last executing test programs: 11.539351099s ago: executing program 4 (id=4410): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRES16=r3, @ANYRES64=r2], 0x34}, 0x1, 0x0, 0x0, 0x240000b1}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000001780)={&(0x7f00000016c0), 0xc, &(0x7f0000001740)={&(0x7f0000001900)={0x1c, r3, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xe010}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000040800000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32, @ANYBLOB="0000021b611900bf9d3c360ce35d"], 0x50) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000040)={0xa, 0xfffe, 0x0, @private1, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xfffffffd, 0x7) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r6, &(0x7f0000002f40)=""/4098, 0x1002) 9.635279208s ago: executing program 4 (id=4421): r0 = memfd_create(&(0x7f00000003c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc4\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\x0f\xf2 \xc4\x06\x9ew\xa2_\xb5g\xb5}\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa0\xb7$\x17=P', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, 0xffffffffffffffff) write(r0, &(0x7f00000000c0)='i', 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) sendto$inet6(r1, &(0x7f00000038c0)="85abfe769d1a0b6693ebfe02a12acf9ef8f18e0d3abb7d43d5a4c8629f702165fb51a32f895e81efa0e58d595bc6a9558067a63fde00dd4105f88fcae70b6026e7a2133149dc1f4cc4cd95451f55e438a891330ed8cebd4d1a96670c3030689d59ce6bfcd32fd0ad158294178ba7f14b3a03ee4803ee2ae6cb5205e40ea4e1ec2392c4a1045bf9a4f7db4569ec399b83c557d1fa13d1a6293e85b0a8222ddbe98dc1103aa826c12ad82e9013dd5ac1857c5f6845b58e625621c4ce635e9e6527bf5f21173c2010006006aa7a", 0xcc, 0x488c0, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000037c0)=@x86={0x9, 0x5, 0x5, 0x0, 0x7f, 0xf, 0x8, 0x8, 0x9, 0x40, 0x8, 0x6, 0x0, 0x3, 0x5, 0x8, 0x3e, 0x8, 0x6, '\x00', 0x7, 0x7}) r3 = openat$vcs(0xffffff9c, &(0x7f0000003700), 0x2a40, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x10, &(0x7f0000003740), &(0x7f0000003780)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000002f40)=@assoc_value, &(0x7f0000002f80)=0x37) connect$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x1}, 0x1}, 0x18) r6 = syz_open_dev$sndctrl(&(0x7f0000003680), 0x1, 0x101) ioctl$SNDRV_CTL_IOCTL_PVERSION(r6, 0x80045500, &(0x7f00000036c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003180)={{r1}, &(0x7f0000003100), &(0x7f0000003140)}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="16e2e7e5c356a264000000000200000065bba658a349ae65c3e7ff8c06d918000000d403000000000e"], &(0x7f00000031c0)='GPL\x00', 0x3, 0xc6, &(0x7f0000003440)=""/198, 0x41000, 0x15, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000003200)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000003540)={0x3, 0xe, 0x6, 0xc}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003580)=[{0x2, 0x2, 0x10, 0x6}], 0x10, 0x5, @void, @value}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sysfs$2(0x2, 0xfffffffffffffffa, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000030c0)=0x6) getsockopt$inet_tcp_int(r7, 0x6, 0x24, 0x0, &(0x7f0000000040)=0x59) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) recvmmsg$unix(r5, &(0x7f0000004840)=[{{&(0x7f00000033c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000280)=""/41, 0x29}], 0x1, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x44}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000000340), 0x0, &(0x7f0000000680)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0xc}}], 0xa8}}, {{&(0x7f0000000740), 0x6e, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f0000000380)}], 0x2, &(0x7f0000000900)=[@cred={{0x18}}, @cred={{0x18}}], 0x30}}, {{&(0x7f0000000940), 0x6e, &(0x7f0000002b40)=[{&(0x7f00000009c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/87, 0x57}, {&(0x7f0000001b40)=""/4096, 0x1000}], 0x4, &(0x7f00000032c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002cc0)=""/215, 0xd7}, {&(0x7f0000002dc0)=""/98, 0x62}, {&(0x7f0000002e40)=""/129, 0x81}, {&(0x7f00000005c0)=""/170, 0xaa}], 0x4, &(0x7f0000003000)=[@cred={{0x18}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x2c}}, {{&(0x7f0000003040), 0x6e, &(0x7f0000003240), 0x0, &(0x7f0000003280)=[@cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f0000002b80)=""/92, 0x5c}, {&(0x7f00000039c0)=""/108, 0x6c}, {&(0x7f0000003a40)=""/107, 0x6b}, {&(0x7f0000003ac0)=""/200, 0xc8}, {&(0x7f0000003bc0)=""/209, 0xd1}, {&(0x7f0000003cc0)=""/66, 0x42}, {&(0x7f0000003d40)=""/175, 0xaf}, {&(0x7f0000003e00)=""/183, 0xb7}], 0x8, &(0x7f0000003ec0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x98}}, {{&(0x7f0000003f80), 0x6e, &(0x7f0000000380)=[{&(0x7f0000004000)=""/213, 0xd5}], 0x1, &(0x7f0000004100)=[@cred={{0x18}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}], 0x90}}, {{&(0x7f00000041c0), 0x6e, &(0x7f0000002f00)=[{&(0x7f0000004240)=""/89, 0x59}, {&(0x7f0000002c00)=""/47, 0x2f}], 0x2, &(0x7f00000042c0)=[@cred={{0x18}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f0000004400), 0x6e, &(0x7f0000003640)=[{&(0x7f0000004480)=""/92, 0x5c}, {&(0x7f0000004500)=""/131, 0x83}, {&(0x7f0000003240)=""/48, 0x30}, {&(0x7f00000045c0)=""/199, 0xc7}, {&(0x7f00000046c0)=""/125, 0x7d}], 0x5, &(0x7f0000004740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}], 0xa, 0x20, &(0x7f0000003380)) poll(&(0x7f0000000480)=[{r4}], 0x1, 0xfffbfff8) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000), 0x0, 0x0, 0x2) syz_usb_connect(0x4, 0x9a2, &(0x7f0000000280)=ANY=[], 0x0) 8.949333097s ago: executing program 4 (id=4427): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1b67, &(0x7f00000003c0), &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 8.815799931s ago: executing program 4 (id=4428): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r2) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001400000000008000240f0ffffff140000001100010000000044000000000000000a"], 0x90}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket(0x10, 0x2, 0x0) sendto$inet6(r7, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x0, 0x0, 0x0) 8.413688631s ago: executing program 4 (id=4430): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x14) listen(r0, 0xfffffffc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x0, @loopback={0x4000000}}]}, &(0x7f00000002c0)=0x10) 8.113513352s ago: executing program 4 (id=4432): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x37000, 0x1000}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000010c0)={0x24, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @nested={0x4, 0xa}]}, 0x24}], 0x1}, 0x4000800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r2, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xb86}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}]]}, 0x2c}}, 0x0) 7.75490037s ago: executing program 0 (id=4434): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60120008034b9f24ad79ea470000000000000000000000bbff0200000000000000000000000000010500907800"/70], 0x0) poll(&(0x7f0000000100)=[{r0, 0x2000}], 0x1, 0x150e242a) 7.534094171s ago: executing program 0 (id=4436): r0 = syz_open_dev$dri(&(0x7f0000000380), 0x1ff, 0x20000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x80800, 0x5, 0x3}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, r2, 0x80000001, 0x7ffffe02, 0xb, 0x1fd, 0x1}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000300)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r6 = socket$inet6(0x10, 0x2, 0x4) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) truncate(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001000)=0x0) sched_setaffinity(r9, 0x8, &(0x7f0000001040)=0x8000) setsockopt$sock_timeval(r8, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) ioctl$VIDIOC_QUERYBUF_DMABUF(r7, 0xc0585609, &(0x7f00000000c0)={0x2, 0xb, 0x4, 0x10000, 0x10000, {}, {0x3, 0xc, 0x7c, 0x8, 0x6, 0x6c, "643eb0e1"}, 0x7, 0x4, {}, 0x7fff}) sendto$inet6(r6, &(0x7f0000000240)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323456536005ad94a461cdbfee9bdb9423523598451d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 7.120661779s ago: executing program 1 (id=4438): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) landlock_create_ruleset(&(0x7f0000000040)={0x1000}, 0x10, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x0, 0x200}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000440)) close_range(r1, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000014000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000080)) request_key(&(0x7f00000005c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000540)='bgiltin_\xfes7\a4\x99M\x12\x8ftrusted\x00', 0xfffffffffffffffd) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00\x00\x00\x00\x00\x00\x00\x01H\x00\x00\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) 7.032365654s ago: executing program 0 (id=4439): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="0001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000280000001862b60a25b1b775ac584f3a3424e1974c6d6bd44498745389"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00Z'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.800861009s ago: executing program 1 (id=4440): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.600710311s ago: executing program 1 (id=4441): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x34}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0xe703) 6.303194733s ago: executing program 2 (id=4442): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r2, 0x0, 0x0, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x17) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r5, 0x1) setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200080001000a00000040000000450002000000000000849078ac141400ffffffff0420880b0000000000000800000086dd080088be0000000010000000010000000b000000080022eb00000000200000000200000000000800655800000000"], 0x66) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x2, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="b40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000008400128009000100766c616e0000000074000280040003800c00020000000000020000000c000200000000001800000006000100000000004c0004800c000100000000006a0000000c0001f800000000018000000c000100220b0000000000000c00010004000000010000000c00010000000000000000008c000100800000000000000008000500", @ANYRES32=r7, @ANYBLOB], 0xb4}, 0x1, 0xba01}, 0x810) r8 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000040), 0x10000, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r9) sendmsg$tipc(r9, &(0x7f0000000380)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x3}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="0ec2bec4eb7117fcb6a55cef40d6aed9896828d900cf20e31d39de85", 0x1c}, {0xffffffffffffffff}, {&(0x7f0000000800)="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", 0x1000}], 0x3, &(0x7f00000002c0)="147c737c78c5f3bb004ad9ab1a703799c71e11afc5623f34cb670e51486d7c6c5f5f73adb16b62c74c05a7acaf3a00610592714440ab34b8f091cb25a62ef920993a70b24e2afc4b6b408e84d12d6fc4323c174a2935595ea7bad3e61f0328eb2a6030174e098be585b4437bdeb056607e94c705a2ef4309d3e091b7525cb5375e4be0885dae1e9cbf85e2a686158d797264bd814e7b482fd709b16188181174fe95f9923f916b", 0xa7, 0x4008040}, 0x20000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000080)=[@decrefs], 0x1b, 0x0, &(0x7f00000000c0)="fd349c5d6e6d89990ef8cd90776b3baed8985777a591012af4c2d5"}) 5.652915043s ago: executing program 1 (id=4444): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5.360473966s ago: executing program 2 (id=4446): r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) keyctl$chown(0x4, 0x0, r2, r3) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0xc0045878, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x4c, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140200001000010000200000000004000000000a14000000110011000300000000540ba50b0e770000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x4855}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x15) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={0x0, 0xe0}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7936020d61000220001010203010902"], 0x0) r9 = socket$inet6(0xa, 0x3, 0x87) sendmmsg$sock(r9, &(0x7f0000001700)=[{{&(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, &(0x7f00000003c0)=[{0x0}, {&(0x7f00000000c0)="c58d", 0x2}, {&(0x7f0000000480)="1d34d0d7412fd5324e93495d2e28606981a60e3ad0920fe5f7b2c8fc6e21fa16dcd763397a4d89d3f29402b067e695a98a320c1d65e3847a3a1dde53350bf2cea3edf4b9af3ff3805f0b3a612cc5f21f206e121b5117acc36c62993bb1d14db9be8f434363ed18e1c3c7f9bb6ea9c373241a1df2cc9167a07725477edde247e01225f39e6e180c1182e794fbc4771be7d3a38b241e8dc5552bf84b61467b4e3d8a3f1079302ac5f3a54ee2fde317427893e47b80b469c6113f81"}, {&(0x7f0000000540)="acef6707e06c6b89f774cfc3b929cce9481f4c078e4d8d54b8e6ac1f37553a14985816ef97d1b0cfc74d7c8feb0b4a15fcbe8ef4679a8233a280d440bf7f0e1d1c4049462186ae655ae540483e3a7389ffb0dfbbac5a2e4419ee653539b1f9f2f8d756002ac01ee847a226efb9b9ca51bb"}], 0x2}}], 0x50, 0x40448c0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000ec0)={0x0, 0x0, 0x0}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r12, 0x4048ae9b, &(0x7f0000000300)={0xf0000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 5.132601002s ago: executing program 1 (id=4448): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00'}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00') fchdir(r1) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a77828403a092626b40d000000010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000140)) r4 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000340)=""/181, 0xb5}], 0x1, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000200)={0x14, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 3.924083428s ago: executing program 0 (id=4451): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe401020301090212f27d9bd300000904", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_emit_ethernet(0x44e, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000004c0)={0xc, &(0x7f0000000400)={0x40, 0x31, 0x9f, {0x9f, 0x8, "5e68cde9bdb93f5aa64ab95f1052c84aa3a27395e38a0296a24ab0124075f9859eb3a7f70d59c2b4ca9f7cc96ccca5e6f89757ffc1425b9aced460f51554beb75595c6a43edf64dd3c27f369bcb611af24cbde6d5688733f8afea4b5479f0bc2e837e6cdcb385e878aa0169044466b9a1139c0d252cd63f74d20cda2a3e93463ff53dc052b56a1b591728155bec62b875caefca845bbd83478d22b0f99"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000500)={0xb8b552671a62f8fb, 0x16, 0xf3, "143c3f0382356b3b0e155fcdc1c1f722ddd53e5a1e20fc15d1e0f38e0113713f50ae761d52a0c63878a66503e02ac8b53de15404aaacdc59bff555d785518d67efe18d7116d3882c351fe9716edc16ec32a93ffef16999d6a3df6033f8d7f4acedaf78025ac97d9643ac34ac1a4854230bc13e0cbc750fa5b17bdca61c033681889ca8931993afb4f7faf0f58dcc0321516475457e0985469fa003c825170b48a510fa82803fd9cee972aa85954f56a511f9baedb38e1b627bd1aaf0515044d9c05d08f3f696cb51b77d08e5883c2bedcc5dee6117aed5c0daa5feb5c65f66e739bdfc4c91c06f79c6b46374d04ea99a9c5c4a"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000680)={0x20, 0x0, 0x57, {0x55, "0a4947bcaab6edc7f34aa5724fab875af92da13808645b3d3f33f34a878457f6aaa7b68dc300c2d389ad907e4e9f03d2346c7e7f34397bd3bb19e33c76279afab64c6ec702e27921c4f14ab087de1d3fe75113a117"}}, &(0x7f0000000700)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000740)={0x20, 0x0, 0x1, 0x40}}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r1, &(0x7f0000000300)="ef", 0x1, 0x20008841, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0xa0, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x48, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0xfe, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0xf3}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x6, 0x34, 0x0, 0x0, 0x59}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xc, 0x3, 0x80, 0x0, "", "cf"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x3, 0x1, 0x45, 0x4, "5d1e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xa, 0xa4, {0x7, 0x25, 0x1, 0x0, 0x5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0xd}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xe, 0x3, 0x8}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x8, 0x6, {0x7, 0x25, 0x1, 0x1, 0xff, 0xf}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x8, 0x0, 0x0, 0x20, 0x8}, 0x61, &(0x7f0000000140)=ANY=[@ANYBLOB="050f61000614100401aee43a5b6c0c8f170a04060300050a1003020c000b0e00041410040d0459fcf8b5bb432224fed1024ff9ebd3149a875c600b10010280000b0242010200"/80], 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2c01}}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.196237529s ago: executing program 2 (id=4456): io_uring_setup(0xfc2, &(0x7f0000000180)={0x0, 0x200000, 0x200}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400283, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) r5 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x0, 0x0, 0x0, r5, 0x5}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x2000, 0x4) 2.008005096s ago: executing program 2 (id=4457): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.808799759s ago: executing program 3 (id=4459): r0 = epoll_create(0x6) r1 = dup2(r0, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x0, [0x1000000], 0x1, 0x0, 0x0, [{}]}, 0x88) 1.725046106s ago: executing program 3 (id=4460): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ab9fd540501d6f60d414000000010902120001000040000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00010c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00Z'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.474726325s ago: executing program 1 (id=4461): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = eventfd2(0x100101, 0x80001) write$eventfd(r4, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r0, 0x4068aea3, &(0x7f0000000600)) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0xaece, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4004ae52, &(0x7f0000000680)=0x500000000) ioctl$KVM_GET_FPU(r3, 0x8000ae8c, &(0x7f0000000400)) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000001c0)={0x0, 0x0, @ioapic={0x10000, 0xfffffffd, 0x714, 0x2, 0x0, [{0x7, 0x20, 0x2, '\x00', 0x79}, {0x1f, 0xff, 0x8, '\x00', 0x6}, {0x40, 0x8, 0x9}, {0xf9, 0x86, 0x7f, '\x00', 0xfb}, {0x15, 0x0, 0x1, '\x00', 