last executing test programs: 1m15.901148478s ago: executing program 1 (id=2): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x4e23, 0x4, @empty}}}, 0x108) syz_emit_ethernet(0x46, &(0x7f0000000540)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd600101000310110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 1m15.718043684s ago: executing program 1 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') lseek(r0, 0x3, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) iopl(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0xfd, 0x6, 0x12, @loopback, @mcast2, 0x8, 0x10, 0x7, 0x3}}) bind(r1, &(0x7f00000001c0)=@xdp={0x2c, 0x2, r2, 0x26}, 0x80) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_clone(0x44000191, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) preadv(r3, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/94, 0x6d}], 0x2d7, 0x8a, 0xfffffff9) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x6, 0x269, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0xd3, 0x7d, 0x86, 0x10, 0x19d2, 0x1117, 0xaae8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x257, 0x3, 0x5, 0x9, 0x20, 0x11, [{{0x9, 0x4, 0xf7, 0x8, 0x6, 0xff, 0xff, 0xff, 0x6, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "20e5c2f4"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0xd47, 0x0, 0xd6, 0x3}}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0xb, 0x9, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0xf0, 0x8f, 0x9}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x8, 0x10, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x2, 0x40, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x9, 0x0, 0x1, [@generic={0x89, 0x6, "91e45fbf8033cfb4d9417357247823a3f923fffecda4e21c98b869bdcc7c08d81295c6b20085ce1822bac203e4d1358e62f522e87837f75e5c158cfe7141591a0c9e322c3225731a7e5d283004a9aac93b6d2cdb8bbbc5ff70ec3b391d8fe8b931bcf142c15603659e5b91846f8e1ed5e65e92490173b02af1e929976fabd6c53af3b54690a9ab"}, @generic={0x17, 0x5, "564d9e1feca6a4f48d2d676b56d19d4000b1c917f1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3df, 0x81, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x3}]}}]}}, {{0x9, 0x4, 0x4d, 0x33, 0x9, 0xcb, 0xa5, 0x88, 0x4, [], [{{0x9, 0x5, 0xc, 0x10, 0x200, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x6, 0x9, 0x13}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x8, 0x4, 0xe}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x9, 0xb, 0x10}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x3, 0xc, 0xb, [@generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x6, 0xca, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x4, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xe1, 0x7f, 0x1, [@generic={0x2, 0xc}]}}]}}, {{0x9, 0x4, 0x9, 0x8, 0x8, 0x3a, 0x7a, 0xba, 0x7, [@uac_as], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0x9, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x15, 0xc, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0xd, 0x40, 0x24}}, {{0x9, 0x5, 0x80, 0x13, 0x20, 0x0, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xf29}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xb7, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1660b633ece2b3d3, 0x8, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0xc, 0xc, [@generic={0x70, 0xe, "b14e7e1ccd67ee06de135f6788897678dff40ae2542370f1a5751d3dc6b1f325e932f651907b993dfb13f6b0a657940f2bf966880869169771b48a00f5a4e73c15ddc4aef248ecc17916b4c51d7464a7a6b8e4b6892654a7a558e7effbed0c803b68bb7b97f17e6f3f4960ae2738"}, @generic={0x2, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0x2, 0x2}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x15, &(0x7f0000000180)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xff, 0x35, 0xffff}, @generic={0x3, 0x10, 0xa}]}, 0x2, [{0x0, 0x0}, {0xe2, 0x0}]}) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', r5, &(0x7f0000000840)='./file0\x00', 0x64) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r3, 0xffffffffffffffff, 0x27, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r7) 1m0.591835539s ago: executing program 32 (id=6): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/nfsfs\x00') lseek(r0, 0x3, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) iopl(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x0, 0x7, 0xfd, 0x6, 0x12, @loopback, @mcast2, 0x8, 0x10, 0x7, 0x3}}) bind(r1, &(0x7f00000001c0)=@xdp={0x2c, 0x2, r2, 0x26}, 0x80) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) syz_clone(0x44000191, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) preadv(r3, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/94, 0x6d}], 0x2d7, 0x8a, 0xfffffff9) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_connect(0x6, 0x269, &(0x7f0000000a80)={{0x12, 0x1, 0x201, 0xd3, 0x7d, 0x86, 0x10, 0x19d2, 0x1117, 0xaae8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x257, 0x3, 0x5, 0x9, 0x20, 0x11, [{{0x9, 0x4, 0xf7, 0x8, 0x6, 0xff, 0xff, 0xff, 0x6, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "20e5c2f4"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0xd47, 0x0, 0xd6, 0x3}}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0xb, 0x9, 0x6}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0xf0, 0x8f, 0x9}}, {{0x9, 0x5, 0x2, 0x8, 0x400, 0x8, 0x10, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0x2, 0x40, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x9, 0x0, 0x1, [@generic={0x89, 0x6, "91e45fbf8033cfb4d9417357247823a3f923fffecda4e21c98b869bdcc7c08d81295c6b20085ce1822bac203e4d1358e62f522e87837f75e5c158cfe7141591a0c9e322c3225731a7e5d283004a9aac93b6d2cdb8bbbc5ff70ec3b391d8fe8b931bcf142c15603659e5b91846f8e1ed5e65e92490173b02af1e929976fabd6c53af3b54690a9ab"}, @generic={0x17, 0x5, "564d9e1feca6a4f48d2d676b56d19d4000b1c917f1"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3df, 0x81, 0x8, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x3}]}}]}}, {{0x9, 0x4, 0x4d, 0x33, 0x9, 0xcb, 0xa5, 0x88, 0x4, [], [{{0x9, 0x5, 0xc, 0x10, 0x200, 0x2, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x4}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x6, 0x9, 0x13}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}}, {{0x9, 0x5, 0x7, 0x8, 0x400, 0x8, 0x4, 0xe}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x9, 0xb, 0x10}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x3, 0xc, 0xb, [@generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x6, 0xca, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x4, 0x6}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x4, 0x38, 0x4}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0xe1, 0x7f, 0x1, [@generic={0x2, 0xc}]}}]}}, {{0x9, 0x4, 0x9, 0x8, 0x8, 0x3a, 0x7a, 0xba, 0x7, [@uac_as], [{{0x9, 0x5, 0x3, 0x10, 0x20, 0x6, 0x9, 0xcf, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xf5, 0x6}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x15, 0xc, 0x7}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0xd, 0x40, 0x24}}, {{0x9, 0x5, 0x80, 0x13, 0x20, 0x0, 0x0, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xf29}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0xb7, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1660b633ece2b3d3, 0x8, 0x7}]}}, {{0x9, 0x5, 0x9, 0x0, 0x8, 0x7, 0xc, 0xc, [@generic={0x70, 0xe, "b14e7e1ccd67ee06de135f6788897678dff40ae2542370f1a5751d3dc6b1f325e932f651907b993dfb13f6b0a657940f2bf966880869169771b48a00f5a4e73c15ddc4aef248ecc17916b4c51d7464a7a6b8e4b6892654a7a558e7effbed0c803b68bb7b97f17e6f3f4960ae2738"}, @generic={0x2, 0x6}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x4, 0x3, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0x2, 0x2}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x15, &(0x7f0000000180)={0x5, 0xf, 0x15, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xff, 0x35, 0xffff}, @generic={0x3, 0x10, 0xa}]}, 0x2, [{0x0, 0x0}, {0xe2, 0x0}]}) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', r5, &(0x7f0000000840)='./file0\x00', 0x64) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r3, 0xffffffffffffffff, 0x27, 0x0, 0x0, @void, @value}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r7) 7.097459024s ago: executing program 0 (id=245): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 6.911236075s ago: executing program 0 (id=246): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x80) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 6.601246452s ago: executing program 2 (id=248): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x40045017, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$media(0x0, 0x8, 0x40000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100"]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0x1000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = open_tree(r4, &(0x7f0000000100)='\x00', 0x89900) fspick(r6, &(0x7f0000000000)='.\x00', 0x0) 6.144068616s ago: executing program 4 (id=249): syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f88cbe101aeb13a39a42010203010902210024020109010601"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @generic={{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0xf, 0x32, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3a}, {[@ssrr={0x89, 0x7, 0xef, [@multicast1]}, @cipso={0x86, 0x6}]}}}}}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) syz_usb_connect$cdc_ncm(0x0, 0x88, &(0x7f0000000440)=ANY=[@ANYBLOB="13010003020000402505a1a44000010203010902760002010080500904000001020d00000924060001c6ed584505240003000d240f010d000000050001005606241a920b220424020206240706fbff0c24f818bb020000030400030905810300042809040904010000020300048304010102020d000009058202000406c00a09050302000480b804c73de9ff823be24709f9a10dbb04c6919ca2c5e9f208b368d5dc748097c39a927864b67729fa5f65ccda986e29a54065a1443aac8a0cb3c603f7475c1804a2078550f90ca8feda0cbba30604779091bef82dded0a6a2d9778cf5e47b3c2bd2ea5da355ed33581a41898845"], &(0x7f0000000340)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x1, 0x80, 0x8, 0x8, 0xfe}, 0x13, &(0x7f0000000040)={0x5, 0xf, 0x13, 0x2, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x52, 0x4, 0xdb, 0x8, 0x9}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x19, &(0x7f00000003c0)=ANY=[@ANYBLOB="1903c59e4829ad647755150aee82fc88a913a10d55f2c33f33dc21bd1358bb007ed79b85c86cac9d141b3c7f215a67eb5e39ac32c1b58c862655845b4611a0dc9307eeca87aaf685df31576c73a9a757d4306ff907"]}]}) 5.102367957s ago: executing program 0 (id=250): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) syz_open_dev$cec(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x40}, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r3, 0xff00, 0x40, &(0x7f0000000940)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {0xff}, {}, 0x6}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000000d28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c52995560a99956bed40cf5a8c1dfd3db7e2378d5afd35f4c16827f55b3af4d07fce7fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af915600020000000000000000000000000000004900", 0xc}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'team_slave_1\x00', 'vxcan1\x00', {0xff}, {}, 0x29, 0x3, 0x3}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r5 = socket$kcm(0x29, 0x2, 0x0) writev(r5, &(0x7f0000000540)=[{&(0x7f0000000000)="8b", 0x1}], 0x1) preadv(r4, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) ioprio_set$uid(0x3, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1d}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x200, 0x3d) lseek(r7, 0xfffffffffffffffd, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="8c", 0x1}], 0x1, &(0x7f0000000040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4800) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r8, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) 5.004261346s ago: executing program 2 (id=251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 3) 4.253885131s ago: executing program 4 (id=253): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) chroot(&(0x7f0000000040)='./cgroup\x00') ioctl$sock_qrtr_TIOCINQ(r0, 0x891c, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x29}, {0x0, 0x0, 0x1}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0xa, @in=@broadcast, 0x0, 0x0, 0x1}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x40, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r5, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r6, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES8], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}}, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000240)="bf", 0x1}], 0x1) 4.070180273s ago: executing program 0 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x8c, 0x3, 0x8, 0xb03, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1dbc1}, @CTA_TIMEOUT_L4PROTO={0x1, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0xc5d}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6000}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48001}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x8, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x100082) socket$tipc(0x1e, 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0x9, @win={{0xf, 0x6ab, 0xa, 0x7}, 0x7, 0xf136, 0x0, 0x1, 0x0, 0x9}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r3 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r3) ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x505) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.967898909s ago: executing program 2 (id=256): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x6, @rand_addr, 0x40000000}, 0x1c) sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(r4, 0x0, 0x0, 0x40010000, 0x0, 0x0) shutdown(r4, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x0, 0xc4, &(0x7f0000000340)='/pr\xf9W%\xba\xe9>ya\xee\xc2\x98#YP\xee\x9c2G\xf0\x00h\x97\x00\x00\x00\xef)\x8e\x89x\xdb\x93G?