last executing test programs: 16.722184925s ago: executing program 0 (id=753): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009100000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0xc, 0x100b, &(0x7f0000000500)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010001fff"], 0x40}}, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = syz_open_dev$vcsa(&(0x7f0000000280), 0xed7, 0xc000) sendto(r4, &(0x7f00000002c0)="fdaf9d21ef3544fac6d9e242562d333baba3054703a0912b3ee448b64d860ee4dd68c4bacc883ed29702f78b27bc5ab7a0ad34a261bd", 0x36, 0x200088c1, &(0x7f0000001540)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001200010a00000000000000000000003f00000001000000000000000000000000000000e0ffffffff454b086007ecaec800000000e0798deb5d64018ebcdfdc8817"], 0x50}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x5, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000240)='objagg_obj_parent_assign\x00', r10}, 0x18) setrlimit(0xc, &(0x7f00000000c0)={0x6, 0xd1}) 14.738217375s ago: executing program 0 (id=755): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmsg(r3, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3c85}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020811}, 0x42) 11.741441473s ago: executing program 0 (id=761): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r1, &(0x7f0000000580), 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x0, 0x7]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$inet6(0xa, 0x3, 0x20) socket$inet6(0xa, 0x3, 0x4) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r4) socket$inet6(0xa, 0x3, 0x7) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r6}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 11.418258467s ago: executing program 0 (id=762): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003b1fe9208151403005d650102030109025ced2f7f109d00"/36], &(0x7f0000000e80)={0x0, 0x0, 0xf, &(0x7f0000000b80)=ANY=[@ANYBLOB], 0x1, [{0x0, 0x0}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102372, 0x18fe4}], 0x1, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20014004) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) sendfile(r3, r3, 0x0, 0x20003) 9.605093149s ago: executing program 0 (id=765): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private2}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)='H', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) syz_io_uring_setup(0x24b9, &(0x7f0000000300), 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffffff08000600040000000800110009"], 0x5c}}, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth0_to_batadv\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', r3, 0x4, 0x0, 0x0, 0xfffffffe, 0x2c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x20}}) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="2503000019002551075c0165ff0ffc02802000030004000500e1000cee020f001a000000", 0x33a) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x10}, &(0x7f0000000240)=0x18) 9.448555637s ago: executing program 0 (id=766): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local, 'gre0\x00'}}, 0x1e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x1012, 0x0, 0x0, 0x0, 0x0, 0x1}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="90030ee7ff072d2203000e2108060001080006040002c6b572da3e9647000000ae515669487147"], 0x120) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f0000000f40)=""/4096, 0x0, 0x1000, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20ea"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) r6 = syz_io_uring_setup(0x13d6, &(0x7f00000007c0)={0x0, 0x527b, 0x800, 0x1, 0x19b}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = syz_open_dev$media(&(0x7f00000000c0), 0xfb36, 0x147200) ioctl$MEDIA_IOC_G_TOPOLOGY(r10, 0xc0487c04, &(0x7f0000000440)={0x0, 0x5, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000340)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f00000003c0)=[{}, {}]}) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r11 = open(&(0x7f0000000880)='./bus\x00', 0xe080, 0x183) fcntl$notify(r11, 0x402, 0x8000001c) rename(&(0x7f0000000b00)='./bus\x00', &(0x7f0000000300)='./file0\x00') setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000780)={&(0x7f00000004c0)=""/59, 0x18000, 0x0, 0x3e, 0x3}, 0x1c) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x30}}, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000000), 0x4) 7.56251554s ago: executing program 2 (id=775): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) semget(0x3, 0x2, 0x284) semget(0x3, 0x0, 0x0) semget(0x0, 0x0, 0x0) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, 0x0, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r5, 0x80184132, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_io_uring_setup(0xef5, &(0x7f0000000240)={0x0, 0x0, 0x1, 0x40000, 0x375}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r6, 0x47ba, 0x95ff, 0x0, 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)={[&(0x7f0000000340)='}\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000400)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000440)='#*/\x00']}, &(0x7f0000000640)={[&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', &(0x7f0000000500)='@,]((\x00', &(0x7f0000000540)='ethtool\x00', &(0x7f0000000580)='@&]}\x00', &(0x7f00000005c0)='@*$v-^+\x00', &(0x7f0000000600)='\x00']}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0) process_vm_readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000680)=""/243, 0xf3}, {&(0x7f0000000780)=""/204, 0xcc}, {&(0x7f0000000880)=""/48, 0x30}], 0x3, &(0x7f0000000a80)=[{&(0x7f0000000900)=""/185, 0xb9}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/186, 0xba}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x4, 0x0) 7.198614569s ago: executing program 1 (id=777): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5452, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x30, r7, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x48080) r10 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r10, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r11, 0x107, 0x8, 0x0, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 6.968439126s ago: executing program 1 (id=778): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0xb15, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendto$inet(r0, 0x0, 0xf4ff, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 6.634719478s ago: executing program 1 (id=779): epoll_create1(0x0) epoll_create1(0x0) socket(0x1a, 0xa, 0x101) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket(0x5, 0xa, 0x3) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000240)='./bus\x00', 0x4881, 0x181) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000140)={0x0, 0x0, 0x41, 0x2, 0x0, r2, 0x0}]) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendfile(r6, r5, 0x0, 0x20000023896) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x22a4, 0x800}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, r0, &(0x7f0000000200)='./bus\x00', &(0x7f00000002c0)='./bus\x00'}) io_uring_enter(r8, 0xa3d, 0x0, 0x0, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)={&(0x7f0000004980)=ANY=[@ANYBLOB="f03d0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3df0}}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="98030000", @ANYRES16=r12, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRESDEC=r1, @ANYRES32=r9], 0x398}}, 0x0) r13 = socket$pptp(0x18, 0x1, 0x2) getsockopt$sock_buf(r13, 0x1, 0x1c, 0x0, &(0x7f0000000080)) fcntl$dupfd(r7, 0x0, r7) 6.158373501s ago: executing program 1 (id=781): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b000100094000090485000189fe1f000905820220"], 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000180)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000080)={0x3}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0xb, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x20}}}, 0x0) 5.939541269s ago: executing program 2 (id=782): msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/4096) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) r0 = openat$vcsa(0xffffff9c, &(0x7f0000001000), 0x800, 0x0) write$cgroup_int(r0, &(0x7f0000001040)=0x1, 0x12) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283f2305e02000002ff02000000000000000000000000000104004e20004d03"], 0x0) (async) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003380)=""/4096, 0x45}, {0x0}], 0x2}, 0x0) 5.864136955s ago: executing program 4 (id=783): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x95, 0xaf, 0x32, 0x40, 0x644, 0x800f, 0xc577, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xc, 0x48}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000180)=0x67c5512d, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) clock_gettime(0xffffffe4, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000006400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x18, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x2c, 0x40}}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x6}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001f80)=""/4085, 0xff5}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r13, 0x6b, 0x1, &(0x7f0000000700)=[{0x2, 0x3}], 0x20) io_submit(r12, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r11, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) 5.422085323s ago: executing program 2 (id=784): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmsg(r3, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3c85}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020811}, 0x42) 4.819190168s ago: executing program 3 (id=785): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000400), 0x4) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYRES64], 0x5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="2c385a4706", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c04000094780000080a0000000000000000000051c16e8b78f1dffb0bc7315bd5"], 0x0) recvmmsg$unix(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000a40)=""/143, 0x8f}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d0001"], 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000002a40)=ANY=[@ANYBLOB="02c9000000", @ANYBLOB="26a0e6f6e13bb9bd96655d0fe0842fd400ed0cd4f6c6b64cf895fdfbad80c529867dec1e03f33293279a38d163bf506edf49a0f43ff7b3cfa12bf14ae6d6817dbbe465775dc1048e9bc19ee381891b2211d618312b4307e485c7bd2107801425ee6a75685cb5594f332e3a39e4b6aeaba690a46e927f6a514e579fcddfd89a7ab455ae49209cc38ae247fb84319f5250e5a8b73a916adc63109d817339058db510cbfe966dd68562500689722eb2f5a9fc11b956cb4d8ea2669bd7bce14c9a7a29e1eb65b5d289a2a98ff6ced546d56466fa8605d559e288d73d737412f6fb7d15b5c41fc64edbf33056ba500b91596f3ba5526d04cba2c42ee797bb4354eeedcb74a6cfd37efa5281f3b9fcd5a33ff1ffc2788008561966342ee60add71da3aaa09742b72d86394834cc424505b2bf815c29dc4da75550ae55af54e95d27d24336a1b47e58c4b3bb1726f79d742c347e1b7a52ea6049506600f53a1b8cf2bb53b7962d3109ee27cdecc67d89999914b471a6e461cf6cc1b81ed6a91c49a0a2a2fb9fffc93c8f7e6174fb96fc8af06cd372c2b4769db5b92c45667252b7afff4a092ba380ccdc96441a9e2a8809d3230e8d8a34fb9c1b6f517b8d72bbd3978d36d098642da5369f4f292275b5cde0ce6247e826f7a23d9added1dc0c2ab332067bc199339feb8082df3f877394d1f8d90ba27495e24a5c084420b2644346ab9079a7b507d1a2eb88d869d1f48d013a724ffbf6b7ca585b74a5d005d421af7a939d87929b4709cafc5a6a2241fb1f1d5ed8bec4a15162333b9a4c851eca359693a821ba37e08d469191626755bfa67f56dd29dfbfec6075f5edbb9788eef0bc11e4f637f0b8effb1f2d01f64a83f488e84ca1d671b494ceb67dccd93bcf5f50de44dd1869f49cbbf6a2ffd98995b8cd9d52caf1d05f531865c560f0adaec062d66e631e752e3f5dd84ea8bbdf83ed7f8e9061319dba96e8eb7617c214d3c4a416b5af96c55739d6dbe3812d3f887293c8079b43c0279001149b833795eedc495d357c1d504e52bd54613480262dc777bce9c3bd1d653e3ed16887f7c104feae5be9a923e8cee8d711190f1f48d21acb0ee07f31273583979585ea2227bfda8fddd9ead3b29817f2d69e87bb6a89f3391d3d2c7d61708dde2f6355f027165401a535163239b4475db1505011a4e518108ac4fedb0a4271e7b6cc36b4d55a8b484485c5c09a02414e62c16262675c6deb0e92d8b03347d256304e140bd4bb5d2e33f2c0cc484a1829520341f12997fa5765a0e1a1f2df49a6a050974d6e5b13dc00086d12d75cab8ecad734d9c8ef7208448e1391c57ac346bde8a14a74aeaea2ba07f235423c9c12c7b7def05bad6510ec3123f6b2bb245558c84e13f2da929dc2810698d7881e76196455f20045f5a9818a61c4862ba9e582aac959aba02cbc174fa3fcc9ea2ea37f7a4b2f785e372f96338cf9dcaa84ddefcaf03bdc824bee391767c20b7a9f788a27ac457f06cbc1b35b5b5a4dd572c4d0a77b94e61ebcfab5dfd6601d4cf110bd6feac884f90e2d0d48aaab15841150a2d203b454ea91a88a317905acad2efabf1f9e2b42d695fd973f7b7c8bf25db5f433c6378317d70188952573f73c12ceb09a705506f3d8bc07f2b7621eab7e53c49e885fbb5f2d8e00865a18818026db3803b8ed0c14db69ba29e72cfe37d2a07c856fbdc8b8ac83ec3ac5044ab576e373bedeebcd693796ef5cde64e9d60a538f93911abfbbfd4354c9498dea4f771af857a1d7a8aaa730ef8d73d6f72ba1843c7a5503a1c1a8cb17e4a8d7f3c68982332a66a8dc991fba4c798140b65fd31a1a973d5f033c034ee446ca525116805fc171f830c34f1513f5d55b28e99b7bb4130d5f42335c5029f73078aca8a093c6250527a1c2ae9579e3789cf4c65c8ac2784566abcd83a86a17b66b937afd5c2269b1f14b876fb69f890962a13b3044c380a942c5ea1d6572d782132d15a2e534547cef31c07750f43eb51386e4841b4232068b986b5bf47ef21e25f116660930a414af2c44d370b753ff62655bf367dca76eb88d47975d20ef7fea822e3f863461dfe8d61936a3ba16c4eaf84c1c0ba73288cab2a62b976b89af2827ae01005c57d084bbb1ba1363e3366b3c6c34f6186a8fa40f33bb87a8385d9f4a32a3b96b5c71541df214c9ec5a2b766d51b70d466bd575db568a3cdac23eafc37d53719ad2f887980c684df080083d7d0d756cd8270f84eb0b55ecd895fb6d32b00812951968ff5f872805d1b458f4ffd752861570ee5ed342ee6aadc8877465dff4ff093dc375de0a04b23f9ea3b0483dffda4bed5aeccecdd25df0b6f1cc6d1bdaa8cfeb2cefc2ccb6df19cd32dc61038766b6dbcf10d54f7d7205d3141530d3d594d9b11dce10927a8901c69cca3a7527b6ab03a7c90417d57cfae9cc050f128aed26fc4599fa63dd95f4606afc76758cf57a6828166cedf0382b503c38e1355febbc41a3ddd0a57fe89e5d401246d22d55c4fbdf30401adf4913ea3e4fecbc920f2e1b237db1240f2541d11f899e81054336f1cb2e1dd59f97b6261f30c022c89b80054ac043448d212b36a0a3989a87a7012d631247540aaca1baca9527cc8490642fc9e72d95b286dc6508d1655d518c4f0f6e6ba12030f41db55d2fe7c560d5b940d7973b6c62a9b72749c82ac4b20f1aa07a22791b0e53978568f6015fbd5f9cbce68bb01ee3e552c51219b609978fbbdc4b6f221e1ce0d64946df8501974d8cbb0271d284e5f6567d6f09db8d5d970c1e17c99b943ae4a0b8322f4437d24a205df5f35074ce7506044b6d403f574d6ed03f0b8417c94f6c77739811185ac04af65759d6e33ee576e063c21c6550a11dc2cd3b492c9afddabc823228acdb5df9d8ab0c74138b979c124ca3aadf236fb69dd3b0c549813014c1bca2b8de073aa515d9a248537959ae7a11187cdd2e6fcd09cffd676edcf8abdb5fc7529a9ae4fed1b21ec302676e8fd82507025bc39cfbf4d4d91be81d5bbe390552040817bde8c0638c5eb5ea1c4e482cca819fd2a7418fb6b3edc6a93d6bf6d60d457e364ce11228122fe168fed39fc2e50377cc9586ac41d196060bbb7b4e3245cabe1b2ca824dcaaf74b23ed942e3e45b6d887acbe7b1ad5b3c1ef93beddf2d5e8d08d67d4d094f6d3a046798244697b6d43121e387a4ac3c123d2be2cf7d0b8891be726399abf01d83bf6e21d9f54d49b987f119b19072da9545543b98bf69496f1fa29523b91ddcec4b69cc37786bda84f638760a1a2af244a90858069175bb635cd4a6bfc37ce14a2de76907fbd321745d482a2cd2b458f398ca4aaeab3f34ddcc8ebb070e6a0a2e6577b56eceda6997fef5ee0de02f239a34b7a58ce2712c3946bf2b81e7186fd2b0e5f2ddec3a3d4094c4daeb4ee8062fd4da0436e79eced493a53ac8b4ff9f77be8d5730c996fa7cd25387a45246f673a8e0ab89d35eab1870830c550936e67498ce720832098a21c4b6a3b178f7dcb273f41a3f15d260b17ae41ed96125542156ba6ba08a61d9a9adfa7084ff20d11e2f3deffea3a6bda2aa2aeda1e05fae2a40924833e1086c120aaa203850ae120f41bcd2c637edad633e60ccc9e8bdab18e4aabc12995d121f38906486a042d7108a85755f6a7cbf47a9a84e45694f324f2bf968acbd7589a0d833b1aab08bce5ddf14bed0317cf4b71051e79f9270229ce1e03850dadcf589e7de6ae7eac30cc3de33138d91e165375dde9378bea7606c43be78da471d2f1e704218f8bce37cf7e5b2320e9807c82dc44f162885637d4db57fb1b5586f6ca1cb8075c7c88b768d47493b0d3d3eb0941b1230a2d63e871cea81ee2dda43846752403259a29af5685a44b2125d525a0bad9342b9fa3ee33b6448e8acfbcdec5debfefd0a349001cec52d79c9115eb9bd1e7c1b9306222ef79e0c77dc1d03ee2a6c0295b1bf09c01ed5f8473b683da45dd4d52c7df2f012d44e2b0fb6aa935b25ee0a487e6743e9ca1210989b4fe7da2ae5b5ed7dc60d8cdb8822b9bbe71140f0798d2ff2e195516f6b0eb8d5a8460738133bcd6d9ade0f7dcc00eea42d8b367cb82a1388126d0567f11d78f7ba243c052c8d0213f5b7af483d9a7a9be96c765b7fd3e8ada3b0ec19649bb51a5ff2707bf326f1ec759e2d9aef5eba2de1c97c1565ee6bf8ecde670608001e5ce48d4d292076978431c2b9dbf4fca7f9e7a6d6af9a091020c209c8bbd4900ec0aef68ccb167dc21972026da65e4d129e5c9aa2fec0888e8191f06ec805787fc03bcaa28ff326c7a209c417b04c1c6e33600bdb8c1096206dda0c95c7d849965b3ab82c6ead78679ee8a58e58dd48007934e26f69048886a575dfb286d8586a25990b44d609fcd3a9a3cb6540748dc112fd19818825664adc9e971bac1968116d6294c3fb1b673f10529fcf91f1b34299de145801e243641e1bbcdd513aaec72691caee74ed74f3fc35bd85ea02bd301244dc4374a59103a256ccd839dda2f9d508a8b41003be1941ecd5f01812cd48728fe9a358afb4c1b27833fc0cbfae3efbaad6809c674d8dfe690f7b48e63060f939ea1724f79b5e72573e96880f087a49eb4cde348e2d71dec822660c7a5d6a45edce150d0d3f768f0ceefa5358805bba9614b8673de6a103f50f3e1437b72dc83f986c6e0078fe803d70515f098729ab72109fe6ae5138f6ac51297049b667709ebf2f7eaeefd20a39de1dd89d8f6a6ddb8efe0cfc473280d4590b16cfb0f555e3856930c507071839a58a2a7dee56d271b6d6aff440f950fecd8eb9b891442e6140cf3ffdb118fe1a12ae959a38eeaad782623cd71eb1671e2e811b8c3a5571b9ecf0cc7f25f36b302f77980a9b487ffa1f07292a830ed9afe3a8505c875ed0f659992dad23a10ae73e355b16cb92e0c88711c6947d226c8087b1c80d9e525c86e15338c68ad5905b6e676c666f282b1d65ff43b209af542a0686c42289a463a651a85e0866cb158fb44bcaa83f67ca486e4a18240f1bec2d3a79e9a212be3d84122a1e4599ef9de25c154624461412557cb19ce4980d2052e75c464ba181114258c029ffce71faf0651cfe00487716772b8a35ec7109440c97746c25b02db6f87e8dce857ad8d4713311008f4f81312096055c579ca910ec4165d646dc21b6de5d42e73614aed35d848566f35eec7ee68dbf7ca855500193986b7bed9ab2239d36eb66b56db42736d0b55963e66ffe8d0ec2fac942df9736a57ffc15cbbe45998b973c9f755fad60cb8fc1b87df4c175ba44b494ec33f39aa6d0370e596570f52098f409f89b4e195de8ec66d4c4e427655630adca871b5de1587a1996817d0750da94d4b5bc0610f23054671c6ead0c5a71ac0c21a8b7fb7fcc5e87e0b1e7a3fbb6e9dcf5c1941019372987e10e591404be916bd388489d5da50b76853f4dfc6ca1b938430a546ee97f6b5eb5eb6c5e208d4e57619d4a2d5671975b7a9e64d49c38976552f0063306fadcec717ac3dbb0d5bba5368ecdd3bf5748b7bd17b0c99d0405d5562cd6913da06f5d708793d76e43e1387f1b5b248704df1d5acf7b3e060c5e6c8a6f89dfa161090b47f88da28b43e7bde7fe988031f7851a694c5373e63f97f1d06b194cc0dfedda6c9e300c602b9b7d88c65e7aff754852fc9c661244ea3275adea5e06393c6a6ffd044cf3675d7002cb6fb96c9a796526cc467ed11831c5669125c73ad579531562167b8c0e8a0517e38f5be9b9529cebc5fd54f6a5882edfbd2c8ff620dae32a2ad17a7ec5b24b670f52421bd", @ANYRES16=0x0], 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x13) 4.297498487s ago: executing program 2 (id=786): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x5b39673ff48912a0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000ec0)={0x0, 0x0, r2, r4, 0x0, 0x0, 0x0, 0x2003, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, "f617bf12f85ec608623fd5c9416ff7ab766cf1de733075a1def5082be47a6f4b"}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00'}) r6 = socket(0x1, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000100003040000000000000000ff030000", @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012f286cc96d0a63185c6502b25272d5053800c000100", @ANYRES32=r9, @ANYBLOB, @ANYBLOB="99546cea254f93b0dc78e1fd402bad2062d0542945c0d31dd660", @ANYBLOB], 0x44}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r9, @ANYRES32, @ANYBLOB="00000000000000000000000000000400"/28], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r12, r11}, 0xc) r13 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$cgroup_pressure(r13, &(0x7f00000001c0)={'some'}, 0x4cdad095) unlink(&(0x7f00000000c0)='./file0\x00') r14 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000020000,u{er_id=\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x204000, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) 4.186010572s ago: executing program 4 (id=787): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a010000000000000000030000000000000000001000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 3.900575987s ago: executing program 4 (id=788): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r1, @ANYRES64=r0, @ANYRES16=r0], 0x2cc}}, 0x810) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000800}, 