0x6}, {0x2, 0x1, 0x0, '\x00', 0xff}, {0x8, 0x0, 0x2, '\x00', 0x81}, {0x40, 0x3f, 0xfb, '\x00', 0xf8}, {0x9, 0xe0, 0x7, '\x00', 0x6}, {0x0, 0x7b, 0x20, '\x00', 0x2}, {0x4, 0x0, 0x2, '\x00', 0x1}, {0x8, 0x80, 0xfb, '\x00', 0xc9}, {0x81, 0x0, 0xd1, '\x00', 0x3f}, {0xfb, 0x1, 0x12, '\x00', 0xff}, {0xae, 0x8, 0x20, '\x00', 0x9}, {0x6, 0x7f, 0xfe, '\x00', 0xf8}, {0xbd, 0x0, 0x4, '\x00', 0x1}, {0x5, 0x2, 0x1, '\x00', 0x40}, {0x7, 0x5, 0x80, '\x00', 0xff}, {0x40, 0x40, 0xfc, '\x00', 0x8}, {0xfa, 0x0, 0x0, '\x00', 0x7}, {0x0, 0xe8}, {0x81, 0x40, 0x0, '\x00', 0x3f}, {0x0, 0x4, 0x0, '\x00', 0x19}]}}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) mmap$KVM_VCPU(&(0x7f0000eb2000/0x3000)=nil, 0x930, 0x1, 0x8010, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x80111500, 0x20000000) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000200)={0x4, 0xffffffffffffffff}) r10 = openat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r10, {0xf278}}, './file1\x00'}) close(r9) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/108, 0x6c}, {&(0x7f0000000180)=""/29, 0x1d}], 0x3) socket$inet6(0xa, 0x4, 0x2) r11 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) faccessat2(r11, &(0x7f0000000080)='\x00', 0x0, 0x1000) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x150, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) 1.212538075s ago: executing program 2 (id=4462): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x3, 0x80000001]}, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x0, 0x0, 0xf9a92f30fe15eb75, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0xf818, 0x1, 0x2}}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=@delqdisc={0x84, 0x25, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x8, 0x5}, {0xfff3, 0x3}, {0xc, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x81}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3d, 0x6, 0x742, 0xfffffffd, 0x1, 0xf, 0x0, 0x1}}, {0x6, 0x2, [0xfffd]}}, {{0x1c, 0x1, {0x4, 0x0, 0x81, 0x3, 0x2, 0x80000001, 0x5, 0x4}}, {0xc, 0x2, [0x2, 0x2, 0xffff, 0x40]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x84}, 0x1, 0x0, 0x0, 0x899}, 0x50) socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f0000000280)="3f030e00f0e812002c001e0089e9aaa911d7c2290f0088481327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe460f54", 0x4a, 0x0, &(0x7f0000000080)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) 1.13168141s ago: executing program 3 (id=4463): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) write$sequencer(r0, &(0x7f0000000000)=[@e={0xfd}], 0x8) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000080), &(0x7f00000000c0)={0x0, 0xfb, 0x86, 0x1, 0x80, "5bda1dfab153e9a4ed06a989ed110593", "f332397d841ae9532465badcd9557dfe5310aa3fc73669026870d5b51ae31c1ec4470e4055973a67fbb0469c3fcbb27a599f5045e6e2405eb1586161170b08a051990fd44c8f41d0ccbe3fa6cda139f370d136d0587e65aa63bd78ce9baf5fb87e45f439319b4303d0a9277868cb65ed8f"}, 0x86, 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000400)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000700)}}], 0x1, 0x40000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}], 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) 967.861945ms ago: executing program 3 (id=4464): recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xffffffff}}], 0x400000000000172, 0x0) 806.519105ms ago: executing program 3 (id=4465): r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80000) sendto(r0, 0x0, 0x3e, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) pipe2(0x0, 0x84080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2002, 0x0, 0x0) 717.128908ms ago: executing program 0 (id=4466): r0 = syz_open_dev$dri(&(0x7f0000000380), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) 427.967475ms ago: executing program 0 (id=4467): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_default\x00', &(0x7f0000000480)={{}, {0x10}}, 0x24, 0x1) socket$kcm(0x10, 0x0, 0x10) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x25, &(0x7f0000000000), 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x284, 0x158, 0xa, 0x148, 0x158, 0x60, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xec, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@ttl={{0x24}}]}, @common=@unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x20, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x2e0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)={'U-', 0xf9}, 0x16, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, 0x0) r2 = syz_usbip_server_init(0x3) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) lseek(r3, 0x0, 0x1) write$binfmt_register(r3, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x3, 0x3a, '\x00', 0x3a, '[%+', 0x3a, './file0', 0x3a, [0x46, 0x1f, 0x50, 0x46, 0x4f, 0x46, 0x43]}, 0x32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) unshare(0x2a020400) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x33}, {}, {0x0, 0x0, 0x1}, 0x0, 0x8, 0x1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x0, 0x4}}, 0x141) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0xffff8001, 0x10000}, 0xc) write$usbip_server(r2, &(0x7f0000002940)=ANY=[], 0x3f34) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) openat$ttyS3(0xffffff9c, &(0x7f00000004c0), 0x80, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$PTP_SYS_OFFSET_PRECISE(r7, 0xc0403d08, &(0x7f0000000080)) request_key(&(0x7f00000005c0)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000500)='bgiltin_\xfes7\a4\x99M\x12\x8ftrusted\x00', 0xfffffffffffffffd) 212.634674ms ago: executing program 2 (id=4468): r0 = openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x400) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r3 = openat$vmci(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) capget(&(0x7f0000000040)={0x20080522}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = memfd_secret(0x0) write$P9_RSTATu(r5, &(0x7f0000000580)=ANY=[], 0x239) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0xfff) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e20, @private=0xa010102}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x9, 0x5, {{0x6, 0x4, 0x3, 0x9, 0x18, 0x67, 0x0, 0xeb, 0x2f, 0x0, @broadcast, @loopback, {[@noop]}}}}}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="24d200001100080026bd70008000010000000000", @ANYRES32=r7, @ANYBLOB="1808040000000100"], 0x20}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9f, 0xce, 0xe1, 0x40, 0x8086, 0x630, 0x83b4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xd, 0xc7, 0xf4, 0x0, [], [{{0x9, 0x5, 0x2}}]}}]}}]}}, 0x0) r8 = getpid() syz_pidfd_open(r8, 0x0) 0s ago: executing program 3 (id=4469): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) r4 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): T23931] __sys_sendmmsg+0x4a8/0x730 [ 1243.351732][T23931] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1243.356961][T23931] ? __pfx_lock_acquire+0x10/0x10 [ 1243.362018][T23931] ? get_pid_task+0x23/0x1f0 [ 1243.366717][T23931] ? __pfx_lock_release+0x10/0x10 [ 1243.371781][T23931] ? kstrtouint_from_user+0x128/0x190 [ 1243.377207][T23931] ? ksys_write+0x229/0x2b0 [ 1243.381756][T23931] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1243.387763][T23931] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1243.393769][T23931] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1243.400124][T23931] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 1243.405685][T23931] __do_fast_syscall_32+0xb4/0x110 [ 1243.410822][T23931] ? exc_page_fault+0x590/0x8c0 [ 1243.415698][T23931] do_fast_syscall_32+0x34/0x80 [ 1243.420560][T23931] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1243.426904][T23931] RIP: 0023:0xf7fc3579 [ 1243.430982][T23931] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1243.450601][T23931] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 1243.459035][T23931] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020007e40 [ 1243.467023][T23931] RDX: 00000000000000aa RSI: 0000000000000000 RDI: 0000000000000000 [ 1243.475006][T23931] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1243.482984][T23931] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1243.490974][T23931] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1243.498965][T23931] [ 1243.526231][T23808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1243.683738][T23808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1243.696400][T23937] IPv6: Can't replace route, no match found [ 1243.712824][T23808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1243.719408][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 1243.783098][ T8] usb 2-1: USB disconnect, device number 36 [ 1243.792477][T23808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1243.989433][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 1244.075400][T15725] Bluetooth: Unexpected continuation frame (len 18) [ 1244.147943][T23808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.318463][T23808] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.460022][T15725] Bluetooth: hci7: command tx timeout [ 1244.468006][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.475238][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.515131][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.522338][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.631101][T23965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.690362][T23965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.754097][T23965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.803094][T23965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.822109][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.051594][ T25] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1245.082413][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.273996][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12292, setting to 64 [ 1245.317953][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.331804][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1245.370269][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.475724][ T25] usb 2-1: config 0 descriptor?? [ 1245.487380][ T25] hub 2-1:0.0: USB hub found [ 1245.516305][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1245.528160][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1245.542306][ T5240] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1245.579127][ T5240] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1245.598384][ T5240] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1245.609297][ T5240] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1245.647416][ T12] batman_adv: batadv0: Removing interface: macvtap1 [ 1245.678826][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.710726][ T25] hub 2-1:0.0: 1 port detected [ 1245.926893][T23808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.167366][T23960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.310458][T23960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.353838][T23960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.364798][ T12] bridge_slave_1: left allmulticast mode [ 1246.370293][T15023] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1246.370686][ T12] bridge_slave_1: left promiscuous mode [ 1246.420246][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.432154][T23960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.450911][ T12] bridge_slave_0: left allmulticast mode [ 1246.466915][ T12] bridge_slave_0: left promiscuous mode [ 1246.480995][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.484491][T23960] input: syz0 as /devices/virtual/input/input122 [ 1246.530018][T15023] usb 3-1: Using ep0 maxpacket: 16 [ 1246.540878][T15725] Bluetooth: hci7: command 0x0405 tx timeout [ 1246.545161][T15023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.610341][T15023] usb 3-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 1246.641188][T15023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.670111][T15023] usb 3-1: Product: syz [ 1246.690026][T15023] usb 3-1: Manufacturer: syz [ 1246.721702][T15023] usb 3-1: SerialNumber: syz [ 1246.768701][T15023] usb 3-1: config 0 descriptor?? [ 1247.114221][ T5287] usb 2-1: USB disconnect, device number 37 [ 1247.114380][ T25] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1247.674651][T15725] Bluetooth: hci0: command tx timeout [ 1247.734802][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1247.795886][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1247.811620][ T12] bond0 (unregistering): Released all slaves [ 1247.883970][T23984] chnl_net:caif_netlink_parms(): no params data found [ 1247.927103][T15023] usb 3-1: Found UVC 0.00 device syz (045e:0721) [ 1247.941815][T15023] usb 3-1: No valid video chain found. [ 1247.955766][T23808] veth0_vlan: entered promiscuous mode [ 1247.965014][T15023] usb 3-1: USB disconnect, device number 8 [ 1248.069467][T23808] veth1_vlan: entered promiscuous mode [ 1248.438055][T23808] veth0_macvtap: entered promiscuous mode [ 1248.471580][T23984] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.501175][T23984] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.508555][T23984] bridge_slave_0: entered allmulticast mode [ 1248.528266][T23984] bridge_slave_0: entered promiscuous mode [ 1248.556433][T23984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.573149][T23984] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.596636][T23984] bridge_slave_1: entered allmulticast mode [ 1248.614339][T23984] bridge_slave_1: entered promiscuous mode [ 1248.641903][T24061] delete_channel: no stack [ 1248.653778][T23808] veth1_macvtap: entered promiscuous mode [ 1248.887741][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.919244][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1248.960003][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1248.981925][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.006926][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.032291][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.050111][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.078688][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.102298][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.133595][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.154158][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.176762][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.193066][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.204981][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.215588][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1249.226635][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.239756][T23808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.306759][T23984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.418308][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.456983][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.477413][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.511190][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.530568][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.549949][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.569967][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.594487][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.636127][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.654712][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.677576][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.692165][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.717585][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.731794][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.741557][T15725] Bluetooth: hci0: command tx timeout [ 1249.749996][T23808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1249.771680][T23808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1249.812429][T23808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.831292][T23984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.070497][T24086] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4183'. [ 1250.095319][T24086] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1250.141411][T23808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.162053][T23808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.181605][T23808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.200001][T23808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.213457][T15023] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1250.252992][T23984] team0: Port device team_slave_0 added [ 1250.312099][T23984] team0: Port device team_slave_1 added [ 1250.390883][T15023] usb 2-1: Using ep0 maxpacket: 32 [ 1250.420581][T15023] usb 2-1: config index 0 descriptor too short (expected 61970, got 18) [ 1250.428998][T15023] usb 2-1: config 155 has too many interfaces: 125, using maximum allowed: 32 [ 1250.470121][T15023] usb 2-1: config 155 has 1 interface, different from the descriptor's value: 125 [ 1250.510626][T15023] usb 2-1: config 155 has no interface number 0 [ 1250.526288][T15023] usb 2-1: too many endpoints for config 155 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1250.539033][T15023] usb 2-1: config 155 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1250.562775][T15023] usb 2-1: config 155 interface 48 has no altsetting 0 [ 1250.587617][T23984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.597906][T15023] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1250.609075][T15023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.614426][T23984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.617954][T15023] usb 2-1: Product: syz [ 1250.659636][T23984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.670019][T15023] usb 2-1: Manufacturer: syz [ 1250.674903][T15023] usb 2-1: SerialNumber: syz [ 1250.767412][ T12] hsr_slave_0: left promiscuous mode [ 1250.792225][ T12] hsr_slave_1: left promiscuous mode [ 1250.810793][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1250.819108][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.852250][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1250.880282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.964583][ T12] veth1_macvtap: left promiscuous mode [ 1250.980451][ T12] veth0_macvtap: left