\"\xd0\b\x8d\xe3\xd8#\xb7\xa9\x9dt\x8a\x93\xe2\x94\xe9w*\xf5a\xc7\xa9\xcf?\xd0\xbc\x1e\xdf\x95\xcc\x87\xa8\x86\xc8\x94B\xe6\x18\xefrB\x02\xc9\x85\xb2\x91\xc7\x02\xc1\xe7!\x87P\x03K\xf8\x9a\xcf:!\xefu\'v=\x15\xdd\xac@\xf3\x92OU\xdc\x91\x81q\x8dcz#h6\r\x9d2\x9f\x12\xd7)I\x80\x96,\xc5-/\tS7\x82\x1a\x94\x17\xe7\xda\xc26\xaeg\xb6\xc7\x0e\x18\x04\xcf\x0f\xb9\x16\xd7\xcc\x15\xae\x88v3$\xb0g\x00\xc1\xa0\xbf\xb4{\xcdK\xe2B\x9f\xe2*0L\x13o\xba\xd1\xcb\xa2\x92\xec\xa4D~\x10h\xc2\xae'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 3.9090259s ago: executing program 3 (id=257): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="080008000700000000031400000045f0003700000000002f9078ac1414bbffffffffa200227c231f420ea5e0a294a1a794d4fceb", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800004adcda08f6e83e2aa00e133f88a834"], 0x45) 3.68010778s ago: executing program 4 (id=258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000840)={0xfffffffffffffda4, &(0x7f00000008c0)=ANY=[@ANYBLOB="400dcf000000117c6196aeb17b839e6562349ac700fe71aec6f1ae9417321244cc1c0128aa3fe5ca49b7af74d0063b64b56a37074cedae3feb20b3dc77feebbf3a1b21433a7f285ca69a12d6810cc1f17589c06020bfb6c93ed1d1e3cce05caee28c09f810ead2fb7dcaf4542b698de2523deca4f9d31330d4641bd823596ac989b78dddb569ea8ac14a9d5579278e4913cf22937ea884ca424151420248216a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001500010200000000000000010c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb2524280882b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e0600"/233, 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb", 0x40}], 0x5}}], 0x1, 0xc0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001200000008000800000000000800090003000000180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) lchown(&(0x7f0000000000)='./cgroup\x00', 0xffffffffffffffff, 0xee01) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_io_uring_setup(0x2004172, &(0x7f0000000780)={0x0, 0x4f5e, 0x4000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x8, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x1}) syz_io_uring_setup(0x551, &(0x7f0000000180)={0x0, 0x524f, 0x4000, 0x0, 0x169}, &(0x7f00000000c0), &(0x7f0000000240)) 3.60532721s ago: executing program 3 (id=259): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x80) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 2.758088911s ago: executing program 2 (id=260): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x40045017, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = syz_open_dev$media(0x0, 0x8, 0x40000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@broadcast, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100"]) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000043b000/0x1000)=nil, 0x1000, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = open_tree(r4, &(0x7f0000000100)='\x00', 0x89900) fspick(r6, &(0x7f0000000000)='.\x00', 0x0) 2.318502235s ago: executing program 3 (id=261): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000020303000000000000000020000000100800010001"], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000b00000/0x1000)=nil, 0x1000, 0x17) mmap(&(0x7f0000271000/0x2000)=nil, 0x2000, 0x3000004, 0x10010, r1, 0x9b016000) r2 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f00000002c0)=r3) socket$inet6(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000780)={{r5}, 0x0, 0x16, @unused=[0x7ff, 0xfffffffffffffff7, 0x9, 0x8], @devid}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000b04000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.123680555s ago: executing program 3 (id=262): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x934, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x9c, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000140)={0x18, &(0x7f0000000040)={0x40, 0xf, 0x45, {0x45, 0xc, "61639c545d2ce9daa7602655267cdd911869efc824c337939610aab1b0d2363bdd00b77c5bdfd51207b2909bceb485a8995d91250000002000"/67}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x4381, 0x0) 1.233064512s ago: executing program 3 (id=263): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80146, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000440)=[@uexit={0x0, 0x18, 0xfffffffffffffffb}, @code={0x1, 0x49, {"f00fc0779c0f32c442c5475d3a0fc71f66baf80cb808a23285ef66bafc0ced263e0f21d926430f06b90f0200000f32f30f5337430f2a513a"}}, @uexit={0x0, 0x18, 0x3}, @code={0x1, 0x43, {"c4c2e9ac5600f650a2f4c4a1715d85f09f000066bad104b000eec4219dc6fe1d420f01c50f08c4e3fd08559603c4419ddc39"}}, @uexit={0x0, 0x18, 0x571c}, @uexit={0x0, 0x18, 0xfa}], 0xec}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000240)={0xf0003, 0x0, [0x680, 0x3, 0x7, 0x0, 0x0, 0x0, 0x2b, 0x40000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0xffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSSOFTCAR(r1, 0x541a, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x805c6103, &(0x7f0000000040)={0xd2, 0xfffffffffffffffe}) 1.184029344s ago: executing program 2 (id=264): r0 = socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x3, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_GET_MAP_INFO(0x15, &(0x7f0000000740)={r3, 0x58, &(0x7f00000006c0)}, 0x10) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0xf11, 0x900, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1b, 0x1f}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x58}}, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x5}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.169181567s ago: executing program 4 (id=265): r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000080)='\\$,!*\x00', 0x0, r0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000140)='+]\x9d\xf9\'\\$\x00', 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) pread64(r0, &(0x7f0000000180)=""/229, 0xe5, 0x0) pwritev2(r0, &(0x7f0000000080), 0x0, 0x3, 0x2, 0xd) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 973.014976ms ago: executing program 4 (id=266): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x200000, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x202}}) io_uring_enter(r4, 0x2def, 0x4000, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f0000000900)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 971.347167ms ago: executing program 0 (id=267): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x35, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETA(0xffffffffffffffff, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x6, 0x0, 0x0, "dac7a15f305b57a3"}) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x4, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x0, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$tipc(r3, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x1, 0x4}}, 0x10) socket$kcm(0x29, 0x2, 0x0) 937.846361ms ago: executing program 2 (id=268): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="6666a25a6ffd2a13d1c60d2b3b75a5f8fffd7a4d5f4c43b441164dff6f9f79f14a3d686eab22d3a6ee1abdc2e52c66b1efe78bd8c364ad763ea978f40b252dfe345cc03e75ee6577c3794caac214fd29fa22d4eaeacf51ef07146f5c93198960aa6a759e8e5c26b89c80f4a2618dfe551f77a41001dee5762892203ef51c627fc32240cf5ec6d689774cb30c85ae442a48641b0c1ef994d651d78e6e892f57f835c6f999d1aa2d4dc06cb573c1bf84292a4b2b5a450dea076e972127e0b40dc42b98636e095a23a341567d7ce5ac4c7d4fda417eae690af29cee4c9ce0a604613d92e5a755", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008902"]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x800000, 0x800, 0xffffffff}, 0x20, 0x0, 0x7, 0x8, 0x101, 0x1c, 0x0, 0x0, 0x0, 0x0, {0x200}}}}]}, 0x78}}, 0x4080) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c000003", @ANYRES32=0x0, @ANYBLOB="50010000000000000a000200ffffffffffff000008001b0000000000"], 0x34}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r6, @ANYRESOCT=r1], 0x18}}, 0x0) r11 = socket(0x10, 0xa, 0x0) sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0) unshare(0x26020480) r12 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r12}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) 879.980854ms ago: executing program 3 (id=269): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0x101, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = landlock_create_ruleset(&(0x7f0000000040)={0xfc83, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x402, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x4400, 0x0) flistxattr(r4, &(0x7f0000000200)=""/5, 0x5) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r5, 0x2285, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f00000018c0)) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) migrate_pages(0x0, 0x1fc, &(0x7f00000002c0)=0x7, &(0x7f00000003c0)=0x20000000000005) sendmmsg$inet(r7, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab", 0xa9}, {&(0x7f0000000b80)}], 0x3}}], 0x1, 0xc0) sendto$inet(r7, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 825.067227ms ago: executing program 4 (id=270): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x80) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, 0x0}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r0], 0x1000f) 0s ago: executing program 0 (id=271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x30141}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0xba01}, 0x810) close(r2) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r6, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x35e4, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r9, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r9, 0x627, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 72.209685][ T5818] cgroup: Unknown subsys name 'net' [ 72.335821][ T5818] cgroup: Unknown subsys name 'cpuset' [ 72.344492][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.812379][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.353081][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.361347][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.369259][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.382841][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.397462][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.402125][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.418796][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.423297][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.426384][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.441141][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.441341][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.452906][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.456382][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.470394][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.470600][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.478084][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.484926][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.493168][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.499948][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.508076][ T5141] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.514844][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.527104][ T5141] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.527538][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.542615][ T5141] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.557477][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.199392][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 77.242739][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 77.412205][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 77.445209][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 77.536358][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.544189][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.551526][ T5852] bridge_slave_0: entered allmulticast mode [ 77.558901][ T5852] bridge_slave_0: entered promiscuous mode [ 77.599851][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 