0x40010) (async) sendmsg$rds(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{0x200000}, 0x0, 0x0}}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}], 0xb0}, 0xc050) 3.818313698s ago: executing program 3 (id=789): r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1864, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r4, 0xb15, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendto$inet(r0, 0x0, 0xfff4, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 3.783288406s ago: executing program 4 (id=790): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x100000, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$apparmor_current(r1, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x3a) (async, rerun: 32) unshare(0x8040480) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000a40)=ANY=[@ANYBLOB='8\a\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x738}}, 0x0) (async, rerun: 32) r2 = socket$kcm(0x10, 0x3, 0x10) (rerun: 32) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000940)="725d4bfc3f879564924fd9c8fde222fccb7fd1d0533681e2ee9bdf123f8fbd5f5c97e279de4a1b2cda52c1de5661fbe878f538a8a2758e94bd104504eaf902f03d00a9c7054903305c7cd64d5a45542a912b0e04e71773f2da7af2ecafdcf67b8416b8297ef8c5231616d4067944b7764ccfb1cef62cda08b97d05cbe281bbdf912165e7ae969b6163c74d7cd592898f9d188a5692ec89e4bfab223f7fff7e76733ae60b23c64e5f1205f20c64034162883dfcef283fe3df691f730b6d79eb9b5106e393e9df952a315e0b82fdcb1bdc11dbad8417d5ad9c24a881cf8b2976763d1e72343006d7606a2ad955b5c8e2b711", 0xf1}, {&(0x7f0000000d40)="e3378491031661d89f8164b1c889619fdb9b2ae5db008982264b6d2a01e502010eb1bcf8535fbf0c21eaed9df599e66d965e2a63bd483f129e11affa4e64c4b26e52ac709303a82245b9472445ef8e548567bb1edc43ed49d64fe8cb99dfa0aac4193c6373db0ed16ab3ec4b6a2f48ec09b3d7945aa11c1aae1edaadbf160d15af3d7c025263aae8576c90c45f18cb8f4b03dba6ca5186286c33f5755fe12efa5910be9b857f466fc99bbabea30479fba5726e4a33ec34f7", 0xb8}, {&(0x7f00000001c0)="f3332f9d2238ace15329ba41ad7a5740fbcfa0387f2486133998c9b3c10946764b0b99d82ce639f56cfe56e6e9aa", 0x2e}, {&(0x7f0000001140)="ca66c71c58b6db960842c8c5bce85b45aed967c270641b54a8a75bd381970000f7e2d8af15e6382ac3cedcfe1a2f6259c87219254b8fcbd8c962ea9b059c3fb466547b4dbe7238455d6f96180a13fdcd1ceb65e9a592f102b798dc32a094546c5c24f9fe9eed3d8389165c2120dba5", 0x6f}, {&(0x7f0000000ec0)="64415b3df50ea972e7aa05291d40c87b019c7644ea0cb7a95cf0c00593ff8afaeca848a0965073a5bc48f401e0b9042012f58da57525a2c7f13fa567b194af581bbbcd4baca2ac1455b7a4e80942d0a436588c851fc3829cf23849448ea66e80fbf580bb2a97c92cb1570ebcb2fea40125c9fd", 0x73}, {&(0x7f0000001080)="e8ae1de09cf8f2c130640627f8bc072479ffbde1072ca3ebc1d70c6ecf419c385bec6009db9b8d58195d7c1f230ec53f5bd4a03cfb822e6280351af2c15fb4a53ea7c32bf62e3a6157a26d9327a7a37a7c9fe77fb442825be08ecea196e713e57f99d9c981c5e3f48383dfe8a75be90af438e91a120df4e30fc84dabb4c451ea2b70cb277e151ba9e333b6a5eda9bd7cb9e7fbec93cccae916627770f4ec2577283300c5ff30526ed31f16ae02a42f3a2169e2efa027ea", 0xb7}, {&(0x7f0000000f40)="c3695ae96260b64ecf1b86e9da87159f464a98e48fd5622bc4b5caf9a08e3dd5e5672187b455d6898d6ab7c8e18815a6cb061e7098419d02a7a64fcd3bc7b414d5bf1ce906e38accb8453f17963546cca719f6403d074c89eed3e8b4745999ed13117cd95d269b8482251edc621fb3255ffbc224fbf692c357f2fd9fb4e5ef1c6e36b7f52c0bde89aac7274edd5e244141fd2165281402e18e43403f", 0x9c}, {&(0x7f0000001000)="2fdffd65e92a62b3699e920f2b57a215d4bfae0945a69d9ba9e6f6ac6548bfc5512ddcf7a902febd68373b7c34caab0a830f1be955fb6bff41fa66deb697f4f1872ffb1cb4a322714ffb71c8e9929e916e5cec368ff8d5b76c04a8", 0x5b}], 0x8}, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102380, 0x18fec}], 0xb, 0x0, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000700012800b00010062726964676500006000028006002700040000000c002e0001000000010000000c001f00030000000000000008001a000100000008000400d5f6ffff080001000f000000080001000a000000050026000100"], 0x98}}, 0x0) (async) getsockopt$inet_int(r5, 0x0, 0x0, 0x0, &(0x7f0000001380)) write$P9_RSTAT(r5, &(0x7f0000000580)=ANY=[@ANYRESOCT=r4], 0x56) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000340)=[0x0], &(0x7f0000000540), 0x0, 0x2c, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xf1, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYRES8=r1, @ANYRES16=0x0, @ANYBLOB="20002dbd7000ffdbdf250900000008000300050000002800018008000300ac1414aa14000400fe88000000000000000000000000000108000700", @ANYRES32=r7, @ANYBLOB="1400060005000200ea0000060000008e96a910000000000800000a8c316e31"], 0x68}}, 0x80) (async, rerun: 64) syz_emit_ethernet(0x7c, &(0x7f0000000180)=ANY=[@ANYRES64], 0x0) (async, rerun: 64) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20082, 0x0) (rerun: 32) write$sequencer(r9, 0x0, 0x0) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, 0x0, 0x0) (async) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x5, {0x2a00, 0x80010000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683000000000300", "2809e8dbe10859b2c57a33000000001d875397bdb22d0000b420a1a93c5240d15f819e01177d3d458dd4992861ac0000002000", "90be8b1c55120500000000060000a0000d00000036013d5c52e0ab4f00ea00"}}) 3.608762659s ago: executing program 3 (id=791): socket$inet(0x2, 0x4000000000000001, 0x0) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200087fd, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="6f59bb6929621210", 0x8}], 0x1}}], 0x1, 0x4084) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114660000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006114660000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xf0001, 0x0, [0x621, 0x0, 0x0, 0x0, 0x9d0, 0x0, 0x0, 0x48c8b3f4]}) (async) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xf0001, 0x0, [0x621, 0x0, 0x0, 0x0, 0x9d0, 0x0, 0x0, 0x48c8b3f4]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) r4 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) dup2(r4, 0xffffffffffffffff) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) (async) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10540, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)={0x0, 0x0, @d}, 0x18, 0xffffffffffffffff) keyctl$instantiate(0xc, r6, &(0x7f0000000280)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', '::F/]%$', 0x20, 0x2}, 0x31, 0xfffffffffffffffd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000087080000000000007baaf8ff00000000b5080000000000000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70208000000182300"/92, @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000080000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc11, @void, @value}, 0x90) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x810, r5, 0x96a3d000) 3.550058567s ago: executing program 4 (id=792): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) syz_usb_connect(0x0, 0x51, &(0x7f0000002480)={{0x12, 0x1, 0x201, 0x4c, 0xf1, 0xc5, 0x8, 0x763, 0x1002, 0x5f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0xff, 0x87, 0xe7, 0x0, [], [{{0x9, 0x5, 0x88}}, {{0x9, 0x5, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x2, 0x6, 0x2}}, {{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x732) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r2 = syz_usb_connect$cdc_ecm(0x0, 0x88, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x1, 0x1, 0x6, 0x40, 0x5c, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x6, 0x24, 0x6, 0x0, 0x0, '^'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3fcf56d2, 0x3, 0x8000, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0xc}, @network_terminal={0x7, 0x24, 0xa, 0x5, 0x6, 0xab, 0x7}, @country_functional={0xe, 0x24, 0x7, 0x8, 0x8012, [0x7, 0x3, 0xf1, 0x6d]}, @mbim={0xc, 0x24, 0x1b, 0x0, 0xc9d, 0xc, 0x90, 0x8, 0x3}, @acm={0x4, 0x24, 0x2, 0x9}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0xf, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x0, 0x4}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0xd0, 0x3, 0x0, 0x40, 0xb}, 0x72, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f72000524100a36265d000007f05c8bc03fb00000009f00ff0000c000000a1003000800007405001c100a030413000000f0030030000000cfc0000030000000003fff000b10010c10000611fcff0018100a80a300000080f00b000fffff0000c0000030c00000"], 0x3, [{0x34, &(0x7f0000000240)=@string={0x34, 0x3, "c9e83a0aba94d220761fbde5fdf6a44cdd14b63b67df5f9b8fb26257eb17734af7cd6f63a4b3f87d0824ab467ad7a7d5544d"}}, {0xa8, &(0x7f0000000280)=@string={0xa8, 0x3, "6d58612379d5b6160eafccabb13bc4ad7dc43199094ef13b0eb417a708ad8544664fc51d647297bf0eac3425c9e6a33ffd1e1576b8fda5a4949ae6f64bfde11f9d8800f8204a165c6049d7d957e3ed61b8b4c9a7ce6bf36e0b2a65f928560722c9778a1001b28f1914604967f31078822b6d25d0edc55e83e8daa7761a9ef461500f7fd7a47a30d869276b07c7a137b21539f06ec1520a93e014fb27e5a204735c4d69cde88e"}}, {0x3a, &(0x7f0000000340)=@string={0x3a, 0x3, "68b2f636cb57e009840c2e4f626d42fa1c9945497e72fe2cb3d53ade2076552a740fd707a9441d2143b5f1afb0026df9f92b546712c67000"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@local=@item_012={0x2, 0x2, 0x0, "9906"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @main=@item_4={0x3, 0x0, 0xb, "f2a808b9"}, @global=@item_012={0x1, 0x1, 0x0, ':'}, @main=@item_4={0x3, 0x0, 0x0, "0000e600"}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0xb, "9d0e0020"}, @main=@item_012={0x0, 0x0, 0x8}]}}, 0x0}, 0x0) r3 = syz_usb_connect$uac1(0x3, 0xf2, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe0, 0x3, 0x1, 0x1, 0x10, 0x32, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff}, [@processing_unit={0xc, 0x24, 0x7, 0x4, 0x6, 0x3, "f62a7510b5"}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x0, "e4"}, @mixer_unit={0x7, 0x24, 0x4, 0x3, 0x80, "04a0"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x205, 0x6, 0x4, 0x4, 0x7d, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x6, 0x6, 0xb}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x3, "6580da24d5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xda, 0x3, 0x2, 0x5, "", "c1ee02"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x82, 0x1, 0x5, 0x1, 'h;'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x2, 0x0, 0x2, '\b'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x7, 0x1001}, @as_header={0x7, 0x24, 0x1, 0x10, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x4, 0x8, {0x7, 0x25, 0x1, 0x2, 0x1, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xa5ff, 0x3, 0xa}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x4, 0x8}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x0, 0x7, 0x7f, "1094"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xed, 0x5, 0x0, {0x7, 0x25, 0x1, 0x0, 0x2, 0x80}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000780)={0xa, 0x6, 0x110, 0xc, 0x0, 0x40, 0xff, 0x2}, 0x20, &(0x7f00000007c0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "375ac55e0b05afb007e35a39f91d9446"}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x6, 0x4}]}, 0x8, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x4001}}, {0x36, &(0x7f0000000880)=@string={0x36, 0x3, "dc1dfe3556504c300e2a30023aa6f35af32db93fdec4262a3e3649fb5aab5b8c8888b5ad30d24d52f35b9b7784ef383422448880"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0xc1a}}, {0x44, &(0x7f0000000900)=@string={0x44, 0x3, "5c858147dccb7d5dd39db5edaf993bbcbb6660da6b29b33785b0bc2669b4d3eea7929c3104c0678041b845b43ff5f91a4aed238017a500caef44728f4a6fd548f5be"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x418}}, {0x62, &(0x7f00000009c0)=@string={0x62, 0x3, "28a5e58c68909c36fe35ddebe6053987ac278523a6aaa35cd12361037537c4c70e1e36b62cf8e3c8927152c2697a16ecb3fc2926c6a6d24898f595ce9bbd1c112d34684ceda10663de8ed1264ac5a5ba086417b9f1b04b3b6915343096c2eaf2"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x140c}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000000c80)={0xc, &(0x7f00000011c0)={0x40, 0x23, 0xdf, {0xdf, 0xf, "428da58fae356ac37b925fa4e8f0f3b052c1a60d4aff4b09cc0b616d766633be03f5784daf24007aa6580b5a887958e778a432d7654075dd38860e75fce2fb7b7529bab2beae75be94791e8a70ddf15e4b9687fcc7c3d25de707f24e05def0c28bf85aad29aea974d842c0b0cb615d356047b19394de12677df36601a90682216ef4406ba8f87dd00683c33b30246b505f8309a09e940a293d39b23442ea5bbadedab1bc59c3d50c511e6b777cb8b6f7d3649654160f6d98573036791890ccc3b485acf9ecf6e5927affa89fc7c1f54369f25e8028d4b98e6e54ddffae"}}, &(0x7f0000000c00)={0x0, 0x3, 0x60, @string={0x60, 0x3, "3eb784f3fe94bc392b8a510ca687dedd899167cf3d4e29b90475bba7c18164a980b61163fe492a4461ee9dfea36dc965a8c6a5ac3cab39d6b2fa194b101fef5c2bee59197a69f7684be0a1c244ed5181925e4d1475b825be5c76209d63f0"}}}, &(0x7f0000000fc0)={0x24, &(0x7f0000000cc0)={0x20, 0x8, 0xfd, "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"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000e80)={0x20, 0x81, 0x3, '}W-'}, &(0x7f0000000ec0)={0x20, 0x82, 0x3, 'c:G'}, &(0x7f0000000f00)={0x20, 0x83, 0x3, "e9afb8"}, &(0x7f0000000f40)={0x20, 0x84, 0x4, "c2e517df"}, &(0x7f0000000f80)={0x20, 0x85, 0x3, "d64c2e"}}) r4 = openat$binderfs(0xffffff9c, &(0x7f0000001000)='./binderfs/custom1\x00', 0x803, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001180)={0xc, 0x0, &(0x7f0000001040)=[@release={0x40046306, 0x1}, @exit_looper], 0xe7, 0x0, &(0x7f0000001080)="540544f964ae91bc7a9784828c126c1050288ef4416bb0368eb14c84103b51ccd66d7c3709ea85e971679b1689898d421defef3358ec573c5aa56bc7cc4b3995b0a9952e5088fca132ee854c3a18723c72bf07aaa638400437c8294c93f23eab85640abfadbe15217a3a3cc2bc9fe292d2c21e5178d0ccd4f1a78dc290bdd4f23dc4db41e6b62d013c5ee63eca20c4f646fdb9061077f3fe2bb75902fbc96ffac3d6b03f315a3e30e655b7edf1492a547fdf965714fdd326f40e3c83767a108e904af386dc786de172f0e9b1803b52863a0dbf5e43e23bf566cae7a25f1bea78dd4f6a80caa254"}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000540)={0xc, &(0x7f0000000400)={0x0, 0xf, 0x100, {0x100, 0x21, "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"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x10, &(0x7f0000000580)={0x0, 0x17, 0xc, "5891dffb735715fae61d13b1"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000600)={0x0, 0x8, 0x1}}) 3.351635379s ago: executing program 3 (id=793): r0 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x100) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) (async) r2 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f00000021c0)={0x50, 0x0, r3, {0x7, 0x28, 0x7, 0x9, 0x9, 0x8, 0x9, 0x8}}, 0x50) (async) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x47cdc) (async) ptrace(0x10, r0) (async, rerun: 32) ptrace$getregset(0x4204, r0, 0x202, &(0x7f00000000c0)={&(0x7f0000000100)=""/127, 0x7f}) (rerun: 32) 3.11983573s ago: executing program 2 (id=794): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmsg(r3, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3c85}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020811}, 0x42) 3.119058358s ago: executing program 3 (id=795): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0xf000, 0x1, 0x4, 0x10001, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x65, 0x0, 0x3, 0x2f, 0x0, @remote, @rand_addr=0x64010102}}}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x58, 0x80000}) 3.058292349s ago: executing program 1 (id=796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) recvmsg(r3, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) dup(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32], 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3c85}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20020811}, 0x42) 3.004575031s ago: executing program 3 (id=797): socket$pppoe(0x18, 0x1, 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000020961b0a0000000000000109022d000107000000090400000503000000092100000001220500090581030000000000090502"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000d40)={0x18, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000008c0)={0xc, &(0x7f00000007c0)={0x20, 0x1, 0x84, {0x6c, 0xe, "190e0539cb62850be84f9e916952aff7b6b297b0afeef0fdcc59f1d6e5911bf16fc543e8de94e41423b30ad6caef079b771ef6e1a04ff900a04ea76663d7f39ab0688981db6a75a97d535e8290ce2a4665b17615c393c75a5d08b3a82ca5e33ad9ff25a1a066721c5ca6fe852674dd09670e490b9c628f1d7ce1e9b2490e3374b43f"}}, &(0x7f0000000880)=ANY=[@ANYBLOB="0003c6d80a7c8f027b57"]}, &(0x7f0000000ac0)={0x1c, &(0x7f0000000540)={0x20, 0xe, 0xee, "666eeedf4ef81ae4b27990833c0d054fca1590e381c512d7936dc930129eeb07c9b2f74abf45a0b7b88d57773ef7e9a8a7000f2cb0b76143002a1face3298a753df4ff052e5541b09e64b8571cf9c13fba837dd64a52da0c67d3db325baecd32f6000000000000000000009d009de5beb81b8ecc3f0c97b5f2d82037c3def423fbb23bc8e90fc634f7ffaf2d99cc72fdf526f6493addebf40ffcd140ff246eea13778804a536278c2ef46e2e00aa840e150d82663b1d4fb3c7a1085f9f8a71c0f7367b64876e0a6e64c8ad3b21a61c84ecc2720db1c82b976be0f5e51e577826c087e4dbb69f8def650f06ab864a"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000a00)={0x20, 0x0, 0x36, {0x34, "6a155602a353a4c2f9045e8d02ceb7fdff8360bfc35623a72bbbd09ac14f37ea580c1b70d8a50b0ed1862d35fe094a0b83f969ea"}}, &(0x7f0000000a40)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000a80)={0x20, 0x0, 0x1, 0x6}}) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x20000804}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000000010000400100000000000000c700000005000000e00000000300000000000000000000000000000007"]) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sndseq(0xffffff9c, &(0x7f0000000500), 0x98000) set_mempolicy(0x3, &(0x7f0000000000)=0x3, 0x8) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fchdir(r5) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0}) dup3(r6, r5, 0x0) socket$tipc(0x1e, 0x5, 0x0) r7 = syz_usb_connect(0x6, 0x961, &(0x7f0000001100)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = landlock_create_ruleset(&(0x7f0000006f80)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000100)={0x1}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r8, 0x2, &(0x7f0000000280)={0x1, 0x3}, 0x0) syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x8, 0x3}, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000180), &(0x7f0000000380)) pselect6(0x40, &(0x7f0000000200)={0x4, 0x9, 0x6, 0x6, 0x8, 0x9, 0x8, 0x2}, &(0x7f0000000300)={0x6, 0x10001, 0x21, 0x2, 0x8000000000000001, 0xfffffffffffff801, 0x5}, &(0x7f0000000340)={0xbf6, 0x2dd2, 0x7, 0x2, 0x18, 0x101, 0x80, 0xd}, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480)={&(0x7f0000000440)={[0x8000, 0x80000000]}, 0x8}) 2.328055ms ago: executing program 1 (id=798): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) syz_usb_connect(0x2, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x95, 0xaf, 0x32, 0x40, 0x644, 0x800f, 0xc577, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x70, 0xc, 0x48}}]}}]}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x2b, &(0x7f0000000180)=0x67c5512d, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) clock_gettime(0xffffffe4, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r6, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000006400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x18, 0x1, 0x2, {r8}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x2c, 0x40}}], 0x1, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r10], 0x20}, 0x1, 0x6}, 0x0) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000001f80)=""/4085, 0xff5}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r13, 0x6b, 0x1, &(0x7f0000000700)=[{0x2, 0x3}], 0x20) io_submit(r12, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r11, &(0x7f0000000080)="0d32818e7e6ae0", 0x7}]) 2.150989ms ago: executing program 2 (id=799): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000000000003000000000000000000000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 0s ago: executing program 4 (id=800): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa877e10702750909711000000010902120001000000000904"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mmap$snddsp_status(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x200000d, 0x12, 0xffffffffffffffff, 0x82000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x36bb, 0x0, 0x2}, 0x14) listen(r2, 0xfffffffd) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000500)="ab", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000300)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000003c0)=""/75, 0x0}) r5 = dup(r4) r6 = dup2(r2, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmsg$IPCTNL_MSG_EXP_DELETE(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000001) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x0, r5}) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, 0xffffffffffffffff, 0x8c64e000) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r7, 0xc05064a7, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): p: entered promiscuous mode [ 255.844854][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.856419][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.866474][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.876971][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.891259][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.901612][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.912158][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.922056][ T7770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.932595][ T7770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.943961][ T7770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.983593][ T7997] hsr_slave_0: entered promiscuous mode [ 255.999253][ T7997] hsr_slave_1: entered promiscuous mode [ 256.019054][ T7997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.041110][ T7997] Cannot create hsr debugfs directory [ 256.054895][ T8041] netlink: 'syz.1.544': attribute type 16 has an invalid length. [ 256.072387][ T8041] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.544'. [ 256.106101][ T7770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.127007][ T7770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.146325][ T7770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.165681][ T7770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.190069][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.197403][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.304703][ T7905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.587773][ T7905] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.669406][ T313] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.676687][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.809090][ T313] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.816324][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.008315][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.016731][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.139123][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.149183][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.160805][ T1166] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 257.176863][ T7905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.320728][ T1166] usb 4-1: Using ep0 maxpacket: 16 [ 257.361596][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.411061][ T1166] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.412410][ T7997] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 257.430362][ T1166] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 257.461019][ T1166] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 257.471323][ T7997] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 257.485694][ T1166] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.512299][ T1166] usb 4-1: config 0 descriptor?? [ 257.539068][ T7997] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 257.550599][ T4623] Bluetooth: hci3: command tx timeout [ 257.711697][ T7997] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 257.770013][ T8086] loop0: detected capacity change from 0 to 7 [ 257.791625][ T8086] Dev loop0: unable to read RDB block 7 [ 257.803944][ T8086] loop0: unable to read partition table [ 257.821906][ T8086] loop0: partition table beyond EOD, truncated [ 257.828656][ T8086] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 257.828656][ T8086] ) failed (rc=-5) [ 257.842167][ T7905] veth0_vlan: entered promiscuous mode [ 257.850084][ T7905] veth1_vlan: entered promiscuous mode [ 257.976655][ T7905] veth0_macvtap: entered promiscuous mode [ 258.097216][ T7905] veth1_macvtap: entered promiscuous mode [ 258.338310][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.338342][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.338359][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.338377][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.338392][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.338411][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.339840][ T7905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.396840][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.396873][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.396890][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.396909][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.396925][ T7905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.396943][ T7905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.398382][ T7905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.483057][ T7905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.483116][ T7905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.483149][ T7905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.483183][ T7905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.520967][ T1166] shield 0003:0955:7214.0032: item fetching failed at offset 1/5 [ 258.521513][ T1166] shield 0003:0955:7214.0032: Parse failed [ 258.521574][ T1166] shield 0003:0955:7214.0032: probe with driver shield failed with error -22 [ 258.530003][ T8095] netlink: 16 bytes leftover after parsing attributes in process `syz.1.550'. [ 258.817017][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.906158][ T7997] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.941305][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.942157][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.009213][ T7699] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.009288][ T7699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.106818][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.106850][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.266930][ T313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.266961][ T313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.428352][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.620865][ T4623] Bluetooth: hci3: command tx timeout [ 259.625142][ T8101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.631799][ T7997] veth0_vlan: entered promiscuous mode [ 259.633841][ T8101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.675158][ T7997] veth1_vlan: entered promiscuous mode [ 259.875919][ T7997] veth0_macvtap: entered promiscuous mode [ 259.899785][ T7997] veth1_macvtap: entered promiscuous mode [ 259.960999][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.000182][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.045370][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.062720][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.077560][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.099257][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.119274][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.130677][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.149344][ T46] usb 4-1: USB disconnect, device number 52 [ 260.162531][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.205910][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.225634][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.236181][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.248060][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.258509][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.270253][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.291813][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.313982][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.344193][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.367942][ T7997] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.411958][ T7997] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.438123][ T8104] netlink: 68 bytes leftover after parsing attributes in process `syz.2.552'. [ 260.456717][ T7997] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.484069][ T7997] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.860620][ T5716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.868580][ T5716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.026092][ T313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.048666][ T313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.159504][ T8115] netlink: 'syz.2.554': attribute type 16 has an invalid length. [ 261.221150][ T5284] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 261.237854][ T8115] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.554'. [ 261.455115][ T5284] usb 1-1: Using ep0 maxpacket: 32 [ 261.468305][ T5284] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 261.480114][ T5284] usb 1-1: config 0 has no interface number 0 [ 261.492998][ T8127] warning: `syz.4.538' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 261.504142][ T5284] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 261.569082][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.590609][ T5284] usb 1-1: Product: syz [ 261.595342][ T5284] usb 1-1: Manufacturer: syz [ 261.612183][ T5284] usb 1-1: SerialNumber: syz [ 261.674883][ T5284] usb 1-1: config 0 descriptor?? [ 261.703683][ T5284] smsc95xx v2.0.0 [ 261.763880][ T8133] loop0: detected capacity change from 0 to 7 [ 261.772522][ T8133] Dev loop0: unable to read RDB block 7 [ 261.778295][ T8133] loop0: unable to read partition table [ 261.785046][ T8133] loop0: partition table beyond EOD, truncated [ 261.793650][ T8133] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 261.793650][ T8133] ) failed (rc=-5) [ 262.014207][ T5284] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 262.029067][ T5284] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.056206][ T5284] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 262.093005][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.117975][ T5284] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 262.131515][ T5284] usb 1-1: USB disconnect, device number 50 [ 262.157289][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.201135][ T5287] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 262.330516][ T5286] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 262.493834][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 262.505515][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.524280][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.539292][ T5286] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 262.557377][ T5286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.582426][ T5286] usb 5-1: config 0 descriptor?? [ 262.603513][ T8160] fuse: Bad value for 'fd' [ 263.034881][ T5286] mcp2200 0003:04D8:00DF.0033: unknown main item tag 0x0 [ 263.050936][ T5286] mcp2200 0003:04D8:00DF.0033: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 263.104188][ T8169] netlink: 340 bytes leftover after parsing attributes in process `syz.3.568'. [ 263.128042][ T8169] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 263.134624][ T8169] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 263.167188][ T8169] vhci_hcd vhci_hcd.0: Device attached [ 263.182442][ T8170] vhci_hcd: cannot find the pending unlink 5 [ 263.240886][ T46] usb 5-1: USB disconnect, device number 51 [ 263.423679][ T25] usb 15-1: new high-speed USB device number 2 using vhci_hcd [ 263.456523][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.468646][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.480745][ T5287] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 263.561906][ T5286] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 263.647645][ T5287] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.658925][ T5287] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.668976][ T5287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.679516][ T5287] usb 4-1: config 0 descriptor?? [ 263.736593][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.747938][ T5286] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.760733][ T5286] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 263.774644][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.795973][ T5286] usb 1-1: config 0 descriptor?? [ 264.086846][ T8181] loop0: detected capacity change from 0 to 7 [ 264.094069][ T8181] Dev loop0: unable to read RDB block 7 [ 264.099775][ T8181] loop0: unable to read partition table [ 264.100774][ T8169] netlink: 'syz.3.568': attribute type 1 has an invalid length. [ 264.106406][ T8181] loop0: partition table beyond EOD, truncated [ 264.119900][ T8181] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 264.119900][ T8181] ) failed (rc=-5) [ 264.132780][ T5287] keytouch 0003:0926:3333.0034: fixing up Keytouch IEC report descriptor [ 264.155602][ T5287] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0034/input/input21 [ 264.307093][ T5287] keytouch 0003:0926:3333.0034: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 264.351331][ T5286] usbhid 1-1:0.0: can't add hid device: -71 [ 264.351460][ T5286] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 264.353187][ T8170] vhci_hcd: connection reset by peer [ 264.355104][ T5286] usb 1-1: USB disconnect, device number 51 [ 264.357155][ T2943] vhci_hcd: stop threads [ 264.357229][ T2943] vhci_hcd: release socket [ 264.357281][ T2943] vhci_hcd: disconnect device [ 264.388702][ T5287] usb 4-1: USB disconnect, device number 54 [ 264.457133][ T8188] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 264.710488][ T8194] fuse: Bad value for 'fd' [ 264.735310][ T8196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.754409][ T8196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.904426][ T8199] netlink: 72 bytes leftover after parsing attributes in process `syz.0.579'. [ 264.957017][ T8199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.579'. [ 264.994088][ T8199] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.579'. [ 265.240665][ T5287] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 265.416131][ T5287] usb 5-1: Using ep0 maxpacket: 16 [ 265.431273][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.463292][ T5287] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.483454][ T5287] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.500069][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.510298][ T5287] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 265.528906][ T5287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.538649][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.563723][ T5287] usb 5-1: config 0 descriptor?? [ 265.565983][ T8222] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.586'. [ 266.374412][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.403605][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.462452][ T8239] fuse: Bad value for 'rootmode' [ 266.810826][ T937] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 266.940748][ T937] usb 1-1: device descriptor read/64, error -71 [ 267.120332][ T5287] usbhid 5-1:0.0: can't add hid device: -71 [ 267.126755][ T5287] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 267.156922][ T5287] usb 5-1: USB disconnect, device number 52 [ 267.211533][ T937] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 267.219334][ T46] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 267.370754][ T937] usb 1-1: device descriptor read/64, error -71 [ 267.396970][ T46] usb 4-1: config 0 has an invalid interface number: 14 but max is 0 [ 267.416325][ T46] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 267.434008][ T46] usb 4-1: config 0 has no interface number 0 [ 267.440287][ T46] usb 4-1: config 0 interface 14 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.459203][ T46] usb 4-1: config 0 interface 14 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.477904][ T46] usb 4-1: config 0 interface 14 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 267.489647][ T46] usb 4-1: config 0 interface 14 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 267.503689][ T937] usb usb1-port1: attempt power cycle [ 267.516157][ T46] usb 4-1: config 0 interface 14 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 267.527238][ T46] usb 4-1: config 0 interface 14 altsetting 0 has a duplicate endpoint with address 0x1, skipping [ 267.538175][ T46] usb 4-1: config 0 interface 14 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.555298][ T46] usb 4-1: config 0 interface 14 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 267.569060][ T46] usb 4-1: config 0 interface 14 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 267.587194][ T46] usb 4-1: config 0 interface 14 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 267.598231][ T46] usb 4-1: config 0 interface 14 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 267.609360][ T46] usb 4-1: config 0 interface 14 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 267.624318][ T46] usb 4-1: config 0 interface 14 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 267.637306][ T46] usb 4-1: New USB device found, idVendor=12d1, idProduct=140b, bcdDevice= 0.00 [ 267.646659][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.654751][ T46] usb 4-1: Product: syz [ 267.658964][ T46] usb 4-1: Manufacturer: syz [ 267.664598][ T46] usb 4-1: SerialNumber: syz [ 267.677960][ T46] usb 4-1: config 0 descriptor?? [ 267.687172][ T46] usb-storage 4-1:0.14: USB Mass Storage device detected [ 267.850639][ T937] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 267.881206][ T937] usb 1-1: device descriptor read/8, error -71 [ 267.930624][ T9] usb 4-1: USB disconnect, device number 55 [ 268.130573][ T937] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 268.138303][ T46] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 268.161300][ T937] usb 1-1: device descriptor read/8, error -71 [ 268.270566][ T46] usb 5-1: device descriptor read/64, error -71 [ 268.277768][ T937] usb usb1-port1: unable to enumerate USB device [ 268.523339][ T46] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 268.590567][ T25] vhci_hcd: vhci_device speed not set [ 268.670507][ T46] usb 5-1: device descriptor read/64, error -71 [ 268.781716][ T46] usb usb5-port1: attempt power cycle [ 268.840558][ T5286] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 269.000607][ T5286] usb 4-1: Using ep0 maxpacket: 8 [ 269.011904][ T5286] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.022494][ T5286] usb 4-1: config 0 has no interfaces? [ 269.032735][ T5286] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 269.042031][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.050067][ T5286] usb 4-1: Product: syz [ 269.054344][ T5286] usb 4-1: Manufacturer: syz [ 269.059282][ T5286] usb 4-1: SerialNumber: syz [ 269.066390][ T5286] usb 4-1: config 0 descriptor?? [ 269.140493][ T46] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 269.178122][ T46] usb 5-1: device descriptor read/8, error -71 [ 269.307643][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.596'. [ 269.421547][ T46] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 269.463395][ T46] usb 5-1: device descriptor read/8, error -71 [ 269.528041][ T8265] veth1_macvtap: left promiscuous mode [ 269.591637][ T46] usb usb5-port1: unable to enumerate USB device [ 269.681216][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 269.681264][ T29] audit: type=1326 audit(1727873071.994:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8267 comm="syz.2.599" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x0 [ 269.743062][ T25] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 269.796916][ T4623] Bluetooth: hci1: SCO packet for unknown connection handle 204 [ 269.798275][ T8269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.599'. [ 269.818279][ T8269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.828534][ T8269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.917426][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.928020][ T25] usb 1-1: config 0 has no interfaces? [ 269.936597][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 