promiscuous mode [ 1250.988250][ T12] veth1_vlan: left promiscuous mode [ 1251.005761][ T12] veth0_vlan: left promiscuous mode [ 1251.114421][T24112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.150946][T24112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.167387][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 1251.176172][T24112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.177829][T15023] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1251.194440][T15023] gspca_ov534_9: reg_w failed -71 [ 1251.211756][T24112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.233797][T24112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.267122][T24112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.604262][T15023] gspca_ov534_9: Unknown sensor 0000 [ 1251.604351][T15023] ov534_9 2-1:155.48: probe with driver ov534_9 failed with error -22 [ 1251.621998][T15023] usb 2-1: USB disconnect, device number 38 [ 1251.830731][T15725] Bluetooth: hci0: command tx timeout [ 1251.973725][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1252.036332][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1252.147238][ T5287] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1252.294548][ T5287] usb 2-1: device descriptor read/64, error -71 [ 1252.557648][ T5287] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1252.716252][ T5287] usb 2-1: device descriptor read/64, error -71 [ 1252.832879][ T5287] usb usb2-port1: attempt power cycle [ 1252.859322][T23984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.867651][T23984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.897424][T23984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1253.086170][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.120473][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.132641][T23984] hsr_slave_0: entered promiscuous mode [ 1253.151124][T23984] hsr_slave_1: entered promiscuous mode [ 1253.170249][T23984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1253.177956][T23984] Cannot create hsr debugfs directory [ 1253.191010][ T5287] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1253.230564][ T5287] usb 2-1: device descriptor read/8, error -71 [ 1253.307058][ T7328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1253.320486][ T7328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1253.387864][ T12] IPVS: stop unused estimator thread 0... [ 1253.490161][ T5287] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1253.531864][ T5287] usb 2-1: device descriptor read/8, error -71 [ 1253.640987][ T5287] usb usb2-port1: unable to enumerate USB device [ 1253.649153][T24126] FAULT_INJECTION: forcing a failure. [ 1253.649153][T24126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1253.663408][T24126] CPU: 1 UID: 0 PID: 24126 Comm: syz.4.4190 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1253.674261][T24126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1253.684361][T24126] Call Trace: [ 1253.687691][T24126] [ 1253.690675][T24126] dump_stack_lvl+0x241/0x360 [ 1253.695412][T24126] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1253.700659][T24126] ? __pfx__printk+0x10/0x10 [ 1253.705322][T24126] ? __pfx_lock_release+0x10/0x10 [ 1253.710413][T24126] should_fail_ex+0x3b0/0x4e0 [ 1253.715147][T24126] _copy_from_user+0x2f/0xe0 [ 1253.719788][T24126] get_compat_msghdr+0xae/0x730 [ 1253.724693][T24126] ? __fget_files+0x29/0x470 [ 1253.729333][T24126] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1253.734842][T24126] ? __fget_files+0x3f3/0x470 [ 1253.739580][T24126] __sys_sendmsg+0x25d/0x380 [ 1253.744214][T24126] ? __pfx___sys_sendmsg+0x10/0x10 [ 1253.749374][T24126] ? __pfx_vfs_write+0x10/0x10 [ 1253.754214][T24126] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1253.760857][T24126] ? lockdep_hardirqs_on+0x99/0x150 [ 1253.766079][T24126] __do_fast_syscall_32+0xb4/0x110 [ 1253.771222][T24126] ? exc_page_fault+0x590/0x8c0 [ 1253.776129][T24126] do_fast_syscall_32+0x34/0x80 [ 1253.781026][T24126] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1253.787400][T24126] RIP: 0023:0xf7fd3579 [ 1253.791549][T24126] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1253.811208][T24126] RSP: 002b:00000000f575656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1253.819687][T24126] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000000 [ 1253.827711][T24126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1253.835729][T24126] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1253.843750][T24126] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1253.851773][T24126] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1253.859809][T24126] [ 1253.906228][T20940] Bluetooth: hci0: command tx timeout [ 1253.970657][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 1253.970677][ T29] audit: type=1326 audit(1727993932.026:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24128 comm="syz.2.4191" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 1254.330519][ T5290] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1254.427779][T24151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.451398][T24151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.461106][T24153] fuse: Bad value for 'fd' [ 1254.477666][ T5290] usb 3-1: device descriptor read/64, error -71 [ 1254.526004][T24151] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1254.571011][T24151] loop8: detected capacity change from 0 to 7 [ 1254.596961][T24151] Dev loop8: unable to read RDB block 7 [ 1254.608644][T24151] loop8: unable to read partition table [ 1254.622254][T24151] loop8: partition table beyond EOD, truncated [ 1254.629117][T24151] loop_reread_partitions: partition scan of loop8 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 1254.629117][T24151] ) failed (rc=-5) [ 1254.662827][T24156] batman_adv: batadv0: Adding interface: dummy0 [ 1254.669372][T24156] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1254.721514][T24156] batman_adv: batadv0: Interface activated: dummy0 [ 1254.757590][T24158] batadv0: mtu less than device minimum [ 1254.767238][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.770080][ T5290] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 1254.780952][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.798823][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.811625][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.824545][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.837295][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.849873][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.862874][T24158] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1254.977737][ T5290] usb 3-1: device descriptor read/64, error -71 [ 1255.021742][T23984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1255.061625][T23984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1255.122061][ T5290] usb usb3-port1: attempt power cycle [ 1255.144414][T23984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1255.174751][T23984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1255.211517][T24175] FAULT_INJECTION: forcing a failure. [ 1255.211517][T24175] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.243189][T24175] CPU: 1 UID: 0 PID: 24175 Comm: syz.4.4199 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1255.254027][T24175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1255.264104][T24175] Call Trace: [ 1255.267401][T24175] [ 1255.270345][T24175] dump_stack_lvl+0x241/0x360 [ 1255.275047][T24175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1255.280261][T24175] ? __pfx__printk+0x10/0x10 [ 1255.284875][T24175] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 1255.290442][T24175] ? __pfx___might_resched+0x10/0x10 [ 1255.295757][T24175] should_fail_ex+0x3b0/0x4e0 [ 1255.300474][T24175] ? security_file_alloc+0x32/0x310 [ 1255.305769][T24175] should_failslab+0xac/0x100 [ 1255.310499][T24175] ? security_file_alloc+0x32/0x310 [ 1255.315724][T24175] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1255.321121][T24175] security_file_alloc+0x32/0x310 [ 1255.326167][T24175] init_file+0x93/0x1e0 [ 1255.330430][T24175] alloc_empty_file+0xb8/0x1d0 [ 1255.335214][T24175] alloc_file_pseudo+0x1da/0x290 [ 1255.340182][T24175] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1255.345682][T24175] ? evm_inode_alloc_security+0x40/0xb0 [ 1255.351250][T24175] ? inode_init_always+0x97c/0xcb0 [ 1255.356384][T24175] sock_alloc_file+0xb8/0x280 [ 1255.361084][T24175] do_accept+0x3b2/0x6b0 [ 1255.365359][T24175] ? __pfx_do_accept+0x10/0x10 [ 1255.370159][T24175] __sys_accept4+0x11e/0x1c0 [ 1255.374775][T24175] ? __pfx___sys_accept4+0x10/0x10 [ 1255.379922][T24175] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1255.386277][T24175] __ia32_sys_accept4+0x9a/0xb0 [ 1255.391159][T24175] __do_fast_syscall_32+0xb4/0x110 [ 1255.396287][T24175] ? exc_page_fault+0x590/0x8c0 [ 1255.401164][T24175] do_fast_syscall_32+0x34/0x80 [ 1255.406025][T24175] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1255.412364][T24175] RIP: 0023:0xf7fd3579 [ 1255.416451][T24175] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1255.436165][T24175] RSP: 002b:00000000f573556c EFLAGS: 00000206 ORIG_RAX: 000000000000016c [ 1255.444619][T24175] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 1255.452607][T24175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1255.460616][T24175] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.468596][T24175] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1255.476585][T24175] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1255.484580][T24175] [ 1255.572390][ T5290] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 1255.606422][ T5290] usb 3-1: device descriptor read/8, error -71 [ 1255.662740][T23984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.734352][T23984] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.766717][T24184] kAFS: unable to lookup cell '' [ 1255.797712][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.805015][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.876388][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.883752][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.890255][ T5290] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 1255.922254][ T5290] usb 3-1: device descriptor read/8, error -71 [ 1256.035398][T23984] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1256.050042][T23984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1256.053185][ T5290] usb usb3-port1: unable to enumerate USB device [ 1256.207162][T23984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1256.246724][T23984] veth0_vlan: entered promiscuous mode [ 1256.371896][T23984] veth1_vlan: entered promiscuous mode [ 1256.486938][T23984] veth0_macvtap: entered promiscuous mode [ 1256.546213][T23984] veth1_macvtap: entered promiscuous mode [ 1256.632496][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.648150][T24216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1256.666756][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.701117][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.736530][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.766089][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.797141][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.814971][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.836694][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.855950][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.884316][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.901005][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.922633][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.946425][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.984756][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.009397][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1257.033248][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.054927][T24216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1257.060163][T23984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1257.241905][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.287085][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.320112][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.350261][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.369970][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.384859][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.395750][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.419162][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.433538][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.454679][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.475007][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.497560][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.518202][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.533021][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.554563][T23984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1257.575699][T23984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1257.601851][T23984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1257.624459][T24218] netlink: 'syz.3.4210': attribute type 29 has an invalid length. [ 1257.666556][T23984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.701355][T23984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.732643][T23984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1257.751187][T23984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1258.066749][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.075287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.200194][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1258.232071][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1258.249010][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.333079][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.457514][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.472640][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.590313][T24260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.620674][T24260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.096354][T24280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.187646][T24280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.365489][T24284] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20003 [ 1259.886693][T24293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.896505][T24293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.050473][T13857] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1260.201172][T24297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1260.216348][T24297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1260.234967][T13857] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1260.245545][T13857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.278056][T13857] usb 3-1: config 0 descriptor?? [ 1260.388109][T24301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 1260.495288][T24303] netlink: 'syz.3.4231': attribute type 29 has an invalid length. [ 1260.511660][T24303] netlink: 'syz.3.4231': attribute type 29 has an invalid length. [ 1260.538061][T24303] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4231'. [ 1260.579533][T24305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4232'. [ 1260.830434][T23765] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1261.000074][T23765] usb 2-1: Using ep0 maxpacket: 8 [ 1261.020262][T23765] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1261.050139][T23765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.080182][T23765] usb 2-1: Product: syz [ 1261.084487][T23765] usb 2-1: Manufacturer: syz [ 1261.089166][T23765] usb 2-1: SerialNumber: syz [ 1261.109757][T23765] usb 2-1: config 0 descriptor?? [ 1261.121671][T24314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.132767][T24314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.135590][T23765] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1261.212673][T24318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.221667][T24318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.595464][T15725] Bluetooth: hci3: command 0x0406 tx timeout [ 1261.599471][ T5237] Bluetooth: hci4: command 0x0406 tx timeout [ 1262.348675][T23765] gspca_sonixj: reg_w1 err -71 [ 1262.355301][T24304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.430174][T23765] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1262.442824][T23765] usb 2-1: USB disconnect, device number 43 [ 1262.758054][T24327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1262.768348][T24327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1262.783859][T24327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4241'. [ 1263.021730][T13857] pegasus 3-1:0.0: setup Pegasus II specific registers [ 1263.132872][T13857] pegasus 3-1:0.0: can't locate MII phy, using default [ 1263.151416][T13857] pegasus 3-1:0.0: eth1, ELECOM USB Ethernet LD-USB20, 52:27:68:21:62:49 [ 1263.220987][T23765] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1263.318327][ T5287] usb 3-1: USB disconnect, device number 13 [ 1263.390318][T23765] usb 2-1: Using ep0 maxpacket: 8 [ 1263.399740][T23765] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.422090][T23765] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1263.440674][T23765] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1263.464071][T23765] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 1263.489978][T23765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.928426][T23765] uclogic 0003:5543:0064.0056: item fetching failed at offset 5/7 [ 1263.961466][T23765] uclogic 0003:5543:0064.0056: parse failed [ 1263.991866][T23765] uclogic 0003:5543:0064.0056: probe with driver uclogic failed with error -22 [ 1264.032030][T23765] usb 2-1: USB disconnect, device number 44 [ 1264.305377][T24365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1264.352181][T24365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1264.650053][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1264.819988][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 1264.831790][ T25] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1264.850043][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.864170][ T25] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 1264.890112][ T25] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2306, setting to 64 [ 1264.910917][ T25] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.934485][ T25] usb 2-1: string descriptor 0 read error: -22 [ 1264.950514][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1264.971710][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.999678][ T25] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing [ 1265.020062][ T25] cdc_ncm 2-1:1.0: bind() failure [ 1265.036726][ T25] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1265.050016][ T25] cdc_ncm 2-1:1.1: bind() failure [ 1265.217689][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4250'. [ 1265.229514][ T25] usb 2-1: USB disconnect, device number 45 [ 1265.283353][T24379] netlink: 'syz.0.4250': attribute type 18 has an invalid length. [ 1265.339322][T24382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.362086][T24382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1265.943513][T24389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1265.980205][T24389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.130112][T13857] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1266.298548][T13857] usb 2-1: Using ep0 maxpacket: 16 [ 1266.351097][T13857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.362235][T13857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.381453][T13857] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1266.400003][T13857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.421840][T13857] usb 2-1: config 0 descriptor?? [ 1266.857020][T13857] nzxt-kraken2 0003:1E71:170E.0057: unknown main item tag 0x0 [ 1266.879126][T13857] nzxt-kraken2 0003:1E71:170E.0057: unknown main item tag 0x0 [ 1266.897966][T13857] nzxt-kraken2 0003:1E71:170E.0057: item fetching failed at offset 2/5 [ 1266.912948][T13857] nzxt-kraken2 0003:1E71:170E.0057: hid parse failed with -22 [ 1266.921534][T13857] nzxt-kraken2 0003:1E71:170E.0057: probe with driver nzxt-kraken2 failed with error -22 [ 1267.051378][T13857] usb 2-1: USB disconnect, device number 46 [ 1267.080567][T24399] usb usb8: usbfs: process 24399 (syz.4.4257) did not claim interface 0 before use [ 1267.300557][T24401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.342131][T24401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.561130][T24401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1267.589418][T24401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1267.678534][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.983373][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.065676][ T5240] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1268.077098][ T5240] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1268.090245][ T5240] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1268.101112][ T5240] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1268.112163][ T5240] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1268.124896][ T5240] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1268.269177][T24424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1268.284327][T24424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1268.299246][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.589650][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.602212][T24434] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1268.608799][T24434] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1268.618387][T24434] vhci_hcd vhci_hcd.0: Device attached [ 1268.636963][T24435] usbip_core: unknown command [ 1268.641958][T13857] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1268.664458][T24435] vhci_hcd: unknown pdu 0 [ 1268.675201][T24435] usbip_core: unknown command [ 1268.696493][ T7328] vhci_hcd: stop threads [ 1268.710038][ T7328] vhci_hcd: release socket [ 1268.714888][ T7328] vhci_hcd: disconnect device [ 1268.806149][T13857] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.826841][T13857] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1268.848079][T13857] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1268.866079][T13857] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1268.875408][T13857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1268.884273][T13857] usb 2-1: SerialNumber: syz [ 1268.893399][T13857] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1268.913181][T13857] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1268.957797][T13857] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1268.986967][T24419] chnl_net:caif_netlink_parms(): no params data found [ 1269.000850][ T62] bridge_slave_1: left allmulticast mode [ 1269.006538][ T62] bridge_slave_1: left promiscuous mode [ 1269.013838][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.078337][ T62] bridge_slave_0: left allmulticast mode [ 1269.084525][T15023] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1269.100761][ T62] bridge_slave_0: left promiscuous mode [ 1269.112084][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.141133][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.153353][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.168800][T24446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.196215][T24446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1269.280114][T15023] usb 3-1: Using ep0 maxpacket: 32 [ 1269.315199][T15023] usb 3-1: config index 0 descriptor too short (expected 61970, got 18) [ 1269.329947][T15023] usb 3-1: config 155 has too many interfaces: 125, using maximum allowed: 32 [ 1269.339061][T15023] usb 3-1: config 155 has 1 interface, different from the descriptor's value: 125 [ 1269.360268][T15023] usb 3-1: config 155 has no interface number 0 [ 1269.371077][T15023] usb 3-1: too many endpoints for config 155 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1269.393555][T15023] usb 3-1: config 155 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1269.419752][T15023] usb 3-1: config 155 interface 48 has no altsetting 0 [ 1269.432553][T15023] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1269.460045][T15023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.469446][T15023] usb 3-1: Product: syz [ 1269.483732][T15023] usb 3-1: Manufacturer: syz [ 1269.488409][T15023] usb 3-1: SerialNumber: syz [ 1270.047095][T15023] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1270.054846][T15023] gspca_ov534_9: reg_w failed -71 [ 1270.234071][ T5240] Bluetooth: hci7: command tx timeout [ 1270.479713][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.505895][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.520479][ T62] bond0 (unregistering): Released all slaves [ 1270.530105][T15023] gspca_ov534_9: Unknown sensor 0000 [ 1270.530188][T15023] ov534_9 3-1:155.48: probe with driver ov534_9 failed with error -22 [ 1270.560255][T15023] usb 3-1: USB disconnect, device number 14 [ 1270.564220][T23765] usb 2-1: USB disconnect, device number 47 [ 1270.911563][T24419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.930382][T24419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.938895][T24419] bridge_slave_0: entered allmulticast mode [ 1270.970623][T24419] bridge_slave_0: entered promiscuous mode [ 1270.999662][T24419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.032047][T24419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1271.039457][T24419] bridge_slave_1: entered allmulticast mode [ 1271.071541][T24419] bridge_slave_1: entered promiscuous mode [ 1271.382481][ T62] hsr_slave_0: left promiscuous mode [ 1271.392224][ T62] hsr_slave_1: left promiscuous mode [ 1271.405273][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.428625][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.459325][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.482152][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.534844][ T62] veth1_macvtap: left promiscuous mode [ 1271.548846][ T62] veth0_macvtap: left promiscuous mode [ 1271.554830][ T62] veth1_vlan: left promiscuous mode [ 1271.560462][ T62] veth0_vlan: left promiscuous mode [ 1271.788273][ T25] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1271.941580][ T25] usb 2-1: device descriptor read/64, error -71 [ 1272.206294][ T25] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1272.300670][ T5240] Bluetooth: hci7: command tx timeout [ 1272.345695][ T25] usb 2-1: device descriptor read/64, error -71 [ 1272.403310][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1272.460416][ T25] usb usb2-port1: attempt power cycle [ 1272.495819][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1272.812879][ T25] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1272.841393][ T25] usb 2-1: device descriptor read/8, error -71 [ 1273.090195][ T25] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1273.120957][ T25] usb 2-1: device descriptor read/8, error -71 [ 1273.230402][ T25] usb usb2-port1: unable to enumerate USB device [ 1273.268883][T24419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.330668][T24484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1273.338158][T24484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1273.417745][T24419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.513749][T24419] team0: Port device team_slave_0 added [ 1273.549442][T24419] team0: Port device team_slave_1 added [ 1273.729631][T24419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1273.754626][T24419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.785081][T24419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1273.798275][T24419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1273.813638][T24419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1273.861785][T24419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1274.014361][T24419] hsr_slave_0: entered promiscuous mode [ 1274.021583][T24419] hsr_slave_1: entered promiscuous mode [ 1274.037741][T24419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1274.048683][T24419] Cannot create hsr debugfs directory [ 1274.382545][ T5240] Bluetooth: hci7: command tx timeout [ 1274.425939][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.570106][T23765] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1274.760012][T23765] usb 3-1: Using ep0 maxpacket: 32 [ 1274.773973][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.813389][T20940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1274.830008][T20940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1274.852249][T20940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1274.890018][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1274.910335][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1274.930044][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1275.112973][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.180072][T23765] usb 3-1: config index 0 descriptor too short (expected 61970, got 18) [ 1275.420598][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.441101][T23765] usb 3-1: config 155 has too many interfaces: 125, using maximum allowed: 32 [ 1275.450172][T23765] usb 3-1: config 155 has 1 interface, different from the descriptor's value: 125 [ 1275.450206][T23765] usb 3-1: config 155 has no interface number 0 [ 1275.450237][T23765] usb 3-1: too many endpoints for config 155 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1275.450278][T23765] usb 3-1: config 155 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1275.450309][T23765] usb 3-1: config 155 interface 48 has no altsetting 0 [ 1275.453625][T23765] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1275.453661][T23765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.453686][T23765] usb 3-1: Product: syz [ 1275.453705][T23765] usb 3-1: Manufacturer: syz [ 1275.453724][T23765] usb 3-1: SerialNumber: syz [ 1275.912943][T23765] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1275.960892][ T62] bridge_slave_1: left allmulticast mode [ 1275.966623][ T62] bridge_slave_1: left promiscuous mode [ 1275.979053][T23765] gspca_ov534_9: reg_w failed -71 [ 1275.990249][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.009643][ T62] bridge_slave_0: left allmulticast mode [ 1276.015636][ T62] bridge_slave_0: left promiscuous mode [ 1276.030284][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.390143][T23765] gspca_ov534_9: Unknown sensor 0000 [ 1276.390232][T23765] ov534_9 3-1:155.48: probe with driver ov534_9 failed with error -22 [ 1276.407827][T23765] usb 3-1: USB disconnect, device number 15 [ 1276.469431][ T5240] Bluetooth: hci7: command tx timeout [ 1276.481973][ T25] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1276.664234][ T25] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1276.688742][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.699553][ T25] usb 2-1: config 0 descriptor?? [ 1276.886213][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1276.898775][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1276.919063][ T62] bond0 (unregistering): Released all slaves [ 1276.942498][ T5240] Bluetooth: hci5: command 0x0406 tx timeout [ 1277.030485][T20940] Bluetooth: hci6: command tx timeout [ 1277.132678][ T25] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 1277.143550][ T25] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 1277.189978][T24519] chnl_net:caif_netlink_parms(): no params data found [ 1277.283821][T24419] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1277.581457][T24419] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1277.617596][T24419] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1277.671133][T24419] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1278.195993][ T62] hsr_slave_0: left promiscuous mode [ 1278.210832][ T62] hsr_slave_1: left promiscuous mode [ 1278.224178][ T62] batman_adv: batadv0: Interface deactivated: dummy0 [ 1278.233089][ T62] batman_adv: batadv0: Removing interface: dummy0 [ 1278.253298][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.262521][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1278.296570][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.330306][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1278.451948][ T62] veth1_macvtap: left promiscuous mode [ 1278.489866][ T62] veth0_macvtap: left promiscuous mode [ 1278.523394][ T62] veth1_vlan: left promiscuous mode [ 1278.557523][ T62] veth0_vlan: left promiscuous mode [ 1279.100237][T20940] Bluetooth: hci6: command tx timeout [ 1279.273496][ T8] usb 2-1: USB disconnect, device number 52 [ 1279.392426][T24592] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1279.399018][T24592] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1279.422960][T24592] vhci_hcd vhci_hcd.0: Device attached [ 1279.469086][T24593] usbip_core: unknown command [ 1279.474177][T24593] vhci_hcd: unknown pdu 0 [ 1279.478828][T24593] usbip_core: unknown command [ 1279.507318][T11964] vhci_hcd: stop threads [ 1279.517335][T11964] vhci_hcd: release socket [ 1279.522695][T11964] vhci_hcd: disconnect device [ 1279.751776][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1279.823685][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1280.440013][T15023] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1280.590187][T15023] usb 2-1: device descriptor read/64, error -71 [ 1280.699484][T24519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.710846][T24519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.725480][T24519] bridge_slave_0: entered allmulticast mode [ 1280.736659][T24519] bridge_slave_0: entered promiscuous mode [ 1280.756942][T24584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4297'. [ 1280.857970][T15023] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1280.964490][T24519] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.972357][T24519] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.979716][T24519] bridge_slave_1: entered allmulticast mode [ 1281.002609][T24519] bridge_slave_1: entered promiscuous mode [ 1281.010377][T15023] usb 2-1: device descriptor read/64, error -71 [ 1281.086060][T24519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.125359][T15023] usb usb2-port1: attempt power cycle [ 1281.180528][T20940] Bluetooth: hci6: command tx timeout [ 1281.186882][T24519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.294620][T24519] team0: Port device team_slave_0 added [ 1281.312788][T24519] team0: Port device team_slave_1 added [ 1281.360788][T24519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.379198][T24519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.390086][ T5310] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1281.416278][T24519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.448982][T24519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.469777][T24519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.500609][T15023] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1281.518819][T24519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.540998][T15023] usb 2-1: device descriptor read/8, error -71 [ 1281.581700][ T5310] usb 3-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 1281.606355][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.627607][T24419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.639350][ T5310] usb 3-1: config 0 descriptor?? [ 1281.671784][ T5310] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 1281.723070][T24519] hsr_slave_0: entered promiscuous mode [ 1281.729685][T24519] hsr_slave_1: entered promiscuous mode [ 1281.749205][T24519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1281.762536][T24519] Cannot create hsr debugfs directory [ 1281.785704][T15023] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1281.813700][T24419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1281.821200][T15023] usb 2-1: device descriptor read/8, error -71 [ 1281.874791][T11964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.881974][T11964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.933376][T15023] usb usb2-port1: unable to enumerate USB device [ 1281.964851][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.972069][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.182888][ T5310] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1282.196588][ T5310] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1282.568827][T24419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1282.745434][T24419] veth0_vlan: entered promiscuous mode [ 1282.953386][T24419] veth1_vlan: entered promiscuous mode [ 1283.068728][T24419] veth0_macvtap: entered promiscuous mode [ 1283.093886][T24419] veth1_macvtap: entered promiscuous mode [ 1283.145883][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.162856][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.204556][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.235501][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.256881][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.260118][T20940] Bluetooth: hci6: command tx timeout [ 1283.275044][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.291302][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.301867][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.311955][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.322509][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.333466][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.344203][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.354526][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.365583][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.379367][T24419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.426973][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.459984][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.480025][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.500054][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.519943][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.543860][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.565091][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.586019][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.608586][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.629081][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.649368][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.669934][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.689993][T24419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.713124][T24419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.731885][T24419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.781367][T24419] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.800195][T24419] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.820176][T24419] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.838451][T24419] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.939246][T24519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1283.963198][T24519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1284.014738][T24519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1284.050802][T24519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1284.124550][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.135678][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.206102][T11964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.217524][T11964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.314592][T24519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.368665][T24519] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.418383][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.425641][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.471816][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.479025][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.497610][T24675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1284.532816][T24675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1284.672157][T24519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.753414][T24519] veth0_vlan: entered promiscuous mode [ 1284.775211][T24519] veth1_vlan: entered promiscuous mode [ 1284.818079][T24519] veth0_macvtap: entered promiscuous mode [ 1284.853563][T24519] veth1_macvtap: entered promiscuous mode [ 1284.903411][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.914962][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.925022][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.938622][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.950075][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.962123][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.972442][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1284.983789][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.999943][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.016589][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.036325][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.048918][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.058990][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.070021][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.106362][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.117827][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.145091][T24519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.179468][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.208510][T15023] usb 3-1: USB disconnect, device number 16 [ 1285.210141][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.288455][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.299778][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.310233][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.320786][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.330733][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.342892][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.354606][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.365648][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.375680][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.386340][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.396303][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.406830][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.416767][T24519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.427541][T24519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.439066][T24519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.539271][T24519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.560084][T24519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.568953][T24519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.593072][T24519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.831103][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.843374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.933477][T24706] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1285.940084][T24706] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1285.968955][T24706] vhci_hcd vhci_hcd.0: Device attached [ 1286.017416][T24714] usbip_core: unknown command [ 1286.028481][T24714] vhci_hcd: unknown pdu 0 [ 1286.039252][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.047829][T24714] usbip_core: unknown command [ 1286.063078][ T1107] vhci_hcd: stop threads [ 1286.067441][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.075952][ T1107] vhci_hcd: release socket [ 1286.087987][ T1107] vhci_hcd: disconnect device [ 1286.121045][T24721] ip6t_srh: unknown srh invflags 4102 [ 1286.150752][ T46] vhci_hcd: vhci_device speed not set [ 1286.160020][ T25] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1286.320017][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1286.329516][ T25] usb 3-1: config index 0 descriptor too short (expected 61970, got 18) [ 1286.350170][ T25] usb 3-1: config 155 has too many interfaces: 125, using maximum allowed: 32 [ 1286.352267][T24732] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4286'. [ 1286.359091][ T25] usb 3-1: config 155 has 1 interface, different from the descriptor's value: 125 [ 1286.359124][ T25] usb 3-1: config 155 has no interface number 0 [ 1286.359161][ T25] usb 3-1: too many endpoints for config 155 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 1286.427703][ T25] usb 3-1: config 155 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 1286.452646][ T25] usb 3-1: config 155 interface 48 has no altsetting 0 [ 1286.496582][ T25] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1286.510328][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.537977][ T25] usb 3-1: Product: syz [ 1286.548239][ T25] usb 3-1: Manufacturer: syz [ 1286.559974][ T25] usb 3-1: SerialNumber: syz [ 1286.679538][ C0] net_ratelimit: 11 callbacks suppressed [ 1286.679568][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1286.714507][T24740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1286.761317][ T5310] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1286.774037][T24740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.920561][ T5310] usb 2-1: Using ep0 maxpacket: 16 [ 1286.932505][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.956453][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.968414][ T5310] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 1286.987524][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.008629][ T5310] usb 2-1: config 0 descriptor?? [ 1287.072873][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1287.082782][ T25] gspca_ov534_9: reg_w failed -71 [ 1287.433393][ T5310] kye 0003:0458:5019.0058: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1287.469807][ T5310] kye 0003:0458:5019.0058: unknown main item tag 0x0 [ 1287.470094][T24752] xt_TCPMSS: Only works on TCP SYN packets [ 1287.490064][ T25] gspca_ov534_9: Unknown sensor 0000 [ 1287.490145][ T25] ov534_9 3-1:155.48: probe with driver ov534_9 failed with error -22 [ 1287.510405][ T5310] kye 0003:0458:5019.0058: unknown main item tag 0x0 [ 1287.520253][ T5310] kye 0003:0458:5019.0058: unknown main item tag 0x0 [ 1287.524329][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1287.526993][ T5310] kye 0003:0458:5019.0058: unknown main item tag 0x0 [ 1287.552588][ T25] usb 3-1: USB disconnect, device number 17 [ 1287.577272][ T5310] kye 0003:0458:5019.0058: unknown main item tag 0x0 [ 1287.587116][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1287.623340][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1287.643103][ T5310] kye 0003:0458:5019.0058: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 1287.667672][T24755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.673479][ T5310] kye 0003:0458:5019.0058: tablet-enabling feature report not found [ 1287.699884][T24755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.721336][T24753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.742478][ T5310] kye 0003:0458:5019.0058: tablet enabling failed [ 1287.761924][T24753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1287.803541][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1287.822067][ T5310] usb 2-1: USB disconnect, device number 57 [ 1287.848126][T24753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1287.868306][T24759] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20 [ 1287.883676][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1287.926485][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1287.946986][T24753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.084424][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1288.109282][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1288.130026][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4318'. [ 1288.280811][T24771] binder_alloc: 24770: binder_alloc_buf, no vma [ 1288.310341][ T5310] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1288.471891][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.503629][ T5310] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1288.533031][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.566441][ T5310] usb 3-1: config 0 descriptor?? [ 1288.788467][T24768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.839037][T24768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.088504][ T5310] petalynx 0003:18B1:0037.0059: unknown main item tag 0xd [ 1289.157462][ T5310] petalynx 0003:18B1:0037.0059: unexpected long global item [ 1289.200603][ T5310] petalynx 0003:18B1:0037.0059: parse failed [ 1289.270065][ T5310] petalynx 0003:18B1:0037.0059: probe with driver petalynx failed with error -22 [ 1289.366419][ T5310] usb 3-1: USB disconnect, device number 18 [ 1289.372912][T24782] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1289.403802][T24782] team0: Port device batadv1 added [ 1289.414106][T24783] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1289.420706][T24783] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1289.451816][T24783] vhci_hcd vhci_hcd.0: Device attached [ 1289.461071][T24786] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1289.500819][T24782] netlink: 'syz.1.4328': attribute type 2 has an invalid length. [ 1289.520612][T24784] usbip_core: unknown command [ 1289.525399][T24784] vhci_hcd: unknown pdu 0 [ 1289.530675][T24784] usbip_core: unknown command [ 1289.556399][ T1107] vhci_hcd: stop threads [ 1289.558367][T24789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.562885][ T1107] vhci_hcd: release socket [ 1289.575308][ T1107] vhci_hcd: disconnect device [ 1289.600639][T24789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.630199][ T25] vhci_hcd: vhci_device speed not set [ 1289.853033][T24801] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 1289.951677][T24805] tipc: Started in network mode [ 1289.956640][T24805] tipc: Node identity 7f000001, cluster identity 4711 [ 1289.965443][T24805] tipc: Enabled bearer , priority 10 [ 1291.071008][ T25] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1291.074966][T24823] hsr0: entered promiscuous mode [ 1291.086895][T24821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.100705][T13857] tipc: Node number set to 2130706433 [ 1291.155564][T24821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.252652][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 1291.290017][ T25] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1291.342265][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.384701][ T25] usb 2-1: config 0 descriptor?? [ 1291.418466][T24831] __nla_validate_parse: 2 callbacks suppressed [ 1291.418487][T24831] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4344'. [ 1291.510663][T24833] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1291.517255][T24833] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1291.632309][T24817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.674712][T24817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.720349][T24833] vhci_hcd vhci_hcd.0: Device attached [ 1291.835849][ T25] ath6kl: Failed to submit usb control message: -71 [ 1291.842896][ T25] ath6kl: unable to send the bmi data to the device: -71 [ 1291.850306][ T25] ath6kl: Unable to send get target info: -71 [ 1291.860182][ T25] ath6kl: Failed to init ath6kl core: -71 [ 1291.866748][ T25] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1291.912043][ T25] usb 2-1: USB disconnect, device number 58 [ 1291.990247][ T8] usb 9-1: new high-speed USB device number 10 using vhci_hcd [ 1292.031488][T24844] futex_wake_op: syz.3.4347 tries to shift op by 32; fix this program [ 1292.090198][T15023] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1292.264492][T24834] vhci_hcd: connection reset by peer [ 1292.270569][ T62] vhci_hcd: stop threads [ 1292.275063][ T62] vhci_hcd: release socket [ 1292.279598][ T62] vhci_hcd: disconnect device [ 1292.285888][T15023] usb 3-1: Using ep0 maxpacket: 8 [ 1292.293332][T15023] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1292.313970][T15023] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.335848][T15023] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 138, changing to 11 [ 1292.371594][T15023] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 2306, setting to 64 [ 1292.395605][T15023] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.417186][T24847] input: syz1 as /devices/virtual/input/input124 [ 1292.425575][T15023] usb 3-1: string descriptor 0 read error: -22 [ 1292.426990][T24847] FAULT_INJECTION: forcing a failure. [ 1292.426990][T24847] name failslab, interval 1, probability 0, space 0, times 0 [ 1292.440767][T15023] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1292.458598][T24847] CPU: 1 UID: 0 PID: 24847 Comm: syz.0.4348 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1292.465523][T15023] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.469402][T24847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1292.469423][T24847] Call Trace: [ 1292.469436][T24847] [ 1292.469448][T24847] dump_stack_lvl+0x241/0x360 [ 1292.484526][T15023] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 1292.487477][T24847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1292.491155][T15023] cdc_ncm 3-1:1.0: bind() failure [ 1292.493777][T24847] ? __pfx__printk+0x10/0x10 [ 1292.520812][T24847] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1292.526303][T24847] ? __pfx___might_resched+0x10/0x10 [ 1292.531616][T24847] should_fail_ex+0x3b0/0x4e0 [ 1292.536320][T24847] should_failslab+0xac/0x100 [ 1292.541018][T24847] ? device_add+0xc1/0xbf0 [ 1292.545465][T24847] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1292.550776][T24847] device_add+0xc1/0xbf0 [ 1292.555053][T24847] cdev_device_add+0x1ec/0x3a0 [ 1292.559841][T24847] evdev_connect+0x349/0x3f0 [ 1292.564451][T24847] input_register_device+0xd3b/0x1110 [ 1292.569880][T24847] uinput_create_device+0x40e/0x630 [ 1292.575109][T24847] uinput_ioctl_handler+0x488/0x1770 [ 1292.580411][T24847] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 1292.586154][T24847] ? __fget_files+0x3f3/0x470 [ 1292.590858][T24847] __se_compat_sys_ioctl+0x510/0xc90 [ 1292.596159][T24847] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 1292.601984][T24847] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1292.607993][T24847] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1292.614352][T24847] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1292.620965][T24847] ? lockdep_hardirqs_on+0x99/0x150 [ 1292.626187][T24847] __do_fast_syscall_32+0xb4/0x110 [ 1292.631316][T24847] ? exc_page_fault+0x590/0x8c0 [ 