [ 334.112742][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 334.122923][ T31] 1 lock held by syz.3.603/8815: [ 334.127894][ T31] #0: ffffffff8e144ac0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 334.138610][ T31] [ 334.141048][ T31] ============================================= [ 334.141048][ T31] [ 334.150038][ T31] NMI backtrace for cpu 1 [ 334.150068][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 334.150093][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.150106][ T31] Call Trace: [ 334.150115][ T31] [ 334.150125][ T31] dump_stack_lvl+0x189/0x250 [ 334.150153][ T31] ? __wake_up_klogd+0xd9/0x110 [ 334.150187][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.150211][ T31] ? __pfx__printk+0x10/0x10 [ 334.150254][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 334.150291][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 334.150321][ T31] ? _printk+0xcf/0x120 [ 334.150353][ T31] ? __pfx__printk+0x10/0x10 [ 334.150384][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.150418][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 334.150451][ T31] watchdog+0xfee/0x1030 [ 334.150485][ T31] ? watchdog+0x1de/0x1030 [ 334.150526][ T31] kthread+0x70e/0x8a0 [ 334.150558][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.150588][ T31] ? __pfx_kthread+0x10/0x10 [ 334.150620][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.150639][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.150660][ T31] ? __pfx_kthread+0x10/0x10 [ 334.150702][ T31] ret_from_fork+0x3fc/0x770 [ 334.150727][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.150754][ T31] ? __switch_to_asm+0x39/0x70 [ 334.150779][ T31] ? __switch_to_asm+0x33/0x70 [ 334.150804][ T31] ? __pfx_kthread+0x10/0x10 [ 334.150834][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.150879][ T31] [ 334.150887][ T31] Sending NMI from CPU 1 to CPUs 0: [ 334.314060][ C0] NMI backtrace for cpu 0 [ 334.314078][ C0] CPU: 0 UID: 0 PID: 8810 Comm: syz.5.601 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 334.314100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.314112][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 334.314142][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 62 cc 7e 03 66 [ 334.314159][ C0] RSP: 0018:ffffc90000007db0 EFLAGS: 00000046 [ 334.314179][ C0] RAX: 0000000000001da5 RBX: ffff8880b8623900 RCX: 0000000000000838 [ 334.314192][ C0] RDX: 0000000000000000 RSI: 0000000000001da5 RDI: 0000000000000838 [ 334.314203][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81aec6ee [ 334.314215][ C0] R10: 0000000000000003 R11: ffffffff81702490 R12: 0000000010005235 [ 334.314228][ C0] R13: dffffc0000000000 R14: 0000000000001da5 R15: 0000000000000020 [ 334.314240][ C0] FS: 00007f52552896c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 334.314257][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.314269][ C0] CR2: 00007ffffffff000 CR3: 0000000057866000 CR4: 00000000003526f0 [ 334.314285][ C0] Call Trace: [ 334.314292][ C0] [ 334.314299][ C0] lapic_next_event+0x11/0x20 [ 334.314318][ C0] clockevents_program_event+0x1cc/0x360 [ 334.314348][ C0] hrtimer_run_softirq+0x23f/0x2b0 [ 334.314371][ C0] handle_softirqs+0x283/0x870 [ 334.314393][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 334.314415][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 334.314436][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 334.314464][ C0] __irq_exit_rcu+0xca/0x1f0 [ 334.314483][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 334.314507][ C0] irq_exit_rcu+0x9/0x30 [ 334.314523][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 334.314542][ C0] [ 334.314548][ C0] [ 334.314555][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 334.314574][ C0] RIP: 0010:preempt_count_sub+0x43/0x170 [ 334.314593][ C0] Code: e8 03 0f b6 04 18 84 c0 0f 85 d1 00 00 00 83 3d 42 f0 16 18 00 75 25 65 8b 05 89 ad 0b 11 89 c1 81 e1 ff ff ff 7f 39 cf 7f 2a <81> ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 64 [ 334.314609][ C0] RSP: 0018:ffffc90004e3f768 EFLAGS: 00000246 [ 334.314624][ C0] RAX: 0000000080000001 RBX: dffffc0000000000 RCX: 0000000000000001 [ 334.314636][ C0] RDX: 0000000000000007 RSI: ffffffff8d982fba RDI: 