last executing test programs: 2m29.168664393s ago: executing program 0 (id=1562): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4044004) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2m29.039285021s ago: executing program 0 (id=1563): mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000040)="33dfaa6bbd8c09a20c2e74cf42f04ac1a8703a9a28eaf2f5fc9f9401413eaa94f56f4e26a2349a9766247051cd93806f4cb6e5454113a1b2566cb0b3e0d38ae3b2316a4f27da3d21e59d2f53ce158150707ade678ddd5088b357666e98c9afcc673f9b643f3759064f16d44a9ac20a486f87290648f23907c8504de4ab9019053628819b2184b1789c51735df5b3345003677f730f563f58a77962926ced383c09549ed965f2c141fba5c58c8a7d6d1d6d7be6d70723a00e07cf7e8b6b7242aa9b1e3e36d3ea8455089aa0323e357e4aea5c71d1572def59170535f8dc85f50648b0396820e9", 0xe6, 0x4080, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @multicast2}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x1, 0x70bd2d, 0x25dfdbfc, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 2m28.973152049s ago: executing program 0 (id=1564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) preadv(r1, &(0x7f0000000740), 0x0, 0x100, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a310000000009"], 0xec}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, &(0x7f00000005c0)) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r4, 0x4020ae46, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000000009000000000000f0ff"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r5 = getpid() r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r7, 0xc02464bb, &(0x7f0000000040)={0x3, r9, 0x5, 0x6576, 0x8, 0xff, 0x6, 0x67, 0x10001}) syz_emit_ethernet(0xd8, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6996f94900a21100fe74000000000000000000000000003cfc0100000000000000000000000000003202000000000000c910fc00000000000000000000000000000004014000000062000171650000004e214e23007a9078a204000180000000e66db4525d2bc8395e873d972a93eaa2563c489f6b5b2bf38cc6ce15fa3c08cbd678c660a2c289769152b9121e0186b8e986f7bc5244e1a147591d57e384be56c8e4f256f2c47b22d43ff0d804a2e98622e161ceb72d9132c5ca3f5489a58a8e418908f127f509ec463c"], 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) sched_setattr(r5, &(0x7f00000001c0)={0x38, 0x0, 0x10000008, 0x6, 0x8, 0x0, 0x3, 0x9, 0x6, 0x4}, 0x0) r11 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r11, r11, r11}, 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={'poly1305-simd\x00'}}) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m24.084445506s ago: executing program 0 (id=1577): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a030000000000000000000202000809000100"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x67}}}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x5) accept(r2, &(0x7f0000000180)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x80) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x4e22, 0x4, 0x4e23, 0x101, 0x2, 0x0, 0x180, 0x21}, {0x8000000000000003, 0x7dd8e330, 0x7, 0x4, 0x0, 0x9, 0x41c, 0x5}, {0xe, 0x8004, 0xe, 0x9}, 0x2, 0x6e6bb6, 0x0, 0x1, 0x3, 0x1}, {{@in6=@local, 0x4d0, 0x2b}, 0x2, @in=@local, 0x0, 0x2, 0x0, 0x47, 0x7, 0x1, 0x80}}, 0xe8) sendmsg$nl_route(r8, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2m22.120429478s ago: executing program 0 (id=1584): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000200)={0xa, 0x0, 0x4, @local, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000280)="3a81", 0x2}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @private=0x8a010102}, 0x4}, 0x18, &(0x7f0000000580)=[{&(0x7f0000000400)='<', 0x1}], 0x1}}], 0x2, 0x88d5) syz_usb_connect(0x0, 0xa1, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0) 2m20.359173978s ago: executing program 0 (id=1589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9d}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9d}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) (async) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 2m4.933345169s ago: executing program 32 (id=1589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9d}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x9d}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) (async) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 8.06527472s ago: executing program 3 (id=2120): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x0, 0x2) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000500)={0x0, 0xcd1d, 0x10100, 0xfffffffb}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 7.890048655s ago: executing program 1 (id=2121): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000b40)='bbr\x00', 0xffffffffffffff4c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x2c}}, 0x0) unshare(0x8040480) unshare(0x28040680) unshare(0x2a020480) 7.866527892s ago: executing program 3 (id=2122): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) flock(r2, 0x1) 6.780439098s ago: executing program 3 (id=2127): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) syz_usb_connect(0x0, 0x5f, &(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYRES64, @ANYBLOB="87bd2e4b2e63f96af4ae633a7a7df03c82bef51a2e8d90b8b10326a170c7f5c52e84d290d6ee4cb4729555a05a851cf25ddc71212cda14ace3b4763fe2109dd4bfd2d2b764989e7a4ee8831ea465e08d990104ff90682439f62d7d739d9810f430f7d456f76e1122d989bd12b13d58", @ANYRES8=r1, @ANYRESOCT=r0, @ANYRES8=r1, @ANYBLOB="3c03cb0e3b9bcfd44fd582840f5eac268d0c2560e6a91f58fbf362866fa1e741702898cd11167724af3a1218469b7628982ea1f5ca8012458ff95a6d5e97c0b1ca3beabe01ee94668b37fb37f68bb67616cbe664c742da6c2cd6b5b18272abd18aa5baa8b3ef3b91b16713d48fffb726bbd973cab26b789369fb76bc232d4f6988e59fa117a10fcb0bf980cac1d9f61f41d97adc95485d355e1a75d92a60e8f941b154314317"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r5, r4, 0x0, 0x20000023893) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) close(r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) 6.742393264s ago: executing program 5 (id=2128): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00ffffff90000000b702000014000000b7020000000000008500000005000000bf0900000000000055090100000000005e90000000000000bf91000000000000b70200000000000085000000a0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.623178347s ago: executing program 5 (id=2129): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x33e, 0x30, 0x0, 0x0, 0x4db, 0x8, 0x0, {0x4, 0x40}, {0x0, 0x1}, {}, {0x3, 0x0, 0x1}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffc00, 0x0, 0x400, 0x0, 0x0, 0x21, 0x0, 0x0, 0x7}) 6.452657615s ago: executing program 5 (id=2131): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="840200001b000100000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000e91000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000084020000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000a00100001"], 0x284}}, 0x0) 6.403954615s ago: executing program 2 (id=2132): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x0, 0x2) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000500)={0x0, 0xcd1d, 0x10100, 0xfffffffb}, &(0x7f0000000000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r0, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 6.249753381s ago: executing program 1 (id=2133): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x27, 0x3, 0xffffff00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42102, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r2, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000004) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e22, 0x3, @remote, 0x1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}, 0x44044) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000380)={0x1, [0x101]}, 0x6) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r9, 0x0, 0xfffffffffffffee5) rename(0x0, &(0x7f00000000c0)='./file0\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.191866279s ago: executing program 5 (id=2134): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 6.191282984s ago: executing program 2 (id=2135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0xcdf) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0300", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x1, 0x0, 0x0, 0xffff, {[@md5sig={0x13, 0x12, "95a569694a8812e6b43816f2c2eff3f0"}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x8, "8518a940b477"}, @timestamp={0x8, 0xa, 0x4, 0x3}, @md5sig={0x13, 0x12, "ff8b649c1666b66e1d35cc68fc2d00a0"}]}}}}}}}}, 0x0) 6.004697284s ago: executing program 5 (id=2136): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)=0xfffffffe) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85ef828f711330ff2bb17b5508", "dc5db43f"}, 0x38) r5 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$dri(0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r7) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000004140)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000240)=""/131, 0x83}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/85, 0x55}, {&(0x7f0000001500)=""/125, 0x7d}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10000}], 0x4, 0xa0, 0x0) 5.95310406s ago: executing program 2 (id=2138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0xfc, 0x4, 0xfe, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_TYPE={0x5}}}}]}, 0x38}}, 0x40010) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 5.531553482s ago: executing program 2 (id=2139): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x80600, 0x0) r1 = openat(r0, 0x0, 0x135941, 0x1b) r2 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) fcntl$addseals(r2, 0x409, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000240)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfffffe00, @remote, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000005c0)="23eb81b9fb0880bdacda416c63035e13b6e8237d537b82a5c723203a2297e9459787ef68d4c4692982d2153fd5dcecd05d553c7d98632727c0357e2d61e8feb197a9ca1ffd05f2b1cb0cc59dd72af20d0972ca50c18a632045692eb28b17d01aa7fdf67eb4e436c9af53af5af73b097ae0e72b204680ed504eee75f87b2c5910b33cdfa354f7c4488098b2a95f876f87b26052277382bc5a6af8594bca97e5a3fc4fb83f4f285619b24e94e7c4459bfdad93a9807f615b696ca941d6262ab19bbfa732584a934b1c4e898ad6904b1bec599c345d9019a6a0e2993736dfdc67b7a93cf1", 0xe3}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4a24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000300)="bda47421aa", 0x5}], 0x1}}], 0x2, 0xc0d8) shutdown(r3, 0x1) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0xb, 0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) fcntl$getflags(r1, 0xb) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_freeze_timeout', 0x0, 0x4a) getdents(r5, &(0x7f0000000fc0)=""/4096, 0x1000) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_read(r6, 0x99, 0x28, &(0x7f00000004c0)=""/40) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x20, 0x24, 0x4b, {0x4b, 0x5, "3b069599d5e3863b5180c9e4ebc29d6354672b7e63af913341b155978f7b0b038829bb922877a9d681d4dcd5992a972b6b80d1a042a1c37bb5e62f6c6e039120ac6b385d4caa29ff80"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0xe0, 0xfa, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xca, "", {{{0x9, 0x5, 0x1, 0x2, 0x220, 0x9, 0x8, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x4, 0xfb, 0x3}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x7f, 0x6, 0x4, 0x20, 0x7}, 0xcd, &(0x7f0000000780)={0x5, 0xf, 0xcd, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xa, 0x21, 0x6, 0x1, 0x7, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x1, 0x4, 0x8000}, @ssp_cap={0x18, 0x10, 0xa, 0x87, 0x3, 0x401, 0x11000, 0x71c, [0xff0000, 0x0, 0x9f]}, @generic={0x9b, 0x10, 0x3, "99b2b823330f6477aa00d1cb152846b4c9cc23ac492b32cd00de96fe145edf48cf3b1e43ce587a9811fed4121f5cb74501d1599beed94dec1e386fd4413c2e3eca9651ab14c5207b1435386d8dc916a5069f0a574a65c7d806970d098f8eb602797432438d5c8c627e3151d375eeb0814bda175ad6667ca5df95aac3f379b84e333cf9feeea9586d88ef774999b7dca23bf2145c196d40ad"}]}, 0x6, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2019}}, {0x59, &(0x7f0000000700)=@string={0x59, 0x3, "43986ce5d88da6d4a9fe9999368ce306514b54c0d3305866fb7964a5a43ab53ea5c12a574f551217ca3e8d3acb04d67820081f260736a1da9c19024f93afe7ed0459b4c44f897345e1bcf36dd787db077a68164903f885"}}, {0xd, &(0x7f0000000500)=@string={0xd, 0x3, "e0557d2b15c00092bc4f74"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1409}}]}) 2.148650217s ago: executing program 2 (id=2143): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x5b) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000b40)='bbr\x00', 0xffffffffffffff4c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}]}, 0x2c}}, 0x0) unshare(0x8040480) unshare(0x2a020480) 2.097218969s ago: executing program 3 (id=2145): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x12, 0x2525, 0x0, 0xb47, 0x9, 0x8, 0x9, 0x3}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e23, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x7fffffffffffffff, 0xc}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000380)={0x7, 0x55, 0x7a, 0x50, 0x2, 0x9, 0x1, 0x0, 0x4, 0x4, 0xcd, 0x3, 0x27, 0x4}, 0xe) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40041) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=0x0, @ANYRES64=0x0, @ANYRES16=r1, @ANYRESDEC=r1], &(0x7f00000000c0)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @void, @value}, 0x94) r3 = socket(0x2b, 0x3, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7eef69959fceb133, 0x0, 0x0, 0x0, 0xb4c, 0x6, 0x8, 0xfffffffd, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x6, &(0x7f0000000440)={&(0x7f0000000840)=@getchain={0x24, 0x66, 0xfff1, 0x70bd31, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xf}, {0xfff2, 0xfff1}, {0x9, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x4000814) syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 1.788639796s ago: executing program 4 (id=2146): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) 1.50962882s ago: executing program 1 (id=2147): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x100) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000000c0)=""/244) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000001c0)={0xb, 0x3, 0x1, {0x2, 0x10, 0x8, 0x8}}) 1.140324443s ago: executing program 1 (id=2148): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000040)={0x9, 0x103, 0x1, {0x2, 0x10, 0x9, 0x10}}) 1.136829913s ago: executing program 4 (id=2149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_cancel(0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000400), 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)=@overlay={0x4, 0xb, 0x4, 0x40, 0x8, {0x0, 0xea60}, {0x1, 0x2, 0x1, 0x10, 0x5, 0xd, "e704d1b7"}, 0x616d, 0x3, {}, 0xd7, 0x0, r2}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000fff8000002000005580004802c000180090001006d657461000000001c00028008000240000000090800014000000008080001400000001028000180080001006e6174001c0002800800014000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x850}, 0x0) 808.618929ms ago: executing program 5 (id=2150): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) flock(r1, 0x1) 680.607752ms ago: executing program 4 (id=2151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f00000000c0)="420f189cfed5ae042f48b800100000000000000f23d80f21f835800000c00f23f866b839018ee066450f38828a000000800f79400f0f20c035000000200f22c066ba400066b8080066efc4414258310f32d2545e08", 0x55}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 651.791844ms ago: executing program 1 (id=2152): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r0, &(0x7f00000004c0), 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0) 395.55658ms ago: executing program 2 (id=2153): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000240)=0xffffffff, 0x0, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0xb4ab}, 0x8) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109022400010000000009040000025c291d0009050900000000060009050a"], 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "37472a4452e219e0", "9425f400ed4769823930617831c320e288cbed7e493b42cd2f9b1f53f3e0681c", "3a9f4479", "c7fe327b7c843779"}, 0x38) sendto$inet6(r7, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r7, 0x0, 0xfdef) sendto$inet6(r7, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0x11, 0x8040, 0x0, 0x0) write$binfmt_elf64(r7, 0x0, 0x78) listen(r6, 0x3) setsockopt$inet6_int(r6, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x84, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x4e, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}, {"eff72fb54a8b68a6459109859a490d9ae3da33fe9392985876919502711ae6bbe3192cf98f6743bc36ffe12872f63638c7a81ca342a8a029b991"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x46, 