1292.636186][T24847] do_fast_syscall_32+0x34/0x80 [ 1292.641045][T24847] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1292.647384][T24847] RIP: 0023:0xf7f62579 [ 1292.651590][T24847] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1292.671299][T24847] RSP: 002b:00000000f56e656c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1292.679771][T24847] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005501 [ 1292.688210][T24847] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1292.696198][T24847] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1292.704185][T24847] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1292.712174][T24847] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1292.720203][T24847] [ 1292.726038][T15023] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1292.733135][T15023] cdc_ncm 3-1:1.1: bind() failure [ 1292.770414][T24847] input: failed to attach handler evdev to device input124, error: -12 [ 1292.856836][ T5287] usb 3-1: USB disconnect, device number 19 [ 1293.000259][ T5310] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1293.160063][ T5310] usb 2-1: Using ep0 maxpacket: 16 [ 1293.167075][ T5310] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1293.182263][ T5310] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 1293.195935][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 1293.208325][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 1293.219818][ T5310] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1293.252200][ T5310] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1293.263557][T24860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.272676][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.300799][ T5310] usb 2-1: Product: syz [ 1293.305033][ T5310] usb 2-1: Manufacturer: syz [ 1293.309659][ T5310] usb 2-1: SerialNumber: syz [ 1293.314877][T24860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.342012][ T5310] usb 2-1: config 0 descriptor?? [ 1293.558868][ T5310] appledisplay 2-1:0.0: Error while getting initial brightness: -71 [ 1293.592462][T24862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4355'. [ 1293.595971][ T5310] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -71 [ 1293.642189][ T5310] usb 2-1: USB disconnect, device number 59 [ 1293.803092][T24869] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1293.809698][T24869] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1293.819707][T24869] vhci_hcd vhci_hcd.0: Device attached [ 1293.831278][T24870] usbip_core: unknown command [ 1293.839273][T24870] vhci_hcd: unknown pdu 0 [ 1293.844457][T24870] usbip_core: unknown command [ 1293.849778][ T1107] vhci_hcd: stop threads [ 1293.856004][ T1107] vhci_hcd: release socket [ 1293.861918][ T1107] vhci_hcd: disconnect device [ 1293.940283][T15023] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1293.958279][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1293.968433][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1293.985377][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1293.996099][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.003777][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.011657][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.020009][T24875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.028448][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.037181][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.037363][T24875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.055386][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.066395][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.073961][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.082863][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.091436][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.098889][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.106596][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.114461][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.122014][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.122942][T15023] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.129432][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.129468][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.165390][T15023] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1294.177636][T15023] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.184953][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.205163][T15023] usb 3-1: config 0 descriptor?? [ 1294.206280][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.229167][T15023] pwc: Askey VC010 type 2 USB webcam detected. [ 1294.232596][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.248632][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.257525][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.265600][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.273418][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.281308][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.288779][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.296772][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.304351][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.312841][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.322025][ T5310] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1294.331299][ T5310] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1294.442968][T15023] pwc: send_video_command error -71 [ 1294.448356][T15023] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1294.479239][T15023] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1294.488980][ T5287] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1294.499710][T15023] usb 3-1: USB disconnect, device number 20 [ 1294.512241][T24880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4361'. [ 1294.607502][T24885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1294.617656][T24885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1294.672778][ T5287] usb 2-1: Using ep0 maxpacket: 16 [ 1294.698218][ T5287] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1294.730031][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1294.741958][ T5287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1294.752053][ T5287] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1294.763615][ T5287] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1294.778127][ T5287] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1294.790967][ T5287] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1294.799022][ T5287] usb 2-1: Manufacturer: syz [ 1294.815394][ T5287] usb 2-1: config 0 descriptor?? [ 1295.013977][T15023] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1295.034172][T24878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.051852][T24878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.220430][T15023] usb 3-1: device descriptor read/64, error -71 [ 1295.427745][T24893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.449230][T24893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.480734][T15023] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1295.531758][T24894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.553169][T24894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.630094][T15023] usb 3-1: device descriptor read/64, error -71 [ 1295.713382][T24896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.722749][T24896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1295.740486][T15023] usb usb3-port1: attempt power cycle [ 1295.981439][T20940] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1295.991555][T20940] Bluetooth: hci7: Injecting HCI hardware error event [ 1296.002514][ T5240] Bluetooth: hci7: hardware error 0x00 [ 1296.092536][T15023] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1296.121111][T15023] usb 3-1: device descriptor read/8, error -71 [ 1296.367116][T24901] FAULT_INJECTION: forcing a failure. [ 1296.367116][T24901] name failslab, interval 1, probability 0, space 0, times 0 [ 1296.380300][T15023] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1296.430329][T24901] CPU: 1 UID: 0 PID: 24901 Comm: syz.3.4368 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1296.441174][T24901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1296.446470][T24903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1296.451257][T24901] Call Trace: [ 1296.451274][T24901] [ 1296.451286][T24901] dump_stack_lvl+0x241/0x360 [ 1296.451320][T24901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1296.451346][T24901] ? __pfx__printk+0x10/0x10 [ 1296.451385][T24901] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1296.485971][T24901] ? __pfx___might_resched+0x10/0x10 [ 1296.491318][T24901] should_fail_ex+0x3b0/0x4e0 [ 1296.496054][T24901] should_failslab+0xac/0x100 [ 1296.500774][T24901] ? allocate_file_region_entries+0x204/0x670 [ 1296.506896][T24901] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1296.512247][T24901] allocate_file_region_entries+0x204/0x670 [ 1296.518193][T24901] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1296.524671][T24901] region_chg+0x2b4/0x390 [ 1296.529051][T24901] __vma_reservation_common+0x3c1/0x7e0 [ 1296.534648][T24901] ? __pfx___vma_reservation_common+0x10/0x10 [ 1296.540774][T24901] ? get_mem_cgroup_from_current+0x3f/0x1c0 [ 1296.546796][T24901] alloc_hugetlb_folio+0x2ab/0x1810 [ 1296.552030][T24901] ? filemap_get_entry+0x123/0x3b0 [ 1296.557153][T24901] ? __pfx_filemap_get_entry+0x10/0x10 [ 1296.562630][T24901] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1296.568300][T24901] ? __pfx_down_read+0x10/0x10 [ 1296.573086][T24901] ? huge_pte_alloc+0x37b/0x520 [ 1296.577961][T24901] ? __filemap_get_folio+0x949/0xbd0 [ 1296.583270][T24901] hugetlb_fault+0x23a4/0x37a0 [ 1296.588073][T24901] ? __pfx_hugetlb_fault+0x10/0x10 [ 1296.593213][T24901] ? __pfx_lock_release+0x10/0x10 [ 1296.598268][T24901] ? mark_lock+0x9a/0x360 [ 1296.602618][T24901] ? __lock_acquire+0x1384/0x2050 [ 1296.607686][T24901] handle_mm_fault+0x18fe/0x1bb0 [ 1296.612653][T24901] ? __pfx___might_resched+0x10/0x10 [ 1296.618023][T24901] ? __pfx_handle_mm_fault+0x10/0x10 [ 1296.623332][T24901] ? __get_user_pages+0x1a2b/0x48d0 [ 1296.628569][T24901] ? __up_read+0x2c2/0x6b0 [ 1296.633009][T24901] ? __pfx___up_read+0x10/0x10 [ 1296.637805][T24901] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1296.643043][T24901] __get_user_pages+0x1b16/0x48d0 [ 1296.648131][T24901] ? __pfx___get_user_pages+0x10/0x10 [ 1296.653539][T24901] ? __pfx_mt_find+0x10/0x10 [ 1296.658181][T24901] populate_vma_page_range+0x264/0x330 [ 1296.663674][T24901] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1296.669678][T24901] ? userfaultfd_unmap_complete+0x30c/0x360 [ 1296.675599][T24901] ? do_mmap+0x958/0x1000 [ 1296.679955][T24901] __mm_populate+0x27a/0x460 [ 1296.684575][T24901] ? __pfx___mm_populate+0x10/0x10 [ 1296.689719][T24901] vm_mmap_pgoff+0x2c3/0x3d0 [ 1296.694339][T24901] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1296.699474][T24901] ? __fget_files+0x29/0x470 [ 1296.704087][T24901] ? __fget_files+0x29/0x470 [ 1296.708707][T24901] ksys_mmap_pgoff+0x4eb/0x720 [ 1296.713501][T24901] __do_fast_syscall_32+0xb4/0x110 [ 1296.718638][T24901] ? exc_page_fault+0x590/0x8c0 [ 1296.723518][T24901] do_fast_syscall_32+0x34/0x80 [ 1296.728398][T24901] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1296.734744][T24901] RIP: 0023:0xf7f57579 [ 1296.738833][T24901] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1296.758458][T24901] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 1296.766895][T24901] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 0000000000b36000 [ 1296.774882][T24901] RDX: 0000000001000006 RSI: 000000000002c011 RDI: 0000000000000004 [ 1296.782865][T24901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1296.790853][T24901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1296.798835][T24901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1296.806834][T24901] [ 1296.815952][T24903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.948271][T15023] usb 3-1: device descriptor read/8, error -71 [ 1297.080429][T15023] usb usb3-port1: unable to enumerate USB device [ 1297.100350][ T8] vhci_hcd: vhci_device speed not set [ 1297.766297][T24924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1297.789871][T24924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.071325][ T5240] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1298.150220][ T5287] rc_core: IR keymap rc-hauppauge not found [ 1298.156490][ T5287] Registered IR keymap rc-empty [ 1298.165340][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.200157][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.230990][ T5287] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1298.266377][ T5287] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input125 [ 1298.292775][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.330031][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.350084][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.396956][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.440283][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.462381][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.480129][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.502562][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.530368][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.560198][ T5310] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1298.560802][ T5287] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1298.620820][ T5287] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1298.651031][ T5287] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1298.678963][ T5287] usb 2-1: USB disconnect, device number 60 [ 1298.721685][T24936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.742019][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1298.743326][T24938] FAULT_INJECTION: forcing a failure. [ 1298.743326][T24938] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.765254][T24938] CPU: 0 UID: 0 PID: 24938 Comm: syz.3.4384 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1298.767478][ T5310] usb 3-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 1298.776143][T24938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1298.776170][T24938] Call Trace: [ 1298.776182][T24938] [ 1298.776193][T24938] dump_stack_lvl+0x241/0x360 [ 1298.776232][T24938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1298.776262][T24938] ? __pfx__printk+0x10/0x10 [ 1298.776313][T24938] should_fail_ex+0x3b0/0x4e0 [ 1298.776351][T24938] ? skb_clone+0x20c/0x390 [ 1298.806067][ T5310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.806382][T24938] should_failslab+0xac/0x100 [ 1298.806425][T24938] ? skb_clone+0x20c/0x390 [ 1298.842414][T24938] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1298.847926][T24938] skb_clone+0x20c/0x390 [ 1298.852289][T24938] ? dev_queue_xmit_nit+0x220/0xc10 [ 1298.857527][T24938] dev_queue_xmit_nit+0x419/0xc10 [ 1298.862600][T24938] ? dev_queue_xmit_nit+0x2b/0xc10 [ 1298.867746][T24938] ? validate_xmit_skb+0x9f9/0x1120 [ 1298.872964][T24938] dev_hard_start_xmit+0x15f/0x7e0 [ 1298.878093][T24938] ? __pfx_validate_xmit_skb+0x10/0x10 [ 1298.883596][T24938] __dev_queue_xmit+0x1b58/0x3e80 [ 1298.888760][T24938] ? genl_rcv+0x28/0x40 [ 1298.892949][T24938] ? __sock_sendmsg+0x221/0x270 [ 1298.897826][T24938] ? __do_fast_syscall_32+0xb4/0x110 [ 1298.903146][T24938] ? __dev_queue_xmit+0x2da/0x3e80 [ 1298.908295][T24938] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1298.913727][T24938] ? __copy_skb_header+0x437/0x5b0 [ 1298.918854][T24938] ? __asan_memcpy+0x40/0x70 [ 1298.923459][T24938] ? __copy_skb_header+0x437/0x5b0 [ 1298.928590][T24938] ? __skb_clone+0x454/0x6c0 [ 1298.933205][T24938] ? skb_clone+0x240/0x390 [ 1298.937641][T24938] __netlink_deliver_tap+0x54d/0x7c0 [ 1298.943054][T24938] ? netlink_deliver_tap+0x2e/0x1b0 [ 1298.948297][T24938] netlink_deliver_tap+0x19d/0x1b0 [ 1298.953458][T24938] netlink_sendskb+0x68/0x140 [ 1298.958175][T24938] netlink_unicast+0x39d/0x990 [ 1298.962977][T24938] ? __asan_memcpy+0x40/0x70 [ 1298.967592][T24938] ? __pfx_netlink_unicast+0x10/0x10 [ 1298.972910][T24938] netlink_rcv_skb+0x262/0x430 [ 1298.977705][T24938] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1298.982751][T24938] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1298.988082][T24938] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1298.993575][T24938] genl_rcv+0x28/0x40 [ 1298.997655][T24938] netlink_unicast+0x7f6/0x990 [ 1299.002447][T24938] ? __pfx_netlink_unicast+0x10/0x10 [ 1299.007755][T24938] ? __virt_addr_valid+0x183/0x530 [ 1299.012890][T24938] ? __check_object_size+0x48e/0x900 [ 1299.018204][T24938] netlink_sendmsg+0x8e4/0xcb0 [ 1299.022995][T24938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1299.028295][T24938] ? __pfx_lock_release+0x10/0x10 [ 1299.033339][T24938] ? aa_sock_msg_perm+0x91/0x160 [ 1299.038293][T24938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1299.043587][T24938] __sock_sendmsg+0x221/0x270 [ 1299.048284][T24938] ____sys_sendmsg+0x52a/0x7e0 [ 1299.053069][T24938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1299.058389][T24938] __sys_sendmsg+0x292/0x380 [ 1299.063041][T24938] ? __pfx___sys_sendmsg+0x10/0x10 [ 1299.068187][T24938] ? __pfx_vfs_write+0x10/0x10 [ 1299.073001][T24938] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1299.079613][T24938] ? lockdep_hardirqs_on+0x99/0x150 [ 1299.084851][T24938] __do_fast_syscall_32+0xb4/0x110 [ 1299.089989][T24938] ? exc_page_fault+0x590/0x8c0 [ 1299.094893][T24938] do_fast_syscall_32+0x34/0x80 [ 1299.099767][T24938] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1299.106110][T24938] RIP: 0023:0xf7f57579 [ 1299.110195][T24938] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1299.129833][T24938] RSP: 002b:00000000f56d656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1299.138273][T24938] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000020000100 [ 1299.146257][T24938] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1299.154238][T24938] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1299.162256][T24938] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1299.170253][T24938] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1299.178273][T24938] [ 