last executing test programs: 8.482917881s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x80001, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) r2 = syz_io_uring_setup(0x1911, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_ENUMSTD(r5, 0xc0485619, &(0x7f00000001c0)={0x80000001, 0x0, "dcc6f634e1403f2b003cd3306565209259a6937336eab171"}) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"fe403ca4", 0x0, 0x5, 0x81, 0x0, 0x7, "de6c0a5bcee099303c9842579a1c19", "dba0a737", "4da264d5", "e75aef41", ["4fdd51b5a333d64fd52f79de", "0c13895a26e4cb6b2f9782fc", "674a440d6cdaaf6be57cc8cd", "2d66d59cea6bb67af44fa6da"]}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"04f16c91", 0x0, 0x0, 0x0, 0x0, 0x0, "6f99e65664cdfb5f24cf398a3f7a92", '\x00', "246a8a96", "12caa207", ['\x00', "9d09b43157145fa9a5c56bcf", "2b4af2886e6d02546f0ad9b4", "000000010100"]}) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x9, &(0x7f0000000000)=[{0xcf, 0xf7, 0x2, 0x3}, {0x8, 0x6, 0x9, 0x2}, {0x0, 0xc7, 0xff, 0x7}, {0x1ff, 0x4, 0x4, 0x1}, {0x4, 0x8, 0x6, 0x3}, {0x0, 0x85, 0x3, 0x4}, {0xa5e1, 0x3, 0x6, 0x4}, {0x6, 0x3, 0x9, 0x7}, {0x3, 0xf, 0x4, 0x8}]}) 8.119005555s ago: executing program 1 (id=10): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async) io_uring_setup(0x7e1a, &(0x7f00000000c0)={0x0, 0xec02, 0x4, 0xffffffff, 0x163}) (async, rerun: 32) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000180)=0xe3b) (rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf4, 0x78, 0x68, 0x8, 0xab4, 0x14, 0xc418, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2d, 0x8a, 0x54}}]}}]}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {0x0, 0x8001}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040}, 0x20008850) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e40)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0}) 7.194180813s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b8008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="06002400600600000a000100aaaaaaaaaa30"], 0x8c}}, 0x0) 7.19064492s ago: executing program 3 (id=14): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4001, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async, rerun: 32) io_setup(0x7, &(0x7f0000000280)=0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/power/wakeup_count', 0x42, 0xad) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x242201) (async) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 7.176427242s ago: executing program 3 (id=18): syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0020}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r1 = socket$pptp(0x18, 0x1, 0x2) getpeername(r1, 0x0, &(0x7f0000000080)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x20, 0x1}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a00010000200000000000000a000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB="14000500fa00ffffff090000622e610800ff0380"], 0x38}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000300)={0x2, 0x3}, 0x4) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_STATS(r5, 0x80f86406, &(0x7f0000000140)=""/188) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r4, r6, 0x0) 4.659854908s ago: executing program 2 (id=31): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 4.147943398s ago: executing program 3 (id=36): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x45b, &(0x7f0000000a40)={@link_local, @dev, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "b20a6d", 0x425, 0x21, 0x0, @mcast2, @empty, {[@srh={0x3c, 0x6, 0x4, 0x3, 0x6, 0x30, 0xe, [@private2, @private2, @empty]}, @hopopts={0x33, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @generic={0x1, 0x82, "5e49ab3639f7dbf8822d85ae0f2b24b5eefbb047d0c7b8d8b5214f33c93ea19706a3e6a0d0cdde95f25b55c30831f2fcfa3f323ab6f5402f49f2961d66bfb308b5b1be9a1507f0c022c41f104279c1776dbc19f1e6025a8087a5262d26c0c8bbe2dbca9a02facd9d152a623b25d92ea686dc78312f88c9b7fbf63d31adda90a42fe6"}, @jumbo={0xc2, 0x4, 0x457}, @pad1, @jumbo={0xc2, 0x4, 0x3}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @fragment={0x2c, 0x0, 0x7, 0x1, 0x0, 0x16, 0x64}, @dstopts={0x2f, 0x7, '\x00', [@generic={0x87, 0x37, "efe2ac7aa114c49c694c8fa578d5bb441aafabaef5fa4e0cae4330fafef16d9a03de2c59543c8957132a85011ea61a01caa9b61ce1711d"}, @jumbo]}, @hopopts={0x31, 0x1d, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x80}, @jumbo={0xc2, 0x4, 0x583}, @pad1, @calipso={0x7, 0x58, {0x0, 0x14, 0xbd, 0x9, [0xfffffffe0000000, 0x9, 0xa41, 0x47a, 0xfffffffffffffffc, 0x9, 0x5, 0x5, 0x3, 0x2]}}, @jumbo={0xc2, 0x4, 0x100}, @generic={0xab, 0x63, "7aade1361f868c455bc52238ee56cfb72649ce0bba4f68d9bedc76a26d8ed98db481e29ad0d26a6e68dbc3af2979a4c79a0a0027d562743dc4302c4f34d6a519866534cee0d739b51ce678d7947ac650477b70aeb73edf2aad237fc2a63ae274a78e4c"}, @enc_lim={0x4, 0x1, 0x10}]}, @routing={0x89, 0x2, 0x1, 0x4, 0x0, [@mcast1]}, @srh={0x21, 0x10, 0x4, 0x8, 0x7, 0x28, 0x8, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, @mcast2, @private2, @loopback, @dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote]}, @hopopts={0x3b, 0xe, '\x00', [@generic={0x7, 0x73, "c15e56fd1314e89471e7e3078befea97174f9954a5e559d0dfb9309a9e0c8fc41f43a69ab956510db70d95c9b2f6f2ab12576879011703681afb5659badc2a28b6a3f3050eced7eaadf1e5bf170af0d0da5fab538054e35f867fc08f0e026a3ff7ff902f3097a68af414a7c167a81652389d99"}]}, @fragment={0x5c, 0x0, 0xc4, 0x1, 0x0, 0x1d, 0x64}], {{0x4e22, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x9, 0x6, "6955d3", 0x7, "b3de0e"}, "5950fc7b6e154dbcef9961145166bc4e87c3573b6e998cc0d5ece678a6002dfe050beab46c29c14c7ef78f2e0b7556502fb7e73b52a83c37e368a255fe1cf004d5e08b6a0256e48507353375686cf91852360ac1586b32a93f3befd79dfb07d8d627eba2e51f4cf35b2db918a7e7b82611b16be815dfd0e991ced395ac4685b4b17de6ad4c6a345eded9c6ee167ed6ab9696858e59948894bea1dc26809c915a03e1dbbd558255be5964f469b1d27a1c5317507a9a"}}}}}}, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@assoc={0x18, 0x117, 0x4, 0x6}], 0x18, 0x1}, 0x40000) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000840)=""/226, 0xe2}], 0x2}}], 0x1, 0x2002, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000000100)=""/246, 0xf6}, {&(0x7f0000000240)=""/2, 0x2}, {&(0x7f0000000340)=""/192, 0xc0}, {&(0x7f0000000280)=""/75, 0x4b}], 0x6) 4.092083649s ago: executing program 2 (id=38): r0 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x1, 0x4000, r0}, 0x18) r1 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000340)={0x1}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x6, 0xfff, 0x1, 0x1b, "2e5278a9b725d0df82eb158585f5810cb578b8"}) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f00000000c0), 0x5, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x1, 0x4000, r0}, 0x18) (async) syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x0) (async) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000340)={0x1}) (async) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) (async) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xfffffffb, 0x6, 0xfff, 0x1, 0x1b, "2e5278a9b725d0df82eb158585f5810cb578b8"}) (async) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) (async) 3.955718623s ago: executing program 3 (id=39): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x20, 0x5, 0x80]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 2.82264272s ago: executing program 2 (id=52): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x0, 0x0, 0x20000}, 0xffa5) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x0, 0x0, 0x20000}, 0xffa5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.71736334s ago: executing program 4 (id=53): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000200)) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)) (async) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) 2.682357242s ago: executing program 2 (id=54): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00000100000057"], 0x0, 0x0, 0x0, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000003c0)={0x20, 0x16, 0x2, "f2ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x0, 0xb, 0x1d, {0x1d, 