0x0, @fd_index=0x9, 0x7, 0x0, 0x0, 0xa, 0x1, {0x1}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) 384.166795ms ago: executing program 4 (id=2154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0xfffffffb) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0xff, @local, @local, {[], {{0x4e22, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 359.485308ms ago: executing program 1 (id=2155): syz_usb_connect(0x3, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e010203010902"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_raw(0x1d, 0x3, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0xcc) lseek(r3, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x8e, "041de5a85ffeab1cffe11bb260c0e570b252c6139efa49d330251ff973862d6292e910c81f3f81dbf648bbab1977be990d9ee39a8554e1dae7fda1847ce3b4c4b84546c6ddcf5376bead3b262ab721c59314c0819f1232a04cfe7e6dae5eb8f55ea32046e7242a9b1d93d3f6cd0cea460d05995a41b730e33c3c201db7f4ac8b9d130a141843fdffbff7bac6d5ef"}, &(0x7f0000000180)=0x96) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000240)={r4, 0x95, "3bc70487602fd6c41c5fb1091da03d678dddf330e6cfdf08c1756757751e523aa5d8e32abe2e0bb55ad6ca887d5fe9d6f53a239e4735cbc18ae844c91f943e0d24fb7b5c253788193afb2dfcd995604a70578c644295dc7c48fcd748166867e785ad6c7a7031e0b49a82d0087a0b67e0ec749acec83cb7cfea417aba4489cd36d0de746abe92d3dd6bc3897f568ab427d85aced7c0"}, &(0x7f0000000300)=0x9d) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x892f}, @val={0x0, 0x0, 0x2, 0xffff, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x73, 0x0, @rand_addr=0x64010100, @broadcast}, "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"}}, 0xfce) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYRES64=r5, @ANYRESHEX=r5], 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000080000904"], 0x0) 224.608475ms ago: executing program 4 (id=2156): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000200000000000b702000014000000b7020000000000008500000005000000bf0900000000000055090100000000005e90000000000000bf91000000000000b70200000000000085000000a0000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 224.316241ms ago: executing program 4 (id=2157): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x27, 0x3, 0xffffff00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42102, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r2, 0x0, 0x0, 0x0, 0x80000, 0x1}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8804}, 0x4000004) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000240)={0xa, 0x4e22, 0x3, @remote, 0x1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="ce", 0x1}], 0x1}, 0x44044) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000380)={0x1, [0x101]}, 0x6) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r9, 0x0, 0xfffffffffffffee5) rename(0x0, &(0x7f00000000c0)='./file0\x00') dup2(0xffffffffffffffff, 0xffffffffffffffff) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) 196.057575ms ago: executing program 3 (id=2158): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000005000000bf0900000000000055090100000000005e00000000000000bf91000000000000b70200000000000085000000a0000000b70020000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 3 (id=2159): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 71][T12139] ? rcu_is_watching+0x15/0xb0 [ 495.616092][T12139] ? __pfx_ksys_write+0x10/0x10 [ 495.616118][T12139] ? do_syscall_64+0xba/0x210 [ 495.616148][T12139] do_syscall_64+0xf6/0x210 [ 495.616174][T12139] ? clear_bhb_loop+0x60/0xb0 [ 495.616198][T12139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.616218][T12139] RIP: 0033:0x7fc9d0d8e969 [ 495.616235][T12139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.616251][T12139] RSP: 002b:00007fc9d1c49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 495.616271][T12139] RAX: ffffffffffffffda RBX: 00007fc9d0fb6080 RCX: 00007fc9d0d8e969 [ 495.616285][T12139] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000003 [ 495.616297][T12139] RBP: 00007fc9d1c49090 R08: 0000000000000000 R09: 0000000000000000 [ 495.616308][T12139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 495.616319][T12139] R13: 0000000000000000 R14: 00007fc9d0fb6080 R15: 00007fc9d10dfa28 [ 495.616351][T12139] [ 496.309752][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.323629][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.356305][T12120] bridge_slave_0: entered allmulticast mode [ 496.389696][T12120] bridge_slave_0: entered promiscuous mode [ 496.406778][ T6015] net_ratelimit: 24 callbacks suppressed [ 496.406799][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 496.499519][ T5846] Bluetooth: hci5: command tx timeout [ 496.564782][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.581455][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.596147][T12120] bridge_slave_1: entered allmulticast mode [ 496.596421][ T5910] usb 3-1: USB disconnect, device number 100 [ 496.624082][T12146] binder: BINDER_SET_CONTEXT_MGR already set [ 496.630190][T12146] binder: 12144:12146 ioctl 4018620d 200000000040 returned -16 [ 496.657386][T12120] bridge_slave_1: entered promiscuous mode [ 496.668234][T12146] tipc: Started in network mode [ 496.690296][T12146] tipc: Node identity e0000002, cluster identity 4711 [ 496.697156][T12146] tipc: Enabling of bearer rejected, failed to enable media [ 496.782687][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 496.820626][T12155] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[12155] [ 496.876621][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.912095][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.047799][T12120] team0: Port device team_slave_0 added [ 497.072150][T12120] team0: Port device team_slave_1 added [ 497.080721][ T30] audit: type=1326 audit(1747737923.831:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.1.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 497.155369][ T30] audit: type=1326 audit(1747737923.831:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.1.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 497.208382][ T30] audit: type=1326 audit(1747737923.831:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.1.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 497.273508][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.308736][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.312927][ T30] audit: type=1326 audit(1747737923.831:2771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.1.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 497.456998][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.507614][ T30] audit: type=1326 audit(1747737923.831:2772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12161 comm="syz.1.1661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 497.549981][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 497.595341][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.614815][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.705846][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.878423][T12181] netlink: 'syz.2.1666': attribute type 6 has an invalid length. [ 497.909433][ T5890] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 497.928733][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1666'. [ 497.939580][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 497.965042][T12120] hsr_slave_0: entered promiscuous mode [ 497.983272][T12120] hsr_slave_1: entered promiscuous mode [ 498.001263][T12120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.019144][T12120] Cannot create hsr debugfs directory [ 498.075537][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.103229][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.145784][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 498.186926][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 498.215998][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.263047][ T5890] usb 2-1: config 0 descriptor?? [ 498.413290][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 498.502907][ T5890] plantronics 0003:047F:FFFF.003C: reserved main item tag 0xe [ 498.569775][ T5846] Bluetooth: hci5: command tx timeout [ 498.576449][ T5890] plantronics 0003:047F:FFFF.003C: unknown main item tag 0x0 [ 498.591445][ T5890] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 498.616172][ T5890] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 498.746932][ T5890] usb 2-1: USB disconnect, device number 126 [ 498.819727][ T5910] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 498.849609][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 499.005045][ T5910] usb 4-1: config 0 has no interfaces? [ 499.023118][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 499.116923][ T5910] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 499.168284][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.182443][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 499.211290][ T5910] usb 4-1: Product: syz [ 499.232133][ T5910] usb 4-1: Manufacturer: syz [ 499.241007][ T5910] usb 4-1: SerialNumber: syz [ 499.249286][T12120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 499.271792][ T5910] usb 4-1: config 0 descriptor?? [ 499.312185][T12120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 499.375235][T12120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 499.438149][T12120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.503504][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 499.584683][ T30] audit: type=1326 audit(1747737926.341:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 499.650546][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 499.716488][ T30] audit: type=1326 audit(1747737926.341:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 499.757981][T12120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.773671][ T30] audit: type=1326 audit(1747737926.341:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 499.810484][ T30] audit: type=1326 audit(1747737926.341:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 499.840841][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.855965][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.863273][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.890297][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.897535][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.907601][ T30] audit: type=1326 audit(1747737926.341:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882df8e969 code=0x7ffc0000 [ 500.279931][ T5910] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 500.457312][T12120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.557382][ T5910] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 500.566833][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.585076][ T5910] usb 2-1: Product: syz [ 500.589490][ T5910] usb 2-1: Manufacturer: syz [ 500.594612][ T5910] usb 2-1: SerialNumber: syz [ 500.632609][ T5910] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 500.693010][ T5846] Bluetooth: hci5: command tx timeout [ 500.715128][ T5923] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 501.185314][T12120] veth0_vlan: entered promiscuous mode [ 501.307280][T12120] veth1_vlan: entered promiscuous mode [ 501.428921][ T6015] net_ratelimit: 10 callbacks suppressed [ 501.428936][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 501.464896][T12120] veth0_macvtap: entered promiscuous mode [ 501.472152][T12219] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[12219] [ 501.539017][T12120] veth1_macvtap: entered promiscuous mode [ 501.570447][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.577043][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.630203][T12120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.658944][T12120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.769814][ T5923] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 501.799484][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 501.804526][ T5923] ath9k_htc: Failed to initialize the device [ 501.867149][ T5923] usb 2-1: ath9k_htc: USB layer deinitialized [ 501.891697][T12120] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.919475][T12120] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.989560][T12120] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.003704][T12120] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.150908][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 502.406844][ T47] usb 4-1: USB disconnect, device number 99 [ 502.421284][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 502.487778][T12225] xt_TPROXY: Can be used only with -p tcp or -p udp [ 502.680218][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 502.719289][ T5910] usb 2-1: USB disconnect, device number 127 [ 502.730120][ T5846] Bluetooth: hci5: command tx timeout [ 502.888658][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 503.622498][ T30] audit: type=1326 audit(1747737930.381:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 503.707697][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 503.758729][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.797594][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.839660][ T30] audit: type=1326 audit(1747737930.381:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 503.868102][ T30] audit: type=1326 audit(1747737930.381:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 503.895051][ T30] audit: type=1326 audit(1747737930.531:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 503.949476][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 503.967323][ T30] audit: type=1326 audit(1747737930.531:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 504.113955][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 504.218277][ T30] audit: type=1326 audit(1747737930.531:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12239 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f97d93c1225 code=0x7ffc0000 [ 504.369656][ T30] audit: type=1326 audit(1747737930.581:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 504.463208][ T6007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.488003][ T30] audit: type=1326 audit(1747737930.671:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 504.511834][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 504.535225][ T6007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.668068][ T30] audit: type=1326 audit(1747737930.671:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 504.700914][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1680'. [ 504.769637][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1680'. [ 504.810031][ T30] audit: type=1326 audit(1747737930.671:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12236 comm="syz.2.1678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97d938e969 code=0x7ffc0000 [ 504.867138][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1680'. [ 504.947826][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1680'. [ 505.229554][ T5888] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 505.409423][ T5888] usb 6-1: Using ep0 maxpacket: 16 [ 505.426058][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 505.459753][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 505.468871][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.550952][ T5888] usb 6-1: config 0 descriptor?? [ 505.595195][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input39 [ 505.720440][ T5910] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 505.739879][ T47] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 505.825711][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1646'. [ 506.151425][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 506.156885][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 506.174513][ T47] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.189693][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.219529][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.234247][ T5910] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 506.251793][ T5910] usb 4-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 506.270589][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 506.281026][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.292792][ T5910] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 506.310188][ T47] usb 3-1: Product: syz [ 506.314436][ T47] usb 3-1: Manufacturer: syz [ 506.330185][ T47] usb 3-1: SerialNumber: syz [ 506.339620][ T5910] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.419775][ T5184] bcm5974 6-1:0.0: could not read from device [ 506.442554][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1683'. [ 506.471065][ T36] net_ratelimit: 14 callbacks suppressed [ 506.471089][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 506.493315][ T5184] bcm5974 6-1:0.0: could not read from device [ 506.499619][ T5910] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 506.508975][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.520263][ T5910] usb 4-1: Product: syz [ 506.529255][ T5910] usb 4-1: Manufacturer: syz [ 506.535788][ T5910] usb 4-1: SerialNumber: syz [ 506.631500][ T5184] bcm5974 6-1:0.0: could not read from device [ 506.664700][ T5888] usb 6-1: USB disconnect, device number 2 [ 506.679857][ T47] usb 3-1: 0:2 : does not exist [ 506.687940][ T5184] bcm5974 6-1:0.0: could not read from device [ 506.697014][ T47] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 506.778206][ T47] usb 3-1: USB disconnect, device number 101 [ 506.830280][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 506.839514][ T5891] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 506.957408][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 507.097801][ T5891] usb 2-1: config 0 has no interfaces? [ 507.103488][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 507.180168][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 507.210775][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 507.237761][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.315645][ T5891] usb 2-1: Product: syz [ 507.369516][ T5891] usb 2-1: Manufacturer: syz [ 507.370312][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 507.374171][ T5891] usb 2-1: SerialNumber: syz [ 507.458127][ T5891] usb 2-1: config 0 descriptor?? [ 507.529517][ T5846] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 507.530032][ T5888] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 507.536032][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 507.586821][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 507.705135][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 507.840471][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 507.883405][ T5888] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 507.906234][ T5888] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 507.947753][ T5888] usb 6-1: config 220 has no interface number 2 [ 507.978008][ T5888] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 508.110052][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 508.181988][ T5888] usb 6-1: config 220 interface 0 has no altsetting 0 [ 508.216821][T12290] bridge_slave_0: left allmulticast mode [ 508.232550][T12290] bridge_slave_0: left promiscuous mode [ 508.257991][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.337652][T12290] bridge_slave_1: left allmulticast mode [ 508.344072][ T5888] usb 6-1: config 220 interface 76 has no altsetting 0 [ 508.351073][ T5888] usb 6-1: config 220 interface 1 has no altsetting 0 [ 508.360426][ T5888] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 508.369838][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.378051][ T5888] usb 6-1: Product: syz [ 508.391892][T12290] bridge_slave_1: left promiscuous mode [ 508.401523][ T5888] usb 6-1: Manufacturer: syz [ 508.422827][ T5910] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 508.468174][ T5888] usb 6-1: SerialNumber: syz [ 508.489695][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.502155][ T5910] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 508.553673][T12290] bond0: (slave bond_slave_0): Releasing backup interface [ 508.578473][T12290] bond0: (slave bond_slave_1): Releasing backup interface [ 508.589448][ T5910] cdc_ncm 4-1:1.0: bind() failure [ 508.639718][ T5890] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 508.694474][ T5910] usb 4-1: USB disconnect, device number 100 [ 508.718325][T12290] team0: Failed to send options change via netlink (err -105) [ 508.727285][T12290] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 508.745621][T12288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.761413][T12288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.773911][T12290] team0: Port device team_slave_0 removed [ 508.807704][T12290] team0: Failed to send options change via netlink (err -105) [ 508.817404][ T5890] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.856780][ T5888] usb 6-1: selecting invalid altsetting 0 [ 508.864353][ T5890] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 508.887160][T12290] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 508.887252][ T5888] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 508.938227][ T5888] usb 6-1: No valid video chain found. [ 508.965000][T12290] team0: Port device team_slave_1 removed [ 508.986293][ T5888] usb 6-1: selecting invalid altsetting 0 [ 509.012606][T12290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.024004][ T5890] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 509.039613][ T5888] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 509.048027][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 509.088495][ T5890] usb 5-1: SerialNumber: syz [ 509.097714][ T5888] usb 6-1: USB disconnect, device number 3 [ 509.368217][ T5890] usb 5-1: 0:2 : does not exist [ 509.432334][ T5890] usb 5-1: USB disconnect, device number 125 [ 509.930054][T12299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1691'. [ 510.014743][T12299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1691'. [ 510.110603][T12299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1691'. [ 510.126162][ T5891] usb 2-1: USB disconnect, device number 2 [ 510.172477][T12299] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1691'. [ 510.238191][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1695'. [ 510.257343][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 510.257363][ T30] audit: type=1326 audit(1747737937.011:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d0d8e969 code=0x7ffc0000 [ 510.291709][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1695'. [ 510.316273][ T30] audit: type=1326 audit(1747737937.011:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d0d8e969 code=0x7ffc0000 [ 510.339488][ T5910] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 510.404979][ T30] audit: type=1326 audit(1747737937.021:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fc9d0d8e969 code=0x7ffc0000 [ 510.499888][ T30] audit: type=1326 audit(1747737937.021:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d0d8e969 code=0x7ffc0000 [ 510.522724][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 510.536314][ T30] audit: type=1326 audit(1747737937.021:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12305 comm="syz.3.1694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9d0d8e969 code=0x7ffc0000 [ 510.558835][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 510.558870][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.558912][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 510.558937][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.627274][ T5910] usb 5-1: config 0 descriptor?? [ 510.647348][ T5910] hub 5-1:0.0: USB hub found [ 511.310153][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.319234][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.394889][ T30] audit: type=1326 audit(1747737938.131:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12302 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b98e969 code=0x7ffc0000 [ 511.421587][ T5910] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 511.479463][ T30] audit: type=1326 audit(1747737938.131:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12302 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b98e969 code=0x7ffc0000 [ 511.483131][ T2985] net_ratelimit: 19 callbacks suppressed [ 511.483152][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 511.597092][ T30] audit: type=1326 audit(1747737938.131:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12302 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8e4b98e969 code=0x7ffc0000 [ 511.690982][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 511.730122][ T5910] usbhid 5-1:0.0: can't add hid device: -71 [ 511.746465][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 511.790646][ T5910] usb 5-1: USB disconnect, device number 126 [ 511.802467][ T30] audit: type=1326 audit(1747737938.131:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12302 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e4b98e969 code=0x7ffc0000 [ 511.825217][ T5890] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 511.833878][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 511.895405][ T30] audit: type=1326 audit(1747737938.171:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12302 comm="syz.4.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f8e4b98e969 code=0x7ffc0000 [ 511.925732][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 511.968384][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 512.155404][ T5890] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 512.219416][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 512.225350][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 512.267416][ T5890] usb 2-1: config 0 has no interface number 0 [ 512.298316][ T5890] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 512.380010][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 512.407551][ T5890] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 512.492412][ T5890] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 512.555307][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.693802][ T5890] usb 2-1: Product: syz [ 512.698047][ T5890] usb 2-1: Manufacturer: syz [ 512.749612][ T5890] usb 2-1: SerialNumber: syz [ 512.773876][ T5890] usb 2-1: config 0 descriptor?? [ 512.797244][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 512.879660][ T5923] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 513.025849][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 513.109630][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 513.133931][ T5923] usb 5-1: config 0 has an invalid interface number: 168 but max is 0 [ 513.151521][ T5923] usb 5-1: config 0 has an invalid descriptor of length 212, skipping remainder of the config [ 513.167601][ T5923] usb 5-1: config 0 has no interface number 0 [ 513.179494][ T5923] usb 5-1: config 0 interface 168 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 513.209753][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 513.246123][ T5923] usb 5-1: config 0 interface 168 has no altsetting 0 [ 513.290652][ T5923] usb 5-1: New USB device found, idVendor=4855, idProduct=0091, bcdDevice=d1.bd [ 513.306135][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.323162][ T5923] usb 5-1: Product: syz [ 513.337673][ T5923] usb 5-1: Manufacturer: syz [ 513.347887][ T5923] usb 5-1: SerialNumber: syz [ 513.377914][ T5923] usb 5-1: config 0 descriptor?? [ 513.393825][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 513.499649][ T5891] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 513.814783][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 513.831846][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.862981][ T5890] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 513.916741][ T5890] usb 2-1: USB disconnect, device number 3 [ 513.956064][ T5891] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 514.006022][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.080507][ T5891] usb 3-1: config 0 descriptor?? [ 514.114507][T12343] dvmrp5: entered allmulticast mode [ 514.500976][ T5891] usbhid 3-1:0.0: can't add hid device: -71 [ 514.507004][ T5891] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 514.555461][ T5891] usb 3-1: USB disconnect, device number 102 [ 515.330225][ T5910] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 515.559487][ T5891] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 515.621202][ T5910] usb 4-1: unable to get BOS descriptor or descriptor too short [ 515.656202][ T5910] usb 4-1: config 66 interface 0 has no altsetting 0 [ 515.677037][ T5910] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 515.696752][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.721697][ T5910] usb 4-1: Product: syz [ 515.726087][ T5910] usb 4-1: Manufacturer: syz [ 515.771844][ T5910] usb 4-1: SerialNumber: syz [ 515.805877][ T5891] usb 6-1: config 0 has no interfaces? [ 515.861266][ T5891] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 515.876691][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.894830][ T5891] usb 6-1: Product: syz [ 515.904787][ T5891] usb 6-1: Manufacturer: syz [ 515.913147][ T5891] usb 6-1: SerialNumber: syz [ 515.929285][ T5891] usb 6-1: config 0 descriptor?? [ 516.156672][ T5910] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 516.225262][ T5910] usb 4-1: USB disconnect, device number 101 [ 516.521842][ T6011] net_ratelimit: 17 callbacks suppressed [ 516.521865][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 516.703030][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 516.809118][ T5923] usb 5-1: USB disconnect, device number 127 [ 516.849195][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 516.969820][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 517.082703][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 517.326495][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 517.339842][ T5923] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 517.489584][ T47] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 517.514264][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 517.522115][ T5923] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 517.572767][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.678680][T12393] input: syz1 as /devices/virtual/input/input41 [ 517.706614][ T5923] usb 5-1: config 0 descriptor?? [ 517.711864][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 517.728029][ T47] usb 4-1: config 0 has no interfaces? [ 517.762834][ T5923] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 517.821434][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 517.916477][T12395] IPv6: sit1: Disabled Multicast RS [ 517.929738][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.954346][ T47] usb 4-1: Product: syz [ 517.958610][ T47] usb 4-1: Manufacturer: syz [ 518.033749][ T47] usb 4-1: SerialNumber: syz [ 518.047187][ T47] usb 4-1: config 0 descriptor?? [ 518.404137][ T5923] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 518.496437][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 518.525130][ T5888] usb 6-1: USB disconnect, device number 4 [ 518.602233][ T6017] bond1: (slave batadv1): failed to get link speed/duplex [ 518.803891][ T5923] cpia1 5-1:0.0: only firmware version 1 is supported (got: 237) [ 519.079736][ T5888] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 519.241480][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 519.290473][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 519.317277][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 519.375806][ T5888] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 519.425591][ T5888] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.485010][ T5888] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 519.512462][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.546019][ T5888] usb 6-1: Product: syz [ 519.598744][ T5888] usb 6-1: Manufacturer: syz [ 519.611133][ T5888] usb 6-1: SerialNumber: syz [ 519.651128][ T5888] usb 6-1: config 0 descriptor?? [ 519.688702][T12404] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 519.995349][ T5888] rc_core: IR keymap rc-imon-rsc not found [ 520.055058][ T5888] Registered IR keymap rc-empty [ 520.057140][ T47] usb 5-1: USB disconnect, device number 2 [ 520.073189][ T5888] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 520.106292][T12404] syzkaller1: entered promiscuous mode [ 520.150838][T12404] syzkaller1: entered allmulticast mode [ 520.260315][ T5888] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input42 [ 520.724139][T12417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1720'. [ 520.816158][T12417] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1720'. [ 520.879692][T12417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1720'. [ 520.921501][ T47] usb 6-1: USB disconnect, device number 5 [ 520.959810][T12417] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1720'. [ 521.006363][ T5923] usb 4-1: USB