77.632528][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.640213][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.647468][ T5852] bridge_slave_1: entered allmulticast mode [ 77.654512][ T5852] bridge_slave_1: entered promiscuous mode [ 77.714965][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.723247][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.730434][ T5850] bridge_slave_0: entered allmulticast mode [ 77.739544][ T5850] bridge_slave_0: entered promiscuous mode [ 77.786516][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.795820][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.804044][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.811154][ T5850] bridge_slave_1: entered allmulticast mode [ 77.818754][ T5850] bridge_slave_1: entered promiscuous mode [ 77.849883][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.857096][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.864654][ T5854] bridge_slave_0: entered allmulticast mode [ 77.871786][ T5854] bridge_slave_0: entered promiscuous mode [ 77.881881][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.922778][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.929964][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.937405][ T5854] bridge_slave_1: entered allmulticast mode [ 77.945409][ T5854] bridge_slave_1: entered promiscuous mode [ 77.993690][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.000792][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.010505][ T5851] bridge_slave_0: entered allmulticast mode [ 78.018452][ T5851] bridge_slave_0: entered promiscuous mode [ 78.043916][ T5852] team0: Port device team_slave_0 added [ 78.053158][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.065208][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.094365][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.101514][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.109303][ T5851] bridge_slave_1: entered allmulticast mode [ 78.116536][ T5851] bridge_slave_1: entered promiscuous mode [ 78.140268][ T5852] team0: Port device team_slave_1 added [ 78.183948][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.246608][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.258398][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.292790][ T5850] team0: Port device team_slave_0 added [ 78.298865][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.306113][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.313638][ T5853] bridge_slave_0: entered allmulticast mode [ 78.321242][ T5853] bridge_slave_0: entered promiscuous mode [ 78.330775][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.367786][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.376321][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.402614][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.415897][ T5850] team0: Port device team_slave_1 added [ 78.422185][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.429357][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.436961][ T5853] bridge_slave_1: entered allmulticast mode [ 78.444416][ T5853] bridge_slave_1: entered promiscuous mode [ 78.467945][ T5851] team0: Port device team_slave_0 added [ 78.476576][ T5854] team0: Port device team_slave_0 added [ 78.483247][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.490223][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.516588][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.568341][ T5851] team0: Port device team_slave_1 added [ 78.573413][ T5832] Bluetooth: hci2: command tx timeout [ 78.574268][ T5841] Bluetooth: hci3: command tx timeout [ 78.579455][ T5832] Bluetooth: hci1: command tx timeout [ 78.590583][ T55] Bluetooth: hci4: command tx timeout [ 78.608254][ T5854] team0: Port device team_slave_1 added [ 78.634515][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.652214][ T55] Bluetooth: hci0: command tx timeout [ 78.689604][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.696757][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.722822][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.734778][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.741748][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.770999][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.785009][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.795501][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.802726][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.828975][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.841121][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.848150][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.874135][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.887159][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.894320][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.921029][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.938832][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.945991][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.972614][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.049341][ T5853] team0: Port device team_slave_0 added [ 79.060876][ T5852] hsr_slave_0: entered promiscuous mode [ 79.067517][ T5852] hsr_slave_1: entered promiscuous mode [ 79.115847][ T5853] team0: Port device team_slave_1 added [ 79.231820][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.238838][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.265256][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.281596][ T5854] hsr_slave_0: entered promiscuous mode [ 79.288401][ T5854] hsr_slave_1: entered promiscuous mode [ 79.294734][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.302499][ T5854] Cannot create hsr debugfs directory [ 79.323913][ T5851] hsr_slave_0: entered promiscuous mode [ 79.330227][ T5851] hsr_slave_1: entered promiscuous mode [ 79.336621][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.344228][ T5851] Cannot create hsr debugfs directory [ 79.355638][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.362776][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.389224][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.413425][ T5850] hsr_slave_0: entered promiscuous mode [ 79.419928][ T5850] hsr_slave_1: entered promiscuous mode [ 79.426104][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.433721][ T5850] Cannot create hsr debugfs directory [ 79.554296][ T5853] hsr_slave_0: entered promiscuous mode [ 79.560510][ T5853] hsr_slave_1: entered promiscuous mode [ 79.567977][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.575604][ T5853] Cannot create hsr debugfs directory [ 79.849997][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.897914][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.958781][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.970325][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.089886][ T5854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.101450][ T5854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.115780][ T5854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.129073][ T5854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.225955][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.238443][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.273927][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.295021][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.346383][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.386032][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.409557][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.419550][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.439631][ T2963] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.446903][ T2963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.467392][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.478702][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.511444][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.518706][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.615074][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.645557][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.653410][ T5832] Bluetooth: hci1: command tx timeout [ 80.653437][ T5844] Bluetooth: hci2: command tx timeout [ 80.658895][ T55] Bluetooth: hci4: command tx timeout [ 80.664301][ T5841] Bluetooth: hci3: command tx timeout [ 80.694499][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.701412][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.728785][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.733173][ T55] Bluetooth: hci0: command tx timeout [ 80.757003][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.809591][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.857213][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.871336][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.880628][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.887960][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.911829][ T2963] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.918975][ T2963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.978261][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.996611][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.003767][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.033278][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.058814][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.081719][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.088889][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.133971][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.177835][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.189778][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.196896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.211251][ T5852] veth0_vlan: entered promiscuous mode [ 81.243995][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.251202][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.288042][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.299332][ T5852] veth1_vlan: entered promiscuous mode [ 81.333227][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.373800][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.380931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.394454][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.401571][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.461131][ T5852] veth0_macvtap: entered promiscuous mode [ 81.478776][ T5852] veth1_macvtap: entered promiscuous mode [ 81.498633][ T5854] veth0_vlan: entered promiscuous mode [ 81.527241][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.550448][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.561783][ T5854] veth1_vlan: entered promiscuous mode [ 81.583027][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.614436][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.650763][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.676148][ T5852] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.686960][ T5852] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.696544][ T5852] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.705712][ T5852] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.745899][ T5854] veth0_macvtap: entered promiscuous mode [ 81.781845][ T5854] veth1_macvtap: entered promiscuous mode [ 81.810483][ T5851] veth0_vlan: entered promiscuous mode [ 81.848335][ T5851] veth1_vlan: entered promiscuous mode [ 81.890372][ T3009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.903985][ T3009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.928663][ T5853] veth0_vlan: entered promiscuous mode [ 81.945050][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.979314][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.008556][ T5853] veth1_vlan: entered promiscuous mode [ 82.041145][ T5854] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.050959][ T5854] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.060007][ T5854] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.071293][ T5854] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.088474][ T5851] veth0_macvtap: entered promiscuous mode [ 82.096663][ T5850] veth0_vlan: entered promiscuous mode [ 82.111427][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.126846][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.161305][ T5853] veth0_macvtap: entered promiscuous mode [ 82.174301][ T5853] veth1_macvtap: entered promiscuous mode [ 82.189352][ T5851] veth1_macvtap: entered promiscuous mode [ 82.200225][ T5850] veth1_vlan: entered promiscuous mode [ 