last executing test programs: 17m22.432055398s ago: executing program 2 (id=572): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x895}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x0) 17m22.339311995s ago: executing program 2 (id=573): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r2 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000002, 0x354, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 17m22.211632376s ago: executing program 2 (id=575): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x8d0, &(0x7f0000000040)={0xa, 0x0, 0x20000, @dev}, 0x20) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17m20.991914214s ago: executing program 2 (id=584): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000040)={0x30, r2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0}) 17m20.772846107s ago: executing program 2 (id=585): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r2 = syz_io_uring_setup(0x5601, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000002, 0x354, 0x0, r1}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r7, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) 17m20.372423879s ago: executing program 2 (id=586): preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) 11.91424433s ago: executing program 4 (id=2983): openat$sw_sync(0xffffffffffffff9c, 0x0, 0x40400, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000001c0)=r1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, 0x0, &(0x7f0000000680)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = epoll_create(0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0xfdb2}]}) r6 = dup2(r4, r5) close_range(r6, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_getoverrun(r3) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r7 = accept$alg(r2, 0x0, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r8, &(0x7f0000000240), 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000006100), 0x49f, 0x0, 0x0) 10.477857622s ago: executing program 3 (id=2987): getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f00000001c0)={0x2, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400", 0x34324948}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000001010105000000"], 0x50}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000580)={{0xf}, 'port1\x00', 0x15, 0x0, 0x0, 0x2, 0x4, 0x8, 0x5, 0x0, 0x2}) sendmsg$IPCTNL_MSG_CT_NEW(r2, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x4, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000640)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160a76460400410038000a001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbb3bd83606761ab59b99821", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40404cc) read$FUSE(r2, &(0x7f0000004300)={0x2020}, 0xffffffffffffffd5) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r4, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4041}, 0x0) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x0, 0x0, r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='./file0\x00'}) io_uring_enter(r5, 0x7f5f, 0x0, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000380)={@multicast1=0xe000bb00, @dev, @local}, 0xc) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000002240)=""/65, 0x41}], 0x1, 0x9, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) 7.969145631s ago: executing program 4 (id=2993): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0xfe000000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x400}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000180100002020702500000000002020207b1af8ff0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f505010203010902"], 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sync() prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000a00)=ANY=[@ANYBLOB="90020000f5ffffff", @ANYRES64=0x0, @ANYBLOB="010000000000000000000000000000000000000000040000d10d00000000000005000000090000000500000000000000020000000000000007000100000000000c8000000000000000000000000000000900000000000000060000000d000000080000002d2e066a08000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000000000080000000000000000000000000040000000000000001000000070000000000000000000000030000000000000003000000000000007f00000000000000080000000000000006000000000000000100000000000000090000000000000001000000000000008000000000000000000000000000000003000000000000000600000001010000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0ef9ffffc90000000000000001000000000000000300000000000000020000000002000023230000000000000300000000000000030000000000000081ffffffffffffff0700000000000000090000000600000000000000000000000800000000000000000000000000000001000000000000800600000000000000090000000000000009000000ca0e00000500000000400000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="feffffff07000000000000000300000000000000e7433e1d00000000010000000600"/44], 0x290) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) gettid() r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x9781, 0x44, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001780), 0x8, r6}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) 7.446375922s ago: executing program 3 (id=2994): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) ptrace(0x11, 0x0) connect$tipc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4351}, {r0, 0x2001}, {r2, 0x5202}, {r0, 0x8141}, {r3, 0x80}], 0x5, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) syz_emit_vhci(0x0, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './control/file0', [{}]}, 0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.395345194s ago: executing program 3 (id=2997): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x1, 0x84) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000021c0)="305c0607e182087051667557c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade", 0x5e, 0xfffffffffffffffe) bind$inet6(r4, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000140)='b', 0x1, 0x48045, 0x0, 0x0) close(r4) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="1709000000000000000001000000050007000000000008000900000000001400200000000000000000000000ffffe000fd6e08000a0000000000060002000100000014001f000000000006"], 0x5c}, 0x1, 0x620b}, 0x0) socket$alg(0x26, 0x5, 0x0) 6.1291297s ago: executing program 0 (id=2998): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) futex_waitv(0x0, 0x0, 0x2, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0x80111500, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x30, 0x0, &(0x7f0000000040)=0xb3) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080)=0x1, 0x80, 0xfffffd, 0x0, 0x0, 0xfffffffc) shutdown(0xffffffffffffffff, 0x3) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) r6 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14/8\\//\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.309941306s ago: executing program 3 (id=3001): openat$sysfs(0xffffff9c, &(0x7f0000000740)='/sys/kernel/crash_elfcorehdr_size', 0x0, 0x81) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000080000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="b86ab39db553d2d75b2d65efcd00b03e577a9af57e811ae68f9e15708c505fc86f6524786cf837b6f4ca99ca7c16b82a985f9453480afb28e9567e9b25e23207e38b15449d24c47201ee93745d539a1726d11d981e0248c9ad14e95ada5e25fb7c5b03906fe00daa11b8a89894d23705bbcf691ae81d351f9535a324af95779f", 0x80}, {&(0x7f0000000100)}, {&(0x7f00000001c0)="c2eaf0646607e9d1f814d5454aaae7da0a7a9117c021662255c9cc83d94f04204f4e35cd2f3a4389e5907ace7a008615ae0c971934c556a03c6d9b424f8a064f58ef3f8032694ba85094a5f3039a14be746a3a4503631f9af093f98956978db3b4937b1550c33f65cd4758162561691dd208a62360e90a4a2902350a20b865b9d97865a259fdb22ac3cab037f96cd552", 0x90}, {&(0x7f0000000400)="af3a46e3e1024469a4d56a3bbdfd037e18f1661dde99de1d6033a44fee585a9113dfb97f099adcb9c060cf6cbc913a80fc2554a115455096a39f1c20ff99f780bfddcfe929347cd78a6674124fcdf0ae06b59550adf7070524c50371c9ff2e6f1c4dcf299c7b259a63537b42488849b973aa2b467994e6f79e0f8d1a4e202d67b384b676992b4ac076bc955c22e7e090e9e90040c38e40417072a48960ae6522e069a3b2fc858ba493c11d00a3c4f5fc0d101990e6980f0903a2edcba2973c968e4e44", 0xc3}], 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="1100000000000000000000040100000001000000007fcb5f5e3600000011000000000000000000000001000000cf9400000000000000000000000700000044106840ffffff87a1fd953715b455839597ba8e7cf60000000400000000443c3c81ffffffff00000040ac1e010100000002e0000001000000a40000400000000002ac1414aa00000005ac1e010100000006ac141435000000074418cc60010000000000010100000017fffffffc00000101940401008307f67f0000018313430a0101026401010164010100e000000100000000000011000000000000000000000001000000080000000000000014000000000000000000000001000000ff0000"], 0xf8}, 0x4001c000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) socket$inet6(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10, 0x2}, 0x9c) sendmmsg$inet6(r3, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b7000000000000007d0000000000000004000000030000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, 0x0, 0x16, 0x0, @void}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x10, &(0x7f0000000280)={r5}, &(0x7f00000002c0)=0x8) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) add_key$user(&(0x7f0000000280), &(0x7f0000000000)={'syz', 0x3}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.143674064s ago: executing program 0 (id=3002): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000080)={0x0, 0x8, 0x0}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r3 = syz_open_procfs(0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000002340)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r5 = dup(r4) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, &(0x7f0000000600)}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r10, 0xc0205647, &(0x7f0000000940)={0xf010000, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x0, 0x6, 0x4, @vifc_lcl_addr=@multicast2, @private=0xa010102}, 0x10) r13 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) socket$packet(0x11, 0x1, 0x300) write$cgroup_int(r13, &(0x7f0000000040)=0x7, 0x12) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r13, 0x40189429, &(0x7f0000000080)={0x1, 0x1, 0x80000001}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[], 0x3c}}, 0x0) 4.773103292s ago: executing program 4 (id=3003): capget(0x0, &(0x7f0000000180)={0x2, 0x5, 0x7, 0x0, 0x4, 0xffffff7e}) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r0, r0}, &(0x7f0000000280)=""/83, 0x53, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8940) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) memfd_create(&(0x7f0000001480)='\xc0\x87:*\x18\xc1k\xad\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8\xebD\x00\x00\x00\x00\xe2\xce:\xb5\xb7\xc4\xde\xae\xb6\x1c\xbf\xa2\x12\xa5\x18\xba[\xc7%\x88 \xeeQR\x9f\xa2\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11)\b6\x86\xc8\xe9/\x19w4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe7\x8d.\xd1\x00\x01\x00\x00\x00\x00\x00\x00\x1d\xe7_\xde\x87\xdd\xc1\x15\x0e\x00\x00\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\b\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\x05\x00\x00\x00\x84\xf4\"\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xc7\x10\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v(\xb9\xf1\a\x85\xe6\x882\xaa\x83\xb7*}\x042\xc6\xf9\xbe\xfeI\x8b\xd4/`\xabh~\xcb\xb9j\xa1\xfc\xcb\xfd\x8a\x1eW\x87\x06\xcd\xa0\x91\xacJ\xf5.\x14\xe6\xe8F\xbe\xf8A\x9flx\x0e\xeb\xe9\xac9\x7f\x1aII\xdd\xfc1\fP\x05\x8d#\xec\xeb\x92g~&!\x90J\xd0\xe1\xac\xd4\xd6\xd4\b\x90\xed\xca\x17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9a\xaaL\xa8@\xf7h\x04\x9a\xb1\xba\xcdm\x9a\xa8\xfdt\xa7\x17\xd4v9\xafA\xfb\xa3R\xf6\x8c!\xc01\xf8\x17\xd5$\xae\x04\x80M\xdc\xe0\x97IHg5\x8e\x1d=\xaf\xe3 \a=\xe8', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) socket$kcm(0x29, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r6 = open_tree(r5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800a00010072616e67650000002c000280080001400000000b08000240000000f60c00048005000100090000000c00038005000100d30000000900010073"], 0x94}}, 0x0) fchdir(r6) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x51d829, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB], 0x0, 0x0, 0x0) 4.322415352s ago: executing program 3 (id=3004): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000002c0)={0x60, 0x0, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, 0x8000000000000000, &(0x7f0000000040)=[{0xe6, 0x2, 0x2}], 0x1, 0x8, 0x44, 0xa, 0x42}) r1 = socket$kcm(0x1e, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007ed, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x6c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r6, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@local}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb-des3_ede-asm\x00'}}}, @XFRMA_SET_MARK={0x8}]}, 0x15c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r11, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r9, 0x0, 0xffffffffffffffff, 0x1}) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r10, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r12, 0x0, 0x10000, 0x0, 0x0, 0x4000, 0x1de6b9}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r13, 0x3ba0, &(0x7f00000004c0)={0x48, 0x7, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23b3b6}) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x20000004) 3.693195308s ago: executing program 0 (id=3005): sendmsg$tipc(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="ecf5163231c8a2f6901a19404ad0d874f0", 0x11}, {&(0x7f00000002c0)="d72c2e5ca64b187b778b533241b9d4f2dd09938d94fdb6514db57fe009a84a888ab83852a419671555b88af1dbb47b63750500dc9460831c9b7c16a58126fb85f41dcf7ecc432342ae92c6d7f4a9f26af2948cce7a6029794b13faddf0c11f147f51b0b0ddb685d9b755c0531492328f2a6d5393bc0249cb1c620cdc96cbd94bde0a730974074a5afd754be0b9ead2f3c9e56b6507739ce03f4f0146974c8f0fc2e8e3da304448791ff1e3912eb07e49c55c78b2dcae4b085932d577389867d8ab3a", 0xc2}], 0x2, 0x0, 0x0, 0x20040004}, 0x4008044) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpriority(0x0, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc04c560f, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_test={0xf}}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040), 0x0, 0x0, 0x8) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) read$FUSE(0xffffffffffffffff, &(0x7f0000003a40)={0x2020}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000240)=0xc) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xf53, 0x0, [{0x0, 0xa}, {}, {}, {0x0, 0x35}, {0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x3}, {0x20, 0x1}, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0xfe}, {}, {0x3}, {}, {}, {}, {0x0, 0x20}, {}, {}, {0x4, 0x4}]}}) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x724d) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.543773548s ago: executing program 4 (id=3006): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x8100, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004885) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0x100101) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x856d}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000280)='./file0\x00', 0x8, 0x0) 3.234789352s ago: executing program 0 (id=3007): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x60}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', './file0', [{0x20, '-'}, {0x20, '/dev/hwrng\x00'}, {}, {0x20, '/dev/hwrng\x00'}, {}, {0x20, '/dev/hwrng\x00'}, {0x20, ':'}, {0x20, 'icmp6\x00'}, {0x20, 'icmp6\x00'}, {0x20, '*^[^'}], 0xa, "f919d849ee3b4736302c029a6beb97485de781c8f6bbacd0c83452476ce1c9389f4e10994447a57621099b550391a463db78319a9433c0958a40"}, 0x82) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000000)=0x3, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, 0x0, &(0x7f0000000080)) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x1c, r7, 0x135, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x68, r7, 0xd25, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5cf}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}]]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004) r13 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r13, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0xe}, {0x10, 0x110, 0xe}], 0x20}, 0x0) 3.144139447s ago: executing program 1 (id=3008): openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000140)) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0xfffffffffffffdec, r0, {0x8, 0x1}}, './file0\x00'}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4c891, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x63, &(0x7f0000000280)}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) write$binfmt_script(r4, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000c4f000/0x4000)=nil, 0x4000}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x23) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000c15000/0x1000)=nil, &(0x7f0000e9f000/0x3000)=nil, 0x1000}) 2.922478077s ago: executing program 0 (id=3009): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) timerfd_gettime(r1, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x13, 0xffffffffffffffff, 0xf2950000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x3, 0xc, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000680)="f73547c7b38b27cf8c4714db4ec944b3c9d0fa6c9195940955da82cd3c8e4a983f38646d20102feedeb4483cf83ef5b33a05ac32a59aa512d113673154afa8b9aa8fc36c504b28a3559f6b6e4c3ca9925420d06c6b466cc5059a1eeed98df416c979bcb15411af300318f8c8367385cbfad00ec9d9a063c6b04c701af03b70fd4133521199fb55ad2f961912e8eef360d94c0c9c3f3214c769c81f7d9d8aa634357a45079bb48106d1983d55083dcdbe07dba98bf974df4dd1a0a4049bf8bfdf8650346ae2b6de8e0b3d794de9201b00a18887c1140315f9f97fde4cd11bd36477a7b34a490036c97c2dfa22291cabb259d59866eed6286d92002d8e0b39bc50ffc43170550ad2e38e88ddb1b4904ed86db4d7774797f96a3c89302bc76447b54ee642e7affe20c77a3184fa96", &(0x7f00000005c0)=""/155}, 0x20) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) r3 = dup2(r2, r2) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/121, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$radio(&(0x7f00000093c0), 0x1, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0xe) syz_fuse_handle_req(r4, &(0x7f0000009900)="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", 0x2000, &(0x7f000000c140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000001080), 0x0}, 0x20) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r5, 0x48079000) syz_genetlink_get_family_id$devlink(&(0x7f0000005400), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.873645277s ago: executing program 1 (id=3010): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) ptrace(0x11, 0x0) connect$tipc(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) ppoll(&(0x7f0000000140)=[{r3, 0x4351}, {r0, 0x2001}, {r0, 0x8141}, {r3, 0x80}], 0x4, 0x0, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x400) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) syz_emit_vhci(0x0, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './control/file0', [{}]}, 0x14) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 929.573759ms ago: executing program 0 (id=3011): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/ipc\x00') ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000480)=ANY=[]) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000720c0c40ac0553025a6500000001090212000100000000090400000003040200ca829a3d7eb301d007d6d74897d35b1759ff577d27ef4707cd05d9150081f6436b1d4c0022339acdf9ce42ed2b97770b67b8f1de2a52abc8a941f52068b3359d3a1f0afa32bb52cec7f7e2af94f488f225b6dab0ef812941eec30177784d275202bb1436639349d25ca652b7da643454d39f5e441c78cfe9fae4"], 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/d\xd1\x9d\xb7\xe2\xf6\xe0\xe2?