disconnect, device number 102 [ 521.593282][ T2985] net_ratelimit: 23 callbacks suppressed [ 521.593303][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 522.049428][ T5888] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 522.256865][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 522.488977][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 522.677731][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 523.028854][ T5888] usb 4-1: config 0 has no interfaces? [ 523.041313][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 523.229742][ T5888] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 523.409160][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 523.692140][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.853121][ T5888] usb 4-1: Product: syz [ 523.857355][ T5888] usb 4-1: Manufacturer: syz [ 523.903151][ T5888] usb 4-1: SerialNumber: syz [ 523.945214][ T5888] usb 4-1: config 0 descriptor?? [ 523.977491][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 524.126956][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 524.259848][ T47] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 524.270019][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 524.379621][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 524.397582][T12460] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[12460] [ 524.427882][T12461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1732'. [ 524.448716][ T47] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 524.456507][T12461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1732'. [ 524.477611][ T47] usb 6-1: config 0 has no interface number 0 [ 524.485103][T12461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1732'. [ 524.493711][ T47] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 524.515743][T12461] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1732'. [ 524.546768][ T47] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 524.563212][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.586210][ T47] usb 6-1: Product: syz [ 524.599653][ T47] usb 6-1: Manufacturer: syz [ 524.604402][ T47] usb 6-1: SerialNumber: syz [ 524.623408][ T47] usb 6-1: config 0 descriptor?? [ 524.650247][T12453] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 524.659535][ T47] usb-storage 6-1:0.20: USB Mass Storage device detected [ 524.702631][ T47] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 524.884468][ T47] scsi host1: usb-storage 6-1:0.20 [ 525.141859][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.166835][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.290539][ T47] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 525.299556][ T5889] usb 4-1: USB disconnect, device number 103 [ 525.451524][ T47] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 525.467547][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.514061][ T47] usb 5-1: config 0 descriptor?? [ 525.537731][ T47] cp210x 5-1:0.0: cp210x converter detected [ 526.089662][T12474] usb 6-1: reset full-speed USB device number 6 using dummy_hcd [ 526.689885][ T12] net_ratelimit: 16 callbacks suppressed [ 526.689908][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 526.759700][T12497] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1741'. [ 526.840717][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 526.979543][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 527.133362][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 527.259479][ T5889] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 527.325100][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 527.360164][T12478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.369978][T12478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.509788][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 527.556860][ T5889] usb 3-1: config 0 has no interfaces? [ 527.568111][ T5889] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 527.577878][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.624368][ T5889] usb 3-1: Product: syz [ 527.630677][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 527.690310][ T5889] usb 3-1: Manufacturer: syz [ 527.726637][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1744'. [ 527.735922][T12507] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1744'. [ 527.758712][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1744'. [ 527.776239][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 527.803369][ T5889] usb 3-1: SerialNumber: syz [ 527.830211][ T5888] usb 6-1: USB disconnect, device number 6 [ 527.867076][T12507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1744'. [ 527.958402][ T5889] usb 3-1: config 0 descriptor?? [ 527.970576][ T12] bond1: (slave batadv1): failed to get link speed/duplex [ 528.097077][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 528.469547][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 528.826161][ T5923] usb 2-1: config 0 has no interfaces? [ 528.887636][ T5923] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 528.912124][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.932959][ T5923] usb 2-1: Product: syz [ 528.937247][ T5923] usb 2-1: Manufacturer: syz [ 529.036510][ T5923] usb 2-1: SerialNumber: syz [ 529.066672][ T5923] usb 2-1: config 0 descriptor?? [ 529.872128][T12515] netlink: 'syz.1.1745': attribute type 4 has an invalid length. [ 530.106270][ T5923] usb 2-1: USB disconnect, device number 4 [ 530.508034][ T47] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 530.609406][ T47] cp210x 5-1:0.0: querying part number failed [ 531.025400][ T47] usb 5-1: cp210x converter now attached to ttyUSB0 [ 531.043791][ T47] usb 5-1: USB disconnect, device number 3 [ 531.260358][ T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 531.458537][ T47] cp210x 5-1:0.0: device disconnected [ 531.469550][T12536] netlink: 440 bytes leftover after parsing attributes in process `syz.3.1751'. [ 531.719585][ T6009] net_ratelimit: 18 callbacks suppressed [ 531.719608][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 531.910586][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 532.058488][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 532.264131][ T5888] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 532.275088][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 532.392608][ T47] usb 3-1: USB disconnect, device number 103 [ 532.419543][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 532.428360][ T5888] usb 6-1: config 0 has no interfaces? [ 532.459134][ T5888] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 532.468480][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.537056][ T5888] usb 6-1: Product: syz [ 532.560617][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 532.568039][ T5888] usb 6-1: Manufacturer: syz [ 532.579272][ T5888] usb 6-1: SerialNumber: syz [ 532.721521][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 532.727886][ T5888] usb 6-1: config 0 descriptor?? [ 532.830333][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 532.867688][ T5888] usb 6-1: can't set config #0, error -71 [ 532.881772][ T5888] usb 6-1: USB disconnect, device number 7 [ 532.959601][ T5889] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 532.969786][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 533.136587][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 533.360358][ T5889] usb 3-1: config 0 has no interfaces? [ 533.388638][ T5889] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 533.448116][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.466558][ T5889] usb 3-1: Product: syz [ 533.496957][ T5889] usb 3-1: Manufacturer: syz [ 533.617912][ T5889] usb 3-1: SerialNumber: syz [ 533.654287][ T5889] usb 3-1: config 0 descriptor?? [ 534.192805][T12557] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 534.199726][T12557] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 534.206024][T12557] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.240059][T12557] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 534.257724][T12557] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 534.339604][T12557] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 534.425744][T12557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 534.589181][T12557] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 535.088523][T12553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.101431][T12553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.254653][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 536.254679][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 536.329479][ T5846] Bluetooth: hci5: command 0x0405 tx timeout [ 536.331813][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 536.335599][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 536.698440][ T5889] usb 3-1: USB disconnect, device number 104 [ 536.740751][ T6009] net_ratelimit: 26 callbacks suppressed [ 536.740768][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 536.925294][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 536.975016][T12586] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[12586] [ 537.051082][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 537.159456][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 537.251396][T12565] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 537.263938][T12565] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 537.271691][T12565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 537.288229][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 537.313330][T12565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 537.350562][T12565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 537.384141][T12565] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 537.439504][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 537.550158][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 537.671063][ T5889] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 537.677769][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 537.779906][ T5923] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 537.810076][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 537.831752][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.851727][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 537.901725][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.919428][ T9] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 537.942943][ T5923] usb 2-1: device descriptor read/64, error -71 [ 537.951411][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 537.978660][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 538.010311][ T5889] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 538.031974][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.070933][ T5889] usb 5-1: config 0 descriptor?? [ 538.131029][ T9] usb 4-1: config 0 has no interfaces? [ 538.141318][ T9] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 538.150598][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.165262][ T9] usb 4-1: Product: syz [ 538.177730][ T9] usb 4-1: Manufacturer: syz [ 538.184922][ T9] usb 4-1: SerialNumber: syz [ 538.199658][ T5923] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 538.220384][ T9] usb 4-1: config 0 descriptor?? [ 538.369509][ T5923] usb 2-1: device descriptor read/64, error -71 [ 538.409560][ T5888] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 538.479845][ T5923] usb usb2-port1: attempt power cycle [ 538.487316][ T5889] plantronics 0003:047F:FFFF.003D: bogus close delimiter [ 538.497256][ T5889] plantronics 0003:047F:FFFF.003D: item 0 0 2 10 parsing failed [ 538.526548][ T5889] plantronics 0003:047F:FFFF.003D: parse failed [ 538.570517][ T5889] plantronics 0003:047F:FFFF.003D: probe with driver plantronics failed with error -22 [ 538.605340][ T5888] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 538.635597][ T5888] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 538.667456][ T5888] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.733344][ T5888] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 538.755973][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.774088][ T5888] usb 3-1: Product: syz [ 538.919413][ T5923] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 538.965485][ T5923] usb 2-1: device descriptor read/8, error -71 [ 538.991283][ T5888] usb 3-1: Manufacturer: syz [ 539.034444][ T5888] usb 3-1: SerialNumber: syz [ 539.220422][ T5923] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 539.253777][ T5923] usb 2-1: device descriptor read/8, error -71 [ 539.290023][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 539.296313][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 539.318000][ T5888] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 105 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 539.373823][ T5923] usb usb2-port1: unable to enumerate USB device [ 539.382289][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 539.388329][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 539.449529][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 539.518099][ T5888] usb 3-1: USB disconnect, device number 105 [ 539.529954][ T5888] usblp0: removed [ 540.525992][ T5923] usb 5-1: USB disconnect, device number 4 [ 540.587591][ T5835] usb 4-1: USB disconnect, device number 104 [ 541.032419][ T5923] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 541.255515][ T5923] usb 5-1: not running at top speed; connect to a high speed hub [ 541.260056][ T5888] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 541.265138][ T5923] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 541.334619][ T5923] usb 5-1: config 1 interface 0 has no altsetting 0 [ 541.357064][ T5923] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 541.369557][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.420057][T12642] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1782'. [ 541.429603][ T5923] usb 5-1: Product: 䊈馕ᐐﵯᄺ.搛봌ꀙ퓖ⅆ،鑫ᲁ뷓䫝䡔춳՚䴑촢鎅ꖏ㨤簜걁匣ꫮ즇뮒⸆輵狇뮆訐ྌ斒㖑첕⾶ﱈ듦쨴ꙅ [ 541.445657][ T5889] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 541.512177][ T5923] usb 5-1: Manufacturer: 湍햹錗ᰯ磕侏꣢궹ꋽ놕䞰쨳毮ẛ晫쐯椨㰂㱢旺돓⎚䐐썳妼䚗그誡댟涐赘㾌褐䃋儯ꁨ狘 [ 541.541437][ T5838] Bluetooth: hci5: command 0x0405 tx timeout [ 541.558183][ T5923] usb 5-1: SerialNumber: Е [ 541.568901][T12622] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.586703][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 541.630864][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.669217][ T5888] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 541.685632][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.740606][ T5889] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 541.751260][ T5888] usb 2-1: Product: syz [ 541.755472][ T5888] usb 2-1: Manufacturer: syz [ 541.765975][ T5889] usb 6-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 541.801878][ T5888] usb 2-1: SerialNumber: syz [ 542.014794][ T5889] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.017141][T12622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.068315][ T6007] net_ratelimit: 32 callbacks suppressed [ 542.068339][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 542.121217][ T5888] usb 2-1: config 0 descriptor?? [ 542.127388][T12628] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 542.140180][T12622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.209033][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.221213][ T5888] usb 2-1: ucan: probing device on interface #0 [ 542.233399][ T5888] usb 2-1: ucan: invalid EP count (1) [ 542.244160][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.256910][ T5889] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.278680][ T5888] usb 2-1: ucan: probe failed; try to update the device firmware [ 542.298574][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.331970][ T5889] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 542.341552][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 542.463843][T12638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.473961][T12638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.487243][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 542.609515][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 542.739825][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 542.827190][T12628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.857875][T12628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.871538][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 543.050497][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 