1299.184475][ T5310] usb 3-1: Product: syz [ 1299.188705][ T5310] usb 3-1: Manufacturer: syz [ 1299.194914][ T5310] usb 3-1: SerialNumber: syz [ 1299.251336][ T5310] usb 3-1: config 0 descriptor?? [ 1299.282277][ T5310] gspca_main: spca500-2.14.0 probing 8086:0630 [ 1299.320237][T24936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.330469][T24945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.381716][T24945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.480166][ T5287] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1299.662078][ T5287] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 1299.683105][ T5287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.721191][ T5287] usb 2-1: config 0 descriptor?? [ 1299.762362][ T5287] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 1300.345856][ T5287] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1300.352971][ T5287] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1300.469459][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.480038][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.967260][T24954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1301.036826][T24954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1301.343635][T13857] usb 2-1: USB disconnect, device number 61 [ 1301.487671][ T5310] usb 3-1: USB disconnect, device number 25 [ 1301.954789][T24970] tipc: Started in network mode [ 1301.959730][T24970] tipc: Node identity f7, cluster identity 4711 [ 1301.980585][T24970] tipc: Node number set to 247 [ 1302.160269][T24976] vlan0: entered promiscuous mode [ 1302.165363][T24976] vlan0: entered allmulticast mode [ 1302.255654][T24978] netlink: 'syz.4.4396': attribute type 10 has an invalid length. [ 1302.426122][T24980] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1302.432808][T24980] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1302.469841][T24984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.487457][T24980] vhci_hcd vhci_hcd.0: Device attached [ 1302.495160][T24984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.508713][T24984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1302.523527][T24984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1302.547972][T24981] usbip_core: unknown command [ 1302.553535][T24981] vhci_hcd: unknown pdu 0 [ 1302.558171][T24981] usbip_core: unknown command [ 1302.566401][ T11] vhci_hcd: stop threads [ 1302.583225][ T11] vhci_hcd: release socket [ 1302.588830][ T11] vhci_hcd: disconnect device [ 1302.939857][T24993] FAULT_INJECTION: forcing a failure. [ 1302.939857][T24993] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1302.956484][T24993] CPU: 1 UID: 0 PID: 24993 Comm: syz.3.4401 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1302.967310][T24993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1302.977395][T24993] Call Trace: [ 1302.980687][T24993] [ 1302.983643][T24993] dump_stack_lvl+0x241/0x360 [ 1302.988342][T24993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1302.993542][T24993] ? __pfx__printk+0x10/0x10 [ 1302.998228][T24993] ? __lock_acquire+0x1384/0x2050 [ 1303.003298][T24993] should_fail_ex+0x3b0/0x4e0 [ 1303.008024][T24993] get_futex_key+0x17c/0x1050 [ 1303.012734][T24993] ? __pfx_get_futex_key+0x10/0x10 [ 1303.017868][T24993] ? get_pid_task+0x23/0x1f0 [ 1303.022499][T24993] futex_wake_op+0x15d/0xe90 [ 1303.027119][T24993] ? __pfx_futex_wake_op+0x10/0x10 [ 1303.032255][T24993] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1303.038343][T24993] ? __pfx_lock_release+0x10/0x10 [ 1303.043416][T24993] ? vfs_write+0x7bf/0xc90 [ 1303.047878][T24993] do_futex+0x41e/0x560 [ 1303.052077][T24993] ? __pfx_do_futex+0x10/0x10 [ 1303.056793][T24993] ? __fget_files+0x3f3/0x470 [ 1303.061677][T24993] __se_sys_futex_time32+0x3dd/0x460 [ 1303.066999][T24993] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 1303.072848][T24993] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1303.079459][T24993] ? __ia32_sys_futex_time32+0x21/0xf0 [ 1303.084939][T24993] __do_fast_syscall_32+0xb4/0x110 [ 1303.090065][T24993] ? exc_page_fault+0x590/0x8c0 [ 1303.094956][T24993] do_fast_syscall_32+0x34/0x80 [ 1303.099821][T24993] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1303.106168][T24993] RIP: 0023:0xf7f57579 [ 1303.110253][T24993] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1303.129883][T24993] RSP: 002b:00000000f56b556c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1303.138316][T24993] RAX: ffffffffffffffda RBX: 000000002000cffc RCX: 0000000000000005 [ 1303.146298][T24993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020048000 [ 1303.154283][T24993] RBP: 0000000004000000 R08: 0000000000000000 R09: 0000000000000000 [ 1303.162272][T24993] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1303.170263][T24993] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1303.178259][T24993] [ 1303.310048][ T5310] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1303.464568][ T5310] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1303.480232][ T5310] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.498322][ T5310] usb 2-1: config 0 has no interface number 0 [ 1303.520027][ T5310] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1303.537456][ T5310] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1303.553254][ T5310] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1303.562749][ T5310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.573937][ T5310] usb 2-1: Product: syz [ 1303.578174][ T5310] usb 2-1: Manufacturer: syz [ 1303.583501][ T5310] usb 2-1: SerialNumber: syz [ 1303.590461][ T5310] usb 2-1: config 0 descriptor?? [ 1303.799222][ T5310] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1303.826879][ T5310] usb 2-1: USB disconnect, device number 62 [ 1304.381845][T25017] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4411'. [ 1304.420703][T25017] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1304.692862][T25026] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1304.712020][ T29] audit: type=1326 audit(1727993982.786:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25023 comm="syz.2.4414" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 1304.799987][T15023] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1304.949994][T15023] usb 2-1: Using ep0 maxpacket: 8 [ 1304.964466][T15023] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1304.992205][T15023] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.026637][T15023] usb 2-1: Product: syz [ 1305.049966][T15023] usb 2-1: Manufacturer: syz [ 1305.060035][T15023] usb 2-1: SerialNumber: syz [ 1305.091068][T15023] usb 2-1: config 0 descriptor?? [ 1305.229931][T25035] netlink: 'syz.3.4418': attribute type 10 has an invalid length. [ 1305.300181][T25035] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4418'. [ 1305.321217][T25035] veth0_vlan: entered allmulticast mode [ 1305.338270][T25035] bridge0: port 3(veth0_vlan) entered blocking state [ 1305.350544][T25035] bridge0: port 3(veth0_vlan) entered disabled state [ 1305.375726][T25035] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1305.400186][T15023] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1305.756616][T25041] FAULT_INJECTION: forcing a failure. [ 1305.756616][T25041] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.780184][T25041] CPU: 0 UID: 0 PID: 25041 Comm: syz.2.4420 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1305.791038][T25041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1305.801133][T25041] Call Trace: [ 1305.804447][T25041] [ 1305.807436][T25041] dump_stack_lvl+0x241/0x360 [ 1305.812174][T25041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1305.817437][T25041] ? __pfx__printk+0x10/0x10 [ 1305.822112][T25041] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 1305.828145][T25041] ? __pfx___might_resched+0x10/0x10 [ 1305.833579][T25041] should_fail_ex+0x3b0/0x4e0 [ 1305.838316][T25041] should_failslab+0xac/0x100 [ 1305.843051][T25041] ? __alloc_skb+0x1c3/0x440 [ 1305.847694][T25041] kmem_cache_alloc_node_noprof+0x71/0x320 [ 1305.853564][T25041] __alloc_skb+0x1c3/0x440 [ 1305.858037][T25041] ? __pfx___alloc_skb+0x10/0x10 [ 1305.863033][T25041] ? mark_lock+0x9a/0x360 [ 1305.867421][T25041] alloc_skb_with_frags+0xc3/0x820 [ 1305.872598][T25041] ? mark_lock+0x9a/0x360 [ 1305.876981][T25041] sock_alloc_send_pskb+0x91a/0xa60 [ 1305.882255][T25041] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1305.888013][T25041] ? __pfx_lock_acquire+0x10/0x10 [ 1305.893162][T25041] ? sock_def_readable+0xd7/0x5b0 [ 1305.898328][T25041] queue_oob+0x108/0x680 [ 1305.902609][T25041] ? __pfx_queue_oob+0x10/0x10 [ 1305.907436][T25041] ? sock_def_readable+0xd7/0x5b0 [ 1305.912479][T25041] ? sock_def_readable+0x321/0x5b0 [ 1305.917620][T25041] ? sock_def_readable+0xd7/0x5b0 [ 1305.922688][T25041] unix_stream_sendmsg+0xd24/0xf80 [ 1305.927857][T25041] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1305.933551][T25041] ? aa_sock_msg_perm+0x91/0x160 [ 1305.938517][T25041] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1305.944173][T25041] __sock_sendmsg+0x221/0x270 [ 1305.948902][T25041] ____sys_sendmsg+0x52a/0x7e0 [ 1305.953693][T25041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1305.959005][T25041] __sys_sendmsg+0x292/0x380 [ 1305.963703][T25041] ? __pfx___sys_sendmsg+0x10/0x10 [ 1305.968842][T25041] ? __pfx_vfs_write+0x10/0x10 [ 1305.973724][T25041] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1305.980428][T25041] ? lockdep_hardirqs_on+0x99/0x150 [ 1305.985744][T25041] __do_fast_syscall_32+0xb4/0x110 [ 1305.990899][T25041] ? exc_page_fault+0x590/0x8c0 [ 1305.995793][T25041] do_fast_syscall_32+0x34/0x80 [ 1306.000669][T25041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1306.007021][T25041] RIP: 0023:0xf7fc3579 [ 1306.011106][T25041] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1306.030750][T25041] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1306.039203][T25041] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000d40 [ 1306.047190][T25041] RDX: 0000000000020001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1306.055370][T25041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1306.063358][T25041] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1306.071355][T25041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1306.079350][T25041] [ 1306.737202][T25060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.750323][T25060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.965434][T15023] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1306.977736][T15023] usb 2-1: USB disconnect, device number 63 [ 1307.376282][T25069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.401665][T25069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.423127][ T29] audit: type=1326 audit(1727993985.496:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.446221][ T29] audit: type=1326 audit(1727993985.496:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.484300][ T29] audit: type=1326 audit(1727993985.516:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.510889][ T29] audit: type=1326 audit(1727993985.516:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.533078][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.560882][ T29] audit: type=1326 audit(1727993985.516:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.583088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.590152][ T29] audit: type=1326 audit(1727993985.546:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.612120][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.630846][ T29] audit: type=1326 audit(1727993985.546:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.678139][ T29] audit: type=1326 audit(1727993985.546:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.724485][ T29] audit: type=1326 audit(1727993985.546:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25068 comm="syz.3.4429" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f57579 code=0x7ffc0000 [ 1307.746628][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.844327][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.075698][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.253017][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.457351][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1308.497297][T20940] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1308.509648][T20940] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1308.522552][T20940] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1308.531372][T20940] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1308.539261][T20940] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1308.549582][T20940] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1308.810527][T25089] ALSA: seq fatal error: cannot create timer (-22) [ 1309.020348][ T62] bridge_slave_1: left allmulticast mode [ 1309.026072][ T62] bridge_slave_1: left promiscuous mode [ 1309.055598][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.101756][ T62] bridge_slave_0: left allmulticast mode [ 1309.114554][ T62] bridge_slave_0: left promiscuous mode [ 1309.127411][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.851084][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.875462][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.890932][ T62] bond0 (unregistering): Released all slaves [ 1309.962463][T25100] mac80211_hwsim hwsim196 wlan1: entered allmulticast mode [ 1310.070892][T25106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1310.083542][T25106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1310.093599][T25086] chnl_net:caif_netlink_parms(): no params data found [ 1310.104469][ T62] tipc: Left network mode [ 1310.128998][T25109] batman_adv: batadv0: Adding interface: macvtap1 [ 1310.148408][T25109] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1310.184746][T25109] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1310.315254][T25119] ip_vti0: entered promiscuous mode [ 1310.340173][T25119] vlan3: entered promiscuous mode [ 1310.620010][T20940] Bluetooth: hci6: command tx timeout [ 1310.734191][ T5310] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1310.806135][T25137] program syz.3.4449 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1310.890123][T23765] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1310.898060][ T5310] usb 3-1: device descriptor read/64, error -71 [ 1310.898471][T25137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1310.918546][T25137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1310.951081][T25137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1310.958176][T25137] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1311.008326][T25086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.032641][T25142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1311.033570][T25086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.062606][T25086] bridge_slave_0: entered allmulticast mode [ 1311.066350][T25137] vhci_hcd vhci_hcd.0: Device attached [ 1311.072314][T23765] usb 2-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 1311.091914][T25086] bridge_slave_0: entered promiscuous mode [ 1311.098052][T23765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.107197][T25086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.114973][T25142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1311.126764][T25086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1311.134573][T25086] bridge_slave_1: entered allmulticast mode [ 1311.156297][T25086] bridge_slave_1: entered promiscuous mode [ 1311.156579][ T5310] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1311.171586][ T937] vhci_hcd: vhci_device speed not set [ 1311.172897][T23765] usb 2-1: config 0 descriptor?? [ 1311.195543][T23765] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 1311.230979][ T937] usb 15-1: new high-speed USB device number 3 using vhci_hcd [ 1311.249985][ T62] hsr_slave_0: left promiscuous mode [ 1311.277402][ T62] hsr_slave_1: left promiscuous mode [ 1311.301449][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.308973][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.341314][ T5310] usb 3-1: device descriptor read/64, error -71 [ 1311.341824][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.380282][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.460616][ T5310] usb usb3-port1: attempt power cycle [ 1311.483860][ T62] veth1_macvtap: left promiscuous mode [ 1311.489564][ T62] veth0_macvtap: left promiscuous mode [ 1311.518167][ T62] veth1_vlan: left promiscuous mode [ 1311.540109][ T62] veth0_vlan: left promiscuous mode [ 1311.627969][T25140] vhci_hcd: connection closed [ 1311.628355][ T12] vhci_hcd: stop threads [ 1311.637795][ T12] vhci_hcd: release socket [ 1311.643264][ T12] vhci_hcd: disconnect device [ 1311.723718][T23765] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 1311.758000][T23765] gspca_pac7302 2-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 1311.839996][ T5310] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 1311.920343][ T5310] usb 3-1: device descriptor read/8, error -71 [ 1311.931302][T25154] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1312.190327][ T5310] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1312.221002][ T5310] usb 3-1: device descriptor read/8, error -71 [ 1312.330562][ T5310] usb usb3-port1: unable to enumerate USB device [ 1312.700318][T20940] Bluetooth: hci6: command tx timeout [ 1313.070728][T25170] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1313.077342][T25170] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1313.111749][T25170] vhci_hcd vhci_hcd.0: Device attached [ 1313.120865][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1313.213311][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1313.725399][T25171] vhci_hcd: connection closed [ 1313.741079][ T11] vhci_hcd: stop threads [ 1313.764643][ T11] vhci_hcd: release socket [ 1313.776462][ T11] vhci_hcd: disconnect device [ 1314.040903][T25186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.063031][T25186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.156872][ T5287] usb 2-1: USB disconnect, device