\xb2_\xf3\x88\xdbnd\xad\f\xc2\xf8ev/vide'}, {0x20, '\x19\x1bm\x9a.'}, {0x20, '%\xdc'}, {0x20, '\x00'}, {0x20, '$,{\xf1]'}]}, 0x39) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') getdents64(r2, 0x0, 0x0) r3 = memfd_create(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0xffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) sendmsg$AUDIT_SET(r1, 0x0, 0x40000) r4 = syz_open_dev$evdev(&(0x7f0000000800), 0x0, 0x0) connect$netlink(0xffffffffffffffff, &(0x7f00000000c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000}, 0xc) fallocate(r4, 0x43, 0xde3, 0x8) ioctl$EVIOCGMASK(r4, 0x5452, &(0x7f0000000100)={0x1, 0xfffffffffffffdbd, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) mq_notify(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x2c, 0x2}) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 927.617615ms ago: executing program 3 (id=3012): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x2, 0x7, 0xf4, 0x0, 0x2, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x10}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000002c0)={0x20, 0x0, 0x0, {0x8, 0x4, 0xffffffc1, 0x4}}, 0x20) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmdt(0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d0e0014000000000000000000008000"}}) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, "00207d2000000000201b14700c1e0ac74fc6820fc3a1409b4500000900"}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/ipc\x00') write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1e002803008c71ef288563"], 0xffdd) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 789.980951ms ago: executing program 1 (id=3013): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r2}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)="d42f253b4dc6dd1d7e329b70e492f9f0fd08ebcdf02ea5d84b9e177ffc1e2658b127720e69c3fe0be7261b443b068d7131ee617b8698d49af025089ca69cc7583b6c25f43989d017f3117630e46ea6c2f0e75a82757db091", &(0x7f00000001c0)="ce879aa72208d91261c3723a34d4265575046aeb74", 0xa7c}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000001fad1a42927f284133bc9743b9ae07a51c000000070000000000029500fd5800000000bcd64790d54aede95d2752a43d8c0040000000000080f62a3b5d36f62418f1436174b1e54f4b5187f831e542d036b7d0c2d8745a33ec1c1791d0854a59898fc5b6fbfb189e4665906940f7a26df2f08fd3bf06fdc89643e5861e69f44f79f8cb444c42026725aaa1a3698e5e352996602caf42ed4814c59c46d1b9d496af75aa565748fdcebc463c523789aeec04b8a8a470de1c99b4590a38b7a8e146a27ce27eb3927d01db4a68060dc1ceffce400a5dc4125ad84ec8a6318966e3c30a79d8f243ba"], &(0x7f0000000040)='GPL\x00', 0x0, 0xfffffffffffffec7, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) ftruncate(r4, 0x653f) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x0) fcntl$lock(r4, 0x5, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff}) r6 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r6, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @dev}, 'syz_tun\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c0005001901070000000800"], 0x398}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xd) ioctl$TCFLSH(r9, 0x541b, 0xffefff1f00000000) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) 443.717007ms ago: executing program 4 (id=3014): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = syz_io_uring_setup(0x19d9, &(0x7f0000000080)={0x0, 0x0, 0x80}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)=0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r6}}) io_uring_enter(r0, 0x48e9, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4, 0x4}]}]}}]}, 0x9c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000600)={'erspan0\x00', 0x0, 0x80, 0x10, 0x5, 0x81, {{0x15, 0x4, 0x0, 0x7, 0x54, 0x64, 0x0, 0x5, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}, @dev={0xac, 0x14, 0x14, 0x2c}, {[@cipso={0x86, 0x21, 0xffffffffffffffff, [{0x6, 0xc, "13dc5dd68513c3363d36"}, {0x6, 0x5, "6b4813"}, {0x5, 0xa, "17434b3e8b13968c"}]}, @ssrr={0x89, 0xb, 0x88, [@loopback, @private=0xa010100]}, @timestamp_prespec={0x44, 0x14, 0xef, 0x3, 0x8, [{@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x4000000}]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r15}]}, 0x20}}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000001000370400"/20, @ANYRES32=r15, @ANYBLOB="0002"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x29, 0x1, 0x2, 0x40, 0x14, @private0, @rand_addr=' \x01\x00', 0x7, 0x10, 0x6, 0x2}}) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x2bc, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x80}, 0x20000891) r17 = socket(0x10, 0x2, 0x0) r18 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000090a010400000000080000000000000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f200009801c0002801000018008000140000000050c0001800800014000000000140000001000010000000000000000000000000a"], 0x84}}, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000002000/0x2000)=nil) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r17, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, @mcast2={0xff, 0x5}}}) 166.093782ms ago: executing program 1 (id=3015): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000340000000e0001"], 0x3c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3e, &(0x7f0000000000), 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r5 = io_uring_setup(0x4409, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f0000000180)={0x0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff]}, 0x1) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000700)={0x1, "fa02c8098000", 0xffffffffffffffff}) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000080)={"000c00816800df00", r10, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r11, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r12, 0x114, 0xa, 0x0, 0x0) 0s ago: executing program 4 (id=3016): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5603, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/97, 0x61) write$char_usb(r1, &(0x7f0000000240)="8b", 0x1) r3 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, 0x0}, 0x0) r5 = openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = dup(r5) flock(0xffffffffffffffff, 0xa556a814575266ed) ioctl$TCSETSW2(r6, 0x402c542c, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000100)=0x7) r7 = socket$inet(0x2, 0x3, 0x8d) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r8, 0x0, 0x8, &(0x7f0000000280)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, r9}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x3, 0x0, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000001c0)) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): 089][T21105] hsr_slave_0: entered promiscuous mode [ 1232.324350][T21105] hsr_slave_1: entered promiscuous mode [ 1232.342794][T21105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1232.350556][T21105] Cannot create hsr debugfs directory [ 1232.400354][ T12] tipc: Left network mode [ 1232.557015][T21106] hsr_slave_0: entered promiscuous mode [ 1232.567393][T21106] hsr_slave_1: entered promiscuous mode [ 1232.581224][T21106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1232.599091][T21106] Cannot create hsr debugfs directory [ 1233.110840][ T9637] Bluetooth: hci0: command tx timeout [ 1233.190825][ T9637] Bluetooth: hci4: command tx timeout [ 1233.610513][ T12] hsr_slave_0: left promiscuous mode [ 1233.623213][ T12] hsr_slave_1: left promiscuous mode [ 1233.643873][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.652321][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.675259][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.708281][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.735654][ T12] hsr_slave_0: left promiscuous mode [ 1233.768635][ T12] hsr_slave_1: left promiscuous mode [ 1233.779847][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1233.821076][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1233.841328][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1233.849086][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1233.989701][ T12] veth1_macvtap: left promiscuous mode [ 1234.003894][ T12] veth0_macvtap: left promiscuous mode [ 1234.009597][ T12] veth1_vlan: left promiscuous mode [ 1234.018614][ T12] veth0_vlan: left promiscuous mode [ 1234.033431][ T12] veth1_macvtap: left promiscuous mode [ 1234.039071][ T12] veth0_macvtap: left promiscuous mode [ 1234.048591][ T12] veth1_vlan: left promiscuous mode [ 1234.060085][ T12] veth0_vlan: left promiscuous mode [ 1235.088232][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1235.191179][ T9637] Bluetooth: hci0: command tx timeout [ 1235.204080][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1235.270574][ T9637] Bluetooth: hci4: command tx timeout [ 1235.670736][ T5289] usb 10-1: device descriptor read/8, error -110 [ 1236.079986][ T5289] usb usb10-port1: attempt power cycle [ 1236.641425][ T5289] usb usb10-port1: unable to enumerate USB device [ 1237.019827][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1237.075560][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1237.850827][T21014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.004773][T21014] 8021q: adding VLAN 0 to HW filter on device team0 [ 1238.029011][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.036188][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.097270][T19539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.104486][T19539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.448680][T21105] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1238.522554][T21105] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1238.535020][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1238.545112][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1238.554940][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1238.566184][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.581163][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1238.590007][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.705863][T21105] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1238.785083][T21105] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1238.953505][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.960045][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.126531][T21201] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2741'. [ 1239.203398][T21014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1239.479180][T21014] veth0_vlan: entered promiscuous mode [ 1239.633935][T21194] chnl_net:caif_netlink_parms(): no params data found [ 1239.753628][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.786159][T21014] veth1_vlan: entered promiscuous mode [ 1239.954536][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.029777][T21106] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1240.152032][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.220839][T21105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.227884][T21106] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1240.264664][T21106] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1240.454171][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.485570][T21106] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1240.539925][T21014] veth0_macvtap: entered promiscuous mode [ 1240.644118][T21014] veth1_macvtap: entered promiscuous mode [ 1240.688830][T21194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.710586][T21194] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.712127][ T5239] Bluetooth: hci1: command tx timeout [ 1240.717987][T21194] bridge_slave_0: entered allmulticast mode [ 1240.732031][T15989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1240.741759][T21194] bridge_slave_0: entered promiscuous mode [ 1240.747824][T15989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1240.756670][T15989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1240.767224][T15989] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1240.778078][T21014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1240.791615][T21014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1240.801696][T15989] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1240.809342][T15989] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1240.818803][T21014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.846913][T21194] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.867483][T21194] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.882512][T21194] bridge_slave_1: entered allmulticast mode [ 1240.889696][T21194] bridge_slave_1: entered promiscuous mode [ 1240.927349][T21105] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.987271][T21014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1241.012896][T21014] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.026145][T21014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.060217][ T12] bridge_slave_1: left allmulticast mode [ 1241.066180][ T12] bridge_slave_1: left promiscuous mode [ 1241.078855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.089934][ T12] bridge_slave_0: left allmulticast mode [ 1241.096092][ T12] bridge_slave_0: left promiscuous mode [ 1241.111354][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.599366][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1241.612767][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.626039][ T12] bond0 (unregistering): Released all slaves [ 1241.648939][T21014] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.659462][T21014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.668697][T21014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.677706][T21014] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.691553][T21194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.717139][T21194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.836364][ T8933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.843548][ T8933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1241.875060][T21194] team0: Port device team_slave_0 added [ 1241.908193][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.915377][ T8933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1241.952490][T21194] team0: Port device team_slave_1 added [ 1242.050055][T21194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1242.057791][T21194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.084738][T21194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1242.100637][T21194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1242.107700][T21194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1242.143556][T21194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.191474][ T12] hsr_slave_0: left promiscuous mode [ 1242.197342][ T12] hsr_slave_1: left promiscuous mode [ 1242.204831][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.213700][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.222123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.229557][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.258397][ T12] veth1_macvtap: left promiscuous mode [ 1242.264848][ T12] veth0_macvtap: left promiscuous mode [ 1242.271103][ T12] veth1_vlan: left promiscuous mode [ 1242.276392][ T12] veth0_vlan: left promiscuous mode [ 1242.790706][ T9637] Bluetooth: hci1: command tx timeout [ 1242.869853][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1242.880968][ T9637] Bluetooth: hci3: command tx timeout [ 1242.948905][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1243.676112][T21194] hsr_slave_0: entered promiscuous mode [ 1243.697170][T21194] hsr_slave_1: entered promiscuous mode [ 1243.703647][T21194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1243.713692][T21194] Cannot create hsr debugfs directory [ 1243.838649][T21106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1244.033515][T21106] 8021q: adding VLAN 0 to HW filter on device team0 [ 1244.054733][T20721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.071491][T20721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.172219][T21105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1244.185424][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.192676][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1244.208968][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1244.216267][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1244.316973][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1244.334932][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1244.344514][T21235] chnl_net:caif_netlink_parms(): no params data found [ 1244.870810][ T9637] Bluetooth: hci1: command tx timeout [ 1244.947784][ T12] team0: Port device netdevsim0 removed [ 1244.960868][ T9637] Bluetooth: hci3: command tx timeout [ 1245.039380][T21105] veth0_vlan: entered promiscuous mode [ 1245.071218][T21235] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.078439][T21235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.101848][T21235] bridge_slave_0: entered allmulticast mode [ 1245.130829][T21235] bridge_slave_0: entered promiscuous mode [ 1245.152492][T21235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.159616][T21235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.200549][T21235] bridge_slave_1: entered allmulticast mode [ 1245.207334][T21235] bridge_slave_1: entered promiscuous mode [ 1245.243211][T21105] veth1_vlan: entered promiscuous mode [ 1245.364406][T21235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.376201][T21106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.474649][T21235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.644604][T21105] veth0_macvtap: entered promiscuous mode [ 1245.697658][T21194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1245.843305][T21235] team0: Port device team_slave_0 added [ 1245.869333][T21235] team0: Port device team_slave_1 added [ 1245.918954][T21194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1245.947820][T21194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1245.985652][ T12] bridge_slave_1: left allmulticast mode [ 1246.004669][ T12] bridge_slave_1: left promiscuous mode [ 1246.028465][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.045889][ T12] bridge_slave_0: left allmulticast mode [ 1246.060519][ T12] bridge_slave_0: left promiscuous mode [ 1246.066510][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.434116][ T12] dvmrp0 (unregistering): left allmulticast mode [ 1246.915552][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1246.932560][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1246.951705][ T12] bond0 (unregistering): Released all slaves [ 1246.970378][ T9637] Bluetooth: hci1: command tx timeout [ 1246.997352][T21105] veth1_macvtap: entered promiscuous mode [ 1247.030664][ T9637] Bluetooth: hci3: command tx timeout [ 1247.062871][T21194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1247.202756][T21235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.209759][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.300482][T21235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.378023][T21235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.408347][T21235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1247.440538][T21235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.479662][T21106] veth0_vlan: entered promiscuous mode [ 1247.523479][T21105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1247.585146][T21105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.613535][T21105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.758688][T21105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1247.777351][T21105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1247.801802][T21105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.861355][T21235] hsr_slave_0: entered promiscuous mode [ 1247.873667][T21235] hsr_slave_1: entered promiscuous mode [ 1247.881216][T21235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1247.898347][T21235] Cannot create hsr debugfs directory [ 1247.928417][ T12] hsr_slave_0: left promiscuous mode [ 1247.939659][ T12] hsr_slave_1: left promiscuous mode [ 1247.955776][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.971836][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1248.293965][T21341] fuse: Bad value for 'fd' [ 1248.700429][ T5291] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1248.790940][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1248.842082][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 1248.850936][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1248.852141][ T5291] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 1248.886340][ T5291] usb 4-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=17.01 [ 1248.905965][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.924716][ T5291] usb 4-1: Product: syz [ 1248.929055][ T5291] usb 4-1: Manufacturer: syz [ 1248.940356][ T5291] usb 4-1: SerialNumber: syz [ 1248.958527][ T5291] usb 4-1: config 0 descriptor?? [ 1248.992784][ T5291] f81232 4-1:0.0: f81534a converter detected [ 1249.126336][ T9637] Bluetooth: hci3: command tx timeout [ 1250.493999][T21106] veth1_vlan: entered promiscuous mode [ 1250.560205][T21105] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.572438][T21105] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.593556][T21105] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.610505][T21105] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.898794][T21194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.058637][T21106] veth0_macvtap: entered promiscuous mode [ 1251.145729][T21106] veth1_macvtap: entered promiscuous mode [ 1251.236284][T21194] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.334063][T20721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.341248][T20721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.443278][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.477754][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.489128][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1251.511284][ T5291] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 1251.518525][ T5291] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 1251.527842][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.546747][T21106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.556895][ T5291] usb 4-1: USB disconnect, device number 41 [ 1251.565830][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.578956][ T5291] f81232 4-1:0.0: device disconnected [ 1251.590549][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.716558][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.740466][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.751281][T21106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1251.762015][T21106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1251.773790][T21106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.794328][ T8933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.801546][ T8933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1251.903812][T21106] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.913990][T21106] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.922839][T21106] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.931976][T21106] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.981586][ T8933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.010528][ T8933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.159059][T21368] xt_hashlimit: overflow, try lower: 3/0 [ 1252.179856][T21194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1252.265311][T21194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1252.450436][ T5291] usb 4-1: new low-speed USB device number 42 using dummy_hcd [ 1252.494554][T21377] use of bytesused == 0 is deprecated and will be removed in the future, [ 1252.505018][T21377] use the actual size instead. [ 1252.523489][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.551464][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.634662][ T5291] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1252.650743][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1252.676708][T21194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1252.704026][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1252.710834][T21235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1252.738930][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1252.755398][T21235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1252.773088][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.812481][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1252.832046][T21235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1252.862599][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1252.864680][T21235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1252.894407][ T5291] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1252.912729][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1252.980770][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1253.040001][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1253.063616][T21387] x_tables: duplicate underflow at hook 2 [ 1253.076567][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1253.094914][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 1253.094935][ T29] audit: type=1326 audit(1728499722.535:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.145738][ T29] audit: type=1326 audit(1728499722.535:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.168273][ C1] vkms_vblank_simulate: vblank timer overrun [ 1253.203044][ T5291] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1253.217985][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1253.264504][T21194] veth0_vlan: entered promiscuous mode [ 1253.273890][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1253.286194][ T29] audit: type=1326 audit(1728499722.535:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.332923][T21194] veth1_vlan: entered promiscuous mode [ 1253.347754][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1253.368824][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1253.385887][ T29] audit: type=1326 audit(1728499722.535:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.442863][ T29] audit: type=1326 audit(1728499722.535:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.476866][ T5291] usb 4-1: string descriptor 0 read error: -22 [ 1253.483602][ T5291] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1253.520508][T15868] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1253.537678][T21235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1253.559860][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.598163][T21235] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.615138][ T29] audit: type=1326 audit(1728499722.575:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.662463][ T29] audit: type=1326 audit(1728499722.575:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.698494][ T5291] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1253.723236][T15868] usb 5-1: Using ep0 maxpacket: 32 [ 1253.736481][ T29] audit: type=1326 audit(1728499722.575:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.759552][T15868] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1253.801087][T15868] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1253.924312][T15868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1253.938971][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.946124][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.978523][ T29] audit: type=1326 audit(1728499722.585:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1253.998357][ T5288] usb 4-1: USB disconnect, device number 42 [ 1254.072397][T21235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1254.111756][T15868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1254.130672][T21235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1254.135872][ T29] audit: type=1326 audit(1728499722.585:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21386 comm="syz.1.2752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0319f7dff9 code=0x7ffc0000 [ 1254.190432][T15868] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1254.201995][T15868] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1254.217062][T15868] usb 5-1: Product: syz [ 1254.222623][T15868] usb 5-1: Manufacturer: syz [ 1254.228504][T15868] usb 5-1: SerialNumber: syz [ 1254.248269][T15868] usb 5-1: config 0 descriptor?? [ 1254.265268][T21391] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1254.282596][T15868] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1254.305445][T21194] veth0_macvtap: entered promiscuous mode [ 1254.324860][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.325215][T15868] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1254.332025][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.419523][T21194] veth1_macvtap: entered promiscuous mode [ 1254.478530][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.526443][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.547922][T21391] ldusb 5-1:0.0: Write buffer overflow, 64618 bytes dropped [ 1254.576804][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.632814][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.654714][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1254.680566][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.698039][T21194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.783899][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.828968][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.876212][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.888108][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.899200][T21194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1254.911207][T21194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1254.945316][T21194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.056523][T21194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.107864][T21194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.157394][T21194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.187793][T21194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.263990][T21235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.735318][T21235] veth0_vlan: entered promiscuous mode [ 1255.757704][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.797239][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.842880][T20721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1255.859081][T21235] veth1_vlan: entered promiscuous mode [ 1255.893053][T20721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1255.984604][T21235] veth0_macvtap: entered promiscuous mode [ 1256.003760][T21235] veth1_macvtap: entered promiscuous mode [ 1256.044686][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.058375][T12575] usb 5-1: USB disconnect, device number 36 [ 1256.078115][T12575] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1256.089295][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.117746][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.134762][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.147920][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.165276][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.190570][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1256.207030][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.229199][T21235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1256.254634][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.276221][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.288192][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.307651][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.319640][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.333488][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.350801][T21235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1256.361763][T21235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1256.402371][T21235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.437181][T21235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.534362][T21235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.575361][T21235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.614206][T21235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.762409][T21423] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2755'. [ 1256.930419][T21423] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1256.953999][T21420] netlink: 'syz.3.2754': attribute type 7 has an invalid length. [ 1256.973928][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.001036][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.115136][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1257.150356][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1257.514718][ T5291] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1257.660355][ T5291] usb 2-1: Using ep0 maxpacket: 32 [ 1257.662785][ T5291] usb 2-1: config 0 has an invalid interface number: 110 but max is 0 [ 1257.662852][ T5291] usb 2-1: config 0 has no interface number 0 [ 1257.662889][ T5291] usb 2-1: config 0 interface 110 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1257.662916][ T5291] usb 2-1: config 0 interface 110 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1257.662948][ T5291] usb 2-1: config 0 interface 110 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 1257.662979][ T5291] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1257.663008][ T5291] usb 2-1: config 0 interface 110 altsetting 0 bulk endpoint 0xB has invalid maxpacket 16 [ 1257.663036][ T5291] usb 2-1: config 0 interface 110 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1257.718308][ T5291] usb 2-1: New USB device found, idVendor=04fc, idProduct=0231, bcdDevice=6f.a9 [ 1257.718349][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.718367][ T5291] usb 2-1: Product: syz [ 1257.718380][ T5291] usb 2-1: Manufacturer: syz [ 1257.718393][ T5291] usb 2-1: SerialNumber: syz [ 1257.720783][ T5291] usb 2-1: config 0 descriptor?? [ 1257.721417][T21440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1257.721525][T21440] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1257.723248][ T5291] spcp8x5 2-1:0.110: SPCP8x5 converter detected [ 1257.752797][ T5291] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 1259.815967][T21471] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2763'. [ 1260.034161][T12572] usb 2-1: USB disconnect, device number 35 [ 1260.094390][T12572] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1260.135984][T12572] spcp8x5 2-1:0.110: device disconnected [ 1260.210421][ T5289] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1260.336266][T21475] netlink: 'syz.1.2764': attribute type 12 has an invalid length. [ 1260.398531][ T5289] usb 4-1: config 0 has an invalid interface number: 135 but max is 0 [ 1260.424168][ T5289] usb 4-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config [ 1260.443484][ T5289] usb 4-1: config 0 has no interface number 0 [ 1260.449640][ T5289] usb 4-1: config 0 interface 135 altsetting 115 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1260.491406][ T5289] usb 4-1: config 0 interface 135 has no altsetting 0 [ 1260.514937][ T5289] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=6a.2c [ 1260.558945][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.624236][ T5289] usb 4-1: Product: syz [ 1260.659125][ T5289] usb 4-1: Manufacturer: syz [ 1260.686187][ T5289] usb 4-1: SerialNumber: syz [ 1260.762802][ T5289] usb 4-1: config 0 descriptor?? [ 1260.769281][ T5291] IPVS: starting estimator thread 0... [ 1260.811703][T21478] x_tables: duplicate underflow at hook 1 [ 1260.870618][T21479] IPVS: using max 24 ests per chain, 57600 per kthread [ 1261.367619][ T5289] usb 4-1: USB disconnect, device number 43 [ 1261.717896][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'. [ 1261.741051][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2767'. [ 1263.183443][ T5291] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1263.450464][ T5291] usb 1-1: Using ep0 maxpacket: 16 [ 1263.488114][ T5291] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1263.507489][ T5291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1263.534219][ T5291] usb 1-1: Product: syz [ 1263.538625][ T5291] usb 1-1: Manufacturer: syz [ 1263.548779][ T5291] usb 1-1: SerialNumber: syz [ 1263.571252][ T5291] usb 1-1: config 0 descriptor?? [ 1263.601348][ T5291] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1263.795439][ T5291] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 1263.836734][ T5291] usb 1-1: USB disconnect, device number 20 [ 1263.989355][T21519] netlink: 'syz.4.2775': attribute type 49 has an invalid length. [ 1264.008465][T21519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.398586][T21531] kvm: pic: non byte write [ 1264.687071][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 1264.687091][ T29] audit: type=1326 audit(1728499734.125:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21538 comm="syz.0.2780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f635f57dff9 code=0x0 [ 1265.672786][ T29] audit: type=1326 audit(1728499735.115:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21555 comm="syz.0.2783" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f635f57dff9 code=0x0 [ 1266.500384][T12570] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 1266.672149][T12570] usb 5-1: config 0 has no interfaces? [ 1266.677815][T12570] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 