543.439676][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 543.626520][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 543.710419][ T5923] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 543.821231][ T5923] usb 5-1: USB disconnect, device number 5 [ 543.830038][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 544.074453][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1783'. [ 544.102550][T12661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1783'. [ 544.181092][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1783'. [ 544.192366][T12661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1783'. [ 544.532482][ T5888] usb 2-1: USB disconnect, device number 9 [ 544.689835][ T5889] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 544.876579][ T5889] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 544.898559][ T5889] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 544.914263][ T5923] usb 6-1: USB disconnect, device number 8 [ 544.936350][ T5889] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 544.979038][ T5889] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.989984][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.997985][ T5889] usb 3-1: Product: syz [ 545.016910][ T5889] usb 3-1: Manufacturer: 륌ઈ拣䠘뇟湏㲅ፁ礀啯ỿ⧸橐ᝃ鉲㣒툲ﴭ⋘ྒྷ춥뚄枭蛩귛セŻ歨꧁ꢳ㕛츈3ꪍЊ밠଄꒫쭊ꥵ륷濱G䐥≁恃ḷ퐉십㪢㖯။ꤐ蚖묃論ᅣ啵ꃟ禥㱀ǁ [ 545.043864][ T5889] usb 3-1: SerialNumber: syz [ 545.488357][ T5889] cdc_ncm 3-1:1.0: bind() failure [ 545.546433][ T5889] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 545.582781][ T5889] cdc_ncm 3-1:1.1: bind() failure [ 545.641331][ T5889] usb 3-1: USB disconnect, device number 106 [ 545.669681][T12680] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1791'. [ 546.411888][T12700] netlink: 440 bytes leftover after parsing attributes in process `syz.2.1795'. [ 546.454430][T12688] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 546.522101][T12688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 546.528509][T12688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.534900][T12688] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.541323][T12688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 546.572228][T12688] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 547.071804][ T6011] net_ratelimit: 25 callbacks suppressed [ 547.071826][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 547.091792][ T5923] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 547.095969][ T5889] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 547.251220][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 547.306379][T12707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 547.316612][T12707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1797'. [ 547.344089][T12707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 547.385918][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 547.395663][T12707] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1797'. [ 547.416417][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.420131][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.427352][ T5923] usb 3-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 547.487154][ T5889] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.497006][ T5889] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 547.516547][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.536882][ T5923] usb 3-1: config 1 interface 0 has no altsetting 0 [ 547.545901][ T5889] usb 6-1: config 0 descriptor?? [ 547.577631][ T5923] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.591683][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 547.610760][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 547.626547][ T5889] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 547.650104][ T5923] usb 3-1: SerialNumber: syz [ 547.651038][ T5889] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 547.678248][ T5923] usb 3-1: bad CDC descriptors [ 547.714815][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 547.832458][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 547.941170][ T5923] usb 3-1: USB disconnect, device number 107 [ 547.949453][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 548.092093][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 548.171461][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 548.219477][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 548.351430][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 548.451716][ T5889] usb 6-1: USB disconnect, device number 9 [ 548.544451][T12715] loop2: detected capacity change from 0 to 7 [ 548.569737][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 548.570232][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 548.575932][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.583024][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 548.617533][T12715] loop2: p1 [ 548.625310][T12715] loop2: partition table partially beyond EOD, truncated [ 548.654849][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 548.710208][T12715] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 549.104970][ T5889] hid-generic 009C:0008:0003.003F: unknown main item tag 0x7 [ 549.116209][T12728] fuse: Unknown parameter ' ' [ 549.124833][ T5889] hid-generic 009C:0008:0003.003F: unknown main item tag 0x3 [ 549.173851][ T5889] hid-generic 009C:0008:0003.003F: unknown main item tag 0x0 [ 549.207220][ T5889] hid-generic 009C:0008:0003.003F: unknown main item tag 0x0 [ 549.299748][T12736] netlink: 440 bytes leftover after parsing attributes in process `syz.5.1806'. [ 549.310176][ T5889] hid-generic 009C:0008:0003.003F: unknown main item tag 0x0 [ 549.336653][ T5889] hid-generic 009C:0008:0003.003F: unknown main item tag 0x0 [ 549.360476][ T5889] hid-generic 009C:0008:0003.003F: hidraw0: HID v0.05 Device [syz1] on syz0 [ 549.525530][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 549.767809][ T9] usb 5-1: config 252 has an invalid interface number: 254 but max is 0 [ 549.777361][ T9] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 549.787946][ T9] usb 5-1: config 252 has no interface number 0 [ 549.815500][ T9] usb 5-1: config 252 interface 254 has no altsetting 0 [ 550.061097][ T9] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=46.29 [ 550.092497][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.112372][ T9] usb 5-1: Product: syz [ 550.117294][ T9] usb 5-1: Manufacturer: syz [ 550.127462][ T9] usb 5-1: SerialNumber: syz [ 550.144167][ T9] bfusb 5-1:252.254: probe with driver bfusb failed with error -5 [ 550.342628][T12728] binder: 12727:12728 ioctl 400c620e 200000000380 returned -22 [ 550.357092][ T5910] usb 5-1: USB disconnect, device number 6 [ 550.729646][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 550.945247][T12761] loop2: detected capacity change from 0 to 7 [ 550.987310][T12761] loop2: p1 [ 550.994413][T12761] loop2: partition table partially beyond EOD, truncated [ 551.009629][T12761] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 552.163508][ T6009] net_ratelimit: 29 callbacks suppressed [ 552.163530][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 552.351418][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 552.478572][T12782] netlink: 440 bytes leftover after parsing attributes in process `syz.2.1821'. [ 552.501601][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 552.664090][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 552.891420][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 552.942878][T12792] veth1_macvtap: left promiscuous mode [ 552.948432][T12792] macsec0: entered promiscuous mode [ 552.999541][T12795] veth1_macvtap: entered promiscuous mode [ 553.005860][T12795] macsec0: left promiscuous mode [ 553.087096][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 553.140970][T12799] loop2: detected capacity change from 0 to 7 [ 553.172415][ T5853] loop2: p1 [ 553.176925][ T5853] loop2: partition table partially beyond EOD, truncated [ 553.240703][ T5853] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 553.248799][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 553.308439][T12799] loop2: p1 [ 553.357159][T12799] loop2: partition table partially beyond EOD, truncated [ 553.371166][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 553.387208][T12799] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 553.413242][ T5199] loop2: p1 [ 553.427496][ T5199] loop2: partition table partially beyond EOD, truncated [ 553.488220][ T5199] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 553.499462][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 553.777070][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 554.379946][ T5889] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 554.619618][ T5889] usb 3-1: Using ep0 maxpacket: 16 [ 555.429443][ T5888] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 555.622579][ T5888] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 555.632207][ T5888] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 555.677110][ T5888] usb 6-1: config 0 has no interface number 0 [ 555.701283][ T5888] usb 6-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 555.739425][ T5888] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 555.833461][ T5888] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 555.867179][ T5888] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 555.889125][ T5888] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.930640][ T5888] usb 6-1: config 0 descriptor?? [ 556.041238][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 556.041255][ T30] audit: type=1326 audit(1747737982.801:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12829 comm="syz.1.1832" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f882df8e969 code=0x0 [ 556.584152][ T5888] usb 6-1: USB disconnect, device number 10 [ 557.179581][ T36] net_ratelimit: 26 callbacks suppressed [ 557.179604][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 557.346169][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 557.461348][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 557.475156][T12847] fuse: Bad value for 'fd' [ 557.552911][T12847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1837'. [ 557.587549][T12847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 557.790771][ T5890] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 557.862793][ T5889] usb 3-1: unable to get BOS descriptor or descriptor too short [ 557.936770][ T5889] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 557.986235][ T5889] usb 3-1: can't read configurations, error -71 [ 558.034012][ T5910] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0 [ 558.080462][ T5890] usb 6-1: config 0 has no interfaces? [ 558.115825][ T5890] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 558.129047][ T5910] hid-generic 0000:0000:0000.0040: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.193086][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 558.200397][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.445395][ T5890] usb 6-1: Product: syz [ 558.462869][ T5890] usb 6-1: Manufacturer: syz [ 558.499560][ T5890] usb 6-1: SerialNumber: syz [ 558.623209][ T5890] usb 6-1: config 0 descriptor?? [ 558.670599][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 558.829708][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 559.020269][ T47] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 559.095244][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 559.248687][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 559.383444][ T47] usb 4-1: config 0 has no interfaces? [ 559.489633][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 559.678446][ T47] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 559.688003][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.696844][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 559.706348][ T47] usb 4-1: Product: syz [ 559.711248][ T47] usb 4-1: Manufacturer: syz [ 559.716152][ T47] usb 4-1: SerialNumber: syz [ 559.760266][ T47] usb 4-1: config 0 descriptor?? [ 560.317428][T12880] loop2: detected capacity change from 0 to 7 [ 560.371113][T12878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 560.380637][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1843'. [ 560.390775][T12878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 560.412795][T12880] loop2: p1 [ 560.428964][T12880] loop2: partition table partially beyond EOD, truncated [ 560.447739][T12878] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1843'. [ 560.468047][T12880] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 560.999401][ T5888] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 561.044027][ T5910] usb 6-1: USB disconnect, device number 11 [ 561.269419][ T5888] usb 3-1: device descriptor read/64, error -71 [ 561.509411][ T5888] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 561.629398][ T5890] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 561.695900][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1849'. [ 561.748142][ T5888] usb 3-1: device descriptor read/64, error -71 [ 561.869550][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 561.881516][ T5888] usb usb3-port1: attempt power cycle [ 561.929753][ T47] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 562.098135][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 562.142365][ T47] usb 2-1: config 0 has no interfaces? [ 562.170019][ T47] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 562.192836][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 562.194768][ T36] net_ratelimit: 18 callbacks suppressed [ 562.194789][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 562.255297][ T5890] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 562.256709][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.313028][ T47] usb 2-1: Product: syz [ 562.319593][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.322124][ T47] usb 2-1: Manufacturer: syz [ 562.353783][ T47] usb 2-1: SerialNumber: syz [ 562.382008][ T5888] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 562.391686][ T47] usb 2-1: config 0 descriptor?? [ 562.447723][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 562.493610][ T5890] usb 5-1: config 0 descriptor?? [ 562.529860][ T5888] usb 3-1: device descriptor read/8, error -71 [ 562.582327][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 562.626479][ T5890] em28xx 5-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 562.635811][ T5890] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 562.760409][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 562.809420][ T5888] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 562.890253][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 562.897673][ T5890] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 562.912985][ T5890] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 562.922279][ T5888] usb 3-1: device descriptor read/8, error -71 [ 562.929246][ T5890] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 562.942534][ T5890] em28xx 5-1:0.0: No AC97 audio processor [ 562.981281][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.006325][ T5890] usb 5-1: USB disconnect, device number 7 [ 563.018264][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.030140][ T5888] usb usb3-port1: unable to enumerate USB device [ 563.042220][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 563.088682][ T47] usb 4-1: USB disconnect, device number 105 [ 563.116717][ T5890] em28xx 5-1:0.0: Disconnecting em28xx [ 563.148694][ T5890] em28xx 5-1:0.0: Freeing device [ 563.210611][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 563.352036][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 563.491392][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 563.539582][ T47] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 563.619625][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 563.647716][T12906] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[12906] [ 563.835076][ T47] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 563.843593][ T47] usb 4-1: config 7 has no interface number 0 [ 563.858874][ T47] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 563.868503][ T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.876792][ T47] usb 4-1: Product: syz [ 563.885130][ T47] usb 4-1: Manufacturer: syz [ 563.917456][ T47] usb 4-1: SerialNumber: syz [ 564.192670][ T47] as10x_usb: device has been detected [ 564.266991][ T47] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 