number 64 [ 1314.448583][T25086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1314.479313][T25086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.596198][T25086] team0: Port device team_slave_0 added [ 1314.648083][T25086] team0: Port device team_slave_1 added [ 1314.680019][ T5287] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1314.717719][T25086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1314.725365][T25086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.756832][T25086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.793835][T20940] Bluetooth: hci6: command tx timeout [ 1314.831329][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 1314.831351][ T29] audit: type=1326 audit(1727993992.896:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25192 comm="syz.2.4462" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc3579 code=0x0 [ 1314.873173][T25086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.891805][ T5287] usb 2-1: config 1 has an invalid descriptor of length 190, skipping remainder of the config [ 1314.899234][T25086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.905003][ T5287] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1314.944059][ T5287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.952234][ T5287] usb 2-1: Product: syz [ 1314.956692][ T5287] usb 2-1: Manufacturer: syz [ 1314.965745][T25086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.966969][ T5287] usb 2-1: SerialNumber: syz [ 1315.063597][ T5287] cdc_ether 2-1:1.0: skipping garbage [ 1315.089154][ T5287] cdc_ether 2-1:1.0: skipping garbage [ 1315.102172][ T5287] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1315.171425][T25086] hsr_slave_0: entered promiscuous mode [ 1315.178347][T25086] hsr_slave_1: entered promiscuous mode [ 1315.201556][T25086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1315.229229][T25086] Cannot create hsr debugfs directory [ 1315.312614][T15023] usb 2-1: USB disconnect, device number 65 [ 1315.490313][T25210] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1315.496909][T25210] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1315.516882][T25210] vhci_hcd vhci_hcd.0: Device attached [ 1315.533913][T25212] usbip_core: unknown command [ 1315.538704][T25212] vhci_hcd: unknown pdu 0 [ 1315.549075][T25212] usbip_core: unknown command [ 1315.573933][ T62] vhci_hcd: stop threads [ 1315.578391][ T62] vhci_hcd: release socket [ 1315.612847][T25218] QAT: Invalid ioctl 1074304019 [ 1315.618713][ T62] vhci_hcd: disconnect device [ 1315.822071][ T30] INFO: task syz.4.3876:22538 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1315.962960][ T30] Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1316.002864][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1316.049968][ T30] task:syz.4.3876 state:D stack:26816 pid:22538 tgid:22537 ppid:22262 flags:0x20000004 [ 1316.082120][ T30] Call Trace: [ 1316.085479][ T30] [ 1316.088457][ T30] __schedule+0x1895/0x4b30 [ 1316.118138][ T30] ? __pfx___schedule+0x10/0x10 [ 1316.180649][ T30] ? __pfx_lock_release+0x10/0x10 [ 1316.185791][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1316.227544][ T30] ? schedule+0x90/0x320 [ 1316.242011][ T30] schedule+0x14b/0x320 [ 1316.246270][ T30] schedule_preempt_disabled+0x13/0x30 [ 1316.251874][ T30] __mutex_lock+0x6a7/0xd70 [ 1316.256436][ T30] ? __mutex_lock+0x52a/0xd70 [ 1316.283374][ T30] ? chaoskey_open+0xb1/0x1b0 [ 1316.288179][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1316.296915][ T30] ? usb_find_interface+0xf7/0x160 [ 1316.302672][ T30] ? __pfx_usb_find_interface+0x10/0x10 [ 1316.308290][ T30] ? kobject_get_unless_zero+0x22d/0x330 [ 1316.314106][ T30] chaoskey_open+0xb1/0x1b0 [ 1316.318665][ T30] ? __pfx_chaoskey_open+0x10/0x10 [ 1316.324114][ T30] usb_open+0x14b/0x1d0 [ 1316.328376][ T30] chrdev_open+0x521/0x600 [ 1316.332942][ T30] ? __pfx_apparmor_file_open+0x10/0x10 [ 1316.338558][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1316.343808][ T30] ? security_file_open+0x513/0x990 [ 1316.369310][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1316.374599][ T937] vhci_hcd: vhci_device speed not set [ 1316.389976][ T30] do_dentry_open+0x978/0x1460 [ 1316.394898][ T30] vfs_open+0x3e/0x330 [ 1316.399052][ T30] path_openat+0x2c84/0x3590 [ 1316.410003][ T30] ? __pfx_path_openat+0x10/0x10 [ 1316.415055][ T30] do_filp_open+0x235/0x490 [ 1316.419615][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1316.435920][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1316.445667][ T30] ? alloc_fd+0x5a1/0x640 [ 1316.457490][ T30] do_sys_openat2+0x13e/0x1d0 [ 1316.466093][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1316.479969][ T30] __ia32_compat_sys_openat+0x23f/0x290 [ 1316.485618][ T30] ? __pfx___ia32_compat_sys_openat+0x10/0x10 [ 1316.498064][ T30] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 1316.504935][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1316.510967][ T30] __do_fast_syscall_32+0xb4/0x110 [ 1316.516176][ T30] ? exc_page_fault+0x590/0x8c0 [ 1316.520313][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1316.521612][ T30] do_fast_syscall_32+0x34/0x80 [ 1316.533895][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1316.541010][ T30] RIP: 0023:0xf7f76579 [ 1316.545212][ T30] RSP: 002b:00000000f56f6110 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1316.554300][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f56f6160 [ 1316.562511][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f73fbff4 [ 1316.573789][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 1316.585555][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1316.593946][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1316.602145][ T30] [ 1316.605622][ T30] [ 1316.605622][ T30] Showing all locks held in the system: [ 1316.641098][ T30] 5 locks held by kworker/0:0/8: [ 1316.646456][ T30] #0: ffff8881412d6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1316.666907][ T30] #1: ffffc900000d7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1316.681181][ T30] #2: ffff8881447b3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1316.739949][ T30] #3: ffff8881447b6510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 1316.776553][ T30] #4: ffff8881443bef68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 1316.810124][ T30] 3 locks held by kworker/u8:0/11: [ 1316.815433][ T30] 3 locks held by kworker/u8:1/12: [ 1316.850213][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1316.862618][T20940] Bluetooth: hci6: command tx timeout [ 1316.910053][ T30] #1: ffffc90000117d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1316.921309][ T30] #2: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1316.930671][ T30] 1 lock held by khungtaskd/30: [ 1316.935641][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1316.949687][ T30] 6 locks held by kworker/0:2/937: [ 1316.954987][ T30] #0: ffff8881412d6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1316.966599][ T30] #1: ffffc90003bbfd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1316.989926][ T30] #2: ffff888028a3d190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1316.999036][ T30] #3: ffff888145310510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 1317.030308][ T30] #4: ffff8880282b4c68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 1317.052569][ T30] #5: ffffffff8f5a09b0 (ehci_cf_port_reset_rwsem){.+.+}-{3:3}, at: hub_port_reset+0x1f8/0x1b30 [ 1317.077441][ T30] 1 lock held by dhcpcd/4898: [ 1317.084316][ T30] #0: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1aa0 [ 1317.093850][ T30] 2 locks held by getty/4988: [ 1317.098715][ T30] #0: ffff88802e9940a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1317.109659][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1317.122378][ T30] 6 locks held by kworker/1:7/5311: [ 1317.127723][ T30] #0: ffff8881412d6548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1317.143216][ T30] #1: ffffc900043e7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1317.155457][ T30] #2: ffff8880286fb190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1317.168483][ T30] #3: ffff88804bf58190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1317.177953][ T30] #4: ffff888057530160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1317.188622][ T30] #5: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 1317.198499][ T30] 4 locks held by udevd/17259: [ 1317.203859][ T30] #0: ffff88806c2460a0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb4/0xd70 [ 1317.212923][ T30] #1: ffff88807e43f088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 1317.222553][ T30] #2: ffff888027922e18 (kn->active#18){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 1317.232405][ T30] #3: ffff88804bf58190 (&dev->mutex){....}-{3:3}, at: manufacturer_show+0x26/0xa0 [ 1317.242195][ T30] 1 lock held by syz.4.3731/21518: [ 1317.247361][ T30] #0: ffff88805d248078 (&dev->lock#7){+.+.}-{3:3}, at: chaoskey_read+0x127/0x590 [ 1317.256757][ T30] 3 locks held by syz-executor/22441: [ 1317.262553][ T30] #0: ffff88805875cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1317.275462][ T30] #1: ffff88805875c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1317.289001][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1317.299719][ T30] 2 locks held by syz.4.3876/22538: [ 1317.305037][ T30] #0: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1317.314162][ T30] #1: ffff88805d248078 (&dev->lock#7){+.+.}-{3:3}, at: chaoskey_open+0xb1/0x1b0 [ 1317.323503][ T30] 1 lock held by syz.3.4064/23460: [ 1317.328693][ T30] #0: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1317.337747][ T30] 1 lock held by syz.4.4074/23508: [ 1317.343091][ T30] #0: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 1317.352251][ T30] 3 locks held by kworker/1:5/23765: [ 1317.357653][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1317.368918][ T30] #1: ffffc9000c207d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1317.379407][ T30] #2: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1317.394638][ T30] 3 locks held by syz-executor/23984: [ 1317.400185][ T30] #0: ffff88804e404d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1317.410388][ T30] #1: ffff88804e404078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1317.420835][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1317.431212][ T30] 8 locks held by syz-executor/25086: [ 1317.436656][ T30] #0: ffff888032a72420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 1317.445769][ T30] #1: ffff8880213ef488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1317.455756][ T30] #2: ffff888027f4ab48 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1317.466023][ T30] #3: ffffffff8f56f7c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 1317.476539][ T30] #4: ffff88807b9b40e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 1317.487294][ T30] #5: ffff888030372250 (&devlink->lock_key#97){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 1317.498934][ T30] #6: ffffffff8fcd16c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1317.511022][ T30] #7: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1317.522271][ T30] 3 locks held by syz.2.4468/25228: [ 1317.527542][ T30] #0: ffff88802fbacd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1317.537673][ T30] #1: ffff88802fbac078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1317.547535][ T30] #2: ffffffff8fe3df28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1317.557805][ T30] [ 1317.560472][ T30] ============================================= [ 1317.560472][ T30] [ 1317.568957][ T30] NMI backtrace for cpu 0 [ 1317.573325][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1317.583877][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1317.593987][ T30] Call Trace: [ 1317.597309][ T30] [ 1317.600271][ T30] dump_stack_lvl+0x241/0x360 [ 1317.604973][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1317.610191][ T30] ? __pfx__printk+0x10/0x10 [ 1317.614811][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1317.619770][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1317.625247][ T30] ? _printk+0xd5/0x120 [ 1317.629425][ T30] ? __pfx__printk+0x10/0x10 [ 1317.634039][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1317.638913][ T30] ? __pfx__printk+0x10/0x10 [ 1317.643529][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1317.648599][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1317.654599][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1317.660609][ T30] watchdog+0xff4/0x1040 [ 1317.664878][ T30] ? watchdog+0x1ea/0x1040 [ 1317.669315][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.674011][ T30] kthread+0x2f0/0x390 [ 1317.678100][ T30] ? __pfx_watchdog+0x10/0x10 [ 1317.682799][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.687403][ T30] ret_from_fork+0x4b/0x80 [ 1317.691843][ T30] ? __pfx_kthread+0x10/0x10 [ 1317.696455][ T30] ret_from_fork_asm+0x1a/0x30 [ 1317.701258][ T30] [ 1317.704383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1317.711475][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1317.716748][ C1] NMI backtrace for cpu 1 [ 1317.716764][ C1] CPU: 1 UID: 0 PID: 1107 Comm: kworker/u8:5 Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1317.716786][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1317.716800][ C1] Workqueue: bat_events batadv_nc_worker [ 1317.716830][ C1] RIP: 0010:__lock_acquire+0x70a/0x2050 [ 1317.716862][ C1] Code: b6 1b 41 0f b6 04 16 84 c0 0f 85 f3 11 00 00 41 f6 47 01 80 0f 85 1c 04 00 00 84 db 40 0f b6 c5 0f b6 cb 0f 44 c8 89 4c 24 54 <48> 8b 44 24 38 0f b6 04 10 84 c0 0f 85 74 13 00 00 41 8b 6d 00 41 [ 1317.716878][ C1] RSP: 0018:ffffc90003e178f0 EFLAGS: 00000002 [ 1317.716893][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: 0000000000000001 [ 1317.716906][ C1] RDX: dffffc0000000000 RSI: ffff8880276864e0 RDI: 000000000000000a [ 1317.716920][ C1] RBP: 0000000000000002 R08: ffffffff942c5807 R09: 1ffffffff2858b00 [ 1317.716934][ C1] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: ffff888027685a00 [ 1317.716948][ C1] R13: ffff8880276864d8 R14: 1ffff11004ed0caa R15: ffff888027686550 [ 1317.716963][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1317.716979][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1317.716993][ C1] CR2: 000056441b363131 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1317.717010][ C1] DR0: 0000000000000000 DR1: 00000000872c9164 DR2: 0000000000000000 [ 1317.717022][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1317.717035][ C1] Call Trace: [ 1317.717044][ C1] [ 1317.717052][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1317.717075][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1317.717104][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1317.717132][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1317.717159][ C1] ? nmi_handle+0x14f/0x5a0 [ 1317.717178][ C1] ? nmi_handle+0x2a/0x5a0 [ 1317.717198][ C1] ? __lock_acquire+0x70a/0x2050 [ 1317.717225][ C1] ? default_do_nmi+0x63/0x160 [ 1317.717248][ C1] ? exc_nmi+0x123/0x1f0 [ 1317.717269][ C1] ? end_repeat_nmi+0xf/0x53 [ 1317.717291][ C1] ? __lock_acquire+0x70a/0x2050 [ 1317.717319][ C1] ? __lock_acquire+0x70a/0x2050 [ 1317.717347][ C1] ? __lock_acquire+0x70a/0x2050 [ 1317.717374][ C1] [ 1317.717381][ C1] [ 1317.717394][ C1] lock_acquire+0x1ed/0x550 [ 1317.717421][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1317.717452][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1317.717480][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1317.717503][ C1] ? __pfx_lock_release+0x10/0x10 [ 1317.717532][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1317.717565][ C1] batadv_nc_worker+0xec/0x610 [ 1317.717589][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1317.717611][ C1] ? batadv_nc_worker+0xcb/0x610 [ 1317.717635][ C1] ? process_scheduled_works+0x976/0x1850 [ 1317.717661][ C1] process_scheduled_works+0xa63/0x1850 [ 1317.717698][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1317.717727][ C1] ? assign_work+0x364/0x3d0 [ 1317.717753][ C1] worker_thread+0x870/0xd30 [ 1317.717785][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1317.717813][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1317.717839][ C1] kthread+0x2f0/0x390 [ 1317.717856][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1317.717882][ C1] ? __pfx_kthread+0x10/0x10 [ 1317.717900][ C1] ret_from_fork+0x4b/0x80 [ 1317.717927][ C1] ? __pfx_kthread+0x10/0x10 [ 1317.717945][ C1] ret_from_fork_asm+0x1a/0x30 [ 1317.717977][ C1] [ 1318.049470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1318.131954][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1318.138887][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00046-g7ec462100ef9 #0 [ 1318.149524][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1318.159625][ T30] Call Trace: [ 1318.162939][ T30] [ 1318.165898][ T30] dump_stack_lvl+0x241/0x360 [ 1318.170616][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1318.175849][ T30] ? __pfx__printk+0x10/0x10 [ 1318.180483][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1318.186517][ T30] ? vscnprintf+0x5d/0x90 [ 1318.190898][ T30] panic+0x349/0x880 [ 1318.194841][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1318.201071][ T30] ? __pfx_panic+0x10/0x10 [ 1318.205540][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1318.210952][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1318.216551][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1318.221970][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1318.228179][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1318.234373][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1318.240599][ T30] watchdog+0x1033/0x1040 [ 1318.244992][ T30] ? watchdog+0x1ea/0x1040 [ 1318.249438][ T30] ? __pfx_watchdog+0x10/0x10 [ 1318.254140][ T30] kthread+0x2f0/0x390 [ 1318.258312][ T30] ? __pfx_watchdog+0x10/0x10 [ 1318.263011][ T30] ? __pfx_kthread+0x10/0x10 [ 1318.267619][ T30] ret_from_fork+0x4b/0x80 [ 1318.272084][ T30] ? __pfx_kthread+0x10/0x10 [ 1318.276706][ T30] ret_from_fork_asm+0x1a/0x30 [ 1318.281514][ T30] [ 1318.284856][ T30] Kernel Offset: disabled [ 1318.289218][ T30] Rebooting in 86400 seconds..