1266.689509][T12570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1266.703693][T12570] usb 5-1: config 0 descriptor?? [ 1267.013725][ T5289] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1267.171119][ T5289] usb 1-1: Using ep0 maxpacket: 16 [ 1267.178260][ T5289] usb 1-1: config 5 has no interfaces? [ 1267.194135][ T5289] usb 1-1: New USB device found, idVendor=12d1, idProduct=c71e, bcdDevice=b3.13 [ 1267.203363][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1267.219205][ T5289] usb 1-1: Product: syz [ 1267.258308][ T5289] usb 1-1: Manufacturer: syz [ 1267.264353][ T5289] usb 1-1: SerialNumber: syz [ 1267.406736][T12570] usb 5-1: string descriptor 0 read error: -71 [ 1267.451574][T12570] usb 5-1: USB disconnect, device number 37 [ 1267.552458][ T5289] usb 1-1: USB disconnect, device number 21 [ 1268.336977][T21592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2793'. [ 1268.510510][T12575] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1268.682227][T12575] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1268.704467][T12575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.739146][T12575] usb 1-1: config 0 descriptor?? [ 1268.757176][T12575] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1268.871162][ T5291] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1269.061785][ T5291] usb 5-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1269.075315][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.091754][ T5291] usb 5-1: config 0 descriptor?? [ 1269.115578][ T5291] go7007 5-1:0.0: probe with driver go7007 failed with error -12 [ 1269.613562][T21609] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1269.649550][ T5289] usb 5-1: USB disconnect, device number 38 [ 1269.693392][T21609] PKCS7: Only support pkcs7_signedData type [ 1270.032786][T21590] delete_channel: no stack [ 1270.051657][T12575] gspca_stv06xx: I2C: Read error writing address: -71 [ 1270.114177][T12575] usb 1-1: USB disconnect, device number 22 [ 1270.269543][T21612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1270.570545][ T5288] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1270.668395][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2800'. [ 1270.732768][ T5288] usb 5-1: Using ep0 maxpacket: 32 [ 1270.755805][ T5288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1270.775851][ T5288] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 1270.792036][ T5288] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.855572][ T5288] usb 5-1: Product: syz [ 1270.889277][ T5288] usb 5-1: Manufacturer: syz [ 1270.935957][ T5288] usb 5-1: SerialNumber: syz [ 1270.967156][ T5288] usb 5-1: config 0 descriptor?? [ 1270.982741][ T5288] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1271.014569][ T5288] pvrusb2: ********** [ 1271.033498][ T5288] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1271.067298][ T5288] pvrusb2: Important functionality might not be entirely working. [ 1271.087420][ T5288] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1271.100484][ T5288] pvrusb2: ********** [ 1271.206445][ T2039] pvrusb2: Invalid write control endpoint [ 1271.228118][T21621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1271.379653][ T2039] pvrusb2: Invalid write control endpoint [ 1271.400431][ T2039] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1271.431187][ T2039] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1271.450811][T21612] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1271.457677][T12570] usb 5-1: USB disconnect, device number 39 [ 1271.484852][ T2039] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1271.507940][ T2039] pvrusb2: Device being rendered inoperable [ 1271.534977][ T2039] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1271.546981][T21631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2803'. [ 1271.557787][ T2039] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1271.567750][T21628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2802'. [ 1271.593199][T21631] CIFS: iocharset name too long [ 1271.600739][ T2039] pvrusb2: Attached sub-driver cx25840 [ 1271.606459][ T2039] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1271.628556][ T2039] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1271.988708][T21619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1274.561180][T21670] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2813'. [ 1274.979152][T21679] netlink: 'syz.0.2817': attribute type 29 has an invalid length. [ 1276.021175][T12572] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1276.195758][T12572] usb 2-1: Using ep0 maxpacket: 16 [ 1276.207709][T12572] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.207740][T12572] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1276.207775][T12572] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1276.207801][T12572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.211494][T12572] usb 2-1: config 0 descriptor?? [ 1276.668666][T21710] netlink: 'syz.4.2823': attribute type 2 has an invalid length. [ 1278.686428][T12571] usb 2-1: USB disconnect, device number 36 [ 1278.890624][T12570] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1279.050422][T12570] usb 5-1: Using ep0 maxpacket: 8 [ 1279.072907][T12570] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.099362][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.150571][T12570] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.175537][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.224753][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.259129][T12570] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.277678][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.299460][T12570] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.319349][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.336923][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.372624][T12570] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1279.380101][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1279.416679][T12570] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1279.439733][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1279.458530][T12570] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1279.502652][T12570] usb 5-1: string descriptor 0 read error: -22 [ 1279.508929][T12570] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1279.550362][T12570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.631455][T12570] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1279.767492][T15989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1279.785504][T15989] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1279.800856][T15989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1279.809971][T15989] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1279.817896][T15989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1279.825502][T15989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1280.014087][T21738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1280.051513][T21738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1280.280482][T12570] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1280.393502][T21734] chnl_net:caif_netlink_parms(): no params data found [ 1280.430455][T12570] usb 4-1: Using ep0 maxpacket: 8 [ 1280.450883][T12570] usb 4-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 1280.471941][T12570] usb 4-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 1280.507050][T12570] usb 4-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 1280.529465][T12570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.568815][T12570] usb 4-1: Product: syz [ 1280.584918][T12570] usb 4-1: Manufacturer: syz [ 1280.609095][T21734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.616366][T12570] usb 4-1: SerialNumber: syz [ 1280.636958][T21734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.669221][T12570] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 1280.675821][T21734] bridge_slave_0: entered allmulticast mode [ 1280.687144][T12570] dvb-usb: bulk message failed: -22 (3/0) [ 1280.715429][T12570] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1280.718241][T21734] bridge_slave_0: entered promiscuous mode [ 1280.758666][T12570] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 1280.760199][T21734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.801637][T21734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.815725][T21734] bridge_slave_1: entered allmulticast mode [ 1280.828973][T21734] bridge_slave_1: entered promiscuous mode [ 1280.840503][T12570] usb 4-1: media controller created [ 1280.932498][T12570] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1280.944015][T21734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1280.988462][T21734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1281.019688][T12570] dvb-usb: bulk message failed: -22 (6/0) [ 1281.028245][T12570] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 1281.072427][T12570] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input78 [ 1281.090947][T12570] dvb-usb: schedule remote query interval to 150 msecs. [ 1281.098529][T12570] dvb-usb: bulk message failed: -22 (3/0) [ 1281.120481][T12570] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 1281.172302][T21734] team0: Port device team_slave_0 added [ 1281.262645][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1281.272591][T21734] team0: Port device team_slave_1 added [ 1281.297000][T12570] dvb-usb: error while querying for an remote control event. [ 1281.447175][T21734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1281.456496][T21734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.500369][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1281.510157][T12570] dvb-usb: error while querying for an remote control event. [ 1281.565864][T21734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1281.618418][T21734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1281.633476][T21734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1281.711690][T21734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1281.726933][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1281.745403][T12570] dvb-usb: error while querying for an remote control event. [ 1281.771553][T12572] usb 5-1: USB disconnect, device number 40 [ 1281.895199][T21755] netlink: 'syz.4.2835': attribute type 27 has an invalid length. [ 1281.920672][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1281.926753][T15989] Bluetooth: hci0: command tx timeout [ 1281.934881][T12570] dvb-usb: error while querying for an remote control event. [ 1282.101500][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1282.113776][T12570] dvb-usb: error while querying for an remote control event. [ 1282.160788][T21755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.168316][T21755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.270604][T12572] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1282.285648][T21766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1282.318054][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1282.348466][T12570] dvb-usb: error while querying for an remote control event. [ 1282.374852][T21755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.399974][T21755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.453574][T12572] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1282.481214][T12572] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1282.520791][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1282.545426][T12570] dvb-usb: error while querying for an remote control event. [ 1282.570747][T12572] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1282.580096][T12572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.621541][T12572] usb 5-1: Product: syz [ 1282.644231][T12572] usb 5-1: Manufacturer: syz [ 1282.666549][T12572] usb 5-1: SerialNumber: syz [ 1282.708869][T12572] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1282.744364][T21755] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.759970][T21755] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.769101][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1282.785276][T12570] dvb-usb: error while querying for an remote control event. [ 1282.799007][T21755] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.823430][T21755] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.937817][T21734] hsr_slave_0: entered promiscuous mode [ 1282.963260][T21734] hsr_slave_1: entered promiscuous mode [ 1282.975701][T12570] dvb-usb: bulk message failed: -22 (1/0) [ 1282.991971][T21734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1282.992337][T12570] dvb-usb: error while querying for an remote control event. [ 1283.011081][T21734] Cannot create hsr debugfs directory [ 1283.029692][T12572] usb 4-1: USB disconnect, device number 44 [ 1283.098050][T21756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.148311][T21756] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.188141][T21756] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1283.189476][T12572] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 1283.249126][T12570] usb 5-1: USB disconnect, device number 41 [ 1283.641320][T21734] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.800336][T21734] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.000650][T15989] Bluetooth: hci0: command tx timeout [ 1284.083040][T21734] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.213240][T21782] input: syz0 as /devices/virtual/input/input79 [ 1284.309898][T21734] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.342336][T12572] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1284.502717][T12572] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1284.511678][T12572] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.530416][T12572] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1284.610668][T12572] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.682269][T21734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1284.696072][T12572] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1284.697564][T21734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1284.720768][T12572] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1284.746171][T12572] usb 1-1: Product: syz [ 1284.751991][T21734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1284.753350][T12572] usb 1-1: Manufacturer: syz [ 1284.787006][T21734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1284.825472][T12572] cdc_wdm 1-1:1.0: skipping garbage [ 1284.853390][T12572] cdc_wdm 1-1:1.0: skipping garbage [ 1284.908187][T12572] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1284.940192][T12572] cdc_wdm 1-1:1.0: Unknown control protocol [ 1284.981433][T21734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.071642][T12572] usb 1-1: USB disconnect, device number 23 [ 1285.096206][T21734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.129755][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.136894][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.167524][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.174686][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.257866][T21734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1285.269623][T21734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1285.298275][T21734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.336183][T21734] veth0_vlan: entered promiscuous mode [ 1285.348861][T21734] veth1_vlan: entered promiscuous mode [ 1285.482288][T21734] veth0_macvtap: entered promiscuous mode [ 1285.512637][T21734] veth1_macvtap: entered promiscuous mode [ 1285.558987][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.580392][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.593667][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.625646][T15989] Bluetooth: hci2: unknown advertising packet type: 0x63 [ 1285.651495][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.758839][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.823055][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.849306][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1285.874868][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1285.901243][T21734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.954647][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1285.991228][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.005982][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.023300][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.064410][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.076509][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.080529][T15989] Bluetooth: hci0: command tx timeout [ 1286.097258][T21734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.110028][T21734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.137986][T21734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1286.174902][T21734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.199730][T21734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.222491][T21734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.248763][T21734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.552173][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.560141][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.635712][T19539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.660050][T19539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.671417][ T29] audit: type=1326 audit(1728499756.105:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21804 comm="syz.3.2849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86dd57dff9 code=0x0 [ 1286.951499][T12572] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1287.100561][T12572] usb 5-1: Using ep0 maxpacket: 8 [ 1287.131009][T12572] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67 [ 1287.140160][T12572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.155332][T12572] usb 5-1: config 0 descriptor?? [ 1287.170431][T12572] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1288.083795][T21825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2853'. [ 1288.110298][T21825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2853'. [ 1288.119715][T21825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2853'. [ 1288.130445][ T5289] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1288.150372][T15989] Bluetooth: hci0: command tx timeout [ 1288.156135][T21825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2853'. [ 1288.209075][T21825] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2853'. [ 1288.300402][ T5289] usb 4-1: Using ep0 maxpacket: 32 [ 1288.312365][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1288.342704][ T5289] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1288.368738][ T5289] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1288.385122][ T5289] usb 4-1: Product: syz [ 1288.390800][ T5289] usb 4-1: Manufacturer: syz [ 1288.395489][ T5289] usb 4-1: SerialNumber: syz [ 1288.419250][ T5289] usb 4-1: config 0 descriptor?? [ 1288.439410][T21821] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1288.721863][T15989] Bluetooth: hci4: command tx timeout [ 1288.897286][T21829] hsr0: entered promiscuous mode [ 1288.917053][T21829] hsr0: left promiscuous mode [ 1288.964644][T19777] usb 4-1: USB disconnect, device number 45 [ 1288.996907][T21834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.004242][T21834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1289.218085][T12572] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1289.243094][T12572] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 1289.289302][T12572] usb 5-1: USB disconnect, device number 42 [ 1289.761192][T12572] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1289.923133][T12572] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 1289.931835][T12572] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.942578][T12572] usb 5-1: config 0 has no interface number 0 [ 1289.948820][T12572] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1289.959336][T12572] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1289.989373][T12572] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1290.002628][T12572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.018596][T12572] usb 5-1: Product: syz [ 1290.027593][T12572] usb 5-1: Manufacturer: syz [ 1290.036167][T12572] usb 5-1: SerialNumber: syz [ 1290.044069][T12572] usb 5-1: config 0 descriptor?? [ 1290.269770][T21838] netlink: 'syz.4.2857': attribute type 10 has an invalid length. [ 1290.283813][T21838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.298284][T21838] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1290.325451][T12572] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 1290.340184][T12572] usb 5-1: USB disconnect, device number 43 [ 1290.820402][T15989] Bluetooth: hci4: command 0x0406 tx timeout [ 1291.624175][T21875] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1291.840887][T21880] misc userio: No port type given on /dev/userio [ 1291.890383][T19777] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1292.053254][T19777] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1292.074802][T19777] usb 5-1: not running at top speed; connect to a high speed hub [ 1292.087597][T19777] usb 5-1: config 5 has an invalid interface number: 144 but max is 0 [ 1292.097100][T19777] usb 5-1: config 5 has no interface number 0 [ 1292.103315][T19777] usb 5-1: config 5 interface 144 has no altsetting 0 [ 1292.123873][T19777] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=d0.dd [ 1292.138201][T19777] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.147785][T19777] usb 5-1: Product: syz [ 1292.152571][T19777] usb 5-1: Manufacturer: syz [ 1292.157393][T19777] usb 5-1: SerialNumber: syz [ 1292.515718][T21891] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2872'. [ 1292.634012][T19777] quatech2 5-1:5.144: Quatech 2nd gen USB to Serial Driver converter detected [ 1292.662386][T19777] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1292.679192][T19777] quatech2 5-1:5.144: probe with driver quatech2 failed with error -71 [ 1292.698589][T19777] usb 5-1: USB disconnect, device number 44 [ 1294.692392][T20721] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.898734][T21921] xt_hashlimit: max too large, truncated to 1048576 [ 1294.924142][T20721] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.997729][T21925] xt_ecn: cannot match TCP bits for non-tcp packets [ 1295.099764][T20721] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.201006][T15989] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1295.221235][ T5239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1295.229544][ T5239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1295.238264][ T5239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1295.246259][ T5239] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1295.259015][ T5239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1295.322541][T20721] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.718647][T20721] bridge_slave_1: left allmulticast mode [ 1295.732156][T20721] bridge_slave_1: left promiscuous mode [ 1295.743801][T20721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.818538][T20721] bridge_slave_0: left allmulticast mode [ 1295.835066][T20721] bridge_slave_0: left promiscuous mode [ 1295.847188][T20721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1295.938630][ T5291] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1296.104168][ T5291] usb 4-1: Using ep0 maxpacket: 8 [ 1296.112822][ T5291] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.122465][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1296.158202][ T5291] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.170207][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1296.196759][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1296.248941][ T5291] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.270429][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1296.281990][ T5291] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.294912][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1296.307553][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1296.341375][ T5291] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1296.348926][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1296.360944][ T5291] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1296.374205][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1296.390953][ T5291] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1296.405402][ T5291] usb 4-1: string descriptor 0 read error: -22 [ 1296.411822][ T5291] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1296.422972][ T5291] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.440903][ T5291] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1296.778033][T20721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1296.789524][T20721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1296.801604][T20721] bond0 (unregistering): Released all slaves [ 1296.824613][T21930] chnl_net:caif_netlink_parms(): no params data found [ 1296.929854][ T5289] usb 4-1: USB disconnect, device number 46 [ 1297.045904][T21930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.054882][T21930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1297.062700][T21930] bridge_slave_0: entered allmulticast mode [ 1297.070127][T21930] bridge_slave_0: entered promiscuous mode [ 1297.079815][T21930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.087711][T21930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1297.095292][T21930] bridge_slave_1: entered allmulticast mode [ 1297.102790][T21930] bridge_slave_1: entered promiscuous mode [ 1297.241128][T21930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1297.296063][T20721] hsr_slave_0: left promiscuous mode [ 1297.304950][T20721] hsr_slave_1: left promiscuous mode [ 1297.321739][T20721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1297.329199][T20721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1297.349354][T20721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.360645][ T9637] Bluetooth: hci0: command tx timeout [ 1297.367605][T20721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1297.399584][T20721] veth1_macvtap: left promiscuous mode [ 1297.405623][T20721] veth0_macvtap: left promiscuous mode [ 1297.413963][T20721] veth1_vlan: left promiscuous mode [ 1297.419368][T20721] veth0_vlan: left promiscuous mode [ 1297.930746][T12572] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1298.131785][T12572] usb 4-1: Using ep0 maxpacket: 8 [ 1298.148445][T12572] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1298.157429][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1298.221886][T12572] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1298.265644][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1298.362394][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1298.393760][T12572] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1298.413887][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1298.464789][T12572] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1298.542828][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1298.591153][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1298.675669][T12572] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1298.699253][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1298.784069][T12572] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1298.807477][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1298.850680][T12572] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1298.874716][T12572] usb 4-1: string descriptor 0 read error: -22 [ 1298.881373][T12572] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1298.917702][T12572] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.975756][T12572] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1299.231759][T20721] team0 (unregistering): Port device team_slave_1 removed [ 1299.291970][T21983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.320887][T21983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.423779][T20721] team0 (unregistering): Port device team_slave_0 removed [ 1299.440579][ T9637] Bluetooth: hci0: command tx timeout [ 1300.275258][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1300.286946][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1300.295606][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1300.308400][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1300.317130][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1300.325355][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1300.395929][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.402719][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.782905][ T5289] usb 4-1: USB disconnect, device number 47 [ 1300.949527][T21930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1301.153631][T21930] team0: Port device team_slave_0 added [ 1301.192457][T21930] team0: Port device team_slave_1 added [ 1301.310450][ T5289] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1301.395337][T21930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1301.438217][T21930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.473355][T21930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1301.493686][T21930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1301.501060][T21930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1301.530481][ T9637] Bluetooth: hci0: command tx timeout [ 1301.560492][ T5289] usb 4-1: Using ep0 maxpacket: 16 [ 1301.589550][ T5289] usb 4-1: config 0 has an invalid descriptor of length 46, skipping remainder of the config [ 1301.678721][T21930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1301.729841][ T5289] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1301.873710][ T5289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 28005, setting to 1024 [ 1301.905118][ T5289] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1301.920454][T12570] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1301.928855][T21930] hsr_slave_0: entered promiscuous mode [ 1301.957528][ T5289] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1301.986698][ T5289] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1301.995765][T21930] hsr_slave_1: entered promiscuous mode [ 1302.020552][ T5289] usb 4-1: Manufacturer: syz [ 1302.031989][T21930] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1302.052539][ T5289] usb 4-1: config 0 descriptor?? [ 1302.065598][T21995] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1302.079864][T21930] Cannot create hsr debugfs directory [ 1302.092014][T12570] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1302.140441][T12570] usb 5-1: config 0 has no interface number 0 [ 1302.156999][T12570] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.188973][T12570] usb 5-1: config 0 interface 64 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.246970][T12570] usb 5-1: config 0 interface 64 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1302.297798][T22018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2900'. [ 1302.320456][ T29] audit: type=1326 audit(1728499771.745:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22016 comm="syz.0.2900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f635f57dff9 code=0x0 [ 1302.343471][T21995] fuse: Bad value for 'rootmode' [ 1302.350381][T12570] usb 5-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1302.383643][T12570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.391984][ T9637] Bluetooth: hci1: command tx timeout [ 1302.437011][T12570] usb 5-1: config 0 descriptor?? [ 1302.889481][T12570] uclogic 0003:28BD:1903.002D: interface is invalid, ignoring [ 1302.970956][T20721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.085489][T21990] chnl_net:caif_netlink_parms(): no params data found [ 1303.339078][T20721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.590976][ T9637] Bluetooth: hci0: command tx timeout [ 1303.779439][T20721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.012329][ T5289] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1304.079706][ T5289] usb 4-1: USB disconnect, device number 48 [ 1304.175696][T20721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.439196][T21990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.447175][T21990] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.455112][T21990] bridge_slave_0: entered allmulticast mode [ 1304.463219][T21990] bridge_slave_0: entered promiscuous mode [ 1304.473154][ T9637] Bluetooth: hci1: command tx timeout [ 1304.497732][T21990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.522460][T21990] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.534544][T21990] bridge_slave_1: entered allmulticast mode [ 1304.550024][T21990] bridge_slave_1: entered promiscuous mode [ 1304.760603][T21990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.809466][T21990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.894250][T20721] bridge_slave_1: left allmulticast mode [ 1304.904971][T20721] bridge_slave_1: left promiscuous mode [ 1304.915612][T20721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.951049][T20721] bridge_slave_0: left allmulticast mode [ 1304.956766][T20721] bridge_slave_0: left promiscuous mode [ 1304.969398][T20721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.043693][ T5239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1305.065514][ T5239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1305.074222][ T5239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1305.092626][ T5239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1305.100155][ T5239] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1305.109477][ T5239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1305.190732][ T5239] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1305.202272][ T5239] Bluetooth: hci3: Injecting HCI hardware error event [ 1305.218148][ T5239] Bluetooth: hci3: hardware error 0x00 [ 1305.589572][ T5291] usb 5-1: USB disconnect, device number 45 [ 1305.969187][T20721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.983300][T20721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.995854][T20721] bond0 (unregistering): Released all slaves [ 1306.072013][ T5291] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1306.081533][T21990] team0: Port device team_slave_0 added [ 1306.240378][ T5291] usb 5-1: Using ep0 maxpacket: 16 [ 1306.258833][T21990] team0: Port device team_slave_1 added [ 1306.272567][ T5291] usb 5-1: config 0 has no interfaces? [ 1306.285196][ T5291] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 1306.327287][ T5291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.361684][ T5291] usb 5-1: config 0 descriptor?? [ 1306.532061][T21990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.549355][T21990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.581778][ T9637] Bluetooth: hci1: command tx timeout [ 1306.601328][T21990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.620157][T21990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.627544][T21990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1306.653970][T21990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.672782][T19777] usb 5-1: USB disconnect, device number 46 [ 1306.727017][T21930] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1306.758263][T21930] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1306.808778][T20721] hsr_slave_0: left promiscuous mode [ 1306.830891][T20721] hsr_slave_1: left promiscuous mode [ 1306.837354][T20721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1306.876022][T20721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.892063][T20721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1306.899747][T20721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.007932][T20721] veth1_macvtap: left promiscuous mode [ 1307.026730][T20721] veth0_macvtap: left promiscuous mode [ 1307.040021][T20721] veth1_vlan: left promiscuous mode [ 1307.055843][T20721] veth0_vlan: left promiscuous mode [ 1307.190708][ T9637] Bluetooth: hci2: command tx timeout [ 1307.271600][ T5239] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1308.122710][T20721] team0 (unregistering): Port device team_slave_1 removed [ 1308.208521][T20721] team0 (unregistering): Port device team_slave_0 removed [ 1308.640376][ T5239] Bluetooth: hci1: command tx timeout [ 1309.276448][ T5239] Bluetooth: hci2: command tx timeout [ 1309.287514][T21930] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1309.329356][T21930] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1309.461882][T21990] hsr_slave_0: entered promiscuous mode [ 1309.507085][T21990] hsr_slave_1: entered promiscuous mode [ 1309.516172][T21990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1309.546073][T21990] Cannot create hsr debugfs directory [ 1311.345582][T21930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1311.396097][T21930] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.440370][ T5239] Bluetooth: hci2: command tx timeout [ 1311.534619][T22052] chnl_net:caif_netlink_parms(): no params data found [ 1311.581683][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.588826][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.759336][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.766572][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.810380][T21930] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1311.820853][T21930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1311.865441][T21930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1311.900995][T21930] veth0_vlan: entered promiscuous mode [ 1312.043540][T21930] veth1_vlan: entered promiscuous mode [ 1312.078102][T21930] veth0_macvtap: entered promiscuous mode [ 1312.171381][T21930] veth1_macvtap: entered promiscuous mode [ 1312.247070][T22052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.274488][T22052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.299581][T22052] bridge_slave_0: entered allmulticast mode [ 