0xc, "270861c821b40f21e61d1eb67f5b1a03bb58841522595d283f4639"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4b4}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x18, 0x83, "cc384cdec091dd205fe7e0bd03a0849b087ef28d5e74473eb6c7710a580ea8a2f2b2bd4ce2f122463ace468b90d5cedd5098c9c8468535cd5ed7197c9deed21baf461610c7de27bcda0b72a0200e8c9262bfa6de421b7ec932d7e16457d85a92085b445e55fe69ff420ab1bfcbff839ffadc5f038bda2dc6089661e6d86ffcd54ffc18"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000280)={0x20, 0x81, 0x2, "62dd"}, &(0x7f00000002c0)={0x20, 0x82, 0x2, "9d2d"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "d964"}, &(0x7f0000000380)={0x20, 0x84, 0x1, 'T'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "ff4e6b"}}) 2.514498938s ago: executing program 4 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x400000000000000}, 0x0) 2.448480515s ago: executing program 0 (id=57): syz_usb_connect(0x0, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000039c93208120a105d0d920102030109021200010000c0040904eb0800677f77000bfb179da1184419113915e1197c830a34260d81ced4a4c440"], 0x0) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x40, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x446, 0x2c, 0x1, {0x22, 0xf5b}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x2, 0xb}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x4, 0xbc}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x6, 0xdf, 0x80, 0x10, 0xfe}, 0x115, &(0x7f0000000840)={0x5, 0xf, 0x115, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0xf, 0x4, 0x11de, 0xff0f, 0x0, [0xc0, 0x3f3f, 0xff0000, 0xc000]}, @ssp_cap={0x1c, 0x10, 0xa, 0x6, 0x4, 0x1, 0xff00, 0x6, [0xc0c0, 0x0, 0xc000, 0x6000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x2, 0xabf}, @generic={0xb3, 0x10, 0xa, "1b1a716fb03e7e52e32390fc57ae90107f3cf6824bd5c3149218824f525b02b86a3500c656fea565db73fba9a5574a9334a0c2fca7ac9848f2430f03b030fa5966d313c7fc98a1c94339a505a086d5e6daf2fa9a2e2f4900e2a140039f74567d290265177481ea8cf6da656abaa1569b537a1dffd3a860818302d8f587a041fd38d445c0aa29ac042cbc27b726b2f8de77ee5f56006eec1d75f0786d66e24c948dacb751122d7bc891a93516c2642bd3"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x7, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "c9774169542f1e32bc7c96890bb8acd1"}]}, 0x5, [{0xff, &(0x7f0000000200)=@string={0xff, 0x3, "ad354ed2838d2800dea1a2ff95f0b96044c21ce2a4a25b8862e0044cbc72187120b3078ad3e81c91f26f0ec6f4071a6cb5cf4d793f96b268508c59d85213394c3f9ac449de3030aad8809263ffcb01e5bbca36e609b6fb8d9f0fd1a97d0d39a5f1b76acba7af9781e867a8ac758e7df90b5f5796904cdb63c74bea572527c781cc6b8f3d1944c40e8e6e75eb8ec1bf2337328fad35269f82f0a12c8469b056c52f342a0c2766c7169b362f55749f2e5eeaccd233e0b6578c202be6de57f07c10b4c0b1d89aaa7efa52141a3ccd933468085916de7de916606a4629bd65e7b846bb108cadc85b2f546b17c0d06d585fe914c4c3e630f03c8653ae5c9e67"}}, {0xe0, &(0x7f0000000300)=@string={0xe0, 0x3, "90fc3f2814f0e6f02746b5a62a5db7e61bcc5148a209c3b5d43321964fffe007c3f9fbe4cbefce4ff27d03127663f83bf209fbe3e685b3ea8ffa93b66691bf8569113b864f0fdc8095faccc5812ba71ec486a290d24cb333583014d39e4d842960abbf5164459181c63590a972dc3daf14607672cbb1f25718e62ac772a18a08b70627a0cb17594997bf1a39b9e0041bbdea3fd1aef90f55c57490f39d321fe0d7e6f8c85a4044ec49d91cb1a399d533e55a0780cd9a2a6233c8f73de26703f06d5808c6904987bb5a152857d21d50b760262e17d4805f69899c265a8a0e"}}, {0xaf, &(0x7f0000000400)=@string={0xaf, 0x3, "193c907d6919d21de66bbb1fb1982ceec59303992cc1e97d72841b11ccea76df0e682be6aaaecb8b859d1bc1634d7348d4b6c1a8370354c27d38d392cda880f725a19644b536554a171e97ff25ac6811599444942d6f2cb03a205a4d43cfce31fa9b227f7c62d064e7e684c37c01ff9a473efce192d355655a052e60f6f04713ca91b0ed5632ee20ce33e30fa00b054e1adac62596cd83a7a91a928f453ae7489203bd21001d0dee45342771d8"}}, {0xca, &(0x7f0000000740)=ANY=[@ANYBLOB="ca031ba4b222ead35486f87ac8659c1a6f7c877aa1b8c43f91d959fc55c7e19df355fa4f1695c7e6565694513ffe8c0a9e02b502d20fa8577537eec65b87fea4e42a57957112803df0d99e88dff4796af22662efd455185ee57ec1405d2149ded59c2d32aaee828374ac9bef49bdbf93b5dc2f3ac9813588abd06fe8e3ffcb2c369b8956cc8906bb089552dc733ce81dc7ce08d6c373d0e7f7e6402da8ac266a0d850bdd6e739b3c035ddaa88cd275c340ad005b54fda12d312db9f6d0ddba46c934dd841024341e112affbe6e81efd0db1bc9f89030"]}, {0x6a, &(0x7f00000005c0)=@string={0x6a, 0x3, "28af3824ec09d988fb90b8bd157cc2428fb6d45566c289548470cd13ead29906e9190aa8161713d1951e0d13ce824e35cb2f17b7a7b0fbb1c454d6f3addae9bd7dedeae59b3aadefaf547f2d163e4e072decbb30bad2d2cd97dedf5d825d0186320138e77c164b26"}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000006c0)=0x0) syz_open_procfs(r0, &(0x7f0000000700)='wchan\x00') 2.36783447s ago: executing program 4 (id=58): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="002100000000000014000300766c616e300000000000000000000000080004000000000034002b8008000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="06002400600600000a000100aaaaaaaaaa30"], 0x8c}}, 0x0) 2.293395681s ago: executing program 3 (id=59): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x4, 0xa4, {0xa4, 0x21, "838b35810c142838546d1a18353c6acee5cfeae0e452dffe9c96a7d0363cd389a315a195da4cb4c3d289664b3e5ec627fad605a920ebfc39f02cc5546f15fcdfb58b82b36386b0090cdcb7e5c455f1ef73255d0dcd25fe16429155a3000ed6bbeb6b9988699796f82529878a3245f8c7741d429b0ebf250a03f12a450ac071b56603270017ce32f657d73395ad0409a08d3f71db5497d0b7f70a87bc86b092615b7c"}}, &(0x7f0000000100)={0x0, 0x3, 0x8, @string={0x8, 0x3, "cf7555e1f5d1"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x20, 0x6, 0xa5, "b9305f110bd26810ca9f87bf79c4e75566b6e9dc4ef8d862175e24c7e3cc55c2f6d3a2803ac52be74ee8703e0abda290587bae803df595918644dfe9548405d0ca6ffc399282a330eeaa059d6d6d5bcf1c3826255b44c5b8e9be2210ad633b13a55acb3473e4913adeebdc327ee52fc73868f332315f282d43125f1f89119289adb8d01635ae7d582ad7af3c5b51d75f2948812c9de891228d1e4ccf9c9ec030c353088a9d"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x9c}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000002c0)={0x20, 0x0, 0x96, {0x94, "42ec05885b72107ee0830702138b757b34b3f2551eeacf7b468c0b5f14a034c375a7dca053dc1da108803a602fb88de6ec06db2ee0e29bc26ba0baeb3a045547c85baece02513a982c2d0412bce5acef39917b1779c9a05a6431ba0ae1e13031d86bcaaa5acb88d619a1edc019991b4454cedbdef3cff5d5ae4f591c2c96427b6356773189a025c24a7e12a18be4914b83592163"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x6}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x6a}}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.29295829s ago: executing program 4 (id=60): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) unshare(0x8000400) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) fdatasync(r1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) 2.218714132s ago: executing program 4 (id=61): syz_usb_connect(0x3, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="120101022748e1080b042165a6ce0102030109021b0001040440070904f400019c747802090505000000000506"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 1.075894149s ago: executing program 0 (id=62): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r1 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380), &(0x7f0000000280)) sendfile(r1, r0, &(0x7f0000000180)=0x6, 0x6) 1.042589917s ago: executing program 0 (id=63): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) 979.323258ms ago: executing program 0 (id=64): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x61, 0x2}}}]}, 0x24}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc40}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=@ipv6_newnexthop={0xb4, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x35}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0xfa}}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r6}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x10}]}, @NHA_GROUP={0x44, 0x2, [{0x2, 0xb}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0xb7}, {0x1, 0x2}, {0x0, 0x8c}]}, @NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x8) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x8441, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@private2, [], @ipv4=@dev}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4=@local, [], @ipv4=@multicast1}, {@ipv4=@local, [], @ipv4=@broadcast}], 