82.231145][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.268596][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.348652][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.360872][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.369280][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.378503][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.401683][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.411078][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.420299][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.431732][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.444515][ T5850] veth0_macvtap: entered promiscuous mode [ 82.453396][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.516646][ T5853] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.533044][ T5853] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.541787][ T5853] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.554891][ T5853] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.592139][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.605086][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.621936][ T5850] veth1_macvtap: entered promiscuous mode [ 82.733552][ T55] Bluetooth: hci4: command tx timeout [ 82.734558][ T5841] Bluetooth: hci1: command tx timeout [ 82.738991][ T55] Bluetooth: hci3: command tx timeout [ 82.744535][ T5844] Bluetooth: hci2: command tx timeout [ 82.814663][ T5844] Bluetooth: hci0: command tx timeout [ 82.850411][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.860730][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.875617][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.887551][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.971005][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.013496][ T5904] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.097007][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.129699][ T5850] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.147260][ T5850] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.161281][ T5850] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.171496][ T5850] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.197544][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.208858][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.236587][ T2963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.297284][ T974] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.316558][ T2963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.534658][ T974] usb 1-1: Using ep0 maxpacket: 32 [ 83.638793][ T974] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.679453][ T974] usb 1-1: config 7 has an invalid interface number: 187 but max is 0 [ 83.711479][ T974] usb 1-1: config 7 has no interface number 0 [ 83.734076][ T974] usb 1-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 83.759653][ T974] usb 1-1: config 7 interface 187 has no altsetting 0 [ 83.787333][ T2963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.811895][ T974] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 83.845584][ T2963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.876129][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.902910][ T974] usb 1-1: Product: syz [ 83.916786][ T974] usb 1-1: Manufacturer: syz [ 83.926597][ T974] usb 1-1: SerialNumber: syz [ 83.969623][ T5904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.997878][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.074875][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.197812][ T974] usb 1-1: Limiting number of CPorts to U8_MAX [ 84.215086][ T974] usb 1-1: Unknown endpoint type found, address 0x07 [ 84.258725][ T974] usb 1-1: Not enough endpoints found in device, aborting! [ 84.693655][ T5930] input: syz0 as /devices/virtual/input/input5 [ 84.723397][ T974] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 84.803983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.813400][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 84.821628][ T5844] Bluetooth: hci3: command tx timeout [ 84.829363][ T5844] Bluetooth: hci4: command tx timeout [ 84.835099][ T5844] Bluetooth: hci2: command tx timeout [ 84.840750][ T5844] Bluetooth: hci1: command tx timeout [ 84.893352][ T5844] Bluetooth: hci0: command tx timeout [ 84.900895][ T974] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 84.947945][ T974] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 84.976243][ T974] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 85.002202][ T974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.018115][ T9] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 85.032086][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.044874][ T974] usb 5-1: Product: syz [ 85.049070][ T974] usb 5-1: Manufacturer: syz [ 85.085596][ T974] usb 5-1: SerialNumber: syz [ 85.093784][ T9] usb 4-1: config 0 descriptor?? [ 85.121550][ T974] usb 5-1: config 0 descriptor?? [ 85.151411][ T5923] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 85.184835][ T974] usb 5-1: ucan: probing device on interface #0 [ 85.198569][ T974] usb 5-1: ucan: invalid EP count (1) [ 85.214152][ T974] usb 5-1: ucan: probe failed; try to update the device firmware [ 85.520729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.524957][ T5911] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.529625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.562185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.795042][ T3080] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 85.828979][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 85.838514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 85.892881][ T5835] usb 1-1: USB disconnect, device number 2 [ 85.975219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.986291][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.995681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #241!!! [ 86.010067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.062262][ T3080] usb 3-1: device descriptor read/64, error -71 [ 86.228931][ T9] [drm:udl_init] *ERROR* Selecting channel failed [ 86.287061][ T9] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 86.320706][ T9] [drm] Initialized udl on minor 2 [ 86.325987][ T3080] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 86.378081][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 86.401679][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 86.419141][ T5914] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 86.434492][ T9] usb 4-1: USB disconnect, device number 2 [ 86.446329][ T5914] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 86.462485][ T3080] usb 3-1: device descriptor read/64, error -71 [ 86.573194][ T3080] usb usb3-port1: attempt power cycle [ 86.659461][ T5964] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.815369][ T5885] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 86.836135][ T5885] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 86.952856][ T3080] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 87.004248][ T3080] usb 3-1: device descriptor read/8, error -71 [ 87.285806][ T3080] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 87.372945][ T5914] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.482823][ T3080] usb 3-1: device descriptor read/8, error -71 [ 87.572623][ T5914] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.579339][ T5914] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 87.602398][ T3080] usb usb3-port1: unable to enumerate USB device [ 87.604106][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.641853][ T5914] usb 1-1: config 0 descriptor?? [ 87.659231][ T5914] cp210x 1-1:0.0: cp210x converter detected [ 87.699436][ T974] usb 5-1: USB disconnect, device number 2 [ 88.297915][ T5914] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 88.327578][ T5914] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 88.420526][ T5914] usb 1-1: cp210x converter now attached to ttyUSB0 [ 88.462389][ T5914] usb 1-1: USB disconnect, device number 3 [ 88.491635][ T5914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 88.502067][ T974] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.532950][ T5914] cp210x 1-1:0.0: device disconnected [ 88.713303][ T974] usb 4-1: Using ep0 maxpacket: 8 [ 88.728572][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 88.759931][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.795389][ T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.839643][ T974] usb 4-1: New USB device found, idVendor=07c9, idProduct=0912, bcdDevice= 0.00 [ 88.852049][ T974] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 88.868030][ T974] usb 4-1: Product: syz [ 88.883930][ T974] usb 4-1: SerialNumber: syz [ 88.902418][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 88.909135][ T5885] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.925072][ T5885] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 88.935536][ T6019] Zero length message leads to an empty skb [ 88.982928][ T974] usb 4-1: config 0 descriptor?? [ 89.226154][ T974] usb 4-1: USB disconnect, device number 3 [ 89.272690][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.481815][ T9] usb 5-1: config 0 has no interfaces? [ 89.504811][ T6030] FAULT_INJECTION: forcing a failure. [ 89.504811][ T6030] name failslab, interval 1, probability 0, space 0, times 1 [ 89.523013][ T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 89.533073][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.541094][ T9] usb 5-1: Product: syz [ 89.546216][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.2.23 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 89.546254][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 89.546272][ T6030] Call Trace: [ 89.546283][ T6030] [ 89.546291][ T6030] dump_stack_lvl+0x189/0x250 [ 89.546325][ T6030] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.546351][ T6030] ? __pfx__printk+0x10/0x10 [ 89.546372][ T6030] ? __pfx___might_resched+0x10/0x10 [ 89.546389][ T6030] ? fs_reclaim_acquire+0x7d/0x100 [ 89.546421][ T6030] should_fail_ex+0x414/0x560 [ 89.546457][ T6030] should_failslab+0xa8/0x100 [ 89.546482][ T6030] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 89.546506][ T6030] ? __alloc_skb+0x112/0x2d0 [ 89.546531][ T6030] __alloc_skb+0x112/0x2d0 [ 89.546556][ T6030] alloc_skb_with_frags+0xca/0x890 [ 89.546580][ T6030] ? __lock_acquire+0xaac/0xd20 [ 89.546607][ T6030] ? __lock_acquire+0xaac/0xd20 [ 89.546641][ T6030] sock_alloc_send_pskb+0x857/0x990 [ 89.546683][ T6030] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 89.546717][ T6030] ? __lock_acquire+0xaac/0xd20 [ 89.546745][ T6030] __ip6_append_data+0x2a83/0x3dc0 [ 89.546808][ T6030] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 89.546833][ T6030] ? __ip6_append_data+0xef1/0x3dc0 [ 89.546875][ T6030] ? __pfx___ip6_append_data+0x10/0x10 [ 89.546898][ T6030] ? ip6_setup_cork+0xacd/0x11c0 [ 89.546925][ T6030] ip6_make_skb+0x2ce/0x410 [ 89.546960][ T6030] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 89.546986][ T6030] ? __pfx_ip6_make_skb+0x10/0x10 [ 89.547021][ T6030] ? udpv6_sendmsg+0x177e/0x2700 [ 89.547043][ T6030] udpv6_sendmsg+0x1c06/0x2700 [ 89.547095][ T6030] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 89.547125][ T6030] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 89.547152][ T6030] ? __pfx___might_resched+0x10/0x10 [ 89.547188][ T6030] ? aa_sk_perm+0x81e/0x950 [ 89.547207][ T6030] ? __kasan_kmalloc+0x93/0xb0 [ 89.547234][ T6030] ? sock_rps_record_flow+0x19/0x400 [ 89.547275][ T6030] ? inet_send_prepare+0x5c/0x270 [ 89.547305][ T6030] ? inet6_sendmsg+0xe4/0x120 [ 89.547324][ T6030] __sock_sendmsg+0xe5/0x270 [ 89.547346][ T6030] ____sys_sendmsg+0x505/0x830 [ 89.547376][ T6030] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.547416][ T6030] __sys_sendmsg_sock+0x28/0x40 [ 89.547442][ T6030] io_sendmsg_zc+0x341/0x980 [ 89.547462][ T6030] ? __fget_files+0x2a/0x420 [ 89.547513][ T6030] __io_issue_sqe+0x17e/0x4b0 [ 89.547532][ T6030] ? io_file_get_normal+0x101/0x2f0 [ 89.547552][ T6030] io_issue_sqe+0x165/0xff0 [ 89.547578][ T6030] io_submit_sqes+0xa65/0x1d20 [ 89.547635][ T6030] __se_sys_io_uring_enter+0x2df/0x2b20 [ 89.547675][ T6030] ? ksys_write+0x1cb/0x250 [ 89.547700][ T6030] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 89.547717][ T6030] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 89.547743][ T6030] ? __pfx_vfs_write+0x10/0x10 [ 89.547768][ T6030] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.547797][ T6030] ? __fget_files+0x3a0/0x420 [ 89.547829][ T6030] ? fput+0xa0/0xd0 [ 89.547856][ T6030] ? ksys_write+0x1f0/0x250 [ 89.547876][ T6030] ? rcu_is_watching+0x15/0xb0 [ 89.547902][ T6030] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 89.547924][ T6030] do_syscall_64+0xf6/0x210 [ 89.547951][ T6030] ? clear_bhb_loop+0x60/0xb0 [ 89.547974][ T6030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.547992][ T6030] RIP: 0033:0x7fb58f38e969 [ 89.548015][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.548030][ T6030] RSP: 