1312.326273][T22052] bridge_slave_0: entered promiscuous mode [ 1312.357712][T22052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.373167][T22052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.396646][T22052] bridge_slave_1: entered allmulticast mode [ 1312.411518][T22052] bridge_slave_1: entered promiscuous mode [ 1312.690814][T21930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1312.702323][T21930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.712284][T21930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1312.722912][T21930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.732870][T21930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1312.743827][T21930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.757391][T21930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1312.792961][T22052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1312.805511][T21930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.822840][T21930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.834450][T21930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.845788][T21930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.855794][T21930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.866644][T21930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.879620][T21930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.920940][T12570] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1312.945142][T20721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.000092][T22052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1313.070400][T12570] usb 5-1: Using ep0 maxpacket: 32 [ 1313.095899][T12570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1313.097932][T20721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.128279][T12570] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1313.140016][T12570] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1313.154749][T21930] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.163645][T21930] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.165153][T12570] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.181286][T21930] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.190074][T21930] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.205923][T12570] usb 5-1: config 0 descriptor?? [ 1313.218535][T12570] hub 5-1:0.0: USB hub found [ 1313.307017][T22131] netlink: 'syz.0.2918': attribute type 10 has an invalid length. [ 1313.378645][T22131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.409608][T22131] team0: Port device bond0 added [ 1313.463722][T20721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.511027][ T5239] Bluetooth: hci2: command tx timeout [ 1313.517949][T22052] team0: Port device team_slave_0 added [ 1313.583056][T20721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.620609][T22052] team0: Port device team_slave_1 added [ 1313.900982][T22052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.907986][T22052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.986753][T12570] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1314.020826][T22052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1314.118448][T22052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1314.141886][T22052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1314.249829][T22052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1314.410156][T22135] macsec1: entered promiscuous mode [ 1314.415752][T22135] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1314.726675][T22135] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1314.817368][T20721] bridge_slave_1: left allmulticast mode [ 1314.825548][T20721] bridge_slave_1: left promiscuous mode [ 1314.843713][T20721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.880688][T20721] bridge_slave_0: left allmulticast mode [ 1314.905146][T20721] bridge_slave_0: left promiscuous mode [ 1314.920771][T20721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.185478][T12570] usbhid 5-1:0.0: can't add hid device: -71 [ 1316.195687][T12570] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1316.270602][T12570] usb 5-1: USB disconnect, device number 47 [ 1316.725107][T20721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1316.741076][T20721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1316.759296][T20721] bond0 (unregistering): Released all slaves [ 1316.935044][T22052] hsr_slave_0: entered promiscuous mode [ 1316.953081][T22052] hsr_slave_1: entered promiscuous mode [ 1316.971249][T22052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1316.988682][T22052] Cannot create hsr debugfs directory [ 1317.076152][T21990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1317.108287][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.140630][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.210195][T21990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1317.239006][T21990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1317.349116][T21990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1317.509342][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.534871][T20721] hsr_slave_0: left promiscuous mode [ 1317.538049][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.551280][T20721] hsr_slave_1: left promiscuous mode [ 1317.570369][ T5289] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1317.578560][T20721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1317.598897][T20721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1317.614026][T20721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1317.630336][T20721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1317.695909][T20721] veth1_macvtap: left promiscuous mode [ 1317.710624][T20721] veth0_macvtap: left promiscuous mode [ 1317.718575][T20721] veth1_vlan: left promiscuous mode [ 1317.731648][ T5289] usb 5-1: Using ep0 maxpacket: 32 [ 1317.736577][T20721] veth0_vlan: left promiscuous mode [ 1317.748724][ T5289] usb 5-1: config 0 has an invalid interface number: 84 but max is 1 [ 1317.771631][ T5289] usb 5-1: config 0 has an invalid interface number: 84 but max is 1 [ 1317.803095][ T5289] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.831250][ T5289] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1317.850309][ T5289] usb 5-1: config 0 has no interface number 0 [ 1317.862025][ T5289] usb 5-1: config 0 interface 84 has no altsetting 1 [ 1317.884797][ T5289] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0033, bcdDevice=6c.3e [ 1317.924140][ T5289] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.953940][ T5289] usb 5-1: Product: syz [ 1317.971725][ T5289] usb 5-1: Manufacturer: syz [ 1317.976410][ T5289] usb 5-1: SerialNumber: syz [ 1318.006919][ T5289] usb 5-1: config 0 descriptor?? [ 1318.864063][T20721] team0 (unregistering): Port device team_slave_1 removed [ 1318.988298][T20721] team0 (unregistering): Port device team_slave_0 removed [ 1320.161586][ T5289] usb 5-1: USB disconnect, device number 48 [ 1320.751246][T21990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1320.863933][T21990] 8021q: adding VLAN 0 to HW filter on device team0 [ 1320.908017][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.915270][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1321.014750][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1321.021977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1321.368424][T22052] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1321.444540][T22052] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1321.502123][T22052] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1321.529476][T22052] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1321.558573][T21990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1321.639515][T21990] veth0_vlan: entered promiscuous mode [ 1321.652895][T22260] fuse: Unknown parameter '0x000000000000000700000000000000000000w' [ 1321.685900][T21990] veth1_vlan: entered promiscuous mode [ 1321.903839][T21990] veth0_macvtap: entered promiscuous mode [ 1321.969514][T21990] veth1_macvtap: entered promiscuous mode [ 1322.004724][T21990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.058443][T21990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.079173][T21990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.098212][T21990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.132083][T21990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1322.144045][T21990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.159439][T21990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1322.209381][T21990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.224194][T21990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.234268][T21990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.245655][T21990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.280476][T21990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1322.300390][T21990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1322.321839][T21990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1322.336369][T21990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.345500][T21990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.355913][T21990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.364901][T21990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.390624][T15868] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1322.488482][T22052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1322.560687][T15868] usb 5-1: Using ep0 maxpacket: 32 [ 1322.562792][T22052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1322.572069][T15868] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.581933][T20721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.595171][T20721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.602707][T15868] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.602759][T15868] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1322.602787][T15868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.637194][T15868] hub 5-1:4.0: USB hub found [ 1322.746670][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 1322.753917][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1322.789173][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1322.796467][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1322.807446][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1322.838421][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1322.846936][T15868] hub 5-1:4.0: 2 ports detected [ 1323.071962][T22052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.262277][T22052] veth0_vlan: entered promiscuous mode [ 1323.330064][T22052] veth1_vlan: entered promiscuous mode [ 1323.537990][T22052] veth0_macvtap: entered promiscuous mode [ 1323.642721][T22052] veth1_macvtap: entered promiscuous mode [ 1323.735744][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.789943][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.859359][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1323.955884][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1323.998200][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.038961][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.090491][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1324.128729][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.221481][T22052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1324.323068][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.335107][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.345575][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.356312][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.366823][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.378947][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.389348][T22052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1324.401781][T22052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1324.414065][T22052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1324.431015][T22052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.440011][T22052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.452483][T22052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.462675][T22052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.571222][ T5291] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 1324.606258][ T5289] usb 5-1: USB disconnect, device number 49 [ 1324.681426][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.689312][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1324.779616][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1324.798128][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.040748][ T5239] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 1325.111083][ T5289] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1325.230693][T12570] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1325.273582][ T5289] usb 1-1: Using ep0 maxpacket: 32 [ 1325.302631][ T5289] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1325.322219][ T5289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.346408][ T5289] usb 1-1: config 0 has no interface number 0 [ 1325.353608][ T5289] usb 1-1: config 0 interface 8 altsetting 248 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1325.388234][ T5289] usb 1-1: config 0 interface 8 altsetting 248 has 3 endpoint descriptors, different from the interface descriptor's value: 10 [ 1325.410811][T12570] usb 2-1: Using ep0 maxpacket: 16 [ 1325.423626][ T5289] usb 1-1: config 0 interface 8 has no altsetting 0 [ 1325.426334][T12570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1325.460580][ T5289] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1325.478250][T12570] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1325.490050][T12570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.511220][ T5289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.517486][T12570] usb 2-1: Product: syz [ 1325.524085][ T5289] usb 1-1: Product: syz [ 1325.534095][ T5289] usb 1-1: Manufacturer: syz [ 1325.544626][ T5289] usb 1-1: SerialNumber: syz [ 1325.546725][T12570] usb 2-1: Manufacturer: syz [ 1325.570658][T12570] usb 2-1: SerialNumber: syz [ 1325.571115][ T5289] usb 1-1: config 0 descriptor?? [ 1325.604778][T12570] usb 2-1: config 0 descriptor?? [ 1325.658110][T12570] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1325.678247][T12570] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1326.072265][ T5289] ath6kl: Failed to submit usb control message: -71 [ 1326.090487][ T5289] ath6kl: unable to send the bmi data to the device: -71 [ 1326.097622][ T5289] ath6kl: Unable to send get target info: -71 [ 1326.121652][ T5289] ath6kl: Failed to init ath6kl core: -71 [ 1326.128339][ T5289] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1326.160521][ T5289] usb 1-1: USB disconnect, device number 24 [ 1326.301187][T12570] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1326.791429][T12570] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1326.820174][T22291] loop8: detected capacity change from 0 to 7 [ 1326.838528][T12570] em28xx 2-1:0.0: board has no eeprom [ 1326.862944][T22291] Dev loop8: unable to read RDB block 7 [ 1326.868644][T22291] loop8: unable to read partition table [ 1326.885684][T22291] loop8: partition table beyond EOD, truncated [ 1326.929395][T22318] netlink: 'syz.1.2932': attribute type 10 has an invalid length. [ 1326.941605][T22291] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 1326.941605][T22291] ) failed (rc=-5) [ 1326.987225][T22318] team0: Port device netdevsim0 added [ 1327.003043][T22319] netlink: 'syz.1.2932': attribute type 10 has an invalid length. [ 1327.126684][T22319] team0: Port device netdevsim0 removed [ 1327.219128][T22319] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1327.256417][T22317] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2937'. [ 1327.380597][T12570] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1327.396234][T12570] em28xx 2-1:0.0: dvb set to bulk mode. [ 1327.403310][T12568] em28xx 2-1:0.0: Binding DVB extension [ 1327.420082][T12570] usb 2-1: USB disconnect, device number 37 [ 1327.480623][ T5291] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1327.496197][T12570] em28xx 2-1:0.0: Disconnecting em28xx [ 1327.571658][T12568] em28xx 2-1:0.0: Registering input extension [ 1327.585010][T12570] em28xx 2-1:0.0: Closing input extension [ 1327.648089][ T5291] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1327.656976][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1327.668097][T12570] em28xx 2-1:0.0: Freeing device [ 1327.679880][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1327.722756][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1327.748430][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1327.791823][ T5291] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1327.799274][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1327.827238][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1327.848644][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1327.881556][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1327.907359][ T5291] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1327.917516][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 1327.933791][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1327.975835][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 1328.027566][ T5291] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1328.076618][ T5291] usb 1-1: string descriptor 0 read error: -22 [ 1328.084151][ T5291] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1328.114493][ T5291] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.166665][ T5291] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1328.396729][T22317] usb 1-1: Couldn't submit interrupt_out_urb -90 [ 1328.900336][ T5291] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1329.054249][ T5291] usb 4-1: Using ep0 maxpacket: 32 [ 1329.118607][ T5291] usb 4-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=32.a8 [ 1329.149686][ T5291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.169015][ T5291] usb 4-1: config 0 descriptor?? [ 1329.178119][ T5291] smsc75xx v1.0.0 [ 1329.191851][ T5291] smsc75xx 4-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1329.202128][ T5291] smsc75xx 4-1:0.0: probe with driver smsc75xx failed with error -22 [ 1330.015405][T19777] usb 1-1: USB disconnect, device number 25 [ 1330.634835][T22355] raw_sendmsg: syz.4.2946 forgot to set AF_INET. Fix it! [ 1330.697016][T22358] netlink: 'syz.1.2947': attribute type 27 has an invalid length. [ 1330.761286][T22360] vivid-000: disconnect [ 1330.782179][T22360] vivid-000: reconnect [ 1330.813968][T22358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1330.821518][T22358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.040751][ T5291] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1331.080158][T22358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1331.100673][T22358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1331.217722][ T5291] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1331.232794][ T5291] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1331.266480][ T5291] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1331.287757][T22358] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.298254][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.307792][T22358] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.317648][ T5291] usb 2-1: Product: syz [ 1331.322529][ T5291] usb 2-1: Manufacturer: syz [ 1331.327794][ T5291] usb 2-1: SerialNumber: syz [ 1331.335255][T22358] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.355853][ T5291] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1331.365180][T22358] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1331.559188][T22361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.615327][T22361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.677673][T12572] usb 4-1: USB disconnect, device number 49 [ 1331.739944][T22361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1331.744869][T22369] x_tables: unsorted underflow at hook 4 [ 1331.827186][T12570] usb 2-1: USB disconnect, device number 38 [ 1332.275692][ T29] audit: type=1326 audit(1728499801.715:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22379 comm="syz.4.2952" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bd397dff9 code=0x0 [ 1332.404322][ T29] audit: type=1326 audit(1728499801.845:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22385 comm="syz.0.2955" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f635f57dff9 code=0x0 [ 1332.505243][T22392] netlink: 'syz.0.2955': attribute type 10 has an invalid length. [ 1332.595724][T22392] team0: Failed to send options change via netlink (err -105) [ 1332.691210][T22392] team0: Port device netdevsim0 added [ 1332.849866][T19539] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1333.712384][T22411] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 1334.438809][T22413] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2961'. [ 1334.730609][ T5289] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1334.779161][T22419] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2964'. [ 1334.850899][T19777] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1334.890464][ T5289] usb 1-1: Using ep0 maxpacket: 32 [ 1334.909638][ T5289] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1334.935311][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.991484][ T5289] usb 1-1: config 0 descriptor?? [ 1335.023562][ T5289] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1335.031106][T19777] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1335.060806][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.078182][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.106130][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.134511][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.149291][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.175974][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.202441][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.214457][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.267090][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.289613][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.298644][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.309780][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.317769][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.326752][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.338282][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.346504][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.359138][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.370246][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.378386][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.393670][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.404784][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.412925][T19777] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1335.431070][T19777] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1335.442261][T19777] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1335.451420][T19777] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1335.461867][T19777] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1335.470453][T19777] usb 2-1: Product: syz [ 1335.474736][T19777] usb 2-1: Manufacturer: syz [ 1335.479348][T19777] usb 2-1: SerialNumber: syz [ 1335.499723][T19777] usb 2-1: config 0 descriptor?? [ 1335.531841][T19777] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1335.655351][T22421] xt_SECMARK: invalid mode: 0 [ 1335.707712][T22428] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1335.735741][T22428] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1335.853690][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 1335.859427][T12570] usb 2-1: USB disconnect, device number 39 [ 1335.873520][T12570] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1336.090400][ T5289] gspca_sq930x: ucbus_write failed -71 [ 1336.101075][ T5289] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 1336.123633][ T5289] usb 1-1: USB disconnect, device number 26 [ 1336.177505][T22433] program syz.4.2967 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1336.337071][T22433] kvm_intel: kvm [22432]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xff5556c5 [ 1336.347488][T22433] kvm: kvm [22432]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff555ee1 [ 1336.369097][T22433] kvm: kvm [22432]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff5556eb [ 1336.397529][T22433] netlink: 'syz.4.2967': attribute type 21 has an invalid length. [ 1336.405712][T22433] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1336.414929][T22433] netlink: 'syz.4.2967': attribute type 4 has an invalid length. [ 1336.422948][T22433] netlink: 'syz.4.2967': attribute type 5 has an invalid length. [ 1336.430783][T22433] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2967'. [ 1336.790371][ T5289] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1336.940376][ T5289] usb 5-1: Using ep0 maxpacket: 8 [ 1336.967915][ T5289] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.986298][ T5289] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.996563][ T5289] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1337.049356][ T5289] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1337.065747][ T5289] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 1337.120376][ T5289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.144205][ T5289] usb 5-1: config 0 descriptor?? [ 1337.158605][T12570] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1337.200704][T12568] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1337.366377][T12570] usb 1-1: Using ep0 maxpacket: 8 [ 1337.371756][T12568] usb 2-1: Using ep0 maxpacket: 16 [ 1337.405679][T12570] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1337.414759][T12568] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 1337.446314][T12570] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1337.456974][T12568] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.485601][T12568] usb 2-1: Product: syz [ 1337.489832][T12568] usb 2-1: Manufacturer: syz [ 1337.495501][T12570] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1337.523497][T12568] usb 2-1: SerialNumber: syz [ 1337.528423][T12570] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1337.621328][T12568] usb 2-1: config 0 descriptor?? [ 1337.653072][T12570] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.673408][T12568] as10x_usb: device has been detected [ 1337.697049][T12568] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 1337.730379][T12570] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1337.764772][T12570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.804225][T12568] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 1337.842189][T22437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2968'. [ 1337.850502][T22444] random: crng reseeded on system resumption [ 1337.947422][ T5289] usbhid 5-1:0.0: can't add hid device: -71 [ 1337.974018][T12568] as10x_usb: error during firmware upload part1 [ 1337.981715][ T5289] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1338.001167][T22457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2971'. [ 1338.020734][T12568] Registered device Sky IT Digital Key (green led) [ 1338.074977][ T5289] usb 5-1: USB disconnect, device number 50 [ 1338.270563][T12570] usb 1-1: usb_control_msg returned -32 [ 1338.277750][T12570] usbtmc 1-1:16.0: can't read capabilities [ 1338.954334][T22457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.975345][T22457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.328841][T22468] netlink: 'syz.3.2975': attribute type 4 has an invalid length. [ 1339.363786][T22468] netlink: 'syz.3.2975': attribute type 4 has an invalid length. [ 1339.406770][T22468] netlink: 'syz.3.2975': attribute type 1 has an invalid length. [ 1339.560470][T12570] usb 2-1: USB disconnect, device number 40 [ 1339.581073][T12570] Unregistered device Sky IT Digital Key (green led) [ 1339.586733][T12570] as10x_usb: device has been disconnected [ 1339.797714][ T5289] usb 1-1: USB disconnect, device number 27 [ 1341.222472][T22496] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2982'. [ 1342.735131][T22506] Cannot find set identified by id 0 to match [ 1342.811278][ T5291] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1342.996802][ T5291] usb 4-1: device descriptor read/64, error -71 [ 1343.096817][ T29] audit: type=1326 audit(1728499812.535:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22493 comm="syz.4.2983" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7bd397dff9 code=0x0 [ 1343.290353][ T5291] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1343.316424][T22518] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1343.430885][ T5291] usb 4-1: device descriptor read/64, error -71 [ 1343.554337][ T5291] usb usb4-port1: attempt power cycle [ 1343.940354][ T5291] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1344.104527][ T5291] usb 4-1: device descriptor read/8, error -71 [ 1344.360501][ T5291] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1344.421873][ T5291] usb 4-1: device descriptor read/8, error -71 [ 1344.522687][T22530] could not allocate digest TFM handle mcryptd(mcryptd(wp512-generic)) [ 1344.561306][ T5291] usb usb4-port1: unable to enumerate USB device [ 1345.270536][ T5239] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1345.279502][ T5239] Bluetooth: hci0: Injecting HCI hardware error event [ 1345.289361][ T9637] Bluetooth: hci0: hardware error 0x00 [ 1345.610420][ T5291] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1345.931011][ T5291] usb 5-1: Using ep0 maxpacket: 32 [ 1345.949635][ T5291] usb 5-1: config 0 has no interfaces? [ 1345.979369][ T5291] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1346.009104][ T5291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.033289][ T5291] usb 5-1: Product: syz [ 1346.060107][ T5291] usb 5-1: Manufacturer: syz [ 1346.065113][ T5291] usb 5-1: SerialNumber: syz [ 1346.073938][ T5291] usb 5-1: config 0 descriptor?? [ 1346.430725][T22553] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1346.461763][T22553] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1346.490612][T22553] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1346.550004][T22553] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1346.560007][T22553] geneve2: entered promiscuous mode [ 1346.566109][T22553] geneve2: entered allmulticast mode [ 1346.599717][T22553] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1346.612475][T22553] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1346.621826][T22553] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1346.639734][T22553] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1346.690457][T22559] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1346.697702][T22559] PKCS7: Only support pkcs7_signedData type [ 1347.360492][ T9637] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1347.760500][ T5291] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1347.951331][ T5291] usb 2-1: Using ep0 maxpacket: 32 [ 1347.972337][ T5291] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1347.992522][T22575] sctp: [Deprecated]: syz.3.3001 (pid 22575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1347.992522][T22575] Use struct sctp_sack_info instead [ 1347.998526][ T5291] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1348.059022][ T5291] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1348.094705][ T5291] usb 2-1: Product: syz [ 1348.102582][T12570] usb 5-1: USB disconnect, device number 51 [ 1348.141961][ T5291] usb 2-1: Manufacturer: syz [ 1348.154786][ T5291] usb 2-1: SerialNumber: syz [ 1348.185569][ T5291] usb 2-1: config 0 descriptor?? [ 1348.204339][T22572] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1348.475134][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1348.822064][ T5289] usb 2-1: USB disconnect, device number 41 [ 1348.840634][T22589] hsr0: entered promiscuous mode [ 1348.949272][T22589] hsr0: left promiscuous mode [ 1349.827207][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3007'. [ 1350.330362][T19777] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1350.512953][T19777] usb 1-1: Using ep0 maxpacket: 16 [ 1350.559111][T19777] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1350.574000][T19777] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1350.589012][T19777] usb 1-1: Product: syz [ 1350.600345][T19777] usb 1-1: Manufacturer: syz [ 1350.615227][T19777] usb 1-1: SerialNumber: syz [ 1350.638325][T19777] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1350.653858][T19777] r8152-cfgselector 1-1: config 0 descriptor?? [ 1351.280008][T19777] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1351.300451][T19777] r8152-cfgselector 1-1: bad CDC descriptors [ 1351.330812][T19777] r8152-cfgselector 1-1: USB disconnect, device number 28 [ 1352.550690][ T5289] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1352.582664][T22632] syzkaller0: entered promiscuous mode [ 1352.588253][T22632] syzkaller0: entered allmulticast mode [ 1352.747588][T22642] batadv_slave_0: entered allmulticast mode [ 1352.755653][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1352.765676][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1352.775120][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1352.784967][T22642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1352.802197][ T5289] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 1352.834477][ T5289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.841560][T22644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1352.927590][ T5289] usb 1-1: config 0 descriptor?? [ 1353.048162][ T5289] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input83 [ 1353.237380][T22627] [ 1353.239775][T22627] ===================================================== [ 1353.246709][T22627] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1353.254172][T22627] 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 Not tainted [ 1353.261275][T22627] ----------------------------------------------------- [ 1353.268231][T22627] syz.0.3011/22627 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1353.275955][T22627] ffff8880323b8948 (&new->fa_lock){...-}-{2:2}, at: kill_fasync+0x199/0x4f0 [ 1353.284714][T22627] [ 1353.284714][T22627] and this task is already holding: [ 1353.292088][T22627] ffff8880512f1028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 1353.301864][T22627] which would create a new lock dependency: [ 1353.307752][T22627] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){...-}-{2:2} [ 1353.315885][T22627] [ 1353.315885][T22627] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1353.325333][T22627] (&dev->event_lock#2){..-.}-{2:2} [ 1353.325386][T22627] [ 1353.325386][T22627] ... which became SOFTIRQ-irq-safe at: [ 1353.338290][T22627] lock_acquire+0x1ed/0x550 [ 1353.342913][T22627] _raw_spin_lock_irqsave+0xd5/0x120 [ 1353.348299][T22627] input_inject_event+0xc5/0x340 [ 1353.353339][T22627] kd_sound_helper+0x1a0/0x210 [ 1353.358197][T22627] input_handler_for_each_handle+0x103/0x1d0 [ 1353.364292][T22627] call_timer_fn+0x18e/0x650 [ 1353.368994][T22627] __run_timer_base+0x66a/0x8e0 [ 1353.373959][T22627] run_timer_softirq+0xb7/0x170 [ 1353.378916][T22627] handle_softirqs+0x2c5/0x980 [ 1353.383779][T22627] __irq_exit_rcu+0xf4/0x1c0 [ 1353.388557][T22627] irq_exit_rcu+0x9/0x30 [ 1353.392896][T22627] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1353.398627][T22627] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1353.404757][T22627] acpi_safe_halt+0x21/0x30 [ 1353.409408][T22627] acpi_idle_enter+0xe4/0x140 [ 1353.414215][T22627] cpuidle_enter_state+0x109/0x470 [ 1353.419432][T22627] cpuidle_enter+0x5d/0xa0 [ 1353.423964][T22627] do_idle+0x375/0x5d0 [ 1353.428150][T22627] cpu_startup_entry+0x42/0x60 [ 1353.433024][T22627] start_secondary+0x102/0x110 [ 1353.437895][T22627] common_startup_64+0x13e/0x147 [ 1353.442946][T22627] [ 1353.442946][T22627] to a SOFTIRQ-irq-unsafe lock: [ 1353.449972][T22627] (tasklist_lock){.+.+}-{2:2} [ 1353.450004][T22627] [ 1353.450004][T22627] ... which became SOFTIRQ-irq-unsafe at: [ 1353.462641][T22627] ... [ 1353.462653][T22627] lock_acquire+0x1ed/0x550 [ 1353.469847][T22627] _raw_read_lock+0x36/0x50 [ 1353.474458][T22627] __do_wait+0x12d/0x850 [ 1353.478795][T22627] do_wait+0x1e9/0x560 [ 1353.482959][T22627] kernel_wait+0xe9/0x240 [ 1353.487386][T22627] call_usermodehelper_exec_work+0xbd/0x230 [ 1353.493389][T22627] process_scheduled_works+0xa63/0x1850 [ 1353.499052][T22627] worker_thread+0x870/0xd30 [ 1353.503752][T22627] kthread+0x2f0/0x390 [ 1353.507915][T22627] ret_from_fork+0x4b/0x80 [ 1353.512461][T22627] ret_from_fork_asm+0x1a/0x30 [ 1353.517327][T22627] [ 1353.517327][T22627] other info that might help us debug this: [ 1353.517327][T22627] [ 1353.527552][T22627] Chain exists of: [ 1353.527552][T22627] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 1353.527552][T22627] [ 1353.541159][T22627] Possible interrupt unsafe locking scenario: [ 1353.541159][T22627] [ 1353.549487][T22627] CPU0 CPU1 [ 1353.554869][T22627] ---- ---- [ 1353.560248][T22627] lock(tasklist_lock); [ 1353.564514][T22627] local_irq_disable(); [ 1353.571263][T22627] lock(&dev->event_lock#2); [ 1353.578481][T22627] lock(&client->buffer_lock); [ 1353.585872][T22627] [ 1353.589334][T22627] lock(&dev->event_lock#2); [ 1353.594221][T22627] [ 1353.594221][T22627] *** DEADLOCK *** [ 1353.594221][T22627] [ 1353.602371][T22627] 7 locks held by syz.0.3011/22627: [ 1353.607577][T22627] #0: ffff888146713110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x25e/0x790 [ 1353.616731][T22627] #1: ffff888146aaa230 (&dev->event_lock#2){..-.