0x5}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) socket$inet6(0xa, 0x3, 0x2) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async) socket(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=@framed={{}, [@jmp={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_delvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x61, 0x2}}}]}, 0x24}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc40}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=@ipv6_newnexthop={0xb4, 0x68, 0x1, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x35}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5, 0x5, 0xfa}}, @NHA_FDB={0x4}, @NHA_OIF={0x8, 0x5, r6}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x4}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x10}]}, @NHA_GROUP={0x44, 0x2, [{0x2, 0xb}, {0x2, 0x5}, {0x0, 0x7}, {0x0, 0x4}, {0x0, 0x5}, {0x2, 0xb7}, {0x1, 0x2}, {0x0, 0x8c}]}, @NHA_BLACKHOLE={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_ID={0x8}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x8) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x8441, 0x3ff}}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@private2, [], @ipv4=@dev}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4=@local, [], @ipv4=@multicast1}, {@ipv4=@local, [], @ipv4=@broadcast}], 0x5}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) 875.918293ms ago: executing program 4 (id=65): r0 = syz_open_dev$loop(0x0, 0x81, 0x2a00) fsync(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100002ec6601037210100352a010203010902120001000000000904"], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (fail_nth: 9) 787.236875ms ago: executing program 0 (id=66): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 577.897546ms ago: executing program 0 (id=67): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e"], 0x7) (async) creat(&(0x7f0000000080)='./file0\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006200)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r1, &(0x7f0000000b00)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @loopback}}}}, 0x3e) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4810) (rerun: 64) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 985.459µs ago: executing program 2 (id=68): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) socket$inet(0x2, 0x80007, 0xfffffffc) 0s ago: executing program 2 (id=69): syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x458, 0x501a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x10, {0x9, 0x21, 0xb7e8, 0x6, 0x1, {0x22, 0x3f0}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x8, 0x0, 0xf}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x6, 0x5}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x7, 0x5, 0x55, 0x20, 0x6}, 0xe4, &(0x7f0000000080)={0x5, 0xf, 0xe4, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xe, 0x6, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x6, 0x1d46}, @generic={0xc1, 0x10, 0xb, "8a534100ea3fdc0572313cdc533b19563c58631cd6bc909d05d19a4782e104896f92bd74ec5ce1a4dea6b316e79e432caec8b6dbb43a5bb4d8722e617c37db0de4cf577ed318637e2a07ae80e91c0e31f4f4853fc767910c57ddb4b5cb37990628921d0d8f1403160eea467f0e0f9474f889eaf74e8a2e98cb2b88e5fd103461463cb15af698fab64255af6895334a1af9d7d994f85f1df1c194fcc497ce5858a202e62fa8579be9de1870ef1081443d8a59c32b44921abae15cbb56ba40"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x8, 0x81, 0x401}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3401}}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.247' (ED25519) to the list of known hosts. [ 70.393647][ T5827] cgroup: Unknown subsys name 'net' [ 70.510039][ T5827] cgroup: Unknown subsys name 'cpuset' [ 70.519154][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.579432][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.585941][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.027334][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.935369][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.941302][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.946142][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.951527][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.959493][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.971486][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.977987][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.979570][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.994165][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.999045][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.002988][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.016071][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.024730][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.033346][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.071080][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.075033][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.080116][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.088401][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.092943][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.101376][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.108085][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.123964][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.131605][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.139528][ T5855] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.147132][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.147156][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.161783][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.169219][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.179966][ T5153] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.187508][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.498975][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 76.695637][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 76.710710][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.720376][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.728783][ T5856] bridge_slave_0: entered allmulticast mode [ 76.735656][ T5856] bridge_slave_0: entered promiscuous mode [ 76.769345][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.777257][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.784657][ T5856] bridge_slave_1: entered allmulticast mode [ 76.792438][ T5856] bridge_slave_1: entered promiscuous mode [ 76.800102][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 76.898938][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 76.920438][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.932510][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.030708][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.038545][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.045853][ T5858] bridge_slave_0: entered allmulticast mode [ 77.053538][ T5858] bridge_slave_0: entered promiscuous mode [ 77.061743][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.071367][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.079181][ T5858] bridge_slave_1: entered allmulticast mode [ 77.085918][ T5858] bridge_slave_1: entered promiscuous mode [ 77.098592][ T5856] team0: Port device team_slave_0 added [ 77.106506][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 77.145810][ T5856] team0: Port device team_slave_1 added [ 77.162707][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.172205][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.180484][ T5860] bridge_slave_0: entered allmulticast mode [ 77.187918][ T5860] bridge_slave_0: entered promiscuous mode [ 77.195509][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.202918][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.210173][ T5860] bridge_slave_1: entered allmulticast mode [ 77.217428][ T5860] bridge_slave_1: entered promiscuous mode [ 77.225856][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.272924][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.303429][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.310990][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.318898][ T5857] bridge_slave_0: entered allmulticast mode [ 77.327129][ T5857] bridge_slave_0: entered promiscuous mode [ 77.359982][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.370944][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.397429][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.413325][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.421100][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.428558][ T5857] bridge_slave_1: entered allmulticast mode [ 77.435293][ T5857] bridge_slave_1: entered promiscuous mode [ 77.444083][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.456674][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.468341][ T5858] team0: Port device team_slave_0 added [ 77.474972][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.482240][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.508316][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.556665][ T5858] team0: Port device team_slave_1 added [ 77.622346][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.629423][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.656455][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.668038][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.675116][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.682621][ T5859] bridge_slave_0: entered allmulticast mode [ 77.691090][ T5859] bridge_slave_0: entered promiscuous mode [ 77.701351][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.713109][ T5860] team0: Port device team_slave_0 added [ 77.728995][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.736721][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.763439][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.789192][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.796636][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.803901][ T5859] bridge_slave_1: entered allmulticast mode [ 77.811299][ T5859] bridge_slave_1: entered promiscuous mode [ 77.820197][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.831572][ T5860] team0: Port device team_slave_1 added [ 77.842657][ T5856] hsr_slave_0: entered promiscuous mode [ 77.851417][ T5856] hsr_slave_1: entered promiscuous mode [ 77.903685][ T5858] hsr_slave_0: entered promiscuous mode [ 77.910784][ T5858] hsr_slave_1: entered promiscuous mode [ 77.918220][ T5858] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.926314][ T5858] Cannot create hsr debugfs directory [ 77.966735][ T5857] team0: Port device team_slave_0 added [ 77.984887][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.995139][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.002669][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.029764][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.042899][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.050028][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.076525][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.089772][ T5857] team0: Port device team_slave_1 added [ 78.106907][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.147087][ T54] Bluetooth: hci1: command tx timeout [ 78.164004][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.171232][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.197566][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.213267][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.224294][ T54] Bluetooth: hci0: command tx timeout [ 78.226993][ T5153] Bluetooth: hci2: command tx timeout [ 78.229998][ T5848] Bluetooth: hci3: command tx timeout [ 78.235271][ T5847] Bluetooth: hci4: command tx timeout [ 78.246648][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.273003][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.333698][ T5859] team0: Port device team_slave_0 added [ 78.352048][ T5860] hsr_slave_0: entered promiscuous mode [ 78.360233][ T5860] hsr_slave_1: entered promiscuous mode [ 78.367077][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.374654][ T5860] Cannot create hsr debugfs directory [ 78.391090][ T5859] team0: Port device team_slave_1 added [ 78.480920][ T5857] hsr_slave_0: entered promiscuous mode [ 78.487949][ T5857] hsr_slave_1: entered promiscuous mode [ 78.494033][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.501767][ T5857] Cannot create hsr debugfs directory [ 78.524406][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.531691][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.557972][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.608644][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.615793][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.642834][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.763512][ T5859] hsr_slave_0: entered promiscuous mode [ 78.770100][ T5859] hsr_slave_1: entered promiscuous mode [ 78.777202][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.784801][ T5859] Cannot create hsr debugfs directory [ 78.883555][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.894807][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.924111][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.943090][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.002483][ T5858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.030175][ T5858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.047426][ T5858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.059629][ T5858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.122797][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.139851][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.155898][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.182559][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.246676][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.282746][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.292990][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.303717][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.385590][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.434783][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.475577][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.484484][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.497256][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.523233][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.537462][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.564102][ T2901] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.571500][ T2901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.582817][ T2901] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.590121][ T2901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.633427][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.675399][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.700332][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.732588][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.745542][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.752720][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.781312][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.788475][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.803638][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.839494][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.846683][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.856097][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.863213][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.875643][ T2901] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.882833][ T2901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.906927][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.914092][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.949729][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.063212][ T5858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.120781][ T5856] veth0_vlan: entered promiscuous mode [ 