002b:00007fb5902e0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 89.548049][ T6030] RAX: ffffffffffffffda RBX: 00007fb58f5b5fa0 RCX: 00007fb58f38e969 [ 89.548062][ T6030] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 89.548073][ T6030] RBP: 00007fb5902e0090 R08: 0000000000000000 R09: 0000000000000000 [ 89.548084][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.548095][ T6030] R13: 0000000000000000 R14: 00007fb58f5b5fa0 R15: 00007fb58f6dfa28 [ 89.548124][ T6030] [ 89.944439][ C0] vkms_vblank_simulate: vblank timer overrun [ 90.059644][ T9] usb 5-1: Manufacturer: syz [ 90.064317][ T9] usb 5-1: SerialNumber: syz [ 90.082095][ T6037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.085259][ T9] usb 5-1: config 0 descriptor?? [ 90.320776][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.329782][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.080197][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 91.092059][ T5885] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 91.120636][ T5885] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 91.522917][ T3080] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.707854][ T24] cfg80211: failed to load regulatory.db [ 91.733073][ T3080] usb 3-1: config 0 has no interfaces? [ 91.797750][ T3080] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 91.837181][ T3080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.902653][ T3080] usb 3-1: Product: syz [ 91.966462][ T3080] usb 3-1: Manufacturer: syz [ 92.082068][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.092104][ T3080] usb 3-1: SerialNumber: syz [ 92.127398][ T3080] usb 3-1: config 0 descriptor?? [ 92.444806][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.456567][ T9] usb 5-1: USB disconnect, device number 3 [ 92.491337][ T24] usb 4-1: config 0 has no interfaces? [ 92.519294][ T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 92.528915][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.760116][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.808958][ T24] usb 4-1: Product: syz [ 92.832895][ T24] usb 4-1: Manufacturer: syz [ 92.847751][ T24] usb 4-1: SerialNumber: syz [ 92.937203][ T24] usb 4-1: config 0 descriptor?? [ 93.297560][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.314539][ T5885] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 93.320654][ T5885] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 93.431018][ T6059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.448851][ T6059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.832145][ T5914] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.982221][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 93.998994][ T5914] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 94.009415][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.035412][ T5914] usb 5-1: config 0 descriptor?? [ 94.066614][ T5914] gspca_main: sunplus-2.14.0 probing 041e:400b [ 94.275120][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.293334][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.331704][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.373436][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.402915][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.423581][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.454549][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.474455][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.499754][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.524612][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.703771][ T6097] vlan0: entered promiscuous mode [ 94.737814][ T6097] xt_CT: You must specify a L4 protocol and not use inversions on it [ 94.780289][ T6097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.812904][ T3080] usb 3-1: USB disconnect, device number 6 [ 95.411678][ T5914] gspca_sunplus: reg_r err -110 [ 95.416772][ T5914] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 95.502328][ T5886] usb 5-1: USB disconnect, device number 4 [ 95.537053][ T5885] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 95.540043][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 95.573849][ T5885] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 96.003541][ T24] usb 4-1: USB disconnect, device number 4 [ 96.044237][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.533252][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.574374][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.597902][ T9] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 96.621194][ T6126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.682559][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.696200][ T9] usb 3-1: config 0 descriptor?? [ 97.260807][ T9] hid-alps 0003:044E:1215.0001: item fetching failed at offset 5/7 [ 97.287722][ T9] hid-alps 0003:044E:1215.0001: parse failed [ 97.295293][ T9] hid-alps 0003:044E:1215.0001: probe with driver hid-alps failed with error -22 [ 97.334275][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.443264][ T6132] netlink: 3 bytes leftover after parsing attributes in process `syz.4.39'. [ 97.458507][ T6132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 97.513712][ T9] usb 3-1: USB disconnect, device number 7 [ 97.695110][ T6138] syz_tun: entered allmulticast mode [ 97.972216][ T5886] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.122349][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 98.129363][ T5886] usb 5-1: config 0 has an invalid interface descriptor of length 8, skipping [ 98.161580][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.191200][ T5886] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.216639][ T5886] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 98.244833][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.269353][ T5886] usb 5-1: Product: syz [ 98.282644][ T5886] usb 5-1: Manufacturer: syz [ 98.301561][ T5886] usb 5-1: SerialNumber: syz [ 98.326459][ T5886] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 98.351540][ T5886] usb 5-1: no configuration chosen from 1 choice [ 98.496672][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 98.518979][ T6140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42'. [ 98.880980][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.042156][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 99.057803][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 99.068450][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.080347][ T9] usb 1-1: Product: syz [ 99.084707][ T974] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 99.156052][ T30] audit: type=1326 audit(1747843616.359:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.188716][ T9] usb 1-1: Manufacturer: syz [ 99.193672][ T30] audit: type=1326 audit(1747843616.369:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.205882][ T9] usb 1-1: SerialNumber: syz [ 99.245127][ T30] audit: type=1326 audit(1747843616.369:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.267026][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.285159][ T30] audit: type=1326 audit(1747843616.369:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.319963][ T30] audit: type=1326 audit(1747843616.369:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.342770][ T30] audit: type=1326 audit(1747843616.389:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.366779][ T30] audit: type=1326 audit(1747843616.389:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.388690][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.390734][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 99.403775][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 99.410776][ T30] audit: type=1326 audit(1747843616.389:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.433405][ T974] usb 4-1: config 0 has no interfaces? [ 99.438967][ T30] audit: type=1326 audit(1747843616.389:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.466885][ T30] audit: type=1326 audit(1747843616.389:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6153 comm="syz.2.46" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 99.488877][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.524222][ T974] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 99.533405][ T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.544138][ T974] usb 4-1: Product: syz [ 99.553963][ T974] usb 4-1: Manufacturer: syz [ 99.566330][ T974] usb 4-1: SerialNumber: syz [ 99.624115][ T974] usb 4-1: config 0 descriptor?? [ 99.687074][ T6150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 99.922597][ T6152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.933403][ T6152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.759957][ T24] usb 5-1: USB disconnect, device number 5 [ 100.816945][ T6138] syz_tun: left allmulticast mode [ 100.969824][ T6165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.766343][ T974] usb 4-1: USB disconnect, device number 5 [ 101.983336][ T6174] tls_set_device_offload_rx: netdev not found [ 102.407710][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 102.475984][ T9] r8152-cfgselector 1-1: bad CDC descriptors [ 102.603677][ T9] r8152-cfgselector 1-1: USB disconnect, device number 4 [ 102.804241][ T6188] netlink: 'syz.2.52': attribute type 27 has an invalid length. [ 103.079541][ T6188] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.087856][ T6188] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.281788][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.289360][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.312473][ T6188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.592025][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 103.614380][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.633039][ T10] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 103.643089][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.652895][ T10] usb 3-1: Product: syz [ 103.657087][ T10] usb 3-1: Manufacturer: syz [ 103.661690][ T10] usb 3-1: SerialNumber: syz [ 103.667167][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 103.715418][ T10] usb 3-1: config 0 descriptor?? [ 103.743443][ T10] usb 3-1: bad CDC descriptors [ 103.750760][ T10] usb 3-1: unsupported MDLM descriptors [ 103.796157][ T6188] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.805918][ T6188] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.815018][ T6188] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.834864][ T9] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 103.845999][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.878307][ T6188] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.897907][ T9] usb 5-1: config 0 has no interface number 0 [ 103.912892][ T9] usb 5-1: config 0 interface 126 has no altsetting 0 [ 103.928194][ T9] usb 5-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 103.948258][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.977752][ T9] usb 5-1: Product: syz [ 103.986353][ T9] usb 5-1: Manufacturer: syz [ 103.998208][ T9] usb 5-1: SerialNumber: syz [ 104.021764][ T9] usb 5-1: config 0 descriptor?? [ 104.086761][ T9] zaurus 5-1:0.126: More than one union descriptor, skipping ... [ 104.128918][ T9] zaurus 5-1:0.126: skipping garbage [ 104.134727][ T9] usb 5-1: bad CDC descriptors [ 104.247640][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 104.247659][ T30] audit: type=1326 audit(1747843621.459:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 104.286352][ T30] audit: type=1326 audit(1747843621.489:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 104.331709][ T6201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.340029][ T30] audit: type=1326 audit(1747843621.499:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 104.377818][ T30] audit: type=1326 audit(1747843621.499:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 104.472194][ T30] audit: type=1326 audit(1747843621.499:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 104.501204][ T30] audit: type=1326 audit(1747843621.499:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 104.524423][ T30] audit: type=1326 audit(1747843621.529:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x0 [ 104.548461][ T30] audit: type=1326 audit(1747843621.579:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6202 comm="syz.3.58" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x0 [ 104.576628][ T6189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.587936][ T6189] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.604421][ T6189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 105.122325][ T30] audit: type=1326 audit(1747843622.329:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb98e969 code=0x7ffc0000 [ 105.180354][ T30] audit: type=1326 audit(1747843622.339:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6210 