0000000000000001 [ 334.314648][ C0] RBP: ffffc90004e3f810 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 334.314662][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: dffffc0000000000 [ 334.314676][ C0] R13: ffff88806b550000 R14: ffffffff99cb7070 R15: 1ffff920009c7ef0 [ 334.314701][ C0] _raw_spin_unlock_irqrestore+0xad/0x110 [ 334.314733][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 334.314770][ C0] debug_check_no_obj_freed+0x451/0x470 [ 334.314804][ C0] ? __page_table_check_zero+0xba/0x530 [ 334.314830][ C0] __free_frozen_pages+0x509/0xe60 [ 334.314855][ C0] __put_partials+0x161/0x1c0 [ 334.314880][ C0] put_cpu_partial+0x17c/0x250 [ 334.314902][ C0] ? put_cpu_partial+0x6d/0x250 [ 334.314927][ C0] __slab_free+0x2f7/0x400 [ 334.314958][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 334.314987][ C0] ? __phys_addr+0xd3/0x180 [ 334.315011][ C0] qlist_free_all+0x97/0x140 [ 334.315040][ C0] kasan_quarantine_reduce+0x148/0x160 [ 334.315069][ C0] __kasan_slab_alloc+0x22/0x80 [ 334.315087][ C0] __kmalloc_noprof+0x224/0x4f0 [ 334.315103][ C0] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 334.315131][ C0] tomoyo_realpath_from_path+0xe3/0x5d0 [ 334.315161][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 334.315180][ C0] tomoyo_path_number_perm+0x1e8/0x5a0 [ 334.315200][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 334.315221][ C0] ? debug_object_free+0x2a2/0x340 [ 334.315254][ C0] ? __lock_acquire+0xab9/0xd20 [ 334.315282][ C0] ? __fget_files+0x2a/0x420 [ 334.315304][ C0] ? __fget_files+0x2a/0x420 [ 334.315323][ C0] ? __fget_files+0x3a0/0x420 [ 334.315341][ C0] ? __fget_files+0x2a/0x420 [ 334.315363][ C0] security_file_ioctl+0xcb/0x2d0 [ 334.315385][ C0] __se_sys_ioctl+0x47/0x170 [ 334.315414][ C0] do_syscall_64+0xfa/0x3b0 [ 334.315434][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.315451][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.315469][ C0] ? clear_bhb_loop+0x60/0xb0 [ 334.315490][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.315507][ C0] RIP: 0033:0x7f525438e76b [ 334.315522][ C0] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 334.315538][ C0] RSP: 002b:00007f5255286f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.315556][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f525438e76b [ 334.315569][ C0] RDX: 00007f5255287ff0 RSI: 0000000080085502 RDI: 0000000000000003 [ 334.315581][ C0] RBP: 00007f5254411df1 R08: 0000000000000000 R09: 0000000000000000 [ 334.315592][ C0] R10: 0000000000000003 R11: 0000000000000246 R12: 0000200000000500 [ 334.315604][ C0] R13: 0000000000000000 R14: 00007f52545b5fa0 R15: 00007ffc3f8b52e8 [ 334.315626][ C0] [ 334.531789][ T5915] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 334.655172][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 334.655218][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 334.655248][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 334.655265][ T31] Call Trace: [ 334.655276][ T31] [ 334.655289][ T31] dump_stack_lvl+0x99/0x250 [ 334.655325][ T31] ? __asan_memcpy+0x40/0x70 [ 334.655362][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.655393][ T31] ? __pfx__printk+0x10/0x10 [ 334.655442][ T31] panic+0x2db/0x790 [ 334.655478][ T31] ? __pfx_panic+0x10/0x10 [ 334.655505][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 334.655537][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 334.655577][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 334.655624][ T31] watchdog+0x102d/0x1030 [ 334.655664][ T31] ? watchdog+0x1de/0x1030 [ 334.655710][ T31] kthread+0x70e/0x8a0 [ 334.655748][ T31] ? __pfx_watchdog+0x10/0x10 [ 334.655783][ T31] ? __pfx_kthread+0x10/0x10 [ 334.655818][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 334.655844][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 334.655866][ T31] ? __pfx_kthread+0x10/0x10 [ 334.655901][ T31] ret_from_fork+0x3fc/0x770 [ 334.655937][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 334.655969][ T31] ? __switch_to_asm+0x39/0x70 [ 334.656000][ T31] ? __switch_to_asm+0x33/0x70 [ 334.656029][ T31] ? __pfx_kthread+0x10/0x10 [ 334.656064][ T31] ret_from_fork_asm+0x1a/0x30 [ 334.656113][ T31] [ 334.657492][ T31] Kernel Offset: disabled