269.946138][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.954538][ T25] usb 1-1: Product: syz [ 269.958740][ T25] usb 1-1: Manufacturer: syz [ 269.963649][ T25] usb 1-1: SerialNumber: syz [ 269.978618][ T25] usb 1-1: config 0 descriptor?? [ 270.981903][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.601'. [ 271.019106][ T8276] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 271.025782][ T8276] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.039598][ T8276] vhci_hcd vhci_hcd.0: Device attached [ 271.071678][ T8280] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 271.078260][ T8280] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 271.103024][ T8280] vhci_hcd vhci_hcd.0: Device attached [ 271.197425][ T8280] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 271.210280][ T8280] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 271.233130][ T25] vhci_hcd: vhci_device speed not set [ 271.303589][ T8287] netlink: 'syz.1.603': attribute type 11 has an invalid length. [ 271.315804][ T25] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 271.337500][ T8281] vhci_hcd: connection closed [ 271.337781][ T2943] vhci_hcd: stop threads [ 271.349840][ T2943] vhci_hcd: release socket [ 271.359285][ T2943] vhci_hcd: disconnect device [ 271.583915][ T937] usb 4-1: USB disconnect, device number 56 [ 271.718811][ T8290] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 271.741096][ T8290] syz_tun: entered promiscuous mode [ 271.770132][ T8290] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 271.800925][ T8291] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 271.835104][ T8278] vhci_hcd: connection closed [ 271.835708][ T2943] vhci_hcd: stop threads [ 271.845532][ T8291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.866459][ T2943] vhci_hcd: release socket [ 271.891486][ T2943] vhci_hcd: disconnect device [ 271.906655][ T8291] team0: Port device bond0 added [ 271.993678][ T8293] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 272.000251][ T8293] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 272.026053][ T46] IPVS: starting estimator thread 0... [ 272.028205][ T8293] vhci_hcd vhci_hcd.0: Device attached [ 272.052867][ T8301] netlink: 56 bytes leftover after parsing attributes in process `syz.3.606'. [ 272.065852][ T8296] vhci_hcd: connection closed [ 272.066150][ T52] vhci_hcd: stop threads [ 272.084436][ T52] vhci_hcd: release socket [ 272.100982][ T52] vhci_hcd: disconnect device [ 272.120800][ T8300] IPVS: using max 15 ests per chain, 36000 per kthread [ 272.247746][ T8307] ALSA: mixer_oss: invalid OSS volume '' [ 272.339102][ T8309] veth1_macvtap: left promiscuous mode [ 272.495409][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 272.505498][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.610'. [ 272.507462][ T5286] usb 1-1: USB disconnect, device number 56 [ 272.531721][ T46] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 272.693200][ T46] usb 4-1: device descriptor read/64, error -71 [ 272.784043][ T8319] netlink: 20 bytes leftover after parsing attributes in process `syz.0.613'. [ 272.813968][ T8319] fuse: Bad value for 'group_id' [ 272.819063][ T8319] fuse: Bad value for 'group_id' [ 272.825359][ T8320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.836576][ T8321] fuse: Bad value for 'group_id' [ 272.844360][ T8321] fuse: Bad value for 'group_id' [ 272.844791][ T8320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.859477][ T8319] fuse: Bad value for 'fd' [ 272.859539][ T8320] FAULT_INJECTION: forcing a failure. [ 272.859539][ T8320] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.878370][ T8320] CPU: 1 UID: 0 PID: 8320 Comm: syz.2.614 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 272.889038][ T8320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.899136][ T8320] Call Trace: [ 272.902449][ T8320] [ 272.905412][ T8320] dump_stack_lvl+0x241/0x360 [ 272.910116][ T8320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.915346][ T8320] ? __pfx__printk+0x10/0x10 [ 272.919978][ T8320] should_fail_ex+0x3b0/0x4e0 [ 272.924706][ T8320] _copy_from_user+0x2f/0xe0 [ 272.929342][ T8320] sctp_setsockopt+0xcc/0x11c0 [ 272.934175][ T8320] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 272.940180][ T8320] do_sock_setsockopt+0x3af/0x720 [ 272.945235][ T8320] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 272.950806][ T8320] ? __fget_files+0x3f3/0x470 [ 272.955555][ T8320] ? __fget_files+0x29/0x470 [ 272.960188][ T8320] __sys_setsockopt+0x1a2/0x250 [ 272.965077][ T8320] __ia32_sys_setsockopt+0xb5/0xd0 [ 272.970216][ T8320] __do_fast_syscall_32+0xb4/0x110 [ 272.975353][ T8320] ? exc_page_fault+0x590/0x8c0 [ 272.980236][ T8320] do_fast_syscall_32+0x34/0x80 [ 272.985104][ T8320] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 272.991489][ T8320] RIP: 0023:0xf7f83579 [ 272.995577][ T8320] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 273.015208][ T8320] RSP: 002b:00000000f570656c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 273.023656][ T8320] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 273.031639][ T8320] RDX: 0000000000000009 RSI: 0000000020000a00 RDI: 000000000000009c [ 273.039624][ T8320] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 273.047606][ T8320] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 273.055601][ T8320] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 273.063602][ T8320] [ 273.076734][ T46] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 273.084718][ T937] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 273.240621][ T46] usb 4-1: device descriptor read/64, error -71 [ 273.260456][ T937] usb 5-1: Using ep0 maxpacket: 32 [ 273.267327][ T937] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.278395][ T937] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.288218][ T937] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 273.298456][ T937] usb 5-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 273.313209][ T937] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 273.313262][ T4623] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 273.322334][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.341006][ T4623] Bluetooth: hci0: Injecting HCI hardware error event [ 273.350910][ T55] Bluetooth: hci0: hardware error 0x00 [ 273.372842][ T46] usb usb4-port1: attempt power cycle [ 273.410651][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 273.570511][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 273.578302][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 273.590280][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 273.602655][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 273.615222][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 273.630448][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.645145][ T9] usb 1-1: config 0 descriptor?? [ 273.660347][ T8325] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 273.669535][ T9] hub 1-1:0.0: USB hub found [ 273.721210][ T46] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 273.738871][ T937] ntrig 0003:1B96:000A.0035: unknown main item tag 0x0 [ 273.747387][ T937] ntrig 0003:1B96:000A.0035: unknown main item tag 0x0 [ 273.759945][ T937] ntrig 0003:1B96:000A.0035: unknown main item tag 0x0 [ 273.767199][ T937] ntrig 0003:1B96:000A.0035: unknown main item tag 0x0 [ 273.774748][ T46] usb 4-1: device descriptor read/8, error -71 [ 273.781391][ T937] ntrig 0003:1B96:000A.0035: unknown main item tag 0x0 [ 273.789927][ T937] ntrig 0003:1B96:000A.0035: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 273.808111][ T8328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.819631][ T8328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.885154][ T9] hub 1-1:0.0: 2 ports detected [ 273.959488][ T937] usb 5-1: USB disconnect, device number 57 [ 274.030700][ T46] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 274.051292][ T46] usb 4-1: device descriptor read/8, error -71 [ 274.163432][ T46] usb usb4-port1: unable to enumerate USB device [ 274.539032][ T8336] netlink: 32 bytes leftover after parsing attributes in process `syz.4.618'. [ 274.597939][ T8336] netlink: 'syz.4.618': attribute type 11 has an invalid length. [ 274.607558][ T8336] netlink: 134672 bytes leftover after parsing attributes in process `syz.4.618'. [ 275.030663][ T4877] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 275.191287][ T4877] usb 5-1: Using ep0 maxpacket: 8 [ 275.210566][ T4877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.246198][ T4877] usb 5-1: config 0 has no interfaces? [ 275.255704][ T4877] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 275.266631][ T4877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.277120][ T4877] usb 5-1: Product: syz [ 275.281486][ T4877] usb 5-1: Manufacturer: syz [ 275.286205][ T4877] usb 5-1: SerialNumber: syz [ 275.321065][ T4877] usb 5-1: config 0 descriptor?? [ 275.385558][ T55] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 275.430973][ T8350] veth1_macvtap: left promiscuous mode [ 275.466082][ T8351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.621'. [ 275.503947][ C0] raw-gadget.4 gadget.0: ignoring, device is not running [ 275.512434][ T5287] usb 1-1: USB disconnect, device number 57 [ 275.907869][ T7259] bond0: (slave syz_tun): Releasing backup interface [ 276.048178][ T5716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.174538][ T5716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.313831][ T5716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.420689][ T25] vhci_hcd: vhci_device speed not set [ 276.430787][ T5716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.530623][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.543037][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.553491][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.560889][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 276.579043][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.597144][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.613500][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 276.677059][ T5716] bridge_slave_1: left allmulticast mode [ 276.683714][ T5716] bridge_slave_1: left promiscuous mode [ 276.690061][ T5716] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.708501][ T5716] bridge_slave_0: left allmulticast mode [ 276.714831][ T5716] bridge_slave_0: left promiscuous mode [ 276.721564][ T5716] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.721598][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 276.737731][ T9] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.761191][ T9] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.771533][ T9] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 276.782727][ T9] usb 1-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 276.796280][ T9] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 276.805683][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.257316][ T9] ntrig 0003:1B96:000A.0036: unknown main item tag 0x0 [ 277.264755][ T9] ntrig 0003:1B96:000A.0036: unknown main item tag 0x0 [ 277.273331][ T9] ntrig 0003:1B96:000A.0036: unknown main item tag 0x0 [ 277.280983][ T9] ntrig 0003:1B96:000A.0036: unknown main item tag 0x0 [ 277.289834][ T9] ntrig 0003:1B96:000A.0036: unknown main item tag 0x0 [ 277.299917][ T9] ntrig 0003:1B96:000A.0036: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 277.362816][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.382180][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.497863][ T9] usb 1-1: USB disconnect, device number 58 [ 277.528745][ T5716] team0: Port device bond0 removed [ 277.538769][ T5716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.555530][ T5716] bond0 (unregistering): Released all slaves [ 277.590991][ T8369] netlink: 72 bytes leftover after parsing attributes in process `syz.2.629'. [ 277.741439][ T5284] usb usb18-port1: attempt power cycle [ 277.805767][ T9] usb 5-1: USB disconnect, device number 58 [ 278.087850][ T8382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 278.206047][ T5716] hsr_slave_0: left promiscuous mode [ 278.226696][ T8388] netlink: 'syz.0.632': attribute type 2 has an invalid length. [ 278.245064][ T5716] hsr_slave_1: left promiscuous mode [ 278.262560][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.270128][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.319440][ T5716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.337469][ T5716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.352067][ T5284] usb usb18-port1: unable to enumerate USB device [ 278.422681][ T5716] veth0_macvtap: left promiscuous mode [ 278.428462][ T5716] veth1_vlan: left promiscuous mode [ 278.465274][ T29] audit: type=1326 audit(1727873080.774:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8397 comm="syz.0.634" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf740d579 code=0x0 [ 278.470723][ T5716] veth0_vlan: left promiscuous mode [ 278.588879][ T8400] loop9: detected capacity change from 0 to 7 [ 278.619697][ T8400] Dev loop9: unable to read RDB block 7 [ 278.627752][ T8400] loop9: AHDI p2 p3 p4 [ 278.638197][ T8400] loop9: partition table partially beyond EOD, truncated [ 278.645839][ T8400] loop9: p2 start 2961973428 is beyond EOD, truncated [ 278.650749][ T25] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 278.660890][ T4623] Bluetooth: hci2: command tx timeout [ 278.686410][ T8400] loop9: p3 start 1756542996 is beyond EOD, truncated [ 278.958977][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.989253][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 278.998466][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.028176][ T25] usb 5-1: config 0 descriptor?? [ 279.064421][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 279.302146][ T25] pwc: send_video_command error -71 [ 279.307437][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 279.326452][ T25] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 279.357977][ T25] usb 5-1: USB disconnect, device number 59 [ 279.572953][ T5716] team0 (unregistering): Port device team_slave_1 removed [ 279.633698][ T5716] team0 (unregistering): Port device team_slave_0 removed [ 279.725514][ T5284] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 279.861124][ T25] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 279.915391][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.938745][ T5284] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.953020][ T5284] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 279.962688][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.978372][ T5284] usb 1-1: config 0 descriptor?? [ 280.038471][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.049838][ T25] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 280.059539][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.076472][ T25] usb 5-1: config 0 descriptor?? [ 280.085057][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 280.304774][ T8366] chnl_net:caif_netlink_parms(): no params data found [ 280.504126][ T25] pwc: recv_control_msg error -32 req 02 val 2b00 [ 280.510344][ T25] pwc: recv_control_msg error -32 req 02 val 2700 [ 280.524342][ T8417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.538139][ T8417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.538547][ T25] pwc: recv_control_msg error -32 req 02 val 2c00 [ 280.743832][ T4623] Bluetooth: hci2: command tx timeout [ 280.760521][ T25] pwc: recv_control_msg error -32 req 04 val 1300 [ 280.765093][ T25] pwc: recv_control_msg error -32 req 04 val 1400 [ 280.804876][ T8366] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.804955][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.805116][ T8366] bridge_slave_0: entered allmulticast mode [ 280.806397][ T8366] bridge_slave_0: entered promiscuous mode [ 280.808745][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.850996][ T25] pwc: recv_control_msg error -32 req 02 val 2000 [ 280.852172][ T25] pwc: recv_control_msg error -32 req 02 val 2100 [ 280.855196][ T25] pwc: recv_control_msg error -32 req 04 val 1500 [ 280.856202][ T25] pwc: recv_control_msg error -32 req 02 val 2500 [ 280.856451][ T8366] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.856753][ T8366] bridge_slave_1: entered allmulticast mode [ 280.858559][ T25] pwc: recv_control_msg error -32 req 02 val 2400 [ 280.859062][ T25] pwc: recv_control_msg error -32 req 02 val 2600 [ 280.871529][ T25] pwc: recv_control_msg error -32 req 02 val 2900 [ 280.873804][ T25] pwc: recv_control_msg error -32 req 02 val 2800 [ 280.876859][ T25] pwc: recv_control_msg error -32 req 04 val 1100 [ 280.885768][ T25] pwc: Registered as video71. [ 280.887195][ T25] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 280.894458][ T8366] bridge_slave_1: entered promiscuous mode [ 280.927007][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.935957][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.067004][ T8366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.069037][ T8366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.243003][ T8366] team0: Port device team_slave_0 added [ 281.265850][ T8366] team0: Port device team_slave_1 added [ 281.323689][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.1.639'. [ 281.353531][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.353554][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.353585][ T8366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.355981][ T8366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.356001][ T8366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.356032][ T8366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.454490][ T8366] hsr_slave_0: entered promiscuous mode [ 281.457858][ T8366] hsr_slave_1: entered promiscuous mode [ 281.468773][ T8366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.468853][ T8366] Cannot create hsr debugfs directory [ 281.742874][ T9] usb 5-1: USB disconnect, device number 60 [ 282.068887][ T8440] loop0: detected capacity change from 0 to 7 [ 282.088831][ T8440] Dev loop0: unable to read RDB block 7 [ 282.088872][ T8440] loop0: unable to read partition table [ 282.089015][ T8440] loop0: partition table beyond EOD, truncated [ 282.089032][ T8440] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 282.089032][ T8440] ) failed (rc=-5) [ 282.489537][ T5284] usbhid 1-1:0.0: can't add hid device: -71 [ 282.506108][ T5284] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 282.562805][ T5284] usb 1-1: USB disconnect, device number 59 [ 282.740925][ T8451] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 282.821003][ T4623] Bluetooth: hci2: command tx timeout [ 283.112376][ T8366] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 283.156659][ T8366] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 283.231207][ T8366] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 283.285110][ T8366] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 283.497605][ T8366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.554503][ T8366] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.602570][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.609776][ T5716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.672884][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.680044][ T5716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.787393][ T8490] fuse: Bad value for 'group_id' [ 283.793479][ T8366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.820504][ T8490] fuse: Bad value for 'group_id' [ 283.915103][ T8366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.081153][ T937] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 284.166870][ T8366] veth0_vlan: entered promiscuous mode [ 284.240609][ T937] usb 5-1: device descriptor read/64, error -71 [ 284.258713][ T8366] veth1_vlan: entered promiscuous mode [ 284.311245][ T8366] veth0_macvtap: entered promiscuous mode [ 284.320638][ T8366] veth1_macvtap: entered promiscuous mode [ 