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb98e969 code=0x7ffc0000 [ 105.532311][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.688927][ T10] usb 1-1: device descriptor read/64, error -71 [ 105.734856][ T9] usb 3-1: USB disconnect, device number 8 [ 105.791580][ T6189] syz.2.52 (6189) used greatest stack depth: 20328 bytes left [ 105.942836][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.182388][ T10] usb 1-1: device descriptor read/64, error -71 [ 106.204730][ T5886] usb 5-1: USB disconnect, device number 6 [ 106.365710][ T10] usb usb1-port1: attempt power cycle [ 106.732181][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 106.761371][ T6227] netlink: 80 bytes leftover after parsing attributes in process `syz.3.62'. [ 106.832883][ T10] usb 1-1: device descriptor read/8, error -71 [ 107.082090][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 107.123171][ T10] usb 1-1: device descriptor read/8, error -71 [ 107.244104][ T10] usb usb1-port1: unable to enumerate USB device [ 107.964671][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.162665][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 108.197931][ T10] usb 4-1: config 0 has no interfaces? [ 108.203797][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.222065][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.232732][ T10] usb 4-1: config 0 descriptor?? [ 108.483735][ T5835] usb 4-1: USB disconnect, device number 6 [ 109.699027][ T6259] mmap: syz.3.73 (6259) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.091029][ T6263] process 'syz.4.75' launched './file2' with NULL argv: empty string added [ 110.748598][ T6278] Unknown options in mask 5 [ 110.760112][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 111.114598][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.308581][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 529 [ 111.321628][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.333747][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.351155][ T10] usb 4-1: Product: syz [ 111.359017][ T10] usb 4-1: Manufacturer: syz [ 111.391641][ T10] usb 4-1: SerialNumber: syz [ 111.408714][ T6280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 111.426285][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 111.594697][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 112.548997][ T974] usb 4-1: USB disconnect, device number 7 [ 113.016403][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 113.075386][ T9] ath9k_htc: Failed to initialize the device [ 113.506851][ T974] usb 4-1: ath9k_htc: USB layer deinitialized [ 113.524654][ T6294] FAULT_INJECTION: forcing a failure. [ 113.524654][ T6294] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 113.548142][ T6294] CPU: 0 UID: 0 PID: 6294 Comm: syz.0.85 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 113.548166][ T6294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 113.548176][ T6294] Call Trace: [ 113.548183][ T6294] [ 113.548190][ T6294] dump_stack_lvl+0x189/0x250 [ 113.548223][ T6294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.548256][ T6294] ? __pfx__printk+0x10/0x10 [ 113.548284][ T6294] should_fail_ex+0x414/0x560 [ 113.548301][ T6294] _copy_to_user+0x31/0xb0 [ 113.548320][ T6294] simple_read_from_buffer+0xe1/0x170 [ 113.548339][ T6294] proc_fail_nth_read+0x1df/0x250 [ 113.548359][ T6294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.548379][ T6294] ? rw_verify_area+0x258/0x650 [ 113.548392][ T6294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.548410][ T6294] vfs_read+0x1fd/0x980 [ 113.548427][ T6294] ? __pfx___mutex_lock+0x10/0x10 [ 113.548444][ T6294] ? __pfx_vfs_read+0x10/0x10 [ 113.548459][ T6294] ? __fget_files+0x2a/0x420 [ 113.548477][ T6294] ? __fget_files+0x3a0/0x420 [ 113.548494][ T6294] ? __fget_files+0x2a/0x420 [ 113.548516][ T6294] ksys_read+0x145/0x250 [ 113.548531][ T6294] ? __pfx_ksys_read+0x10/0x10 [ 113.548547][ T6294] ? do_syscall_64+0xba/0x210 [ 113.548567][ T6294] do_syscall_64+0xf6/0x210 [ 113.548584][ T6294] ? clear_bhb_loop+0x60/0xb0 [ 113.548599][ T6294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.548610][ T6294] RIP: 0033:0x7f7dcb98d37c [ 113.548621][ T6294] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.548635][ T6294] RSP: 002b:00007f7dc97f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.548654][ T6294] RAX: ffffffffffffffda RBX: 00007f7dcbbb5fa0 RCX: 00007f7dcb98d37c [ 113.548666][ T6294] RDX: 000000000000000f RSI: 00007f7dc97f60a0 RDI: 0000000000000004 [ 113.548676][ T6294] RBP: 00007f7dc97f6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.548686][ T6294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.548695][ T6294] R13: 0000000000000000 R14: 00007f7dcbbb5fa0 R15: 00007f7dcbcdfa28 [ 113.548722][ T6294] [ 113.832125][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.874605][ T6298] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 113.975692][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 113.975708][ T30] audit: type=1326 audit(1747843631.189:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6299 comm="syz.0.87" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dcb98e969 code=0x0 [ 114.008826][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 114.017559][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 114.026416][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.045414][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.062205][ T974] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.082138][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 3.40 [ 114.091228][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.106974][ T24] usb 3-1: Product: syz [ 114.118369][ T24] usb 3-1: Manufacturer: syz [ 114.123068][ T24] usb 3-1: SerialNumber: syz [ 114.232215][ T974] usb 4-1: Using ep0 maxpacket: 32 [ 114.239120][ T974] usb 4-1: config 0 has no interfaces? [ 114.244841][ T974] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.254303][ T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.265510][ T974] usb 4-1: config 0 descriptor?? [ 114.563660][ T974] usb 4-1: USB disconnect, device number 8 [ 114.587375][ T6316] FAULT_INJECTION: forcing a failure. [ 114.587375][ T6316] name failslab, interval 1, probability 0, space 0, times 0 [ 114.608972][ T6316] CPU: 1 UID: 0 PID: 6316 Comm: syz.4.90 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 114.609016][ T6316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 114.609027][ T6316] Call Trace: [ 114.609048][ T6316] [ 114.609056][ T6316] dump_stack_lvl+0x189/0x250 [ 114.609094][ T6316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.609120][ T6316] ? __pfx__printk+0x10/0x10 [ 114.609153][ T6316] ? __pfx___might_resched+0x10/0x10 [ 114.609170][ T6316] ? fs_reclaim_acquire+0x7d/0x100 [ 114.609203][ T6316] should_fail_ex+0x414/0x560 [ 114.609245][ T6316] should_failslab+0xa8/0x100 [ 114.609273][ T6316] __kmalloc_cache_noprof+0x70/0x3d0 [ 114.609299][ T6316] ? br_vlan_add+0x1e4/0x950 [ 114.609331][ T6316] br_vlan_add+0x1e4/0x950 [ 114.609355][ T6316] ? vlan_vid_add+0x551/0x760 [ 114.609403][ T6316] __vlan_add+0x477/0x2660 [ 114.609450][ T6316] ? __pfx___vlan_add+0x10/0x10 [ 114.609475][ T6316] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 114.609498][ T6316] ? nbp_vlan_add+0x20f/0x3c0 [ 114.609529][ T6316] nbp_vlan_add+0x262/0x3c0 [ 114.609560][ T6316] br_vlan_info+0xfa/0x460 [ 114.609602][ T6316] ? unwind_get_return_address+0x4d/0x90 [ 114.609630][ T6316] ? __pfx_br_vlan_info+0x10/0x10 [ 114.609668][ T6316] br_process_vlan_info+0x301/0x890 [ 114.609706][ T6316] ? __pfx_br_process_vlan_info+0x10/0x10 [ 114.609735][ T6316] ? kasan_save_track+0x4f/0x80 [ 114.609756][ T6316] ? kasan_save_free_info+0x46/0x50 [ 114.609772][ T6316] ? __kasan_slab_free+0x62/0x70 [ 114.609793][ T6316] ? kmem_cache_free+0x192/0x3f0 [ 114.609821][ T6316] br_afspec+0x395/0x5f0 [ 114.609848][ T6316] ? ____sys_sendmsg+0x505/0x830 [ 114.609874][ T6316] ? ___sys_sendmsg+0x21f/0x2a0 [ 114.609898][ T6316] ? __x64_sys_sendmsg+0x19b/0x260 [ 114.609932][ T6316] ? __pfx_br_afspec+0x10/0x10 [ 114.609974][ T6316] br_setlink+0x280/0x800 [ 114.610008][ T6316] ? __pfx_br_setlink+0x10/0x10 [ 114.610083][ T6316] ? aa_get_newest_label+0xf7/0x5d0 [ 114.610108][ T6316] ? mutex_is_locked+0x17/0x50 [ 114.610129][ T6316] rtnl_bridge_setlink+0x5b2/0x7d0 [ 114.610166][ T6316] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 114.610198][ T6316] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 114.610220][ T6316] rtnetlink_rcv_msg+0x779/0xb70 [ 114.610246][ T6316] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 114.610266][ T6316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.610292][ T6316] ? ref_tracker_free+0x63a/0x7d0 [ 114.610322][ T6316] ? __copy_skb_header+0xa7/0x550 [ 114.610355][ T6316] netlink_rcv_skb+0x21c/0x490 [ 114.610377][ T6316] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 114.610399][ T6316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.610437][ T6316] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.610457][ T6316] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.610483][ T6316] netlink_unicast+0x758/0x8d0 [ 114.610512][ T6316] netlink_sendmsg+0x805/0xb30 [ 114.610542][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.610566][ T6316] ? aa_sock_msg_perm+0x94/0x160 [ 114.610587][ T6316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 114.610607][ T6316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.610628][ T6316] __sock_sendmsg+0x219/0x270 [ 114.610650][ T6316] ____sys_sendmsg+0x505/0x830 [ 114.610679][ T6316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.610712][ T6316] ? import_iovec+0x74/0xa0 [ 114.610740][ T6316] ___sys_sendmsg+0x21f/0x2a0 [ 114.610767][ T6316] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.610825][ T6316] ? __fget_files+0x2a/0x420 [ 114.610848][ T6316] ? __fget_files+0x3a0/0x420 [ 114.610881][ T6316] __x64_sys_sendmsg+0x19b/0x260 [ 114.610908][ T6316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 114.610947][ T6316] ? do_syscall_64+0xba/0x210 [ 114.610974][ T6316] do_syscall_64+0xf6/0x210 [ 114.610998][ T6316] ? clear_bhb_loop+0x60/0xb0 [ 114.611019][ T6316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.611035][ T6316] RIP: 0033:0x7fab5018e969 [ 114.611051][ T6316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.611065][ T6316] RSP: 002b:00007fab51027038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.611084][ T6316] RAX: ffffffffffffffda RBX: 00007fab503b5fa0 RCX: 00007fab5018e969 [ 114.611096][ T6316] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 114.611106][ T6316] RBP: 00007fab51027090 R08: 0000000000000000 R09: 0000000000000000 [ 114.611116][ T6316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.611126][ T6316] R13: 0000000000000000 R14: 00007fab503b5fa0 R15: 00007fab504dfa28 [ 114.611158][ T6316] [ 115.258231][ T24] usb 3-1: 0:2 : does not exist [ 115.294975][ T24] usb 3-1: USB disconnect, device number 9 [ 115.371363][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.477823][ T6330] vlan0: entered promiscuous mode [ 115.497284][ T6330] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.512642][ T6330] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 115.967939][ T30] audit: type=1326 audit(1747843633.179:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.101047][ T30] audit: type=1326 audit(1747843633.179:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.302213][ T30] audit: type=1326 audit(1747843633.179:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.432930][ T30] audit: type=1326 audit(1747843633.179:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.465570][ T30] audit: type=1326 audit(1747843633.179:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.492891][ T30] audit: type=1326 audit(1747843633.209:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.561293][ T30] audit: type=1326 audit(1747843633.209:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.620623][ T30] audit: type=1326 audit(1747843633.209:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 116.671371][ T30] audit: type=1326 audit(1747843633.209:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6337 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb58f38e969 code=0x7ffc0000 [ 118.830372][ T6369] netlink: 48 bytes leftover after parsing attributes in process `syz.3.103'. [ 118.844827][ T6369] syz.3.103 uses obsolete (PF_INET,SOCK_PACKET) [ 118.942173][ T974] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 119.135111][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 119.144432][ T974] usb 3-1: config 0 has no interfaces? [ 119.149978][ T974] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.174100][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.189550][ T974] usb 3-1: config 