564.437521][ T47] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 564.556783][ T47] as10x_usb: error during firmware upload part1 [ 564.557463][ T47] Registered device Elgato EyeTV DTT Deluxe [ 564.668450][ T47] usb 4-1: USB disconnect, device number 106 [ 564.858794][ T47] Unregistered device Elgato EyeTV DTT Deluxe [ 564.875679][ T47] as10x_usb: device has been disconnected [ 565.578521][ T47] usb 2-1: USB disconnect, device number 11 [ 566.089474][ T47] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 566.279460][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 566.303446][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.329856][ T47] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 566.380113][ T47] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.419424][ T47] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 1, skipping [ 566.507960][ T47] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 566.579027][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.609879][ T47] usb 3-1: Product: syz [ 566.614119][ T47] usb 3-1: Manufacturer: syz [ 566.618747][ T47] usb 3-1: SerialNumber: syz [ 566.623715][ T5923] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 566.820506][ T5923] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 566.855494][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.956944][ T5923] usb 6-1: config 0 descriptor?? [ 566.973493][ T5923] cp210x 6-1:0.0: cp210x converter detected [ 566.986726][ T47] usb 3-1: USB disconnect, device number 114 [ 567.009428][ T5910] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 567.222329][ T5910] usb 4-1: Using ep0 maxpacket: 16 [ 567.271913][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 567.290765][ T6009] net_ratelimit: 23 callbacks suppressed [ 567.290812][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 567.307679][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1862'. [ 567.482093][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 567.559015][ T5910] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 567.587807][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.619464][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 567.647716][ T5910] usb 4-1: Product: syz [ 567.671640][ T5910] usb 4-1: Manufacturer: syz [ 567.719446][ T5910] usb 4-1: SerialNumber: syz [ 567.746066][T12959] netlink: 'syz.1.1865': attribute type 9 has an invalid length. [ 567.771133][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 567.808057][ T5910] usb 4-1: config 0 descriptor?? [ 567.827374][ T5910] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 567.906109][ T5910] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 568.039684][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 568.329964][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 568.454121][ T5910] em28xx 4-1:0.0: unknown em28xx chip ID (213) [ 568.479413][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 568.651021][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 568.658624][ T5910] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 568.705212][ T5910] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 568.722788][ T5910] em28xx 4-1:0.0: No AC97 audio processor [ 568.822878][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 568.989940][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 569.130660][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 569.740336][ T9] usb 4-1: USB disconnect, device number 107 [ 569.747624][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 569.763505][ T9] em28xx 4-1:0.0: Freeing device [ 570.379620][ T5923] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 570.439727][ T5923] cp210x 6-1:0.0: querying part number failed [ 570.479865][ T5923] usb 6-1: cp210x converter now attached to ttyUSB0 [ 570.530869][ T5923] usb 6-1: USB disconnect, device number 12 [ 570.566330][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 570.600039][ T5923] cp210x 6-1:0.0: device disconnected [ 570.969261][T13034] binfmt_misc: register: failed to install interpreter file ./file0 [ 571.644999][T13049] kvm: kvm [13047]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 571.720244][T13049] kvm: kvm [13047]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x0 [ 572.378184][ T36] net_ratelimit: 22 callbacks suppressed [ 572.378205][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 572.560193][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 572.670375][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 572.800620][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 572.893784][ T5842] Bluetooth: hci3: unknown advertising packet type: 0x82 [ 572.893868][ T5842] Bluetooth: hci3: Malformed LE Event: 0x02 [ 572.909587][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 573.019479][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 573.137764][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 573.294007][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 573.381979][ T30] audit: type=1326 audit(1747738000.141:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13104 comm="syz.5.1923" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca6f98e969 code=0x0 [ 573.440222][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 573.473549][ T5842] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 573.564176][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 573.830311][T13122] usb usb8: usbfs: process 13122 (syz.2.1930) did not claim interface 0 before use [ 574.232352][ T30] audit: type=1326 audit(1747738000.981:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13133 comm="syz.5.1936" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fca6f98e969 code=0x0 [ 574.260808][ T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 574.429397][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 574.467105][ T47] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 574.487095][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 574.513941][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 574.535165][ T47] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 574.583770][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 574.618322][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 574.654820][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.938205][ T47] usb 5-1: usb_control_msg returned -32 [ 574.949560][ T47] usbtmc 5-1:16.0: can't read capabilities [ 575.393296][T13161] binder: 13160:13161 ioctl c0306201 2000000002c0 returned -14 [ 575.999257][T13177] kvm: kvm [13176]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x3a3 [ 576.039863][T13177] kvm: kvm [13176]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x4600 [ 576.077293][T13177] kvm: kvm [13176]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x92f4 [ 576.123904][T13177] kvm: kvm [13176]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x86e4 [ 576.152259][T13177] kvm: kvm [13176]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x4600 [ 576.194459][T13177] kvm_intel: kvm [13176]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x8211 [ 576.669992][ T5923] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 576.839754][ T5923] usb 2-1: Using ep0 maxpacket: 8 [ 576.864271][ T5923] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 576.886444][ T5923] usb 2-1: config 0 has no interface number 0 [ 576.915938][ T5923] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 576.958020][ T5923] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 576.997538][ T5923] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 577.046425][ T5923] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.081917][ T47] usb 5-1: USB disconnect, device number 8 [ 577.138304][ T5923] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 577.169476][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.177533][ T5923] usb 2-1: Product: syz [ 577.202346][ T5923] usb 2-1: Manufacturer: syz [ 577.207254][ T5923] usb 2-1: SerialNumber: syz [ 577.230517][ T5923] usb 2-1: config 0 descriptor?? [ 577.403791][ T6015] net_ratelimit: 33 callbacks suppressed [ 577.403813][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 577.482822][ T5923] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 577.562218][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 577.665749][ T5890] usb 2-1: USB disconnect, device number 12 [ 577.702744][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 577.851933][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 577.963781][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 578.079638][ T5923] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 578.093149][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 578.240419][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 578.261139][ T5923] usb 4-1: Using ep0 maxpacket: 8 [ 578.299917][ T5923] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 578.326883][ T5923] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 578.371361][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 578.388893][ T5923] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 578.429026][ T5923] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 578.458389][ T5923] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 578.511002][ T5923] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 578.514785][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 578.572970][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.734536][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 578.837296][ T5923] usb 4-1: usb_control_msg returned -32 [ 578.849218][ T5923] usbtmc 4-1:16.0: can't read capabilities [ 579.569562][ T5923] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 579.750053][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 579.760660][ T5923] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 579.788096][ T5923] usb 6-1: config 0 has no interface number 0 [ 579.820956][ T5923] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.866391][ T5923] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 579.921199][ T5923] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 579.962870][ T5923] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 580.025692][ T5923] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 580.056413][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.084964][ T5923] usb 6-1: Product: syz [ 580.102975][ T5923] usb 6-1: Manufacturer: syz [ 580.121134][ T5923] usb 6-1: SerialNumber: syz [ 580.152926][ T5923] usb 6-1: config 0 descriptor?? [ 580.391124][ T5923] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior1 [ 580.608777][ T5923] usb 6-1: USB disconnect, device number 13 [ 580.867297][ T9] usb 4-1: USB disconnect, device number 108 [ 581.117771][T13257] vxcan0: tx address claim with dest, not broadcast [ 581.283717][T13263] kvm: pic: single mode not supported [ 581.283840][T13263] kvm: pic: single mode not supported [ 581.293634][T13263] kvm: pic: level sensitive irq not supported [ 581.302951][T13263] kvm: pic: level sensitive irq not supported [ 582.471910][ T6015] net_ratelimit: 28 callbacks suppressed [ 582.471934][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 582.669493][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 582.812168][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 582.954518][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 583.079601][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 583.240957][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 583.350287][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 583.480740][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 583.619654][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 583.758022][T13333] netlink: 'syz.4.2012': attribute type 5 has an invalid length. [ 583.766203][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 583.865256][T13333] : entered promiscuous mode [ 584.348095][T13352] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.2020'. [ 584.766574][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x24 [ 584.830379][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x24 [ 584.878284][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x24 [ 584.933871][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x24 [ 584.995644][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x24 [ 585.025413][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x24 [ 585.077027][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x24 [ 585.108322][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x24 [ 585.138252][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x24 [ 585.168629][T13355] kvm: kvm [13354]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x24 [ 585.525958][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2026'. [ 586.024944][ T5842] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 586.229399][ T47] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 586.405893][ T47] usb 6-1: Using ep0 maxpacket: 32 [ 586.453959][ T47] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 586.485827][ T47] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 586.507229][ T47] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 586.526847][ T47] usb 6-1: Product: syz [ 586.531674][ T47] usb 6-1: Manufacturer: syz [ 586.536427][ T47] usb 6-1: SerialNumber: syz [ 586.562544][ T47] usb 6-1: config 0 descriptor?? [ 586.818918][T13385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 587.199401][ T5888] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 587.268720][T13402] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 587.278847][T13402] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 587.285320][T13402] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 587.291782][T13402] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 587.298204][T13402] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 587.304640][T13402] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 587.653246][ T36] net_ratelimit: 30 callbacks suppressed [ 587.653270][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 587.662134][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 587.699934][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.779731][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 587.809415][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 587.829994][ T5888] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 587.859500][ T5888] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 587.895927][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.914984][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 587.948393][ T5888] hub 2-1:1.0: bad descriptor, ignoring hub [ 587.974059][ T5888] hub 2-1:1.0: probe with driver hub failed with error -5 [ 588.012625][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 588.017972][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 588.065460][ T5888] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 588.086717][ T5888] cdc_wdm 2-1:1.0: Unknown control protocol [ 588.111153][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 588.173711][ T5888] usb 2-1: USB disconnect, device number 13 [ 588.301157][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 588.450492][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 588.564339][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 588.679400][ T5888] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 588.720477][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 588.849566][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 588.861625][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 588.866398][ T5888] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.899434][ T5888] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 588.928794][ T5888] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.976327][ T5888] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 588.996110][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.013650][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 589.029982][ T5890] usb 6-1: USB disconnect, device number 14 [ 589.049246][ T5888] hub 2-1:1.0: bad descriptor, ignoring hub [ 589.082854][ T5888] hub 2-1:1.0: probe with driver hub failed with error -5 [ 589.092778][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 589.098036][ T5888] cdc_wdm 2-1:1.0: skipping garbage [ 589.114309][ T5888] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 589.122423][ T9] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 