80.143244][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.179024][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.191446][ T5856] veth1_vlan: entered promiscuous mode [ 80.216721][ T5847] Bluetooth: hci1: command tx timeout [ 80.223245][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.241696][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.280003][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.303198][ T5847] Bluetooth: hci0: command tx timeout [ 80.304604][ T54] Bluetooth: hci3: command tx timeout [ 80.309094][ T5153] Bluetooth: hci4: command tx timeout [ 80.309137][ T5153] Bluetooth: hci2: command tx timeout [ 80.339157][ T5856] veth0_macvtap: entered promiscuous mode [ 80.349722][ T5857] veth0_vlan: entered promiscuous mode [ 80.387594][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.394757][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.412498][ T5858] veth0_vlan: entered promiscuous mode [ 80.421278][ T5856] veth1_macvtap: entered promiscuous mode [ 80.431207][ T5860] veth0_vlan: entered promiscuous mode [ 80.445207][ T5857] veth1_vlan: entered promiscuous mode [ 80.469766][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.476913][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.492092][ T5858] veth1_vlan: entered promiscuous mode [ 80.511539][ T5860] veth1_vlan: entered promiscuous mode [ 80.531920][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.577424][ T5860] veth0_macvtap: entered promiscuous mode [ 80.602894][ T5857] veth0_macvtap: entered promiscuous mode [ 80.611760][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.621697][ T5860] veth1_macvtap: entered promiscuous mode [ 80.644048][ T5856] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.653974][ T5856] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.663779][ T5856] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.674268][ T5856] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.695013][ T5857] veth1_macvtap: entered promiscuous mode [ 80.725140][ T5858] veth0_macvtap: entered promiscuous mode [ 80.740373][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.755912][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.769309][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.794085][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.805905][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.817527][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.842629][ T5860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.854170][ T5860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.863324][ T5860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.874694][ T5860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.887167][ T5858] veth1_macvtap: entered promiscuous mode [ 80.932067][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.943269][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.955544][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.967069][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.978790][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.991217][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.005932][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.020496][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.031190][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.042322][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.061329][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.072002][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.082309][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.093596][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.104556][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.115619][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.128074][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.164247][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.188140][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.200570][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.210492][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.221251][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.231234][ T5858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.242380][ T5858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.254000][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.271801][ T5857] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.281033][ T5857] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.289913][ T5857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.298805][ T5857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.320099][ T5858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.329669][ T5858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.342211][ T5858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.351087][ T5858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.369618][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.382765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.412464][ T5859] veth0_vlan: entered promiscuous mode [ 81.472914][ T5859] veth1_vlan: entered promiscuous mode [ 81.514210][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.523950][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.570255][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.594796][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.619844][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.630685][ T5859] veth0_macvtap: entered promiscuous mode [ 81.642838][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.664709][ T5859] veth1_macvtap: entered promiscuous mode [ 81.700311][ T5856] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.724311][ T2901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.727521][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.732580][ T2901] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.758694][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.768933][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.779756][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.793035][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.803587][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.813569][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.826261][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.837627][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.885259][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.887822][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.932421][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.953553][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.977464][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.000537][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.010648][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.022043][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.032727][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.043924][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.057431][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.122481][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.191973][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.231670][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.260945][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.297310][ T54] Bluetooth: hci1: command tx timeout [ 82.388552][ T54] Bluetooth: hci0: command tx timeout [ 82.394019][ T54] Bluetooth: hci2: command tx timeout [ 82.399574][ T5848] Bluetooth: hci4: command tx timeout [ 82.405650][ T5848] Bluetooth: hci3: command tx timeout [ 82.494044][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.527358][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.622147][ T2901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.631596][ T2901] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.693992][ T5907] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 82.753104][ T5907] team0: Port device wlan1 added [ 82.822220][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.886106][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.899128][ T5911] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.944771][ T5911] input: syz0 as /devices/virtual/input/input5 [ 83.004151][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.053135][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.339682][ T5921] IPVS: length: 40 != 8 [ 83.368604][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11'. [ 83.440705][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.484490][ T5929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.510511][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 83.526664][ T5891] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.730673][ T5891] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 83.754628][ T5891] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 83.765169][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.785442][ T5891] usb 1-1: Product: syz [ 83.792141][ T5891] usb 1-1: Manufacturer: syz [ 83.802265][ T5891] usb 1-1: SerialNumber: syz [ 83.835279][ T5891] usb 1-1: config 0 descriptor?? [ 84.089771][ T5891] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 84.113567][ T5891] asix 1-1:0.0: probe with driver asix failed with error -71 [ 84.160607][ T5891] usb 1-1: USB disconnect, device number 2 [ 84.206290][ T5892] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.367962][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 84.378277][ T5847] Bluetooth: hci1: command tx timeout [ 84.392996][ T5892] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 84.403853][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.413842][ T5892] usb 4-1: Product: syz [ 84.418772][ T5892] usb 4-1: Manufacturer: syz [ 84.423838][ T5892] usb 4-1: SerialNumber: syz [ 84.436496][ T3073] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.455122][ T5892] usb 4-1: config 0 descriptor?? [ 84.456575][ T54] Bluetooth: hci3: command tx timeout [ 84.460788][ T5848] Bluetooth: hci4: command tx timeout [ 84.467318][ T54] Bluetooth: hci0: command tx timeout [ 84.477993][ T5847] Bluetooth: hci2: command tx timeout [ 84.593277][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.693673][ T3073] usb 5-1: Using ep0 maxpacket: 8 [ 84.719992][ T3073] usb 5-1: config 0 has no interfaces? [ 84.732262][ T3073] usb 5-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=8a.dd [ 84.750006][ T3073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.758648][ T3073] usb 5-1: Product: syz [ 84.762951][ T3073] usb 5-1: Manufacturer: syz [ 84.768001][ T3073] usb 5-1: SerialNumber: syz [ 84.777625][ T3073] usb 5-1: config 0 descriptor?? [ 85.043166][ T5947] pim6reg: entered allmulticast mode [ 85.067934][ T3073] usb 5-1: USB disconnect, device number 2 [ 85.196245][ T5899] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 85.306175][ T5893] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.356939][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 85.366784][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.381221][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.392186][ T5899] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 85.410960][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.424303][ T5899] usb 1-1: config 0 descriptor?? [ 85.479574][ T5893] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 85.496393][ T5893] usb 3-1: config 0 has no interface number 0 [ 85.502604][ T5893] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 85.536216][ T5893] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 85.568130][ T5893] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=55.58 [ 85.580797][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.589743][ T5893] usb 3-1: Product: syz [ 85.595080][ T5893] usb 3-1: Manufacturer: syz [ 85.599801][ T5893] usb 3-1: SerialNumber: syz [ 85.607883][ T5893] usb 3-1: config 0 descriptor?? [ 85.633619][ T5893] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input6 [ 85.839197][ T5893] usb 3-1: USB disconnect, device number 2 [ 86.125590][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.139409][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.152683][ T5899] usbhid 1-1:0.0: can't add hid device: -71 [ 86.163041][ T5899] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 86.181860][ T5979] vxcan1: tx address claim with dlc 1 [ 86.192014][ T5899] usb 1-1: USB disconnect, device number 3 [ 86.386424][ T5981] netlink: 'syz.4.28': attribute type 11 has an invalid length. [ 86.940431][ T1221] cfg80211: failed to load regulatory.db [ 87.026373][ T5996] netlink: 'syz.4.34': attribute type 11 has an invalid length. [ 87.101688][ T5892] usb_8dev 4-1:0.0 can0: sending command message failed [ 87.116283][ T5892] usb_8dev 4-1:0.0 can0: can't get firmware version [ 87.367042][ T5892] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 87.403072][ T5892] usb 4-1: USB disconnect, device number 2 [ 87.547419][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.706649][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 87.725477][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.738392][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.747657][ T5892] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.756177][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 87.762421][ T6020] trusted_key: syz.0.42 sent an empty control message without MSG_MORE. [ 87.772409][ T6022] netlink: 'syz.4.43': attribute type 11 has an invalid length. [ 87.783192][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.806079][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.820728][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.926821][ T5892] usb 4-1: Using ep0 maxpacket: 16 [ 87.942689][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.968744][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 87.984805][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.003296][ T6020] ALSA: mixer_oss: invalid OSS volume '' [ 88.003350][ T5892] usb 4-1: config 0 descriptor?? [ 88.033456][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 88.126439][ T8] usb 3-1: GET_CAPABILITIES returned 0 [ 88.132022][ T8] usbtmc 3-1:16.0: can't read capabilities [ 88.138405][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 88.145960][ T6033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.46'. [ 88.224336][ T6035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.47'. [ 88.330572][ T6012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.362591][ T6012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.409939][ T3073] usb 3-1: USB disconnect, device number 3 [ 88.470200][ T5200] bcm5974 4-1:0.0: could not read from device [ 88.513949][ T5200] bcm5974 4-1:0.0: could not read from device [ 88.522986][ T5892] usb 4-1: USB disconnect, device number 3 [ 88.946168][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.961341][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 88.978857][ T6065] vlan0: entered promiscuous mode [ 88.985237][ T6065] netlink: 32 bytes leftover after parsing attributes in process `syz.4.58'. [ 89.152512][ T8] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 89.156272][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 89.162930][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.188969][ T8] usb 3-1: config 0 descriptor?? [ 89.316455][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.324276][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 89.332588][ T5891] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 89.341443][ T5891] usb 1-1: config 0 has no interface number 0 [ 89.347719][ T5891] usb 1-1: config 0 interface 235 has no altsetting 0 [ 89.357157][ T5891] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=92.0d [ 89.366799][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.374828][ T5891] usb 1-1: Product: syz [ 89.379187][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.386887][ T5891] usb 1-1: Manufacturer: syz [ 89.391584][ T5891] usb 1-1: SerialNumber: syz [ 89.399450][ T5891] usb 1-1: config 0 descriptor?? [ 89.478154][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.488514][ T5892] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 