284.335510][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.347369][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.357992][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.369007][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.379059][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.389753][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.399713][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 284.410316][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.422477][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.437241][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.437269][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.437282][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.437297][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.437310][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.437324][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.437337][ T8366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 284.437351][ T8366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.438614][ T8366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.442716][ T8366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.442758][ T8366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.442791][ T8366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.442856][ T8366] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.504002][ T4623] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 284.504327][ T4623] Bluetooth: hci4: Injecting HCI hardware error event [ 284.506752][ T55] Bluetooth: hci4: hardware error 0x00 [ 284.620653][ T937] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 284.717048][ T8510] bridge0: port 3(team0) entered blocking state [ 284.735980][ T8510] bridge0: port 3(team0) entered disabled state [ 284.736424][ T8510] team0: entered allmulticast mode [ 284.736451][ T8510] team_slave_0: entered allmulticast mode [ 284.736528][ T8510] team_slave_1: entered allmulticast mode [ 284.756569][ T937] usb 5-1: device descriptor read/64, error -71 [ 284.759016][ T8510] team0: entered promiscuous mode [ 284.759041][ T8510] team_slave_0: entered promiscuous mode [ 284.759300][ T8510] team_slave_1: entered promiscuous mode [ 284.772937][ T8510] bridge0: port 3(team0) entered blocking state [ 284.773095][ T8510] bridge0: port 3(team0) entered forwarding state [ 284.862506][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.912284][ T4623] Bluetooth: hci2: command tx timeout [ 285.000663][ T937] usb usb5-port1: attempt power cycle [ 285.211411][ T8528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 285.240633][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.252835][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 285.288376][ T313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.319333][ T313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.343464][ T8527] xt_CT: No such helper "netbios-ns" [ 285.421959][ T937] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 285.454174][ T937] usb 5-1: device descriptor read/8, error -71 [ 285.716442][ T937] usb 5-1: new low-speed USB device number 64 using dummy_hcd [ 285.771753][ T937] usb 5-1: device descriptor read/8, error -71 [ 285.830587][ T5286] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 285.904845][ T937] usb usb5-port1: unable to enumerate USB device [ 285.934414][ T29] audit: type=1326 audit(1727873088.244:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 285.956323][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.965535][ T8559] netlink: 'syz.2.661': attribute type 6 has an invalid length. [ 285.976153][ T8559] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.661'. [ 285.992629][ T5286] usb 4-1: New USB device found, idVendor=0733, idProduct=0430, bcdDevice=35.fb [ 286.012259][ T29] audit: type=1326 audit(1727873088.274:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.040708][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.063708][ T5286] usb 4-1: config 0 descriptor?? [ 286.074569][ T5286] gspca_main: spca505-2.14.0 probing 0733:0430 [ 286.077872][ T5284] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 286.081741][ T29] audit: type=1326 audit(1727873088.274:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=110 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.145444][ T29] audit: type=1326 audit(1727873088.274:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.197344][ T29] audit: type=1326 audit(1727873088.274:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.219239][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.253851][ T29] audit: type=1326 audit(1727873088.274:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.325367][ T5284] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.bb [ 286.335738][ T5284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.360990][ T29] audit: type=1326 audit(1727873088.274:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.367804][ T5284] usb 1-1: Product: syz [ 286.433407][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.435173][ T5284] usb 1-1: Manufacturer: syz [ 286.445478][ T29] audit: type=1326 audit(1727873088.274:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.468508][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.472865][ T5284] usb 1-1: SerialNumber: syz [ 286.485097][ T5284] usb 1-1: config 0 descriptor?? [ 286.495976][ T29] audit: type=1326 audit(1727873088.294:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.517133][ T5284] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 286.525662][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.532972][ T29] audit: type=1326 audit(1727873088.294:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8558 comm="syz.2.661" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 286.555236][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.562274][ T5286] gspca_spca505: reg write: error -71 [ 286.567758][ T5286] spca505 4-1:0.0: probe with driver spca505 failed with error -5 [ 286.577640][ T5286] usb 4-1: USB disconnect, device number 61 [ 286.587989][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.599516][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 286.599648][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.622242][ T8569] fuse: Unknown parameter 'group_i$' [ 286.634034][ T8569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.645382][ T8569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.701979][ T8554] netlink: 32 bytes leftover after parsing attributes in process `syz.0.660'. [ 286.932854][ T5286] usb 1-1: USB disconnect, device number 60 [ 287.130528][ T25] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 287.294714][ T25] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 287.304739][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.316145][ T25] usb 5-1: config 0 descriptor?? [ 287.326364][ T25] gspca_main: spca508-2.14.0 probing 8086:0110 [ 287.360624][ T5284] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 287.523799][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 287.535505][ T5284] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.541467][ T25] gspca_spca508: reg_read err -32 [ 287.563167][ T5284] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.587703][ T5284] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 287.598969][ T5284] usb 4-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 287.612335][ T5284] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 287.622288][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.706477][ T25] gspca_spca508: reg_read err -71 [ 287.716099][ T25] gspca_spca508: reg_read err -71 [ 287.722908][ T25] gspca_spca508: reg_read err -71 [ 287.728403][ T25] gspca_spca508: reg_read err -71 [ 287.735194][ T25] gspca_spca508: reg write: error -71 [ 287.744159][ T25] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 287.762408][ T25] usb 5-1: USB disconnect, device number 65 [ 287.811767][ T4877] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 287.970586][ T4877] usb 1-1: Using ep0 maxpacket: 16 [ 287.978566][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.989862][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.999754][ T4877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 288.013331][ T4877] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 288.022591][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.035382][ T4877] usb 1-1: config 0 descriptor?? [ 288.061568][ T5284] ntrig 0003:1B96:000A.0037: unknown main item tag 0x0 [ 288.068802][ T5284] ntrig 0003:1B96:000A.0037: unknown main item tag 0x0 [ 288.076024][ T5284] ntrig 0003:1B96:000A.0037: unknown main item tag 0x0 [ 288.083348][ T5284] ntrig 0003:1B96:000A.0037: unknown main item tag 0x0 [ 288.090322][ T5284] ntrig 0003:1B96:000A.0037: unknown main item tag 0x0 [ 288.104615][ T5284] ntrig 0003:1B96:000A.0037: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 288.291465][ T5284] usb 4-1: USB disconnect, device number 62 [ 288.628243][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.670'. [ 288.788283][ T4877] usbhid 1-1:0.0: can't add hid device: -71 [ 288.804570][ T4877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 288.833453][ T4877] usb 1-1: USB disconnect, device number 61 [ 289.110556][ T9] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 289.260529][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 289.269418][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 289.279398][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 289.290608][ T4877] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 289.307710][ T9] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 289.317318][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.325437][ T9] usb 5-1: Product: syz [ 289.329682][ T9] usb 5-1: Manufacturer: syz [ 289.334397][ T9] usb 5-1: SerialNumber: syz [ 289.345568][ T9] usb 5-1: config 0 descriptor?? [ 289.465201][ T4877] usb 4-1: Using ep0 maxpacket: 16 [ 289.476346][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.488655][ T4877] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.499578][ T4877] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.516390][ T4877] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 289.528619][ T4877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.542419][ T4877] usb 4-1: config 0 descriptor?? [ 289.573962][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.592259][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.760558][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 289.920527][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 289.927820][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.938396][ T9] usb 1-1: config 0 has no interfaces? [ 289.947056][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 289.956497][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.964724][ T9] usb 1-1: Product: syz [ 289.968996][ T9] usb 1-1: Manufacturer: syz [ 289.973828][ T9] usb 1-1: SerialNumber: syz [ 289.981848][ T9] usb 1-1: config 0 descriptor?? [ 290.248884][ T4877] usbhid 4-1:0.0: can't add hid device: -71 [ 290.255479][ T4877] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 290.267010][ T4877] usb 4-1: USB disconnect, device number 63 [ 290.909063][ T8608] FAULT_INJECTION: forcing a failure. [ 290.909063][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 290.923501][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.0.675 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 290.934168][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 290.944561][ T8608] Call Trace: [ 290.947881][ T8608] [ 290.950839][ T8608] dump_stack_lvl+0x241/0x360 [ 290.955564][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.960776][ T8608] ? __pfx__printk+0x10/0x10 [ 290.965394][ T8608] ? __build_skb_around+0x245/0x3d0 [ 290.970613][ T8608] should_fail_ex+0x3b0/0x4e0 [ 290.975339][ T8608] ? _sctp_make_chunk+0x161/0x460 [ 290.980412][ T8608] should_failslab+0xac/0x100 [ 290.985141][ T8608] ? _sctp_make_chunk+0x161/0x460 [ 290.990196][ T8608] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 290.995605][ T8608] _sctp_make_chunk+0x161/0x460 [ 291.000486][ T8608] sctp_make_heartbeat+0x9a/0x8c0 [ 291.005531][ T8608] ? validate_chain+0x11e/0x5920 [ 291.010493][ T8608] ? validate_chain+0x11e/0x5920 [ 291.015462][ T8608] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 291.021135][ T8608] ? sctp_transport_hold+0x1f4/0x2e0 [ 291.026444][ T8608] sctp_sf_do_prm_requestheartbeat+0x2d/0x280 [ 291.032539][ T8608] ? __pfx_sctp_pname+0x10/0x10 [ 291.037406][ T8608] sctp_do_sm+0x1f1/0x60c0 [ 291.041837][ T8608] ? sctp_transport_put+0xd7/0x160 [ 291.046968][ T8608] ? sctp_hash_cmp+0x170/0x1b0 [ 291.051757][ T8608] ? rhltable_lookup+0x6e0/0x7b0 [ 291.056729][ T8608] ? __pfx_sctp_do_sm+0x10/0x10 [ 291.061600][ T8608] ? __pfx_sctp_hash_key+0x10/0x10 [ 291.066730][ T8608] ? __pfx_sctp_hash_obj+0x10/0x10 [ 291.071887][ T8608] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 291.077718][ T8608] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 291.083638][ T8608] ? sctp_v6_addr_to_user+0x21b/0x480 [ 291.089037][ T8608] sctp_primitive_REQUESTHEARTBEAT+0x98/0xc0 [ 291.095050][ T8608] sctp_apply_peer_addr_params+0xd5/0x1670 [ 291.100882][ T8608] ? lockdep_hardirqs_on+0x99/0x150 [ 291.106218][ T8608] sctp_setsockopt_peer_addr_params+0x613/0x960 [ 291.112524][ T8608] sctp_setsockopt+0x6f1/0x11c0 [ 291.117472][ T8608] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 291.123400][ T8608] do_sock_setsockopt+0x3af/0x720 [ 291.128455][ T8608] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 291.134020][ T8608] ? __fget_files+0x3f3/0x470 [ 291.138713][ T8608] ? __fget_files+0x29/0x470 [ 291.143330][ T8608] __sys_setsockopt+0x1a2/0x250 [ 291.148208][ T8608] __ia32_sys_setsockopt+0xb5/0xd0 [ 291.153341][ T8608] __do_fast_syscall_32+0xb4/0x110 [ 291.158469][ T8608] ? exc_page_fault+0x590/0x8c0 [ 291.163343][ T8608] do_fast_syscall_32+0x34/0x80 [ 291.168212][ T8608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 291.174567][ T8608] RIP: 0023:0xf740d579 [ 291.178755][ T8608] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 291.198479][ T8608] RSP: 002b:00000000f56b456c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 291.206914][ T8608] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 291.214904][ T8608] RDX: 0000000000000009 RSI: 0000000020000a00 RDI: 000000000000009c [ 291.222888][ T8608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 291.230880][ T8608] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 291.238878][ T8608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 291.246876][ T8608] [ 291.547947][ T2943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.673142][ T2943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.782263][ T2943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.874768][ T2943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.918007][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 291.928000][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 291.943085][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 291.959522][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 291.986506][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 291.996092][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 292.118085][ T2943] bridge_slave_1: left allmulticast mode [ 292.127331][ T2943] bridge_slave_1: left promiscuous mode [ 292.134561][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.146626][ T2943] bridge_slave_0: left allmulticast mode [ 292.153237][ T2943] bridge_slave_0: left promiscuous mode [ 292.159310][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.484072][ T4877] usb 1-1: USB disconnect, device number 62 [ 292.762327][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.775899][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.787787][ T2943] bond0 (unregistering): Released all slaves [ 292.861708][ T4877] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 293.024412][ T8622] veth0_to_bridge: entered promiscuous mode [ 293.060584][ T4877] usb 1-1: Using ep0 maxpacket: 32 [ 293.079193][ T4877] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.090594][ T4877] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.100565][ T4877] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 293.110313][ T4877] usb 1-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 293.123543][ T4877] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 293.133230][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.215760][ T8621] veth0_to_bridge: left promiscuous mode [ 293.360296][ T2943] hsr_slave_0: left promiscuous mode [ 293.402423][ T2943] hsr_slave_1: left promiscuous mode [ 293.422533][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.430086][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.452168][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.459663][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.513144][ T2943] veth1_macvtap: left promiscuous mode [ 293.518819][ T2943] veth0_macvtap: left promiscuous mode [ 293.533532][ T2943] veth1_vlan: left promiscuous mode [ 293.538941][ T2943] veth0_vlan: left promiscuous mode [ 293.555870][ T4877] ntrig 0003:1B96:000A.0038: unknown main item tag 0x0 [ 293.563114][ T4877] ntrig 0003:1B96:000A.0038: unknown main item tag 0x0 [ 293.583577][ T4877] ntrig 0003:1B96:000A.0038: unknown main item tag 0x0 [ 293.601108][ T4877] ntrig 0003:1B96:000A.0038: unknown main item tag 0x0 [ 293.608137][ T4877] ntrig 0003:1B96:000A.0038: unknown main item tag 0x0 [ 293.644017][ T4877] ntrig 0003:1B96:000A.0038: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 293.791068][ T4877] usb 1-1: USB disconnect, device number 63 [ 294.100638][ T55] Bluetooth: hci2: command tx timeout [ 294.264414][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 294.326065][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 294.536294][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.550315][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.761501][ T9] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 295.397761][ T8612] chnl_net:caif_netlink_parms(): no params data found [ 295.453472][ T8665] fuse: Bad value for 'fd' [ 295.657893][ T8612] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.674770][ T8612] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.682143][ T8612] bridge_slave_0: entered allmulticast mode [ 295.689317][ T8612] bridge_slave_0: entered promiscuous mode [ 295.697604][ T8612] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.704822][ T8612] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.712458][ T8612] bridge_slave_1: entered allmulticast mode [ 295.720110][ T8612] bridge_slave_1: entered promiscuous mode [ 295.801898][ T8612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.831023][ T8612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.942864][ T8612] team0: Port device team_slave_0 added [ 295.964220][ T8612] team0: Port device team_slave_1 added [ 296.051942][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.059027][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.087907][ T8612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.116277][ T8612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.130161][ T8612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.163916][ T8612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.185051][ T55] Bluetooth: hci2: command tx timeout [ 296.308129][ T8612] hsr_slave_0: entered promiscuous mode [ 296.317650][ T8612] hsr_slave_1: entered promiscuous mode [ 296.326959][ T8612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.351002][ T8612] Cannot create hsr debugfs directory [ 296.572161][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.692'. [ 297.185777][ T4623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.197109][ T4623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.206174][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.214782][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.226181][ T4623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 