}-{2:2}, at: input_inject_event+0xc5/0x340 [ 1353.626850][T22627] #2: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xd6/0x340 [ 1353.636555][T22627] #3: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0x8f/0x860 [ 1353.646172][T22627] #4: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x6f/0x300 [ 1353.655364][T22627] #5: ffff8880512f1028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xf2/0xad0 [ 1353.665594][T22627] #6: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x54/0x4f0 [ 1353.674686][T22627] [ 1353.674686][T22627] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1353.685097][T22627] -> (&dev->event_lock#2){..-.}-{2:2} { [ 1353.690778][T22627] IN-SOFTIRQ-W at: [ 1353.694875][T22627] lock_acquire+0x1ed/0x550 [ 1353.701214][T22627] _raw_spin_lock_irqsave+0xd5/0x120 [ 1353.708353][T22627] input_inject_event+0xc5/0x340 [ 1353.715127][T22627] kd_sound_helper+0x1a0/0x210 [ 1353.721739][T22627] input_handler_for_each_handle+0x103/0x1d0 [ 1353.729571][T22627] call_timer_fn+0x18e/0x650 [ 1353.736001][T22627] __run_timer_base+0x66a/0x8e0 [ 1353.742689][T22627] run_timer_softirq+0xb7/0x170 [ 1353.749383][T22627] handle_softirqs+0x2c5/0x980 [ 1353.756001][T22627] __irq_exit_rcu+0xf4/0x1c0 [ 1353.762446][T22627] irq_exit_rcu+0x9/0x30 [ 1353.768558][T22627] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1353.776033][T22627] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1353.783873][T22627] acpi_safe_halt+0x21/0x30 [ 1353.790223][T22627] acpi_idle_enter+0xe4/0x140 [ 1353.796747][T22627] cpuidle_enter_state+0x109/0x470 [ 1353.803708][T22627] cpuidle_enter+0x5d/0xa0 [ 1353.809985][T22627] do_idle+0x375/0x5d0 [ 1353.815921][T22627] cpu_startup_entry+0x42/0x60 [ 1353.822541][T22627] start_secondary+0x102/0x110 [ 1353.829161][T22627] common_startup_64+0x13e/0x147 [ 1353.835945][T22627] INITIAL USE at: [ 1353.839945][T22627] lock_acquire+0x1ed/0x550 [ 1353.846203][T22627] _raw_spin_lock_irqsave+0xd5/0x120 [ 1353.853236][T22627] input_inject_event+0xc5/0x340 [ 1353.859932][T22627] kbd_led_trigger_activate+0xb8/0x100 [ 1353.867157][T22627] led_trigger_set+0x582/0x9c0 [ 1353.873680][T22627] led_trigger_set_default+0x229/0x260 [ 1353.880893][T22627] led_classdev_register_ext+0x6e6/0x8a0 [ 1353.888280][T22627] input_leds_connect+0x489/0x630 [ 1353.895069][T22627] input_register_device+0xd3b/0x1110 [ 1353.902210][T22627] atkbd_connect+0x752/0xa00 [ 1353.908555][T22627] serio_driver_probe+0x7f/0xa0 [ 1353.915160][T22627] really_probe+0x2b8/0xad0 [ 1353.921418][T22627] __driver_probe_device+0x1a2/0x390 [ 1353.928452][T22627] driver_probe_device+0x50/0x430 [ 1353.935215][T22627] __driver_attach+0x45f/0x710 [ 1353.941723][T22627] bus_for_each_dev+0x239/0x2b0 [ 1353.948337][T22627] serio_handle_event+0x1c7/0x920 [ 1353.955107][T22627] process_scheduled_works+0xa63/0x1850 [ 1353.962410][T22627] worker_thread+0x870/0xd30 [ 1353.968779][T22627] kthread+0x2f0/0x390 [ 1353.974615][T22627] ret_from_fork+0x4b/0x80 [ 1353.980893][T22627] ret_from_fork_asm+0x1a/0x30 [ 1353.987424][T22627] } [ 1353.990022][T22627] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 1353.999148][T22627] -> (&client->buffer_lock){....}-{2:2} { [ 1354.004927][T22627] INITIAL USE at: [ 1354.008865][T22627] lock_acquire+0x1ed/0x550 [ 1354.014946][T22627] _raw_spin_lock+0x2e/0x40 [ 1354.021023][T22627] evdev_pass_values+0xf2/0xad0 [ 1354.027453][T22627] evdev_events+0x1c2/0x300 [ 1354.033555][T22627] input_pass_values+0x286/0x860 [ 1354.040081][T22627] input_event_dispose+0x30f/0x600 [ 1354.046760][T22627] input_handle_event+0xa71/0xbe0 [ 1354.053349][T22627] input_inject_event+0x22f/0x340 [ 1354.059950][T22627] evdev_write+0x5fd/0x790 [ 1354.065942][T22627] vfs_write+0x29c/0xc90 [ 1354.071770][T22627] ksys_write+0x183/0x2b0 [ 1354.077668][T22627] do_syscall_64+0xf3/0x230 [ 1354.083750][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.091221][T22627] } [ 1354.093722][T22627] ... key at: [] evdev_open.__key.24+0x0/0x20 [ 1354.101905][T22627] ... acquired at: [ 1354.105714][T22627] lock_acquire+0x1ed/0x550 [ 1354.110434][T22627] _raw_spin_lock+0x2e/0x40 [ 1354.115122][T22627] evdev_pass_values+0xf2/0xad0 [ 1354.120160][T22627] evdev_events+0x1c2/0x300 [ 1354.124834][T22627] input_pass_values+0x286/0x860 [ 1354.129964][T22627] input_event_dispose+0x30f/0x600 [ 1354.135268][T22627] input_handle_event+0xa71/0xbe0 [ 1354.140480][T22627] input_inject_event+0x22f/0x340 [ 1354.145692][T22627] evdev_write+0x5fd/0x790 [ 1354.150282][T22627] vfs_write+0x29c/0xc90 [ 1354.154708][T22627] ksys_write+0x183/0x2b0 [ 1354.159221][T22627] do_syscall_64+0xf3/0x230 [ 1354.163914][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.169993][T22627] [ 1354.172331][T22627] [ 1354.172331][T22627] the dependencies between the lock to be acquired [ 1354.172342][T22627] and SOFTIRQ-irq-unsafe lock: [ 1354.185855][T22627] -> (tasklist_lock){.+.+}-{2:2} { [ 1354.191207][T22627] HARDIRQ-ON-R at: [ 1354.195366][T22627] lock_acquire+0x1ed/0x550 [ 1354.201897][T22627] _raw_read_lock+0x36/0x50 [ 1354.208424][T22627] __do_wait+0x12d/0x850 [ 1354.214671][T22627] do_wait+0x1e9/0x560 [ 1354.220752][T22627] kernel_wait+0xe9/0x240 [ 1354.227103][T22627] call_usermodehelper_exec_work+0xbd/0x230 [ 1354.235011][T22627] process_scheduled_works+0xa63/0x1850 [ 1354.242573][T22627] worker_thread+0x870/0xd30 [ 1354.249188][T22627] kthread+0x2f0/0x390 [ 1354.255267][T22627] ret_from_fork+0x4b/0x80 [ 1354.261699][T22627] ret_from_fork_asm+0x1a/0x30 [ 1354.268471][T22627] SOFTIRQ-ON-R at: [ 1354.272635][T22627] lock_acquire+0x1ed/0x550 [ 1354.279150][T22627] _raw_read_lock+0x36/0x50 [ 1354.285680][T22627] __do_wait+0x12d/0x850 [ 1354.291929][T22627] do_wait+0x1e9/0x560 [ 1354.298002][T22627] kernel_wait+0xe9/0x240 [ 1354.304352][T22627] call_usermodehelper_exec_work+0xbd/0x230 [ 1354.312264][T22627] process_scheduled_works+0xa63/0x1850 [ 1354.319849][T22627] worker_thread+0x870/0xd30 [ 1354.326446][T22627] kthread+0x2f0/0x390 [ 1354.332527][T22627] ret_from_fork+0x4b/0x80 [ 1354.338972][T22627] ret_from_fork_asm+0x1a/0x30 [ 1354.345740][T22627] INITIAL USE at: [ 1354.349825][T22627] lock_acquire+0x1ed/0x550 [ 1354.356259][T22627] _raw_write_lock_irq+0xd3/0x120 [ 1354.363207][T22627] copy_process+0x2267/0x3d50 [ 1354.369818][T22627] kernel_clone+0x226/0x8f0 [ 1354.376269][T22627] user_mode_thread+0x132/0x1a0 [ 1354.383064][T22627] rest_init+0x23/0x300 [ 1354.389142][T22627] start_kernel+0x47f/0x500 [ 1354.395578][T22627] x86_64_start_reservations+0x2a/0x30 [ 1354.402976][T22627] x86_64_start_kernel+0x9f/0xa0 [ 1354.409845][T22627] common_startup_64+0x13e/0x147 [ 1354.416714][T22627] INITIAL READ USE at: [ 1354.421260][T22627] lock_acquire+0x1ed/0x550 [ 1354.428134][T22627] _raw_read_lock+0x36/0x50 [ 1354.435012][T22627] __do_wait+0x12d/0x850 [ 1354.441624][T22627] do_wait+0x1e9/0x560 [ 1354.448051][T22627] kernel_wait+0xe9/0x240 [ 1354.454733][T22627] call_usermodehelper_exec_work+0xbd/0x230 [ 1354.463167][T22627] process_scheduled_works+0xa63/0x1850 [ 1354.471065][T22627] worker_thread+0x870/0xd30 [ 1354.478018][T22627] kthread+0x2f0/0x390 [ 1354.484451][T22627] ret_from_fork+0x4b/0x80 [ 1354.491225][T22627] ret_from_fork_asm+0x1a/0x30 [ 1354.498424][T22627] } [ 1354.501095][T22627] ... key at: [] tasklist_lock+0x18/0x40 [ 1354.509090][T22627] ... acquired at: [ 1354.513064][T22627] lock_acquire+0x1ed/0x550 [ 1354.517765][T22627] _raw_read_lock+0x36/0x50 [ 1354.522543][T22627] send_sigio+0x108/0x390 [ 1354.527053][T22627] kill_fasync+0x256/0x4f0 [ 1354.531650][T22627] lease_break_callback+0x26/0x30 [ 1354.536856][T22627] __break_lease+0x6d5/0x1820 [ 1354.541732][T22627] vfs_truncate+0x26b/0x3b0 [ 1354.546424][T22627] do_sys_truncate+0xdb/0x190 [ 1354.551305][T22627] do_syscall_64+0xf3/0x230 [ 1354.556006][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.562188][T22627] [ 1354.564524][T22627] -> (&f_owner->lock){....}-{2:2} { [ 1354.569854][T22627] INITIAL USE at: [ 1354.573835][T22627] lock_acquire+0x1ed/0x550 [ 1354.580119][T22627] _raw_write_lock_irq+0xd3/0x120 [ 1354.587064][T22627] __f_setown+0x6b/0x380 [ 1354.593065][T22627] generic_setlease+0xc74/0x1550 [ 1354.599750][T22627] fcntl_setlease+0x404/0x540 [ 1354.606165][T22627] do_fcntl+0x69d/0x1a60 [ 1354.612155][T22627] __se_sys_fcntl+0xd2/0x1e0 [ 1354.618532][T22627] do_syscall_64+0xf3/0x230 [ 1354.624795][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.632441][T22627] INITIAL READ USE at: [ 1354.636878][T22627] lock_acquire+0x1ed/0x550 [ 1354.643566][T22627] _raw_read_lock_irq+0xda/0x120 [ 1354.650695][T22627] f_getown+0x55/0x2a0 [ 1354.656953][T22627] sock_ioctl+0x498/0x8e0 [ 1354.663475][T22627] __se_sys_ioctl+0xf9/0x170 [ 1354.670245][T22627] do_syscall_64+0xf3/0x230 [ 1354.676938][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.685131][T22627] } [ 1354.687715][T22627] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1354.696660][T22627] ... acquired at: [ 1354.700543][T22627] lock_acquire+0x1ed/0x550 [ 1354.705335][T22627] _raw_read_lock_irqsave+0xdd/0x130 [ 1354.710800][T22627] send_sigio+0x37/0x390 [ 1354.715227][T22627] kill_fasync+0x256/0x4f0 [ 1354.719821][T22627] lease_break_callback+0x26/0x30 [ 1354.725029][T22627] __break_lease+0x6d5/0x1820 [ 1354.729913][T22627] vfs_truncate+0x26b/0x3b0 [ 1354.734585][T22627] do_sys_truncate+0xdb/0x190 [ 1354.739434][T22627] do_syscall_64+0xf3/0x230 [ 1354.744123][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.750200][T22627] [ 1354.752531][T22627] -> (&new->fa_lock){...-}-{2:2} { [ 1354.757686][T22627] IN-SOFTIRQ-R at: [ 1354.761667][T22627] lock_acquire+0x1ed/0x550 [ 1354.767827][T22627] _raw_read_lock_irqsave+0xdd/0x130 [ 1354.774861][T22627] kill_fasync+0x199/0x4f0 [ 1354.780947][T22627] sock_wake_async+0x147/0x170 [ 1354.787374][T22627] sock_def_readable+0x3df/0x5b0 [ 1354.794000][T22627] subflow_data_ready+0x323/0x920 [ 1354.800719][T22627] tcp_child_process+0x4c3/0xa40 [ 1354.807354][T22627] tcp_v4_do_rcv+0x6f0/0xc70 [ 1354.813615][T22627] tcp_v4_rcv+0x2b00/0x37f0 [ 1354.819790][T22627] ip_protocol_deliver_rcu+0x22e/0x440 [ 1354.826908][T22627] ip_local_deliver_finish+0x341/0x5f0 [ 1354.834132][T22627] NF_HOOK+0x3a4/0x450 [ 1354.839861][T22627] NF_HOOK+0x3a4/0x450 [ 1354.845594][T22627] __netif_receive_skb+0x2bf/0x650 [ 1354.852367][T22627] process_backlog+0x662/0x15b0 [ 1354.858898][T22627] __napi_poll+0xcb/0x490 [ 1354.864902][T22627] net_rx_action+0x89b/0x1240 [ 1354.871239][T22627] handle_softirqs+0x2c5/0x980 [ 1354.877664][T22627] do_softirq+0x11b/0x1e0 [ 1354.883658][T22627] __local_bh_enable_ip+0x1bb/0x200 [ 1354.890522][T22627] __dev_queue_xmit+0x171d/0x3ed0 [ 1354.897208][T22627] ip_finish_output2+0xd41/0x1390 [ 1354.903931][T22627] __ip_queue_xmit+0x118c/0x1b80 [ 1354.910529][T22627] __tcp_transmit_skb+0x2544/0x3b30 [ 1354.917406][T22627] tcp_rcv_state_process+0x2c32/0x4570 [ 1354.924541][T22627] tcp_v4_do_rcv+0x77d/0xc70 [ 1354.930787][T22627] __release_sock+0x214/0x350 [ 1354.937122][T22627] release_sock+0x61/0x1f0 [ 1354.943218][T22627] mptcp_connect+0x7e4/0xb20 [ 1354.949497][T22627] __inet_stream_connect+0x262/0xf30 [ 1354.956446][T22627] inet_stream_connect+0x65/0xa0 [ 1354.963051][T22627] __sys_connect+0x2d1/0x300 [ 1354.969292][T22627] __x64_sys_connect+0x7a/0x90 [ 1354.975711][T22627] do_syscall_64+0xf3/0x230 [ 1354.981883][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.989455][T22627] INITIAL USE at: [ 1354.993370][T22627] lock_acquire+0x1ed/0x550 [ 1354.999472][T22627] _raw_write_lock_irq+0xd3/0x120 [ 1355.006071][T22627] fasync_remove_entry+0xff/0x1d0 [ 1355.012684][T22627] lease_modify+0x1bd/0x3a0 [ 1355.018767][T22627] locks_remove_file+0x577/0x10c0 [ 1355.025370][T22627] __fput+0x1a6/0x880 [ 1355.030931][T22627] task_work_run+0x24f/0x310 [ 1355.037106][T22627] syscall_exit_to_user_mode+0x168/0x370 [ 1355.044326][T22627] do_syscall_64+0x100/0x230 [ 1355.050500][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.057975][T22627] INITIAL READ USE at: [ 1355.062325][T22627] lock_acquire+0x1ed/0x550 [ 1355.068839][T22627] _raw_read_lock_irqsave+0xdd/0x130 [ 1355.076140][T22627] kill_fasync+0x199/0x4f0 [ 1355.082557][T22627] lease_break_callback+0x26/0x30 [ 1355.089601][T22627] __break_lease+0x6d5/0x1820 [ 1355.096307][T22627] vfs_truncate+0x26b/0x3b0 [ 1355.102819][T22627] do_sys_truncate+0xdb/0x190 [ 1355.109503][T22627] do_syscall_64+0xf3/0x230 [ 1355.116012][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.123910][T22627] } [ 1355.126409][T22627] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1355.135101][T22627] ... acquired at: [ 1355.138903][T22627] lock_acquire+0x1ed/0x550 [ 1355.143603][T22627] _raw_read_lock_irqsave+0xdd/0x130 [ 1355.149070][T22627] kill_fasync+0x199/0x4f0 [ 1355.153683][T22627] evdev_pass_values+0x58a/0xad0 [ 1355.158801][T22627] evdev_events+0x1c2/0x300 [ 1355.163483][T22627] input_pass_values+0x286/0x860 [ 1355.168635][T22627] input_event_dispose+0x30f/0x600 [ 1355.173945][T22627] input_handle_event+0xa71/0xbe0 [ 1355.179149][T22627] input_inject_event+0x22f/0x340 [ 1355.184365][T22627] evdev_write+0x5fd/0x790 [ 1355.188968][T22627] vfs_write+0x29c/0xc90 [ 1355.193412][T22627] ksys_write+0x183/0x2b0 [ 1355.197957][T22627] do_syscall_64+0xf3/0x230 [ 1355.202653][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.208745][T22627] [ 1355.211072][T22627] [ 1355.211072][T22627] stack backtrace: [ 1355.216964][T22627] CPU: 0 UID: 0 PID: 22627 Comm: syz.0.3011 Not tainted 6.12.0-rc2-syzkaller-00058-g75b607fab38d #0 [ 1355.227731][T22627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1355.237823][T22627] Call Trace: [ 1355.241111][T22627] [ 1355.244065][T22627] dump_stack_lvl+0x241/0x360 [ 1355.248768][T22627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1355.253973][T22627] ? __pfx__printk+0x10/0x10 [ 1355.258598][T22627] ? print_shortest_lock_dependencies+0xf2/0x160 [ 1355.264961][T22627] validate_chain+0x4ebd/0x5920 [ 1355.269840][T22627] ? __pfx_validate_chain+0x10/0x10 [ 1355.275056][T22627] ? __pfx_validate_chain+0x10/0x10 [ 1355.280270][T22627] ? register_lock_class+0x102/0x980 [ 1355.285605][T22627] ? __pfx_register_lock_class+0x10/0x10 [ 1355.291258][T22627] ? queue_work_on+0x246/0x380 [ 1355.296042][T22627] ? mark_lock+0x9a/0x360 [ 1355.300399][T22627] __lock_acquire+0x1384/0x2050 [ 1355.305278][T22627] lock_acquire+0x1ed/0x550 [ 1355.309807][T22627] ? kill_fasync+0x199/0x4f0 [ 1355.314408][T22627] ? __pfx_lock_acquire+0x10/0x10 [ 1355.319456][T22627] ? __pfx_lock_acquire+0x10/0x10 [ 1355.324495][T22627] _raw_read_lock_irqsave+0xdd/0x130 [ 1355.329803][T22627] ? kill_fasync+0x199/0x4f0 [ 1355.334414][T22627] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1355.340336][T22627] ? do_raw_spin_lock+0x14f/0x370 [ 1355.345375][T22627] kill_fasync+0x199/0x4f0 [ 1355.349816][T22627] ? kill_fasync+0x54/0x4f0 [ 1355.354347][T22627] evdev_pass_values+0x58a/0xad0 [ 1355.359298][T22627] ? evdev_pass_values+0x581/0xad0 [ 1355.364434][T22627] evdev_events+0x1c2/0x300 [ 1355.368958][T22627] ? evdev_events+0x6f/0x300 [ 1355.373559][T22627] input_pass_values+0x286/0x860 [ 1355.378531][T22627] ? input_pass_values+0x8f/0x860 [ 1355.383585][T22627] input_event_dispose+0x30f/0x600 [ 1355.388728][T22627] input_handle_event+0xa71/0xbe0 [ 1355.393776][T22627] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 1355.399265][T22627] ? __pfx_input_handle_event+0x10/0x10 [ 1355.404844][T22627] input_inject_event+0x22f/0x340 [ 1355.409879][T22627] ? input_inject_event+0xd6/0x340 [ 1355.415036][T22627] evdev_write+0x5fd/0x790 [ 1355.419467][T22627] ? __pfx_evdev_write+0x10/0x10 [ 1355.424418][T22627] ? bpf_lsm_file_permission+0x9/0x10 [ 1355.429856][T22627] ? security_file_permission+0x74/0x280 [ 1355.435523][T22627] ? rw_verify_area+0x1c3/0x6f0 [ 1355.440401][T22627] ? __pfx_evdev_write+0x10/0x10 [ 1355.445341][T22627] vfs_write+0x29c/0xc90 [ 1355.449607][T22627] ? kmem_cache_free+0x1a2/0x420 [ 1355.454561][T22627] ? __pfx_vfs_write+0x10/0x10 [ 1355.459345][T22627] ? __fget_files+0x29/0x470 [ 1355.463955][T22627] ? __fget_files+0x3f3/0x470 [ 1355.468681][T22627] ? __fget_files+0x29/0x470 [ 1355.473306][T22627] ? fdget_pos+0x19a/0x320 [ 1355.477759][T22627] ksys_write+0x183/0x2b0 [ 1355.482109][T22627] ? __pfx_ksys_write+0x10/0x10 [ 1355.486967][T22627] ? do_syscall_64+0x100/0x230 [ 1355.491748][T22627] ? do_syscall_64+0xb6/0x230 [ 1355.496433][T22627] do_syscall_64+0xf3/0x230 [ 1355.500939][T22627] ? clear_bhb_loop+0x35/0x90 [ 1355.505635][T22627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.511550][T22627] RIP: 0033:0x7f635f57dff9 [ 1355.515980][T22627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.535591][T22627] RSP: 002b:00007f63603c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1355.544019][T22627] RAX: ffffffffffffffda RBX: 00007f635f735f80 RCX: 00007f635f57dff9 [ 1355.552001][T22627] RDX: 0000000000002250 RSI: 0000000020000040 RDI: 0000000000000009 [ 1355.559976][T22627] RBP: 00007f635f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1355.567966][T22627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.575942][T22627] R13: 0000000000000000 R14: 00007f635f735f80 R15: 00007f635f85fa28 [ 1355.583944][T22627] [ 1355.600288][ T5239] Bluetooth: hci4: command 0x0406 tx timeout [ 1355.600288][T12571] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1355.659714][ T4672] bcm5974 1-1:0.0: could not read from device [ 1355.675229][ T4672] bcm5974: mode switch failed [ 1355.703460][ T4672] bcm5974 1-1:0.0: could not read from device [ 1355.710896][ T4672] bcm5974: mode switch failed [ 1355.716316][ T4672] bcm5974 1-1:0.0: could not read from device [ 1355.728454][ T4672] bcm5974: mode switch failed [ 1355.789906][T12571] usb 5-1: Using ep0 maxpacket: 8 [ 1355.798655][T12571] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1355.806283][T12571] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1355.821767][T12571] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1355.856645][T12571] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1355.883032][T12571] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1355.927467][T12571] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1355.935117][T12571] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1355.958013][T12571] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1355.984411][T12571] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1356.009437][T12571] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1356.063712][T12571] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 1356.076153][T12571] usb 5-1: can't read configurations, error -71 [ 1356.629388][ T5289] usb 1-1: USB disconnect, device number 29 [ 1356.629946][ T4672] bcm5974 1-1:0.0: could not read from device [ 1356.649588][ T4672] bcm5974: mode switch failed [ 1356.672401][T21751] udevd[21751]: Error opening device "/dev/input/event4": No such file or directory [ 1356.695036][T21751] udevd[21751]: Unable to EVIOCGABS device "/dev/input/event4" [ 1356.711146][T21751] udevd[21751]: Unable to EVIOCGABS device "/dev/input/event4" [ 1356.736832][T21751] udevd[21751]: Unable to EVIOCGABS device "/dev/input/event4" [ 1356.745899][T21751] udevd[21751]: Unable to EVIOCGABS device "/dev/input/event4" [ 1361.831935][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.838325][ T1268] ieee802154 phy1 wpan1: encryption failed: -22