89.497771][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.507979][ T5892] usb 4-1: config 0 descriptor?? [ 89.517253][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 89.546297][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 89.553882][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 89.563414][ T5899] usb 5-1: config 4 has an invalid interface number: 244 but max is 0 [ 89.572379][ T5899] usb 5-1: config 4 has no interface number 0 [ 89.579658][ T5899] usb 5-1: config 4 interface 244 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 89.593004][ T5899] usb 5-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=ce.a6 [ 89.602339][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.610531][ T5899] usb 5-1: Product: syz [ 89.614776][ T5899] usb 5-1: Manufacturer: syz [ 89.619623][ T5899] usb 5-1: SerialNumber: syz [ 89.637613][ T6063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.647424][ T6063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.667764][ T5891] usb 1-1: USB disconnect, device number 4 [ 89.721355][ T5892] pwc: send_video_command error -71 [ 89.731836][ T5892] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 89.741041][ T5892] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 89.757608][ T5892] usb 4-1: USB disconnect, device number 4 [ 89.855394][ T5899] xbox_remote_probe: Unexpected endpoint_in [ 89.876258][ T5899] usb 5-1: USB disconnect, device number 3 [ 90.166249][ T5892] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.329546][ T5892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.351027][ T5892] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 90.371100][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.391522][ T5892] usb 4-1: config 0 descriptor?? [ 90.432170][ T5892] pwc: Askey VC010 type 2 USB webcam detected. [ 90.461772][ T6078] Zero length message leads to an empty skb [ 90.649914][ T8] pegasus 3-1:0.0: can't reset MAC [ 90.664651][ T8] pegasus 3-1:0.0: probe with driver pegasus failed with error -5 [ 90.678899][ T8] usb 3-1: USB disconnect, device number 4 [ 90.689314][ T3073] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 90.833252][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00 [ 90.840746][ T5892] pwc: recv_control_msg error -32 req 02 val 2700 [ 90.849179][ T3073] usb 5-1: Using ep0 maxpacket: 16 [ 90.855267][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00 [ 90.863109][ T5892] pwc: recv_control_msg error -32 req 04 val 1000 [ 90.871173][ T5892] pwc: recv_control_msg error -32 req 04 val 1300 [ 90.878846][ T5892] pwc: recv_control_msg error -32 req 04 val 1400 [ 90.886098][ T3073] usb 5-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 90.895194][ T3073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.904474][ T3073] usb 5-1: Product: syz [ 90.908958][ T5892] pwc: recv_control_msg error -32 req 02 val 2000 [ 90.915619][ T3073] usb 5-1: Manufacturer: syz [ 90.920478][ T3073] usb 5-1: SerialNumber: syz [ 90.929176][ T3073] usb 5-1: config 0 descriptor?? [ 90.946140][ T3073] as10x_usb: device has been detected [ 90.952179][ T3073] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 90.976602][ T3073] usb 5-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 90.999453][ T3073] as10x_usb: error during firmware upload part1 [ 91.007036][ T3073] Registered device Sky IT Digital Key (green led) [ 91.026401][ T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 91.126141][ T5892] pwc: recv_control_msg error -32 req 04 val 1500 [ 91.133550][ T5892] pwc: recv_control_msg error -32 req 02 val 2500 [ 91.141254][ T5892] pwc: recv_control_msg error -32 req 02 val 2400 [ 91.148484][ T5892] pwc: recv_control_msg error -32 req 02 val 2600 [ 91.150927][ T6079] random: crng reseeded on system resumption [ 91.155927][ T5892] pwc: recv_control_msg error -32 req 02 val 2900 [ 91.170332][ T5892] pwc: recv_control_msg error -32 req 02 val 2800 [ 91.178868][ T5892] pwc: recv_control_msg error -32 req 04 val 1100 [ 91.184763][ T6079] FAULT_INJECTION: forcing a failure. [ 91.184763][ T6079] name failslab, interval 1, probability 0, space 0, times 1 [ 91.206832][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.4.65 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 91.217415][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.227613][ T6079] Call Trace: [ 91.230936][ T6079] [ 91.233917][ T6079] dump_stack_lvl+0x241/0x360 [ 91.238682][ T6079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.243944][ T6079] ? __pfx__printk+0x10/0x10 [ 91.248604][ T6079] should_fail_ex+0x3b0/0x4e0 [ 91.253339][ T6079] should_failslab+0xac/0x100 [ 91.258074][ T6079] ? async_schedule_node_domain+0x5c/0x110 [ 91.263947][ T6079] __kmalloc_cache_noprof+0x6c/0x2c0 [ 91.269296][ T6079] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 91.275595][ T6079] async_schedule_node_domain+0x5c/0x110 [ 91.281303][ T6079] dev_cache_fw_image+0x36d/0x3e0 [ 91.286398][ T6079] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 91.292040][ T6079] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 91.297999][ T6079] ? blake2s_update+0x1a5/0x280 [ 91.302923][ T6079] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 91.308543][ T6079] dpm_for_each_dev+0x58/0xc0 [ 91.313310][ T6079] fw_pm_notify+0x24a/0x2f0 [ 91.317885][ T6079] ? __pfx_fw_pm_notify+0x10/0x10 [ 91.323291][ T6079] ? __mutex_trylock_common+0x183/0x2e0 [ 91.328918][ T6079] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.335295][ T6079] ? rcu_is_watching+0x15/0xb0 [ 91.340120][ T6079] ? trace_contention_end+0x3c/0x120 [ 91.345651][ T6079] notifier_call_chain+0x19f/0x3e0 [ 91.350835][ T6079] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 91.357306][ T6079] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 91.364371][ T6079] ? __pfx___mutex_lock+0x10/0x10 [ 91.369452][ T6079] pm_notifier_call_chain_robust+0x2c/0x60 [ 91.375291][ T6079] snapshot_open+0x132/0x280 [ 91.379936][ T6079] ? __pfx_snapshot_open+0x10/0x10 [ 91.385069][ T6079] misc_open+0x2cc/0x340 [ 91.389332][ T6079] chrdev_open+0x521/0x600 [ 91.393878][ T6079] ? __pfx_apparmor_file_open+0x10/0x10 [ 91.399476][ T6079] ? __pfx_chrdev_open+0x10/0x10 [ 91.404480][ T6079] ? security_file_open+0x513/0x990 [ 91.409726][ T6079] ? __pfx_chrdev_open+0x10/0x10 [ 91.414694][ T6079] do_dentry_open+0x978/0x1460 [ 91.419496][ T6079] vfs_open+0x3e/0x330 [ 91.423588][ T6079] path_openat+0x2c84/0x3590 [ 91.428207][ T6079] ? __lock_acquire+0x1384/0x2050 [ 91.433270][ T6079] ? __pfx_path_openat+0x10/0x10 [ 91.438245][ T6079] do_filp_open+0x235/0x490 [ 91.442769][ T6079] ? __pfx_do_filp_open+0x10/0x10 [ 91.447834][ T6079] ? _raw_spin_unlock+0x28/0x50 [ 91.452723][ T6079] ? alloc_fd+0x5a1/0x640 [ 91.457100][ T6079] do_sys_openat2+0x13e/0x1d0 [ 91.461813][ T6079] ? __pfx_do_sys_openat2+0x10/0x10 [ 91.467060][ T6079] __x64_sys_openat+0x247/0x2a0 [ 91.472035][ T6079] ? __pfx___x64_sys_openat+0x10/0x10 [ 91.477443][ T6079] ? do_syscall_64+0x100/0x230 [ 91.482333][ T6079] ? do_syscall_64+0xb6/0x230 [ 91.487046][ T6079] do_syscall_64+0xf3/0x230 [ 91.491578][ T6079] ? clear_bhb_loop+0x35/0x90 [ 91.496382][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.502335][ T6079] RIP: 0033:0x7f266917e719 [ 91.506854][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.526476][ T6079] RSP: 002b:00007f266a00a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 91.534926][ T6079] RAX: ffffffffffffffda RBX: 00007f2669335f80 RCX: 00007f266917e719 [ 91.542919][ T6079] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 91.550929][ T6079] RBP: 00007f266a00a090 R08: 0000000000000000 R09: 0000000000000000 [ 91.558925][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.566913][ T6079] R13: 0000000000000000 R14: 00007f2669335f80 R15: 00007f266945fa28 [ 91.574912][ T6079] [ 91.591307][ T8] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 91.596903][ T6079] [ 91.599617][ T8] usb 1-1: config 0 has no interface number 0 [ 91.601749][ T6079] ============================================ [ 91.601759][ T6079] WARNING: possible recursive locking detected [ 91.607862][ T8] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 91.613941][ T6079] 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 Not tainted [ 91.613957][ T6079] -------------------------------------------- [ 91.613965][ T6079] syz.4.65/6079 is trying to acquire lock: [ 91.613976][ T6079] ffffffff8f2de388 (fw_lock){+.