589.152485][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 589.289403][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 589.289895][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 589.294816][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 589.300846][T12719] Bluetooth: hci0: command 0x0c1a tx timeout [ 589.322850][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.344841][ T5888] usb 2-1: USB disconnect, device number 14 [ 589.363954][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.379845][T12719] Bluetooth: hci5: command 0x0405 tx timeout [ 589.385986][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 589.392057][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 589.418376][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 589.446248][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.478571][ T9] usb 4-1: config 0 descriptor?? [ 589.656162][T13429] kvm_intel: kvm [13428]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 589.945928][ T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0041/input/input44 [ 590.051575][ T9] appleir 0003:05AC:8241.0041: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 590.152530][ T9] usb 4-1: USB disconnect, device number 109 [ 590.266221][T13437] ptrace attach of "./syz-executor exec"[5853] was attempted by "./syz-executor exec"[13437] [ 590.929880][ T47] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 591.095918][ T47] usb 5-1: config 0 has no interfaces? [ 591.108727][ T47] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 591.125933][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.231728][ T47] usb 5-1: Product: syz [ 591.235969][ T47] usb 5-1: Manufacturer: syz [ 591.250051][ T9] hid (null): unknown global tag 0xc [ 591.257663][ T9] hid (null): report_id 0 is invalid [ 591.263653][T13455] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 591.287371][ T9] hid (null): report_id 37479 is invalid [ 591.303443][ T9] hid (null): invalid report_count 18339 [ 591.323047][ T9] hid (null): report_id 0 is invalid [ 591.379788][ T9] hid-generic 0400:7FFF:0000.0042: reserved main item tag 0xe [ 591.397784][T13457] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 591.405753][ T47] usb 5-1: SerialNumber: syz [ 591.421794][ T47] usb 5-1: config 0 descriptor?? [ 591.449783][T13458] netlink: 'syz.2.2055': attribute type 1 has an invalid length. [ 591.457708][T13458] netlink: 'syz.2.2055': attribute type 2 has an invalid length. [ 591.468882][ T9] hid-generic 0400:7FFF:0000.0042: collection stack underflow [ 591.486661][T13455] bond0: entered promiscuous mode [ 591.492443][T13455] bond0: entered allmulticast mode [ 591.498392][T13455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.533785][T13457] netlink: 'syz.2.2055': attribute type 2 has an invalid length. [ 591.539150][ T9] hid-generic 0400:7FFF:0000.0042: item 0 0 0 12 parsing failed [ 591.670053][ T9] hid-generic 0400:7FFF:0000.0042: probe with driver hid-generic failed with error -22 [ 592.599427][ T47] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 592.669455][ T6007] net_ratelimit: 27 callbacks suppressed [ 592.669480][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 592.771925][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.793725][ T47] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 592.833570][ T47] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 592.856363][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.884529][ T47] usb 3-1: config 0 descriptor?? [ 592.899449][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 592.999404][ T5888] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 593.009512][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 593.123449][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 593.202979][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 593.306273][ T2985] bond1: (slave batadv1): failed to get link speed/duplex [ 593.380199][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 593.432021][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 593.464884][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 593.542326][ T5888] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.549675][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 593.606180][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.673396][ T5888] usb 4-1: config 0 descriptor?? [ 593.687306][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 593.726701][T13475] vxcan0: tx address claim with dest, not broadcast [ 593.840194][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 593.980270][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 594.127685][ T5888] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 594.197222][ T5888] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 594.383486][ T5888] usb 3-1: USB disconnect, device number 115 [ 594.391272][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.412561][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.475071][T13469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.524990][T13469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.603530][T13487] ptrace attach of "./syz-executor exec"[12120] was attempted by "./syz-executor exec"[13487] [ 594.622927][ T47] usb 4-1: USB disconnect, device number 110 [ 594.706353][ T9] usb 5-1: USB disconnect, device number 9 [ 594.884655][ T5888] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 595.066011][ T5888] usb 2-1: config 0 has no interfaces? [ 595.092017][ T5888] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 595.139546][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.168435][ T5888] usb 2-1: Product: syz [ 595.183080][ T5888] usb 2-1: Manufacturer: syz [ 595.209389][ T5888] usb 2-1: SerialNumber: syz [ 595.263408][ T5888] usb 2-1: config 0 descriptor?? [ 595.358946][T13504] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2068'. [ 595.395361][T13504] input: syz0 as /devices/virtual/input/input46 [ 595.918497][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2071'. [ 595.941904][T13514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2071'. [ 596.048166][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2071'. [ 596.255722][T13514] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2071'. [ 597.259624][ T47] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 597.717268][ T36] net_ratelimit: 28 callbacks suppressed [ 597.717291][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 597.789437][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 598.229695][ T47] usb 5-1: config 255 has an invalid interface number: 71 but max is 0 [ 598.240026][ T5890] usb 2-1: USB disconnect, device number 15 [ 598.245573][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 598.273446][ T47] usb 5-1: config 255 has no interface number 0 [ 598.294819][ T47] usb 5-1: config 255 interface 71 has no altsetting 0 [ 598.327974][ T47] usb 5-1: New USB device found, idVendor=0e0b, idProduct=9031, bcdDevice=7f.b1 [ 598.372257][ T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.409395][ T47] usb 5-1: Product: syz [ 598.419521][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 598.449792][ T47] usb 5-1: Manufacturer: syz [ 598.482219][ T47] usb 5-1: SerialNumber: syz [ 598.539557][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 598.686051][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 598.829556][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 598.939749][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 599.070631][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 599.210710][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 599.239739][ T5888] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 599.354157][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 599.407834][ T5888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 599.448793][ T5888] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 599.476023][ T5888] usb 2-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=ae.ad [ 599.509214][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.533447][ T5888] usb 2-1: config 0 descriptor?? [ 600.102244][ T47] usb 5-1: USB disconnect, device number 10 [ 601.804961][ T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 602.019023][ T9] usb 5-1: config 0 has no interfaces? [ 602.059730][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 602.114718][ T47] usb 2-1: USB disconnect, device number 16 [ 602.249384][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.375958][ T9] usb 5-1: Product: syz [ 602.389534][ T9] usb 5-1: Manufacturer: syz [ 602.425961][ T9] usb 5-1: SerialNumber: syz [ 602.520479][ T9] usb 5-1: config 0 descriptor?? [ 602.794466][ T6007] net_ratelimit: 25 callbacks suppressed [ 602.794490][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 602.878210][T13574] syz.1.2087 (13574): drop_caches: 2 [ 603.013314][T13574] syz.1.2087 (13574): drop_caches: 2 [ 603.030778][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 603.161576][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 603.265628][T13580] FAULT_INJECTION: forcing a failure. [ 603.265628][T13580] name failslab, interval 1, probability 0, space 0, times 0 [ 603.289609][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 603.300238][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 603.359555][T13580] CPU: 1 UID: 0 PID: 13580 Comm: syz.1.2089 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 603.359586][T13580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 603.359600][T13580] Call Trace: [ 603.359610][T13580] [ 603.359619][T13580] dump_stack_lvl+0x189/0x250 [ 603.359659][T13580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.359690][T13580] ? __pfx__printk+0x10/0x10 [ 603.359718][T13580] ? __pfx___might_resched+0x10/0x10 [ 603.359737][T13580] ? fs_reclaim_acquire+0x7d/0x100 [ 603.359774][T13580] should_fail_ex+0x414/0x560 [ 603.359802][T13580] ? file_tty_write+0x2a6/0x990 [ 603.359823][T13580] should_failslab+0xa8/0x100 [ 603.359845][T13580] __kvmalloc_node_noprof+0x168/0x5e0 [ 603.359867][T13580] ? file_tty_write+0x2a6/0x990 [ 603.359886][T13580] file_tty_write+0x2a6/0x990 [ 603.359908][T13580] vfs_write+0x548/0xa90 [ 603.359930][T13580] ? __pfx_tty_write+0x10/0x10 [ 603.359946][T13580] ? __pfx_vfs_write+0x10/0x10 [ 603.359971][T13580] ? __fget_files+0x2a/0x420 [ 603.359999][T13580] ksys_write+0x145/0x250 [ 603.360015][T13580] ? rcu_is_watching+0x15/0xb0 [ 603.360033][T13580] ? __pfx_ksys_write+0x10/0x10 [ 603.360053][T13580] ? do_syscall_64+0xba/0x210 [ 603.360077][T13580] do_syscall_64+0xf6/0x210 [ 603.360098][T13580] ? clear_bhb_loop+0x60/0xb0 [ 603.360116][T13580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.360131][T13580] RIP: 0033:0x7f882df8e969 [ 603.360145][T13580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.360159][T13580] RSP: 002b:00007f882ed61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 603.360175][T13580] RAX: ffffffffffffffda RBX: 00007f882e1b5fa0 RCX: 00007f882df8e969 [ 603.360187][T13580] RDX: 0000000000001051 RSI: 0000200000000000 RDI: 0000000000000004 [ 603.360196][T13580] RBP: 00007f882ed61090 R08: 0000000000000000 R09: 0000000000000000 [ 603.360206][T13580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.360215][T13580] R13: 0000000000000000 R14: 00007f882e1b5fa0 R15: 00007f882e2dfa28 [ 603.360238][T13580] [ 603.500605][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 603.504609][T13558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 603.504880][T13558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 603.506376][T13558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 603.506582][T13558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 603.506780][T13558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 603.506961][T13558] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 603.609684][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 603.719754][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 603.831233][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 603.959817][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 604.009559][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 604.083006][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 604.639520][ T5888] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 604.835295][ T5888] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 604.892945][ T5888] usb 3-1: config 0 has no interface number 0 [ 604.900573][ T5890] usb 5-1: USB disconnect, device number 11 [ 604.914789][ T5888] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 604.951291][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.970388][ T5888] usb 3-1: Product: syz [ 604.984846][ T5888] usb 3-1: Manufacturer: syz [ 604.996190][ T5888] usb 3-1: SerialNumber: syz [ 605.021437][ T5888] usb 3-1: config 0 descriptor?? [ 605.059598][ T47] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 605.084595][T13609] FAULT_INJECTION: forcing a failure. [ 605.084595][T13609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.103135][T13609] CPU: 0 UID: 0 PID: 13609 Comm: syz.1.2102 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 605.103164][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.103178][T13609] Call Trace: [ 605.103187][T13609] [ 605.103197][T13609] dump_stack_lvl+0x189/0x250 [ 605.103232][T13609] ? __lock_acquire+0xaac/0xd20 [ 605.103265][T13609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.103295][T13609] ? __pfx__printk+0x10/0x10 [ 605.103316][T13609] ? __might_fault+0xb0/0x130 [ 605.103364][T13609] should_fail_ex+0x414/0x560 [ 605.103393][T13609] _copy_from_user+0x2d/0xb0 [ 605.103424][T13609] video_usercopy+0x354/0x14f0 [ 605.103466][T13609] ? __pfx___video_do_ioctl+0x10/0x10 [ 605.103497][T13609] ? __pfx_video_usercopy+0x10/0x10 [ 605.103557][T13609] ? __fget_files+0x3a0/0x420 [ 605.103589][T13609] v4l2_ioctl+0x18d/0x1e0 [ 605.103619][T13609] ? __pfx_v4l2_ioctl+0x10/0x10 [ 605.103646][T13609] __se_sys_ioctl+0xf9/0x170 [ 605.103671][T13609] do_syscall_64+0xf6/0x210 [ 605.103700][T13609] ? clear_bhb_loop+0x60/0xb0 [ 605.103724][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.103744][T13609] RIP: 0033:0x7f882df8e969 [ 605.103763][T13609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.103781][T13609] RSP: 002b:00007f882ed61038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.103803][T13609] RAX: ffffffffffffffda RBX: 00007f882e1b5fa0 RCX: 00007f882df8e969 [ 605.103819][T13609] RDX: 0000200000000040 RSI: 00000000c040565e RDI: 0000000000000003 [ 605.103832][T13609] RBP: 00007f882ed61090 R08: 0000000000000000 R09: 0000000000000000 [ 605.103845][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.103857][T13609] R13: 0000000000000000 R14: 00007f882e1b5fa0 R15: 00007f882e2dfa28 [ 605.103888][T13609] [ 605.369493][ T47] usb 4-1: Using ep0 maxpacket: 16 [ 605.387245][ T47] usb 4-1: unable to get BOS descriptor or descriptor too short [ 605.398376][T13612] FAULT_INJECTION: forcing a failure. [ 605.398376][T13612] name failslab, interval 1, probability 0, space 0, times 0 [ 605.420414][ T47] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 605.428357][ T47] usb 4-1: can't read configurations, error -71 [ 605.449611][ T5890] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 605.470944][T13612] CPU: 0 UID: 0 PID: 13612 Comm: syz.5.2103 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 605.470974][T13612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.471000][T13612] Call Trace: [ 605.471009][T13612] [ 605.471019][T13612] dump_stack_lvl+0x189/0x250 [ 605.471056][T13612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.471086][T13612] ? __pfx__printk+0x10/0x10 [ 605.471113][T13612] ? __pfx___might_resched+0x10/0x10 [ 605.471133][T13612] ? fs_reclaim_acquire+0x7d/0x100 [ 605.471168][T13612] should_fail_ex+0x414/0x560 [ 605.471211][T13612] should_failslab+0xa8/0x100 [ 605.471249][T13612] __kmalloc_noprof+0xcb/0x4f0 [ 605.471276][T13612] ? copy_splice_read+0x143/0x9b0 [ 605.471307][T13612] copy_splice_read+0x143/0x9b0 [ 605.471344][T13612] ? __pfx_copy_splice_read+0x10/0x10 [ 605.471366][T13612] ? look_up_lock_class+0x74/0x170 [ 605.471405][T13612] ? register_lock_class+0x51/0x320 [ 605.471439][T13612] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 605.471473][T13612] ? alloc_pipe_info+0x374/0x4d0 [ 605.471501][T13612] ? __pfx_copy_splice_read+0x10/0x10 [ 605.471524][T13612] splice_direct_to_actor+0x4a9/0xcc0 [ 605.471573][T13612] ? __pfx_direct_splice_actor+0x10/0x10 [ 605.471600][T13612] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 