297.234308][ T4623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.551568][ T8612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 297.583406][ T8612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 297.613548][ T8612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 297.656556][ T8612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 297.786666][ T8712] chnl_net:caif_netlink_parms(): no params data found [ 297.853781][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.932006][ T8612] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.939408][ T8712] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.951606][ T8712] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.958878][ T8712] bridge_slave_0: entered allmulticast mode [ 297.966336][ T8712] bridge_slave_0: entered promiscuous mode [ 297.970719][ T4877] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 297.975707][ T8712] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.987805][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.995391][ T8712] bridge_slave_1: entered allmulticast mode [ 298.004808][ T8712] bridge_slave_1: entered promiscuous mode [ 298.039146][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.046326][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.084667][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.091891][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 298.118658][ T8712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.150881][ T4877] usb 1-1: Using ep0 maxpacket: 16 [ 298.164315][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.182914][ T8712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.185070][ T4877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.203250][ T4877] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 298.216778][ T4877] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 298.228363][ T4877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.259326][ T4877] usb 1-1: config 0 descriptor?? [ 298.264631][ T55] Bluetooth: hci2: command tx timeout [ 298.297840][ T8712] team0: Port device team_slave_0 added [ 298.323970][ T8712] team0: Port device team_slave_1 added [ 298.390006][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.404400][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.445150][ T8712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.471363][ T8712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.478481][ T8712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.506856][ T8712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.543076][ T8612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.617911][ T8712] hsr_slave_0: entered promiscuous mode [ 298.627690][ T8712] hsr_slave_1: entered promiscuous mode [ 298.640625][ T8712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.670919][ T8712] Cannot create hsr debugfs directory [ 298.818279][ T8612] veth0_vlan: entered promiscuous mode [ 298.896304][ T8612] veth1_vlan: entered promiscuous mode [ 299.185929][ T8712] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.306883][ T55] Bluetooth: hci5: command tx timeout [ 299.358919][ T4877] usbhid 1-1:0.0: can't add hid device: -71 [ 299.380968][ T4877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 299.389251][ T8712] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.402695][ T4877] usb 1-1: USB disconnect, device number 65 [ 299.445076][ T8612] veth0_macvtap: entered promiscuous mode [ 299.493892][ T8612] veth1_macvtap: entered promiscuous mode [ 299.565903][ T8712] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.619208][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.660469][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.679028][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.689690][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.725540][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.749218][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.772236][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.791040][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.817924][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.902630][ T8712] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.973986][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.035681][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.068633][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.103705][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.141819][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.175089][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.176396][ T4623] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 300.197768][ T4623] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 300.212659][ T4623] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 300.217731][ T8612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.252690][ T4623] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 300.261266][ T8612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.272680][ T4623] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 300.282783][ T4623] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 300.308090][ T8612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.340652][ T55] Bluetooth: hci2: command tx timeout [ 300.364245][ T8612] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.416282][ T8612] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.446742][ T8612] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.463773][ T8612] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.893582][ T7699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.909274][ T7699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.997326][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.005538][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.053971][ T8712] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.090327][ T8712] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.148226][ T8712] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.204442][ T8712] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.347416][ T8766] chnl_net:caif_netlink_parms(): no params data found [ 301.381378][ T55] Bluetooth: hci5: command tx timeout [ 301.551261][ T29] audit: type=1326 audit(1727873103.864:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8782 comm="syz.3.679" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0 [ 301.809407][ T8802] support for the xor transformation has been removed. [ 301.891216][ T8766] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.898384][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.966054][ T8766] bridge_slave_0: entered allmulticast mode [ 301.989918][ T8766] bridge_slave_0: entered promiscuous mode [ 302.033857][ T8766] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.051800][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.059112][ T8766] bridge_slave_1: entered allmulticast mode [ 302.101266][ T8766] bridge_slave_1: entered promiscuous mode [ 302.241469][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.307556][ T8766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.341047][ T55] Bluetooth: hci6: command tx timeout [ 302.351471][ T8814] netlink: 32 bytes leftover after parsing attributes in process `syz.1.706'. [ 302.394963][ T8766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.566197][ T8766] team0: Port device team_slave_0 added [ 302.607896][ T8766] team0: Port device team_slave_1 added [ 302.680102][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.698076][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.741318][ T8766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.777526][ T8712] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.790555][ T25] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 302.800621][ T5284] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 302.811713][ T8766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.818739][ T8766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.870205][ T8766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.916044][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.923282][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.951450][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 302.987391][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.994598][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.011107][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 303.014607][ T25] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.032033][ T5284] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.036381][ T25] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.042430][ T5284] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.062619][ T25] usb 1-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 303.080294][ T25] usb 1-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 303.084490][ T5284] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.114019][ T25] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 303.132231][ T8833] bond1: entered promiscuous mode [ 303.137413][ T5284] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.140437][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.165839][ T8833] bond1: entered allmulticast mode [ 303.171946][ T8833] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.178858][ T5284] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 303.241288][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.460991][ T55] Bluetooth: hci5: command tx timeout [ 303.495926][ T8833] bond1 (unregistering): Released all slaves [ 303.575371][ T8766] hsr_slave_0: entered promiscuous mode [ 303.590317][ T8766] hsr_slave_1: entered promiscuous mode [ 303.613685][ T25] ntrig 0003:1B96:000A.0039: unknown main item tag 0x0 [ 303.623804][ T8766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.634201][ T25] ntrig 0003:1B96:000A.0039: unknown main item tag 0x0 [ 303.643048][ T8766] Cannot create hsr debugfs directory [ 303.653008][ T25] ntrig 0003:1B96:000A.0039: unknown main item tag 0x0 [ 303.659958][ T25] ntrig 0003:1B96:000A.0039: unknown main item tag 0x0 [ 303.667879][ T25] ntrig 0003:1B96:000A.0039: unknown main item tag 0x0 [ 303.687181][ T25] ntrig 0003:1B96:000A.0039: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0 [ 303.746489][ T8712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 303.757440][ T8712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.787408][ T8838] fuse: Bad value for 'fd' [ 303.823520][ T8712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.923491][ T25] usb 1-1: USB disconnect, device number 66 [ 304.177632][ T8766] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.217302][ T8712] veth0_vlan: entered promiscuous mode [ 304.236015][ T8712] veth1_vlan: entered promiscuous mode [ 304.273930][ T8766] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.320165][ T8712] veth0_macvtap: entered promiscuous mode [ 304.334643][ T8712] veth1_macvtap: entered promiscuous mode [ 304.378009][ T8766] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.395853][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.406556][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.417833][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.421094][ T55] Bluetooth: hci6: command tx timeout [ 304.430134][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.459736][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.491871][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.537646][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.570547][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.587013][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.607162][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.619094][ T5284] usb 4-1: usb_control_msg returned -71 [ 304.630725][ T5284] usbtmc 4-1:16.0: can't read capabilities [ 304.638191][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.739124][ T8766] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.789377][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.810262][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.823302][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.837160][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.874013][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.874077][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.874097][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.874114][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.874133][ T8712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.874150][ T8712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.876580][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.888713][ T8712] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.888759][ T8712] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.888826][ T8712] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.888859][ T8712] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.010335][ T8766] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.050499][ T8766] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.084949][ T8766] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.163701][ T8766] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.311064][ T313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.319018][ T313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.348472][ T8766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.366946][ T8857] veth1_macvtap: left promiscuous mode [ 305.380566][ T937] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 305.418378][ T5716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.429546][ T5716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.439728][ T8766] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.470878][ T3003] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.478080][ T3003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.495445][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.502738][ T5716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.540697][ T937] usb 1-1: Using ep0 maxpacket: 8 [ 305.541231][ T55] Bluetooth: hci5: command tx timeout [ 305.548422][ T937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.593898][ T937] usb 1-1: config 0 has no interfaces? [ 305.632844][ T937] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 305.666160][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.676193][ T8864] fuse: Bad value for 'fd' [ 305.698437][ T937] usb 1-1: Product: syz [ 305.730215][ T937] usb 1-1: Manufacturer: syz [ 305.766341][ T937] usb 1-1: SerialNumber: syz [ 305.791539][ T937] usb 1-1: config 0 descriptor?? [ 305.820167][ T8766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.883681][ T8766] veth0_vlan: entered promiscuous mode [ 305.898827][ T8766] veth1_vlan: entered promiscuous mode [ 305.943349][ T8766] veth0_macvtap: entered promiscuous mode [ 305.956001][ T8766] veth1_macvtap: entered promiscuous mode [ 305.988417][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.008867][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.019895][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.031866][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.042654][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.054200][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.065775][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.077313][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.088099][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.099154][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.115769][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.127012][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.139386][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.159277][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.171571][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.184161][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.195387][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.205902][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.216943][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.228758][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.240459][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.251326][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.263577][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.275396][ T8766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.286399][ T8766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.298466][ T8766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.321227][ T8766] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.330264][ T8766] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.345995][ T8766] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.357418][ T8766] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.407486][ T8869] netlink: 'syz.2.719': attribute type 33 has an invalid length. [ 306.500573][ T55] Bluetooth: hci6: command tx timeout [ 306.537254][ T8869] team0: Port device team_slave_0 removed [ 306.544340][ T8869] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 306.567171][ T5716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.585769][ T5716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.636840][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.657614][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.765325][ T8879] fuse: Bad value for 'fd' [ 306.855449][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.888790][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.931986][ T8882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 307.018135][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.723'. [ 307.197914][ T8887] loop0: detected capacity change from 0 to 7 [ 307.205396][ T8887] Dev loop0: unable to read RDB block 7 [ 307.211299][ T8887] loop0: unable to read partition table [ 307.217505][ T8887] loop0: partition table beyond EOD, truncated [ 307.224533][ T8887] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 307.224533][ T8887] ) failed (rc=-5) [ 307.589247][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.612845][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.772924][ T8913] fuse: Bad value for 'fd' [ 308.093393][ T46] usb 1-1: USB disconnect, device number 67 [ 308.580715][ T55] Bluetooth: hci6: command tx timeout [ 308.676596][ T1166] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 308.886601][ T1166] usb 1-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 308.920650][ T1166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.930265][ T1166] usb 1-1: Product: syz [ 308.946226][ T1166] usb 1-1: Manufacturer: syz [ 308.951898][ T1166] usb 1-1: SerialNumber: syz [ 308.959572][ T1166] usb 1-1: config 0 descriptor?? [ 308.963516][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.982107][ T1166] pwc: Philips PCA645VC USB webcam detected. [ 308.993916][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.190703][ T8928] sch_fq: defrate 2 ignored. [ 309.709676][ T1166] pwc: send_video_command error -71 [ 309.726293][ T1166] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 309.734811][ T1166] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 309.752940][ T1166] usb 1-1: USB disconnect, device number 68 [ 310.153541][ T1166] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 310.290666][ T1166] usb 1-1: device descriptor read/64, error -71 [ 310.534630][ T1166] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 310.671061][ T1166] usb 1-1: device descriptor read/64, error -71 [ 310.793328][ T1166] usb usb1-port1: attempt power cycle [ 311.130648][ T1166] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 311.152138][ T1166] usb 1-1: device descriptor read/8, error -71 [ 311.390780][ T1166] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 311.424340][ T1166] usb 1-1: device descriptor read/8, error -71 [ 311.505335][ T3003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.550755][ T1166] usb usb1-port1: unable to enumerate USB device [ 311.712008][ T3003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.816176][ T3003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.849696][ T4623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.865789][ T4623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.875595][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.892169][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.909789][ T4623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 311.917564][ T4623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.941658][ T3003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.174507][ T3003] bridge_slave_1: left allmulticast mode [ 312.180229][ T3003] bridge_slave_1: left promiscuous mode [ 312.197925][ T3003] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.218561][ T3003] bridge_slave_0: left allmulticast mode [ 312.226837][ T3003] bridge_slave_0: left promiscuous mode [ 312.239507][ T3003] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.757448][ T3003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.773810][ T3003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.786596][ T3003] bond0 (unregistering): Released all slaves [ 313.057100][ T8956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.746'. [ 313.205658][ T8941] chnl_net:caif_netlink_parms(): no params data found [ 313.290654][ T4877] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 313.411070][ T3003] hsr_slave_0: left promiscuous mode [ 313.436546][ T3003] hsr_slave_1: left promiscuous mode [ 313.440632][ T4877] usb 1-1: device descriptor read/64, error -71 [ 313.472998][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.492060][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.503037][ T3003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.522107][ T3003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.563408][ T3003] veth1_macvtap: left promiscuous mode [ 313.569343][ T3003] veth0_macvtap: left promiscuous mode [ 313.595505][ T3003] veth1_vlan: left promiscuous mode [ 313.614881][ T3003] veth0_vlan: left promiscuous mode [ 313.690752][ T4877] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 313.850566][ T4877] usb 1-1: device descriptor read/64, error -71 [ 313.942059][ T55] Bluetooth: hci5: command tx timeout [ 313.962631][ T4877] usb usb1-port1: attempt power cycle [ 314.030262][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.749'. [ 314.310678][ T4877] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 314.349279][ T4877] usb 1-1: device descriptor read/8, error -71 [ 314.492438][ T3003] team0 (unregistering): Port device team_slave_1 removed [ 314.607739][ T4877] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 314.652245][ T4877] usb 1-1: device descriptor read/8, error -71 [ 314.761095][ T4877] usb usb1-port1: unable to enumerate USB device [ 315.301020][ T8941] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.308590][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.318116][ T8941] bridge_slave_0: entered allmulticast mode [ 315.326738][ T8941] bridge_slave_0: entered promiscuous mode [ 315.355296][ T8941] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.362662][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.391415][ T8941] bridge_slave_1: entered allmulticast mode [ 315.401576][ T8941] bridge_slave_1: entered promiscuous mode [ 315.409148][ T8986] netlink: 4072 bytes leftover after parsing attributes in process `syz.1.750'. [ 315.450918][ T8986] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 315.554444][ T8941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.580185][ T8941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.686388][ T8941] team0: Port device team_slave_0 added [ 315.724685][ T8941] team0: Port device team_slave_1 added [ 315.808427][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.816247][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.845473][ T8941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.865899][ T8941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.874027][ T8941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.916629][ T8941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.977131][ T8941] hsr_slave_0: entered promiscuous mode [ 315.986233][ T8941] hsr_slave_1: entered promiscuous mode [ 315.999678][ T8941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.016704][ T8941] Cannot create hsr debugfs directory [ 316.021114][ T55] Bluetooth: hci5: command tx timeout [ 317.103153][ T8941] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 317.143744][ T8941] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.184048][ T8941] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.199542][ T8941] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.377758][ T8941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.434581][ T8941] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.476603][ T2505] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.483825][ T2505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.521790][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.528964][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.622184][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.629441][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.677171][ T8941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.828902][ T8941] veth0_vlan: entered promiscuous mode [ 317.855339][ T8941] veth1_vlan: entered promiscuous mode [ 317.954523][ T8941] veth0_macvtap: entered promiscuous mode [ 317.985473][ T8941] veth1_macvtap: entered promiscuous mode [ 318.052733][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.063649][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.073906][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.084667][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.095096][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.105923][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.115976][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.126567][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.136574][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.147971][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.158756][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.169631][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.171215][ T55] Bluetooth: hci5: command tx timeout [ 318.181794][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.197814][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.208539][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.218515][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.229072][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.239082][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.251199][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.262117][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.272930][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.282864][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.293471][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.303390][ T8941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.313922][ T8941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.325785][ T8941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.419742][ T8941] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.433986][ T8941] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.442893][ T8941] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.452302][ T8941] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.573561][ T313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.585660][ T4623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 318.620545][ T25] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 318.628904][ T4623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 318.637436][ T313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.678592][ T4623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 318.733713][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.741897][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.792178][ T4623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 318.806709][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 318.838114][ T4623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 318.846897][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.858018][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.868434][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.881873][ T25] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00 [ 318.891020][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.905588][ T4623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 318.941894][ T25] usb 1-1: config 0 descriptor?? [ 318.994361][ T9046] netlink: 24 bytes leftover after parsing attributes in process `syz.1.757'. [ 319.166668][ T9049] fuse: Bad value for 'fd' [ 319.401965][ T9050] chnl_net:caif_netlink_parms(): no params data found [ 319.538958][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.601788][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.732475][ T9063] netlink: 5 bytes leftover after parsing attributes in process `syz.2.758'. [ 319.831723][ T9069] netlink: 5 bytes leftover after parsing attributes in process `syz.2.758'. [ 319.863196][ T9050] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.880578][ T9050] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.889104][ T9050] bridge_slave_0: entered allmulticast mode [ 319.922287][ T9050] bridge_slave_0: entered promiscuous mode [ 319.939042][ T9050] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.950717][ T9050] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.964157][ T9050] bridge_slave_1: entered allmulticast mode [ 319.986429][ T9050] bridge_slave_1: entered promiscuous mode [ 320.199793][ T9050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.242849][ T9050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.280211][ T4623] Bluetooth: hci5: command tx timeout [ 320.346599][ T9050] team0: Port device team_slave_0 added [ 320.357714][ T9050] team0: Port device team_slave_1 added [ 320.392949][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 320.400296][ T25] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 320.429317][ T25] usb 1-1: USB disconnect, device number 77 [ 320.453288][ T9084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.473643][ T9050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.482325][ T9084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.507783][ T9050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.558589][ T9050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.572845][ T9050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.579850][ T9050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.623610][ T9050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.694011][ T9050] hsr_slave_0: entered promiscuous mode [ 320.718758][ T9050] hsr_slave_1: entered promiscuous mode [ 320.726302][ T9050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.744831][ T9050] Cannot create hsr debugfs directory [ 321.088469][ T9050] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.142129][ T4623] Bluetooth: hci7: command tx timeout [ 321.266397][ T9050] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.396591][ T9050] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.556584][ T9050] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.695557][ T9050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 321.711198][ T25] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 321.723953][ T9050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 321.756430][ T9050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 321.774869][ T9050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 321.890508][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 321.899174][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 321.942418][ T25] usb 1-1: config index 0 descriptor too short (expected 60764, got 18) [ 321.970888][ T25] usb 1-1: config 127 has too many interfaces: 47, using maximum allowed: 32 [ 322.000174][ T25] usb 1-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 322.000811][ T9050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.022308][ T25] usb 1-1: config 127 has 0 interfaces, different from the descriptor's value: 47 [ 322.038294][ T25] usb 1-1: string descriptor 0 read error: -22 [ 322.047600][ T25] usb 1-1: New USB device found, idVendor=1415, idProduct=0003, bcdDevice=65.5d [ 322.094403][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.123520][ T9050] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.178600][ T5716] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.185852][ T5716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.195940][ T5716] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.203148][ T5716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.383420][ T9050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.486795][ T9050] veth0_vlan: entered promiscuous mode [ 322.538484][ T9050] veth1_vlan: entered promiscuous mode [ 322.608094][ T1166] usb 1-1: USB disconnect, device number 78 [ 322.651820][ T9050] veth0_macvtap: entered promiscuous mode [ 322.663431][ T9050] veth1_macvtap: entered promiscuous mode [ 322.691019][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.701732][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.712813][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.723554][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.733693][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.745182][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.758388][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.769042][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.779004][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.790139][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.801123][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.811821][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.823361][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.834477][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.846672][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.869829][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.887471][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.898545][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.909997][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.919993][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.939686][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.949700][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.971485][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.989583][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.002358][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.018484][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.031206][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.049244][ T9050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.070435][ T9050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.091176][ T9050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.111946][ T9050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.121241][ T9050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.130005][ T9050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.151620][ T9050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.243397][ T4623] Bluetooth: hci7: command tx timeout [ 323.289571][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.322310][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.373730][ T313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.383500][ T313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.742022][ T5283] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 323.910475][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 323.922878][ T5283] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 323.944933][ T5283] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 323.965678][ T5283] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59936, setting to 1024 [ 323.990690][ T5283] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 324.011125][ T5283] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.026094][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.042509][ T5283] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.052903][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.070627][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.179777][ T9141] bridge_slave_1: left allmulticast mode [ 324.200468][ T9141] bridge_slave_1: left promiscuous mode [ 324.207600][ T9141] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.218265][ T9141] bridge_slave_0: left allmulticast mode [ 324.224488][ T9141] bridge_slave_0: left promiscuous mode [ 324.230414][ T9141] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.304540][ T5283] usb 1-1: GET_CAPABILITIES returned 0 [ 324.310196][ T5283] usbtmc 1-1:16.0: can't read capabilities [ 324.482477][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.497776][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.291441][ T9163] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 325.313551][ T4623] Bluetooth: hci7: command tx timeout [ 325.461841][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.487572][ T9171] loop0: detected capacity change from 0 to 7 [ 325.507466][ T9171] Dev loop0: unable to read RDB block 7 [ 325.519310][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.530714][ T9171] loop0: unable to read partition table [ 325.543432][ T9171] loop0: partition table beyond EOD, truncated [ 325.560574][ T9171] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 325.560574][ T9171] ) failed (rc=-5) [ 326.324383][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.349822][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.374574][ T9179] tipc: Can't bind to reserved service type 0 [ 326.479954][ T9185] netlink: 892 bytes leftover after parsing attributes in process `syz.1.779'. [ 327.388907][ T4623] Bluetooth: hci7: command tx timeout [ 327.443012][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.470728][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.482378][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.494988][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.589864][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.601237][ T9193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.615127][ T9193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.629869][ T9193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.236866][ T9205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.785'. [ 328.263815][ T9201] netlink: 'syz.3.785': attribute type 10 has an invalid length. [ 328.296872][ T9201] team0: Port device netdevsim0 added [ 328.314756][ T9201] netlink: 'syz.3.785': attribute type 10 has an invalid length. [ 328.349588][ T9201] team0: Port device netdevsim0 removed [ 328.368423][ T9201] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 328.725944][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'. [ 328.757195][ T9210] loop0: detected capacity change from 0 to 7 [ 328.771864][ T9210] Dev loop0: unable to read RDB block 7 [ 328.787463][ T9210] loop0: unable to read partition table [ 328.802701][ T9210] loop0: partition table beyond EOD, truncated [ 328.817536][ T9210] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 328.817536][ T9210] ) failed (rc=-5) [ 328.850606][ T9212] fuse: Unknown parameter 'u{er_id' [ 329.370039][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.399136][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.544291][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.564927][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.588886][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.618166][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.635705][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.657923][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.805859][ T9242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.856582][ T9242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.421556][ T4623] Bluetooth: hci2: command tx timeout [ 332.895234][ T9249] loop0: detected capacity change from 0 to 7 [ 332.903307][ T9249] Dev loop0: unable to read RDB block 7 [ 332.911342][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.921742][ T9249] loop0: unable to read partition table [ 332.930616][ T9249] loop0: partition table beyond EOD, truncated [ 332.945966][ T9249] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 332.945966][ T9249] ) failed (rc=-5) [ 332.967930][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.988455][ T30] INFO: task kworker/0:5:5285 blocked for more than 143 seconds. [ 332.997242][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 333.005997][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.014890][ T30] task:kworker/0:5 state:D stack:19512 pid:5285 tgid:5285 ppid:2 flags:0x00004000 [ 333.025348][ T30] Workqueue: usb_hub_wq hub_event [ 333.030586][ T30] Call Trace: [ 333.033951][ T30] [ 333.037122][ T30] __schedule+0x1895/0x4b30 [ 333.041915][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 333.046936][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.053146][ T30] ? __pfx_lock_release+0x10/0x10 [ 333.058584][ T30] ? kick_pool+0x1bd/0x620 [ 333.063204][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.068511][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 333.076155][ T30] ? schedule+0x90/0x320 [ 333.080867][ T30] schedule+0x14b/0x320 [ 333.085755][ T30] schedule_preempt_disabled+0x13/0x30 [ 333.091377][ T30] __mutex_lock+0x6a7/0xd70 [ 333.097801][ T30] ? __mutex_lock+0x52a/0xd70 [ 333.102836][ T30] ? hub_event+0x7d5/0x5150 [ 333.107468][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 333.112676][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.117977][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 333.123433][ T30] ? pm_runtime_barrier+0x152/0x1d0 [ 333.128853][ T30] hub_event+0x7d5/0x5150 [ 333.137562][ T30] ? __pfx_register_lock_class+0x10/0x10 [ 333.143522][ T30] ? debug_object_deactivate+0x2d5/0x390 [ 333.149837][ T30] ? __pfx_hub_event+0x10/0x10 [ 333.154854][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 333.160479][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.166656][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.173222][ T30] ? process_scheduled_works+0x976/0x1850 [ 333.179069][ T30] process_scheduled_works+0xa63/0x1850 [ 333.184857][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 333.191352][ T30] ? assign_work+0x364/0x3d0 [ 333.196064][ T30] worker_thread+0x870/0xd30 [ 333.201710][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 333.208574][ T30] ? __kthread_parkme+0x169/0x1d0 [ 333.213774][ T30] ? __pfx_worker_thread+0x10/0x10 [ 333.219021][ T30] kthread+0x2f0/0x390 [ 333.223338][ T30] ? __pfx_worker_thread+0x10/0x10 [ 333.228578][ T30] ? __pfx_kthread+0x10/0x10 [ 333.233488][ T30] ret_from_fork+0x4b/0x80 [ 333.238035][ T30] ? __pfx_kthread+0x10/0x10 [ 333.242904][ T30] ret_from_fork_asm+0x1a/0x30 [ 333.247788][ T30] [ 333.251004][ T30] INFO: task syz.2.348:7005 blocked for more than 143 seconds. [ 333.258654][ T30] Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 333.266462][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 333.275361][ T30] task:syz.2.348 state:D stack:23376 pid:7005 tgid:7004 ppid:6160 flags:0x20004002 [ 333.286042][ T30] Call Trace: [ 333.289408][ T30] [ 333.292529][ T30] __schedule+0x1895/0x4b30 [ 333.297159][ T30] ? __pfx___schedule+0x10/0x10 [ 333.303210][ T30] ? __pfx_lock_release+0x10/0x10 [ 333.308343][ T30] ? schedule+0x90/0x320 [ 333.313635][ T30] schedule+0x14b/0x320 [ 333.318007][ T30] rpm_resume+0x504/0x1670 [ 333.322670][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 333.327811][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 333.332836][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 333.339045][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 333.344592][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 333.349897][ T30] rpm_resume+0x8fe/0x1670 [ 333.354493][ T30] ? __pfx_rpm_resume+0x10/0x10 [ 333.359533][ T30] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 333.365196][ T30] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 333.371515][ T30] ? irqentry_exit+0x63/0x90 [ 333.376166][ T30] __pm_runtime_resume+0x120/0x180 [ 333.381527][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 333.387147][ T30] usb_autopm_get_interface+0x22/0xf0 [ 333.392657][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 333.398337][ T30] wdm_manage_power+0x1c/0xa0 [ 333.404223][ T30] ? __pfx_wdm_manage_power+0x10/0x10 [ 333.409678][ T30] wdm_release+0x20f/0x460 [ 333.415110][ T30] ? __pfx_wdm_release+0x10/0x10 [ 333.420685][ T30] __fput+0x23f/0x880 [ 333.424772][ T30] task_work_run+0x24f/0x310 [ 333.429544][ T30] ? __pfx_task_work_run+0x10/0x10 [ 333.434816][ T30] ? switch_task_namespaces+0xe4/0x110 [ 333.440484][ T30] do_exit+0xa2f/0x28e0 [ 333.444912][ T30] ? __pfx_do_exit+0x10/0x10 [ 333.450694][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 333.456386][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 333.462938][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 333.469855][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 333.475724][ T30] do_group_exit+0x207/0x2c0 [ 333.480656][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.486069][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 333.491468][ T30] get_signal+0x16a3/0x1740 [ 333.496159][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 333.501159][ T30] ? __pfx_get_signal+0x10/0x10 [ 333.507719][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 333.512966][ T30] arch_do_signal_or_restart+0x96/0x860 [ 333.518653][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 333.525264][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 333.531310][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 333.537033][ T30] __do_fast_syscall_32+0xc4/0x110 [ 333.542609][ T30] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 333.548856][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 333.554364][ T30] do_fast_syscall_32+0x34/0x80 [ 333.559576][ T30] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 333.566100][ T30] RIP: 0023:0xf747d579 [ 333.570267][ T30] RSP: 002b:00000000f5766110 EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 333.578848][ T30] RAX: 0000000000000004 RBX: 00000000ffffff9c RCX: 00000000f5766160 [ 333.587122][ T30] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 00000000f746bff4 [ 333.596014][ T30] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 333.604170][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 333.613199][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 333.623408][ T30] [ 333.626553][ T30] [ 333.626553][ T30] Showing all locks held in the system: [ 333.634422][ T30] 1 lock held by khungtaskd/30: [ 333.639490][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 333.649876][ T30] 2 locks held by kworker/u8:3/52: [ 333.655355][ T30] #0: ffff8881452e8148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 333.666877][ T30] #1: ffffc90000bd7d00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 333.679257][ T30] 2 locks held by kworker/u8:5/313: [ 333.684731][ T30] #0: ffff8881452e8148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 333.696260][ T30] #1: ffffc900030dfd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 333.708695][ T30] 2 locks held by kworker/u8:7/2943: [ 333.715029][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 333.727835][ T30] #1: ffffc90009b67d00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 333.739152][ T30] 2 locks held by getty/4994: [ 333.744010][ T30] #0: ffff8880322b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 333.754009][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 333.764505][ T30] 3 locks held by kworker/1:3/5282: [ 333.769797][ T30] #0: ffff888141687948 ((wq_completion)pm){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 333.780810][ T30] #1: ffffc90004377d00 ((work_completion)(&dev->power.work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 333.793469][ T30] #2: ffff888028143510 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_port_suspend+0x1c6/0x14d0 [ 333.804198][ T30] 6 locks held by kworker/1:4/5283: [ 333.809476][ T30] #0: ffff8881442f8948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 333.822084][ T30] #1: ffffc90004397d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 333.835700][ T30] #2: ffff888145306190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 333.844929][ T30] #3: ffff88805d626190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 333.854621][ T30] #4: ffff888061327160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 333.864171][ T30] #5: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 333.874027][ T30] 6 locks held by kworker/0:4/5284: [ 333.879310][ T30] #0: ffff8881442f8948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 333.890981][ T30] #1: ffffc900043a7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 333.903094][ T30] #2: ffff888028180190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 333.912199][ T30] #3: ffff888061d78190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 333.922576][ T30] #4: ffff88806dee7160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 333.932893][ T30] #5: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_register_dev+0x13a/0x5a0 [ 333.942803][ T30] 4 locks held by kworker/0:5/5285: [ 333.948101][ T30] #0: ffff8881442f8948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 333.959739][ T30] #1: ffffc900043b7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 333.972325][ T30] #2: ffff888028140190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 333.981567][ T30] #3: ffff888028143510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x7d5/0x5150 [ 333.991723][ T30] 2 locks held by kworker/u8:11/5716: [ 333.997180][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 334.009117][ T30] #1: ffffc9000334fd00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 334.021058][ T30] 1 lock held by syz.2.348/7005: [ 334.026910][ T30] #0: ffffffff8f633088 (wdm_mutex){+.+.}-{3:3}, at: wdm_release+0x4f/0x460 [ 334.035974][ T30] 2 locks held by kworker/u8:12/7699: [ 334.041585][ T30] 2 locks held by syz.2.663/8569: [ 334.046680][ T30] #0: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 334.055853][ T30] #1: ffffffff8f633088 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 334.064544][ T30] 2 locks held by syz.4.671/8588: [ 334.069669][ T30] #0: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 334.078746][ T30] #1: ffffffff8f633088 (wdm_mutex){+.+.}-{3:3}, at: wdm_open+0x56/0x550 [ 334.087444][ T30] 1 lock held by syz.4.729/8909: [ 334.092506][ T30] #0: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 334.104290][ T30] 1 lock held by syz.0.766/9137: [ 334.109524][ T30] #0: ffffffff8f5ab310 (minor_rwsem#2){++++}-{3:3}, at: usb_open+0x30/0x1d0 [ 334.118636][ T30] 4 locks held by syz.3.793/9235: [ 334.124711][ T30] #0: ffff8880242f0d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 334.135679][ T30] #1: ffff8880242f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 334.145701][ T30] #2: ffffffff8fe3dfa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 334.156032][ T30] #3: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 334.167234][ T30] 1 lock held by syz.2.799/9248: [ 334.172406][ T30] 4 locks held by syz.4.800/9251: [ 334.177506][ T30] 1 lock held by syz.1.798/9253: [ 334.182623][ T30] [ 334.185017][ T30] ============================================= [ 334.185017][ T30] [ 334.193779][ T30] NMI backtrace for cpu 0 [ 334.198139][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 334.208681][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.218769][ T30] Call Trace: [ 334.222089][ T30] [ 334.225052][ T30] dump_stack_lvl+0x241/0x360 [ 334.229928][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.235172][ T30] ? __pfx__printk+0x10/0x10 [ 334.239805][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 334.244772][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 334.250248][ T30] ? _printk+0xd5/0x120 [ 334.254427][ T30] ? __pfx__printk+0x10/0x10 [ 334.259061][ T30] ? __wake_up_klogd+0xcc/0x110 [ 334.263936][ T30] ? __pfx__printk+0x10/0x10 [ 334.268565][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 334.273615][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 334.279620][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 334.285622][ T30] watchdog+0xff4/0x1040 [ 334.289895][ T30] ? watchdog+0x1ea/0x1040 [ 334.294336][ T30] ? __pfx_watchdog+0x10/0x10 [ 334.299031][ T30] kthread+0x2f0/0x390 [ 334.303134][ T30] ? __pfx_watchdog+0x10/0x10 [ 334.307937][ T30] ? __pfx_kthread+0x10/0x10 [ 334.312551][ T30] ret_from_fork+0x4b/0x80 [ 334.317006][ T30] ? __pfx_kthread+0x10/0x10 [ 334.321643][ T30] ret_from_fork_asm+0x1a/0x30 [ 334.326441][ T30] [ 334.329590][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.337043][ T30] Sending NMI from CPU 0 to CPUs 1: [ 334.343483][ C1] NMI backtrace for cpu 1 [ 334.343498][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 334.343521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.343533][ C1] RIP: 0010:__read_once_word_nocheck+0x3/0x10 [ 334.343562][ C1] Code: bd 00 48 ba 00 00 00 00 00 fc ff df e9 9f fc ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 07 cc cc cc cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 334.343581][ C1] RSP: 0018:ffffc900001e7388 EFLAGS: 00000283 [ 334.343601][ C1] RAX: ffffffff81608420 RBX: ffffc900001e7470 RCX: 1ffff9200003ce8c [ 334.343618][ C1] RDX: ffffffff90a482b6 RSI: 0000000000000002 RDI: ffffc900001e7ed8 [ 334.343632][ C1] RBP: ffffc900001e0000 R08: 0000000000000001 R09: ffffc900001e7550 [ 334.343645][ C1] R10: ffffc900001e74b0 R11: ffffffff81808f50 R12: ffffc900001e8000 [ 334.343659][ C1] R13: ffffc900001e7ed8 R14: ffffc900001e7460 R15: 1ffff9200003ce8e [ 334.343674][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 334.343690][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 334.343703][ C1] CR2: 00000000200003bc CR3: 0000000031d5a000 CR4: 00000000003526f0 [ 334.343720][ C1] DR0: 0000000000000621 DR1: 0000000000000000 DR2: 0000000000000000 [ 334.343731][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 334.343746][ C1] Call Trace: [ 334.343753][ C1] [ 334.343762][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 334.343786][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 334.343816][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 334.343837][ C1] ? nmi_handle+0x2a/0x5a0 [ 334.343864][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 334.343891][ C1] ? nmi_handle+0x14f/0x5a0 [ 334.343919][ C1] ? nmi_handle+0x2a/0x5a0 [ 334.343938][ C1] ? __read_once_word_nocheck+0x3/0x10 [ 334.343957][ C1] ? default_do_nmi+0x63/0x160 [ 334.343980][ C1] ? exc_nmi+0x123/0x1f0 [ 334.344002][ C1] ? end_repeat_nmi+0xf/0x53 [ 334.344022][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.344049][ C1] ? kthread+0x2f0/0x390 [ 334.344068][ C1] ? __read_once_word_nocheck+0x3/0x10 [ 334.344087][ C1] ? __read_once_word_nocheck+0x3/0x10 [ 334.344111][ C1] ? __read_once_word_nocheck+0x3/0x10 [ 334.344129][ C1] [ 334.344135][ C1] [ 334.344142][ C1] unwind_next_frame+0xc9b/0x22d0 [ 334.344164][ C1] ? smpboot_thread_fn+0x544/0xa30 [ 334.344196][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 334.344219][ C1] arch_stack_walk+0x11c/0x150 [ 334.344242][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 334.344267][ C1] ? smpboot_thread_fn+0x544/0xa30 [ 334.344295][ C1] stack_trace_save+0x118/0x1d0 [ 334.344319][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 334.344346][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.344376][ C1] kasan_save_track+0x3f/0x80 [ 334.344395][ C1] ? kasan_save_track+0x3f/0x80 [ 334.344411][ C1] ? kasan_save_free_info+0x40/0x50 [ 334.344436][ C1] ? __kasan_slab_free+0x59/0x70 [ 334.344456][ C1] ? kfree+0x1a0/0x440 [ 334.344480][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 334.344498][ C1] ? dst_destroy+0x171/0x460 [ 334.344515][ C1] ? rcu_core+0xaaa/0x17a0 [ 334.344533][ C1] ? handle_softirqs+0x2c5/0x980 [ 334.344556][ C1] ? run_ksoftirqd+0xca/0x130 [ 334.344581][ C1] ? smpboot_thread_fn+0x544/0xa30 [ 334.344631][ C1] kasan_save_free_info+0x40/0x50 [ 334.344657][ C1] __kasan_slab_free+0x59/0x70 [ 334.344676][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 334.344693][ C1] kfree+0x1a0/0x440 [ 334.344714][ C1] ? ref_tracker_free+0x4ef/0x7e0 [ 334.344734][ C1] ref_tracker_free+0x4ef/0x7e0 [ 334.344754][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 334.344773][ C1] ? dst_destroy+0x171/0x460 [ 334.344790][ C1] ? rcu_core+0xaaa/0x17a0 [ 334.344807][ C1] ? handle_softirqs+0x2c5/0x980 [ 334.344830][ C1] ? run_ksoftirqd+0xca/0x130 [ 334.344855][ C1] ? smpboot_thread_fn+0x544/0xa30 [ 334.344879][ C1] ? kthread+0x2f0/0x390 [ 334.344898][ C1] ? ret_from_fork+0x4b/0x80 [ 334.344931][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 334.344960][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.344985][ C1] ? __pfx_ipv4_dst_destroy+0x10/0x10 [ 334.345015][ C1] dst_destroy+0x171/0x460 [ 334.345035][ C1] ? rcu_core+0xa37/0x17a0 [ 334.345055][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 334.345073][ C1] rcu_core+0xaaa/0x17a0 [ 334.345099][ C1] ? __pfx_rcu_core+0x10/0x10 [ 334.345119][ C1] ? rcu_qs+0xf1/0x190 [ 334.345137][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 334.345154][ C1] ? sched_clock_cpu+0x76/0x490 [ 334.345182][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.345213][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.345246][ C1] handle_softirqs+0x2c5/0x980 [ 334.345273][ C1] ? run_ksoftirqd+0xca/0x130 [ 334.345300][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 334.345332][ C1] run_ksoftirqd+0xca/0x130 [ 334.345360][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 334.345391][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 334.345417][ C1] smpboot_thread_fn+0x544/0xa30 [ 334.345443][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 334.345475][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 334.345501][ C1] kthread+0x2f0/0x390 [ 334.345518][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 334.345543][ C1] ? __pfx_kthread+0x10/0x10 [ 334.345561][ C1] ret_from_fork+0x4b/0x80 [ 334.345586][ C1] ? __pfx_kthread+0x10/0x10 [ 334.345605][ C1] ret_from_fork_asm+0x1a/0x30 [ 334.345640][ C1] [ 334.346496][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 334.887839][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 334.898354][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 334.908432][ T30] Call Trace: [ 334.911722][ T30] [ 334.914665][ T30] dump_stack_lvl+0x241/0x360 [ 334.919359][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.924567][ T30] ? __pfx__printk+0x10/0x10 [ 334.929177][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 334.935194][ T30] ? vscnprintf+0x5d/0x90 [ 334.939544][ T30] panic+0x349/0x880 [ 334.943495][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 334.949665][ T30] ? __pfx_panic+0x10/0x10 [ 334.954107][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 334.959497][ T30] ? __irq_work_queue_local+0x137/0x410 [ 334.965061][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 334.970454][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 334.976623][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 334.982791][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 334.988961][ T30] watchdog+0x1033/0x1040 [ 334.993312][ T30] ? watchdog+0x1ea/0x1040 [ 334.997752][ T30] ? __pfx_watchdog+0x10/0x10 [ 335.002448][ T30] kthread+0x2f0/0x390 [ 335.006527][ T30] ? __pfx_watchdog+0x10/0x10 [ 335.011219][ T30] ? __pfx_kthread+0x10/0x10 [ 335.015819][ T30] ret_from_fork+0x4b/0x80 [ 335.020259][ T30] ? __pfx_kthread+0x10/0x10 [ 335.024866][ T30] ret_from_fork_asm+0x1a/0x30 [ 335.029659][ T30] [ 335.033032][ T30] Kernel Offset: disabled [ 335.037366][ T30] Rebooting in 86400 seconds..