+.}-{3:3}, at: assign_fw+0x56/0x890 [ 91.629333][ T8] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 91.631091][ T6079] [ 91.631091][ T6079] but task is already holding lock: [ 91.638691][ T8] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 91.644347][ T6079] ffffffff8f2de388 [ 91.652639][ T8] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 91.658027][ T6079] (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 [ 91.658087][ T6079] [ 91.658087][ T6079] other info that might help us debug this: [ 91.670272][ T8] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 91.676966][ T6079] Possible unsafe locking scenario: [ 91.676966][ T6079] [ 91.676976][ T6079] CPU0 [ 91.676981][ T6079] ---- [ 91.676987][ T6079] lock(fw_lock); [ 91.677006][ T6079] lock(fw_lock); [ 91.677021][ T6079] [ 91.677021][ T6079] *** DEADLOCK *** [ 91.677021][ T6079] [ 91.689315][ T8] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 91.691987][ T6079] May be due to missing lock nesting notation [ 91.691987][ T6079] [ 91.691998][ T6079] 5 locks held by syz.4.65/6079: [ 91.705696][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.709747][ T6079] #0: ffffffff8f190208 (misc_mtx){+.+.}-{3:3}, at: misc_open+0x54/0x340 [ 91.799096][ T6079] #1: ffffffff8e7eada8 (system_transition_mutex){+.+.}-{3:3}, at: lock_system_sleep+0x60/0xa0 [ 91.809587][ T6079] #2: ffffffff8e80b0f0 ((pm_chain_head).rwsem){++++}-{3:3}, at: blocking_notifier_call_chain_robust+0xac/0x1e0 [ 91.821497][ T6079] #3: ffffffff8f2de388 (fw_lock){+.+.}-{3:3}, at: fw_pm_notify+0x232/0x2f0 [ 91.830233][ T6079] #4: ffffffff8f2d9428 (dpm_list_mtx){+.+.}-{3:3}, at: dpm_for_each_dev+0x2b/0xc0 [ 91.839615][ T6079] [ 91.839615][ T6079] stack backtrace: [ 91.845502][ T6079] CPU: 1 UID: 0 PID: 6079 Comm: syz.4.65 Not tainted 6.12.0-rc6-syzkaller-00272-gda4373fbcf00 #0 [ 91.856041][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.866170][ T6079] Call Trace: [ 91.869460][ T6079] [ 91.872408][ T6079] dump_stack_lvl+0x241/0x360 [ 91.877563][ T6079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.882805][ T6079] ? __pfx__printk+0x10/0x10 [ 91.887430][ T6079] ? lockdep_unlock+0x16a/0x300 [ 91.892298][ T6079] print_deadlock_bug+0x483/0x620 [ 91.897334][ T6079] validate_chain+0x15e2/0x5920 [ 91.902189][ T6079] ? __lock_acquire+0x1384/0x2050 [ 91.907227][ T6079] ? mark_lock+0x9a/0x360 [ 91.911554][ T6079] ? __pfx_validate_chain+0x10/0x10 [ 91.916752][ T6079] ? __lock_acquire+0x1384/0x2050 [ 91.921791][ T6079] ? mark_lock+0x9a/0x360 [ 91.926134][ T6079] ? mark_lock+0x9a/0x360 [ 91.930485][ T6079] __lock_acquire+0x1384/0x2050 [ 91.935372][ T6079] lock_acquire+0x1ed/0x550 [ 91.939905][ T6079] ? assign_fw+0x56/0x890 [ 91.944252][ T6079] ? __pfx_lock_acquire+0x10/0x10 [ 91.949297][ T6079] ? __pfx___might_resched+0x10/0x10 [ 91.954591][ T6079] ? kmem_cache_free+0x1a2/0x420 [ 91.959539][ T6079] ? _request_firmware+0xd5a/0x13b0 [ 91.964779][ T6079] ? __async_dev_cache_fw_image+0xe7/0x320 [ 91.970612][ T6079] ? async_schedule_node_domain+0xdc/0x110 [ 91.976448][ T6079] ? dev_cache_fw_image+0x36d/0x3e0 [ 91.981668][ T6079] ? dpm_for_each_dev+0x58/0xc0 [ 91.986545][ T6079] ? fw_pm_notify+0x24a/0x2f0 [ 91.991267][ T6079] ? notifier_call_chain+0x19f/0x3e0 [ 91.996584][ T6079] ? blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 92.003218][ T6079] ? snapshot_open+0x132/0x280 [ 92.008008][ T6079] ? misc_open+0x2cc/0x340 [ 92.012428][ T6079] ? chrdev_open+0x521/0x600 [ 92.017025][ T6079] ? vfs_open+0x3e/0x330 [ 92.021273][ T6079] __mutex_lock+0x136/0xd70 [ 92.025782][ T6079] ? assign_fw+0x56/0x890 [ 92.030135][ T6079] ? mark_lock+0x9a/0x360 [ 92.034480][ T6079] ? assign_fw+0x56/0x890 [ 92.038822][ T6079] ? __pfx___mutex_lock+0x10/0x10 [ 92.043882][ T6079] ? kasan_quarantine_put+0xdc/0x230 [ 92.049174][ T6079] ? lockdep_hardirqs_on+0x99/0x150 [ 92.054400][ T6079] assign_fw+0x56/0x890 [ 92.058564][ T6079] ? _request_firmware+0xd5a/0x13b0 [ 92.063769][ T6079] ? kmem_cache_free+0x1a2/0x420 [ 92.068715][ T6079] ? complete_all+0x2d/0x1e0 [ 92.073322][ T6079] ? _request_firmware+0xd5a/0x13b0 [ 92.078539][ T6079] _request_firmware+0xe16/0x13b0 [ 92.083601][ T6079] ? __pfx__request_firmware+0x10/0x10 [ 92.089072][ T6079] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.095067][ T6079] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.101421][ T6079] __async_dev_cache_fw_image+0xe7/0x320 [ 92.107078][ T6079] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 92.113434][ T6079] ? async_schedule_node_domain+0xa3/0x110 [ 92.119303][ T6079] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 92.124904][ T6079] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 92.131178][ T6079] async_schedule_node_domain+0xdc/0x110 [ 92.136958][ T6079] dev_cache_fw_image+0x36d/0x3e0 [ 92.142001][ T6079] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 92.147557][ T6079] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 92.153467][ T6079] ? blake2s_update+0x1a5/0x280 [ 92.158416][ T6079] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 92.163971][ T6079] dpm_for_each_dev+0x58/0xc0 [ 92.168660][ T6079] fw_pm_notify+0x24a/0x2f0 [ 92.173171][ T6079] ? __pfx_fw_pm_notify+0x10/0x10 [ 92.178201][ T6079] ? __mutex_trylock_common+0x183/0x2e0 [ 92.183750][ T6079] ? __pfx_autoremove_wake_function+0x10/0x10 [ 92.189832][ T6079] ? rcu_is_watching+0x15/0xb0 [ 92.194605][ T6079] ? trace_contention_end+0x3c/0x120 [ 92.199921][ T6079] notifier_call_chain+0x19f/0x3e0 [ 92.205055][ T6079] blocking_notifier_call_chain_robust+0xe8/0x1e0 [ 92.211493][ T6079] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 92.218533][ T6079] ? __pfx___mutex_lock+0x10/0x10 [ 92.223596][ T6079] pm_notifier_call_chain_robust+0x2c/0x60 [ 92.229430][ T6079] snapshot_open+0x132/0x280 [ 92.234480][ T6079] ? __pfx_snapshot_open+0x10/0x10 [ 92.239603][ T6079] misc_open+0x2cc/0x340 [ 92.243873][ T6079] chrdev_open+0x521/0x600 [ 92.248306][ T6079] ? __pfx_apparmor_file_open+0x10/0x10 [ 92.253878][ T6079] ? __pfx_chrdev_open+0x10/0x10 [ 92.258828][ T6079] ? security_file_open+0x513/0x990 [ 92.264052][ T6079] ? __pfx_chrdev_open+0x10/0x10 [ 92.268999][ T6079] do_dentry_open+0x978/0x1460 [ 92.273772][ T6079] vfs_open+0x3e/0x330 [ 92.277861][ T6079] path_openat+0x2c84/0x3590 [ 92.282464][ T6079] ? __lock_acquire+0x1384/0x2050 [ 92.287528][ T6079] ? __pfx_path_openat+0x10/0x10 [ 92.292508][ T6079] do_filp_open+0x235/0x490 [ 92.297033][ T6079] ? __pfx_do_filp_open+0x10/0x10 [ 92.302113][ T6079] ? _raw_spin_unlock+0x28/0x50 [ 92.307106][ T6079] ? alloc_fd+0x5a1/0x640 [ 92.311537][ T6079] do_sys_openat2+0x13e/0x1d0 [ 92.316282][ T6079] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.321519][ T6079] __x64_sys_openat+0x247/0x2a0 [ 92.326397][ T6079] ? __pfx___x64_sys_openat+0x10/0x10 [ 92.331789][ T6079] ? do_syscall_64+0x100/0x230 [ 92.336579][ T6079] ? do_syscall_64+0xb6/0x230 [ 92.341285][ T6079] do_syscall_64+0xf3/0x230 [ 92.345809][ T6079] ? clear_bhb_loop+0x35/0x90 [ 92.350495][ T6079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.356498][ T6079] RIP: 0033:0x7f266917e719 [ 92.360935][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.380567][ T6079] RSP: 002b:00007f266a00a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.388992][ T6079] RAX: ffffffffffffffda RBX: 00007f2669335f80 RCX: 00007f266917e719 [ 92.396974][ T6079] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 92.404962][ T6079] RBP: 00007f266a00a090 R08: 0000000000000000 R09: 0000000000000000 [ 92.412936][ T6079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.420912][ T6079] R13: 0000000000000000 R14: 00007f2669335f80 R15: 00007f266945fa28 [ 92.428895][ T6079] [ 92.432036][ C1] vkms_vblank_simulate: vblank timer overrun