605.471627][T13612] ? __pfx_aa_file_perm+0x10/0x10 [ 605.471659][T13612] do_splice_direct+0x181/0x270 [ 605.471689][T13612] ? __pfx_do_splice_direct+0x10/0x10 [ 605.471717][T13612] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 605.471747][T13612] ? bpf_lsm_file_permission+0x9/0x20 [ 605.471773][T13612] ? security_file_permission+0x75/0x290 [ 605.471795][T13612] ? rw_verify_area+0x258/0x650 [ 605.471824][T13612] do_sendfile+0x4da/0x7d0 [ 605.471854][T13612] ? __pfx_vfs_write+0x10/0x10 [ 605.471884][T13612] ? __pfx_do_sendfile+0x10/0x10 [ 605.471914][T13612] ? __fget_files+0x3a0/0x420 [ 605.471957][T13612] __se_sys_sendfile64+0x13e/0x190 [ 605.471990][T13612] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 605.472024][T13612] ? do_syscall_64+0xba/0x210 [ 605.472056][T13612] do_syscall_64+0xf6/0x210 [ 605.472085][T13612] ? clear_bhb_loop+0x60/0xb0 [ 605.472112][T13612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.472133][T13612] RIP: 0033:0x7fca6f98e969 [ 605.472151][T13612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.472170][T13612] RSP: 002b:00007fca7077e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 605.472192][T13612] RAX: ffffffffffffffda RBX: 00007fca6fbb6080 RCX: 00007fca6f98e969 [ 605.472208][T13612] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 605.472220][T13612] RBP: 00007fca7077e090 R08: 0000000000000000 R09: 0000000000000000 [ 605.472234][T13612] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 605.472247][T13612] R13: 0000000000000001 R14: 00007fca6fbb6080 R15: 00007fca6fcdfa28 [ 605.472278][T13612] [ 605.778452][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 605.778476][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 605.786158][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 605.794414][T12719] Bluetooth: hci2: command 0x0c1a tx timeout [ 605.802524][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 605.861596][ T5890] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 605.871078][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.890283][ T5890] usb 5-1: config 0 descriptor?? [ 605.897932][ T5890] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 605.919661][ T5889] usb 3-1: USB disconnect, device number 116 [ 606.938189][ T5890] gspca_cpia1: usb_control_msg 03, error -71 [ 607.001656][ T5890] gspca_cpia1: usb_control_msg 01, error -71 [ 607.026038][ T5890] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 607.091651][ T5890] usb 5-1: USB disconnect, device number 12 [ 607.800920][ T6011] net_ratelimit: 28 callbacks suppressed [ 607.801275][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 608.028542][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 608.220023][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 608.385799][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 608.559553][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 608.691234][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 608.726967][T13655] netlink: 440 bytes leftover after parsing attributes in process `syz.5.2117'. [ 608.729471][T12719] Bluetooth: hci5: command 0x0405 tx timeout [ 608.819082][T13628] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 608.825871][T13628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 608.832699][T13628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 608.841242][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 608.858602][T13628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 608.869817][T13628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 608.890012][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 608.898535][T13628] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 608.987877][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 609.180768][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 609.193453][T13658] FAULT_INJECTION: forcing a failure. [ 609.193453][T13658] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 609.239381][ T5890] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 609.268569][T13658] CPU: 0 UID: 0 PID: 13658 Comm: syz.5.2118 Not tainted 6.15.0-rc7-syzkaller #0 PREEMPT(full) [ 609.268600][T13658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 609.268614][T13658] Call Trace: [ 609.268623][T13658] [ 609.268632][T13658] dump_stack_lvl+0x189/0x250 [ 609.268670][T13658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.268701][T13658] ? __pfx__printk+0x10/0x10 [ 609.268725][T13658] ? fs_reclaim_acquire+0x7d/0x100 [ 609.268767][T13658] should_fail_ex+0x414/0x560 [ 609.268795][T13658] prepare_alloc_pages+0x213/0x610 [ 609.268836][T13658] __alloc_frozen_pages_noprof+0x123/0x370 [ 609.268862][T13658] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 609.268901][T13658] alloc_pages_bulk_noprof+0x560/0x710 [ 609.268935][T13658] ? rcu_is_watching+0x15/0xb0 [ 609.268956][T13658] ? trace_kmalloc+0x1f/0xd0 [ 609.268979][T13658] ? __kmalloc_noprof+0x29b/0x4f0 [ 609.269005][T13658] ? copy_splice_read+0x143/0x9b0 [ 609.269036][T13658] copy_splice_read+0x173/0x9b0 [ 609.269075][T13658] ? __pfx_copy_splice_read+0x10/0x10 [ 609.269098][T13658] ? look_up_lock_class+0x74/0x170 [ 609.269128][T13658] ? register_lock_class+0x51/0x320 [ 609.269161][T13658] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 609.269195][T13658] ? alloc_pipe_info+0x374/0x4d0 [ 609.269222][T13658] ? __pfx_copy_splice_read+0x10/0x10 [ 609.269253][T13658] splice_direct_to_actor+0x4a9/0xcc0 [ 609.269303][T13658] ? __pfx_direct_splice_actor+0x10/0x10 [ 609.269329][T13658] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 609.269354][T13658] ? __pfx_aa_file_perm+0x10/0x10 [ 609.269387][T13658] do_splice_direct+0x181/0x270 [ 609.269416][T13658] ? __pfx_do_splice_direct+0x10/0x10 [ 609.269444][T13658] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 609.269474][T13658] ? bpf_lsm_file_permission+0x9/0x20 [ 609.269501][T13658] ? security_file_permission+0x75/0x290 [ 609.269523][T13658] ? rw_verify_area+0x258/0x650 [ 609.269551][T13658] do_sendfile+0x4da/0x7d0 [ 609.269582][T13658] ? __pfx_vfs_write+0x10/0x10 [ 609.269613][T13658] ? __pfx_do_sendfile+0x10/0x10 [ 609.269643][T13658] ? __fget_files+0x3a0/0x420 [ 609.269683][T13658] __se_sys_sendfile64+0x13e/0x190 [ 609.269716][T13658] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 609.269750][T13658] ? do_syscall_64+0xba/0x210 [ 609.269781][T13658] do_syscall_64+0xf6/0x210 [ 609.269810][T13658] ? clear_bhb_loop+0x60/0xb0 [ 609.269829][ T5923] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 609.269835][T13658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.269857][T13658] RIP: 0033:0x7fca6f98e969 [ 609.269875][T13658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.269890][T13658] RSP: 002b:00007fca7077e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 609.269912][T13658] RAX: ffffffffffffffda RBX: 00007fca6fbb6080 RCX: 00007fca6f98e969 [ 609.269929][T13658] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 609.269943][T13658] RBP: 00007fca7077e090 R08: 0000000000000000 R09: 0000000000000000 [ 609.269958][T13658] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 609.269974][T13658] R13: 0000000000000001 R14: 00007fca6fbb6080 R15: 00007fca6fcdfa28 [ 609.270008][T13658] [ 609.295776][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 609.681003][ T5923] usb 5-1: config 0 has no interfaces? [ 609.709948][ T5923] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 609.745215][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.773979][ T5923] usb 5-1: Product: syz [ 609.792728][ T5923] usb 5-1: Manufacturer: syz [ 609.809425][ T5923] usb 5-1: SerialNumber: syz [ 609.847228][ T5923] usb 5-1: config 0 descriptor?? [ 610.311766][ T5889] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 610.485854][ T5889] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 610.495423][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.526170][ T5889] usb 2-1: config 0 descriptor?? [ 610.543544][ T5889] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 610.904006][ T5838] Bluetooth: hci3: command 0x0405 tx timeout [ 610.904026][T12718] Bluetooth: hci2: command 0x0c1a tx timeout [ 610.910236][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 610.916206][T12719] Bluetooth: hci4: command 0x0c1a tx timeout [ 610.971952][T12719] Bluetooth: hci5: command 0x0405 tx timeout [ 611.365657][T13692] netlink: 440 bytes leftover after parsing attributes in process `syz.5.2131'. [ 611.474896][ T5889] gspca_cpia1: usb_control_msg 03, error -71 [ 611.490221][ T5889] gspca_cpia1: usb_control_msg 01, error -71 [ 611.504310][ T5889] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 611.554008][ T5889] usb 2-1: USB disconnect, device number 17 [ 611.766748][ T5923] usb 5-1: USB disconnect, device number 13 [ 612.309532][ T5889] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 612.632568][ T5889] usb 6-1: config 0 has no interfaces? [ 612.659571][ T5923] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 612.752407][ T5889] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 612.810411][ T5923] usb 4-1: device descriptor read/64, error -71 [ 613.034871][ T5891] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 613.039378][ T6009] net_ratelimit: 26 callbacks suppressed [ 613.039399][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 613.190159][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.228840][ T5923] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 613.233629][ T5889] usb 6-1: Product: syz [ 613.249311][ T5889] usb 6-1: Manufacturer: syz [ 613.267008][ T5889] usb 6-1: SerialNumber: syz [ 613.274861][ T5889] usb 6-1: config 0 descriptor?? [ 613.320160][ T5891] usb 3-1: device descriptor read/64, error -71 [ 613.360520][ T6009] bond1: (slave batadv1): failed to get link speed/duplex [ 613.509448][ T5923] usb 4-1: device descriptor read/64, error -71 [ 613.550971][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 613.619934][ T5923] usb usb4-port1: attempt power cycle [ 613.689400][ T5891] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 613.731968][T13723] tls_set_device_offload_rx: netdev not found [ 613.747497][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 613.842954][ T5891] usb 3-1: device descriptor read/64, error -71 [ 613.920029][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 613.972239][ T5923] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 613.985520][ T5891] usb usb3-port1: attempt power cycle [ 614.071256][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 614.189661][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 614.319682][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 614.479602][ T5891] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 614.539560][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 614.547656][ T5891] usb 3-1: device descriptor read/8, error -71 [ 614.570607][T13718] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 614.596071][T13718] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 614.629741][T13718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 614.636093][T13718] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 614.643807][T13718] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 614.721449][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 614.823555][T13718] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 614.980863][ T5891] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 615.034121][ T5891] usb 3-1: device descriptor read/8, error -71 [ 615.197353][ T5891] usb usb3-port1: unable to enumerate USB device [ 615.265340][ T5923] usb 4-1: device descriptor read/8, error -71 [ 615.369436][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 616.003547][ T5891] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 616.191663][ T5891] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 616.228201][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.291660][ T5891] usb 3-1: config 0 descriptor?? [ 616.328848][ T5891] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 616.658782][T12719] Bluetooth: hci2: command 0x0c1a tx timeout [ 616.665201][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 616.671836][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 616.730440][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 616.740496][ T5842] Bluetooth: hci3: command 0x0405 tx timeout [ 616.806319][ T47] usb 6-1: USB disconnect, device number 15 [ 617.311158][ T5891] gspca_cpia1: usb_control_msg 03, error -71 [ 617.345498][ T5891] gspca_cpia1: usb_control_msg 01, error -71 [ 617.377208][ T5891] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 617.403427][ T5891] usb 3-1: USB disconnect, device number 122 [ 617.743966][ T5891] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 617.809479][T11892] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 [ 617.850617][ T47] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 617.941865][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 617.971218][ T5891] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 618.002852][ T5891] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 618.018232][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.039614][ T5891] usb 3-1: Product: syz [ 618.046675][ T47] usb 2-1: config 0 has no interfaces? [ 618.060685][ T5891] usb 3-1: Manufacturer: syz [ 618.069143][ T47] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 618.083691][ T5891] usb 3-1: SerialNumber: syz [ 618.097428][ T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.099436][ T6015] net_ratelimit: 28 callbacks suppressed [ 618.099456][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 618.112469][ T5891] usb 3-1: config 0 descriptor?? [ 618.138797][ T47] usb 2-1: Product: syz [ 618.152676][ T47] usb 2-1: Manufacturer: syz [ 618.185376][ T47] usb 2-1: SerialNumber: syz [ 618.193965][ T5891] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 618.229137][ T47] usb 2-1: config 0 descriptor?? [ 618.289929][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 618.381233][T13769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 618.449483][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 618.564252][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 618.689472][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 618.823515][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 618.989545][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 619.121201][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 619.250875][ T6007] bond1: (slave batadv1): failed to get link speed/duplex [ 619.413170][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 620.564958][T13785] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 620.572293][T13785] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 620.578994][T13785] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 620.579568][T12719] Bluetooth: hci5: command 0x0405 tx timeout [ 620.591647][T13785] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 620.598548][T13785] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 620.607524][T13785] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 620.649400][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 620.684424][ T5923] usb 2-1: USB disconnect, device number 18 [ 620.773951][ T5891] usb 3-1: USB disconnect, device number 123 [ 622.649784][T12719] Bluetooth: hci3: command 0x0405 tx timeout [ 622.655977][T12719] Bluetooth: hci4: command 0x0c1a tx timeout [ 622.662128][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 622.662152][T12718] Bluetooth: hci1: command 0x0c1a tx timeout [ 622.669178][ T5842] Bluetooth: hci5: command 0x0405 tx timeout [ 623.184640][ T6011] net_ratelimit: 32 callbacks suppressed [ 623.184664][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 623.309722][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 623.419643][ T36] bond1: (slave batadv1): failed to get link speed/duplex [ 623.539512][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 623.650350][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 623.782845][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 623.911571][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 624.019787][ T6015] bond1: (slave batadv1): failed to get link speed/duplex [ 624.129885][ T6011] bond1: (slave batadv1): failed to get link speed/duplex [ 624.250892][ T63] bond1: (slave batadv1): failed to get link speed/duplex [ 624.412945][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.436764][ T1298] ieee802154 phy1 wpan1: encryption failed: -22