0 descriptor?? [ 119.434837][ T3080] usb 3-1: USB disconnect, device number 10 [ 119.560902][ T6386] vlan0: entered promiscuous mode [ 119.596055][ T6386] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.723720][ T6386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.660415][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 120.705622][ T6395] macvtap1: entered promiscuous mode [ 120.732294][ T6395] team0: entered promiscuous mode [ 120.737386][ T6395] team_slave_0: entered promiscuous mode [ 120.744670][ T6395] team_slave_1: entered promiscuous mode [ 120.762749][ T6395] macvtap1: entered allmulticast mode [ 120.792053][ T6395] team0: entered allmulticast mode [ 120.797458][ T6395] team_slave_0: entered allmulticast mode [ 120.853959][ T6395] team_slave_1: entered allmulticast mode [ 120.883845][ T6395] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 121.129449][ T6397] syzkaller0: entered promiscuous mode [ 121.161480][ T6397] syzkaller0: entered allmulticast mode [ 121.794882][ T6419] vcan0: tx drop: invalid da for name 0x00000000000000ec [ 122.133547][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 122.313197][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 122.559559][ T24] usb 3-1: config 0 has no interfaces? [ 122.576653][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 122.623187][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.650022][ T24] usb 3-1: config 0 descriptor?? [ 122.832066][ T3080] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 122.840610][ T6433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.888611][ T5835] usb 3-1: USB disconnect, device number 11 [ 122.929301][ T6436] netlink: 104 bytes leftover after parsing attributes in process `syz.4.123'. [ 123.009615][ T3080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 123.022889][ T3080] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.035800][ T3080] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 123.046861][ T3080] usb 1-1: New USB device strings: Mfr=145, Product=0, SerialNumber=0 [ 123.056617][ T3080] usb 1-1: Manufacturer: syz [ 123.074899][ T3080] usb 1-1: config 0 descriptor?? [ 123.084602][ T3080] hub 1-1:0.0: USB hub found [ 123.102096][ T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.256934][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.298267][ T3080] hub 1-1:0.0: 1 port detected [ 123.309692][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 123.323771][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.336506][ T24] usb 4-1: config 0 descriptor?? [ 123.795595][ T24] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 123.854329][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6 [ 123.928166][ T3080] hub 1-1:0.0: activate --> -90 [ 123.997975][ T24] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 124.070253][ T24] usb 4-1: USB disconnect, device number 9 [ 124.277583][ T6444] fido_id[6444]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 125.153371][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 125.312149][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 125.329266][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 125.341030][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 125.357052][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 125.369773][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 125.384626][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.398358][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 125.407460][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.454583][ T3080] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 125.462127][ T3080] hub_port_connect: 35 callbacks suppressed [ 125.462145][ T3080] usb 1-1-port1: connect-debounce failed [ 125.654751][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 125.669314][ T9] usbtmc 3-1:16.0: can't read capabilities [ 125.812138][ T3080] usb 1-1: USB disconnect, device number 9 [ 125.942741][ T6451] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 125.949218][ T9] usb 3-1: USB disconnect, device number 12 [ 126.432236][ T3080] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 126.602071][ T3080] usb 1-1: Using ep0 maxpacket: 32 [ 126.609579][ T3080] usb 1-1: config 0 has no interfaces? [ 126.619127][ T3080] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.628619][ T3080] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.646715][ T3080] usb 1-1: config 0 descriptor?? [ 126.749397][ T6479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.783980][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 126.894474][ T3080] usb 1-1: USB disconnect, device number 10 [ 126.962048][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 126.970432][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 126.985290][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.022082][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.075494][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 3.40 [ 127.093314][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.116880][ T9] usb 5-1: Product: syz [ 127.126089][ T9] usb 5-1: Manufacturer: syz [ 127.138305][ T9] usb 5-1: SerialNumber: syz [ 127.763323][ T9] usb 5-1: 0:2 : does not exist [ 127.814387][ T9] usb 5-1: USB disconnect, device number 7 [ 128.092160][ T5835] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 128.224890][ T5835] usb 1-1: device descriptor read/64, error -71 [ 128.463167][ T5835] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 128.602165][ T5835] usb 1-1: device descriptor read/64, error -71 [ 128.722445][ T5835] usb usb1-port1: attempt power cycle [ 128.752351][ T3080] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.172079][ T3080] usb 5-1: Using ep0 maxpacket: 8 [ 129.179566][ T3080] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 129.189814][ T3080] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.200777][ T3080] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 129.219902][ T3080] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 3.40 [ 129.229867][ T3080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.241900][ T3080] usb 5-1: Product: syz [ 129.246275][ T5835] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 129.258087][ T3080] usb 5-1: Manufacturer: syz [ 129.263201][ T3080] usb 5-1: SerialNumber: syz [ 129.296554][ T5835] usb 1-1: device descriptor read/8, error -71 [ 129.562974][ T5835] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 129.693625][ T5835] usb 1-1: device descriptor read/8, error -71 [ 129.812365][ T5835] usb usb1-port1: unable to enumerate USB device [ 130.252102][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.273559][ T3080] usb 5-1: 0:2 : does not exist [ 130.330749][ T3080] usb 5-1: USB disconnect, device number 8 [ 130.422027][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 130.434770][ T9] usb 3-1: config 0 has no interfaces? [ 130.440479][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 130.458385][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.477752][ T9] usb 3-1: config 0 descriptor?? [ 130.508193][ T6525] fuse: Bad value for 'user_id' [ 130.516351][ T6525] fuse: Bad value for 'user_id' [ 130.702434][ T3080] usb 3-1: USB disconnect, device number 13 [ 130.886849][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.986678][ T6533] netlink: 'syz.0.153': attribute type 1 has an invalid length. [ 131.048579][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.067366][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 131.077024][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.097463][ T9] usb 4-1: config 0 descriptor?? [ 131.114525][ T9] cp210x 4-1:0.0: cp210x converter detected [ 131.126601][ T6540] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 131.556458][ T9] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 131.629093][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 131.682495][ T5835] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.860777][ T5835] usb 3-1: config 0 has no interfaces? [ 131.908264][ T5835] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 131.924470][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.002046][ T5835] usb 3-1: Product: syz [ 132.006266][ T5835] usb 3-1: Manufacturer: syz [ 132.010871][ T5835] usb 3-1: SerialNumber: syz [ 132.036685][ T5835] usb 3-1: config 0 descriptor?? [ 132.345741][ T6549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.355550][ T6549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.669960][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.677154][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.528924][ T3080] usb 4-1: USB disconnect, device number 10 [ 133.543688][ T3080] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.580282][ T3080] cp210x 4-1:0.0: device disconnected [ 134.714382][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 134.724195][ T5835] usb 3-1: USB disconnect, device number 14 [ 134.809416][ T6586] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.842157][ T6586] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.851484][ T6586] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.869338][ T6586] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 134.905377][ T6586] geneve2: entered promiscuous mode [ 134.910726][ T6586] geneve2: entered allmulticast mode [ 135.132942][ T5835] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 135.413969][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 135.431443][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.440987][ T5835] usb 3-1: config 8 has an invalid interface number: 132 but max is 0 [ 135.515168][ T5835] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 135.567410][ T5835] usb 3-1: config 8 has no interface number 0 [ 135.586017][ T5835] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.744351][ T5835] usb 3-1: config 8 interface 132 has no altsetting 0 [ 135.758747][ T5835] usb 3-1: string descriptor 0 read error: -22 [ 135.772364][ T5835] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b [ 135.784323][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.808001][ T5835] usb-storage 3-1:8.132: USB Mass Storage device detected [ 135.857645][ T5835] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a [ 136.200131][ T5888] usb 3-1: USB disconnect, device number 15 [ 136.382295][ T5835] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 136.672234][ T5835] usb 4-1: Using ep0 maxpacket: 16 [ 136.706061][ T5835] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.732156][ T5914] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.747836][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.770394][ T5835] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.780405][ T5835] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.850915][ T5835] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.871040][ T5835] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 136.895461][ T5835] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 136.907938][ T5835] usb 4-1: Manufacturer: syz [ 136.918839][ T5835] usb 4-1: config 0 descriptor?? [ 136.967375][ T5914] usb 1-1: config 0 has no interfaces? [ 137.005164][ T5914] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 137.029052][ T6638] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 137.037857][ T6638] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 137.067655][ T6638] ptrace attach of "./syz-executor exec"[5850] was attempted by "./syz-executor exec"[6638] [ 137.084009][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 137.093899][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.098870][ T6638] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 137.175768][ T5914] usb 1-1: Product: syz [ 137.192469][ T5914] usb 1-1: Manufacturer: syz [ 137.224341][ T5835] rc_core: IR keymap rc-hauppauge not found [ 137.230321][ T5835] Registered IR keymap rc-empty [ 137.236548][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.274790][ T5914] usb 1-1: SerialNumber: syz [ 137.289684][ T5914] usb 1-1: config 0 descriptor?? [ 137.325877][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.357254][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 137.369144][ T3080] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 137.389581][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 137.415222][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.452288][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.492116][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.522249][ T3080] usb 5-1: Using ep0 maxpacket: 8 [ 137.534037][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.545103][ T3080] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 137.556412][ T3080] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.568335][ T3080] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.577586][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.598926][ T3080] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 3.40 [ 137.611449][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.618889][ T3080] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.636640][ T3080] usb 5-1: Product: syz [ 137.655008][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.664261][ T3080] usb 5-1: Manufacturer: syz [ 137.671143][ T3080] usb 5-1: SerialNumber: syz [ 137.683230][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.697441][ T6627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.732344][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.771929][ T5835] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 137.774620][ T6627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.822733][ T5835] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 137.832955][ T5835] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 137.853825][ T5835] usb 4-1: USB disconnect, device number 11 [ 137.885871][ T6648] FAULT_INJECTION: forcing a failure. [ 137.885871][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 137.979547][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.2.187 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 137.979576][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 137.979587][ T6648] Call Trace: [ 137.979594][ T6648] [ 137.979601][ T6648] dump_stack_lvl+0x189/0x250 [ 137.979644][ T6648] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.979669][ T6648] ? __pfx__printk+0x10/0x10 [ 137.979689][ T6648] ? __pfx___might_resched+0x10/0x10 [ 137.979706][ T6648] ? fs_reclaim_acquire+0x7d/0x100 [ 137.979737][ T6648] should_fail_ex+0x414/0x560 [ 137.979760][ T6648] should_failslab+0xa8/0x100 [ 137.979786][ T6648] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 137.979808][ T6648] ? __alloc_skb+0x112/0x2d0 [ 137.979834][ T6648] __alloc_skb+0x112/0x2d0 [ 137.979860][ T6648] alloc_skb_with_frags+0xca/0x890 [ 137.979890][ T6648] ? tcp_send_rcvq+0x3ba/0x520 [ 137.979913][ T6648] ? kmem_cache_free+0x192/0x3f0 [ 137.979957][ T6648] tcp_send_rcvq+0x13e/0x520 [ 137.979986][ T6648] ? __pfx_tcp_send_rcvq+0x10/0x10 [ 137.980018][ T6648] ? tcp_rate_check_app_limited+0x1ab/0x350 [ 137.980043][ T6648] tcp_sendmsg_locked+0x4be0/0x5030 [ 137.980067][ T6648] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 137.980123][ T6648] ? __lock_acquire+0xaac/0xd20 [ 137.980155][ T6648] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 137.980170][ T6648] ? __local_bh_enable_ip+0x12d/0x1c0 [ 137.980191][ T6648] ? __local_bh_enable_ip+0x12d/0x1c0 [ 137.980220][ T6648] tcp_sendmsg+0x2f/0x50 [ 137.980236][ T6648] __sock_sendmsg+0xe5/0x270 [ 137.980258][ T6648] sock_sendmsg+0x158/0x230 [ 137.980277][ T6648] ? __pfx_sock_sendmsg+0x10/0x10 [ 137.980307][ T6648] ? __asan_memset+0x22/0x50 [ 137.980341][ T6648] ? iov_iter_bvec+0xb8/0x180 [ 137.980369][ T6648] splice_to_socket+0x8ff/0xf10 [ 137.980420][ T6648] ? __pfx_splice_to_socket+0x10/0x10 [ 137.980441][ T6648] ? current_time+0x222/0x370 [ 137.980494][ T6648] ? touch_atime+0xf1/0x6d0 [ 137.980554][ T6648] ? __pfx_splice_to_socket+0x10/0x10 [ 137.980576][ T6648] direct_splice_actor+0xfe/0x160 [ 137.980602][ T6648] splice_direct_to_actor+0x5a8/0xcc0 [ 137.980643][ T6648] ? __pfx_direct_splice_actor+0x10/0x10 [ 137.980665][ T6648] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 137.980686][ T6648] ? __pfx_aa_file_perm+0x10/0x10 [ 137.980714][ T6648] do_splice_direct+0x181/0x270 [ 137.980739][ T6648] ? __pfx_do_splice_direct+0x10/0x10 [ 137.980761][ T6648] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 137.980786][ T6648] ? bpf_lsm_file_permission+0x9/0x20 [ 137.980808][ T6648] ? security_file_permission+0x75/0x290 [ 137.980826][ T6648] ? rw_verify_area+0x258/0x650 [ 137.980849][ T6648] do_sendfile+0x4da/0x7d0 [ 137.980874][ T6648] ? __pfx_vfs_write+0x10/0x10 [ 137.980900][ T6648] ? __pfx_do_sendfile+0x10/0x10 [ 137.980923][ T6648] ? __fget_files+0x3a0/0x420 [ 137.980956][ T6648] __se_sys_sendfile64+0x13e/0x190 [ 137.980983][ T6648] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 137.981012][ T6648] ? do_syscall_64+0xba/0x210 [ 137.981039][ T6648] do_syscall_64+0xf6/0x210 [ 137.981063][ T6648] ? clear_bhb_loop+0x60/0xb0 [ 137.981084][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.981101][ T6648] RIP: 0033:0x7fb58f38e969 [ 137.981121][ T6648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.981135][ T6648] RSP: 002b:00007fb5902bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 137.981160][ T6648] RAX: ffffffffffffffda RBX: 00007fb58f5b6080 RCX: 00007fb58f38e969 [ 137.981173][ T6648] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 137.981182][ T6648] RBP: 00007fb5902bf090 R08: 0000000000000000 R09: 0000000000000000 [ 137.981193][ T6648] R10: 00000ffffffff004 R11: 0000000000000246 R12: 0000000000000002 [ 137.981203][ T6648] R13: 0000000000000001 R14: 00007fb58f5b6080 R15: 00007fb58f6dfa28 [ 137.981231][ T6648] [ 138.504290][ T3080] usb 5-1: 0:2 : does not exist [ 138.529968][ T3080] usb 5-1: USB disconnect, device number 9 [ 138.601088][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.072207][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 139.254850][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 139.273731][ T9] usb 3-1: config 0 has no interfaces? [ 139.286008][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 139.341289][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.376886][ T9] usb 3-1: config 0 descriptor?? [ 139.655089][ T9] usb 3-1: USB disconnect, device number 16 [ 139.744069][ T5914] usb 1-1: USB disconnect, device number 15 [ 139.844743][ T6675] netlink: 60 bytes leftover after parsing attributes in process `syz.0.196'. [ 140.310790][ T6684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.776029][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 141.068502][ T6701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.202'. [ 141.362080][ T5835] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 141.465689][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 141.512573][ T5835] usb 3-1: Using ep0 maxpacket: 32 [ 141.548858][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 141.557788][ T5835] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 141.567041][ T5835] usb 3-1: config 1 has no interface number 0 [ 141.573813][ T5835] usb 3-1: config 1 interface 242 has no altsetting 0 [ 141.590312][ T5835] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 141.611769][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.632025][ T5835] usb 3-1: Product: syz [ 141.642199][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 141.645394][ T5835] usb 3-1: Manufacturer: syz [ 141.653206][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 141.670350][ T10] usb 1-1: config 0 has no interface number 0 [ 141.677300][ T5835] usb 3-1: SerialNumber: syz [ 141.698786][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 141.705736][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 141.718640][ T5914] usb 4-1: config 0 has no interfaces? [ 141.724376][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 141.762096][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.793587][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 141.831374][ T5914] usb 4-1: config 0 descriptor?? [ 141.857840][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.908665][ T10] usb 1-1: Product: syz [ 141.924250][ T10] usb 1-1: Manufacturer: syz [ 141.941033][ T10] usb 1-1: SerialNumber: syz [ 141.954717][ T10] usb 1-1: config 0 descriptor?? [ 142.093683][ T5914] usb 4-1: USB disconnect, device number 12 [ 142.840574][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 142.860206][ T6719] binder: 6718:6719 ioctl c0306201 2000000003c0 returned -14 [ 143.448407][ T6739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.542134][ T3080] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 143.702208][ T3080] usb 4-1: Using ep0 maxpacket: 32 [ 143.709448][ T3080] usb 4-1: config 0 has no interfaces? [ 143.715247][ T3080] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 143.724520][ T3080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.760532][ T3080] usb 4-1: config 0 descriptor?? [ 143.967128][ T5835] aqc111 3-1:1.242: probe with driver aqc111 failed with error -71 [ 143.997690][ T5914] usb 4-1: USB disconnect, device number 13 [ 144.018135][ T5835] usb 3-1: USB disconnect, device number 17 [ 144.810101][ T30] audit: type=1326 audit(1747843662.019:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 144.894431][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 144.922064][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 144.929401][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 144.949684][ T30] audit: type=1326 audit(1747843662.019:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3c12ab39 code=0x7ffc0000 [ 144.968803][ T6750] FAULT_INJECTION: forcing a failure. [ 144.968803][ T6750] name failslab, interval 1, probability 0, space 0, times 0 [ 145.002243][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 145.049171][ T10] usb 1-1: USB disconnect, device number 16 [ 145.075027][ T30] audit: type=1326 audit(1747843662.019:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3c12ab39 code=0x7ffc0000 [ 145.127829][ T6750] CPU: 1 UID: 0 PID: 6750 Comm: syz.0.224 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 145.127872][ T6750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.127883][ T6750] Call Trace: [ 145.127891][ T6750] [ 145.127899][ T6750] dump_stack_lvl+0x189/0x250 [ 145.127933][ T6750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.127959][ T6750] ? __pfx__printk+0x10/0x10 [ 145.127981][ T6750] ? __pfx___might_resched+0x10/0x10 [ 145.128003][ T6750] should_fail_ex+0x414/0x560 [ 145.128026][ T6750] should_failslab+0xa8/0x100 [ 145.128052][ T6750] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 145.128077][ T6750] ? __alloc_skb+0x112/0x2d0 [ 145.128104][ T6750] __alloc_skb+0x112/0x2d0 [ 145.128131][ T6750] netlink_sendmsg+0x5c6/0xb30 [ 145.128163][ T6750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.128189][ T6750] ? aa_sock_msg_perm+0x94/0x160 [ 145.128211][ T6750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.128232][ T6750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.128255][ T6750] __sock_sendmsg+0x219/0x270 [ 145.128277][ T6750] ____sys_sendmsg+0x505/0x830 [ 145.128309][ T6750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.128343][ T6750] ? import_iovec+0x74/0xa0 [ 145.128373][ T6750] ___sys_sendmsg+0x21f/0x2a0 [ 145.128400][ T6750] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.128469][ T6750] ? __fget_files+0x2a/0x420 [ 145.128491][ T6750] ? __fget_files+0x3a0/0x420 [ 145.128531][ T6750] __x64_sys_sendmsg+0x19b/0x260 [ 145.128557][ T6750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.128597][ T6750] ? do_syscall_64+0xba/0x210 [ 145.128623][ T6750] do_syscall_64+0xf6/0x210 [ 145.128647][ T6750] ? clear_bhb_loop+0x60/0xb0 [ 145.128668][ T6750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.128685][ T6750] RIP: 0033:0x7f7dcb98e969 [ 145.128699][ T6750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.128713][ T6750] RSP: 002b:00007f7dc97f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.128730][ T6750] RAX: ffffffffffffffda RBX: 00007f7dcbbb5fa0 RCX: 00007f7dcb98e969 [ 145.128742][ T6750] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000003 [ 145.128752][ T6750] RBP: 00007f7dc97f6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.128761][ T6750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.128771][ T6750] R13: 0000000000000000 R14: 00007f7dcbbb5fa0 R15: 00007f7dcbcdfa28 [ 145.128797][ T6750] [ 145.372517][ C1] vkms_vblank_simulate: vblank timer overrun [ 145.462039][ T30] audit: type=1326 audit(1747843662.019:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 145.552690][ T30] audit: type=1326 audit(1747843662.019:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3c12ab39 code=0x7ffc0000 [ 145.581816][ T30] audit: type=1326 audit(1747843662.019:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3c12ab39 code=0x7ffc0000 [ 145.604097][ T30] audit: type=1326 audit(1747843662.019:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 145.626539][ T30] audit: type=1326 audit(1747843662.019:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 145.657546][ T30] audit: type=1326 audit(1747843662.019:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3d3c12ab39 code=0x7ffc0000 [ 145.680958][ T30] audit: type=1326 audit(1747843662.019:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6746 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d3c18e969 code=0x7ffc0000 [ 145.962951][ T6766] xt_NFQUEUE: number of total queues is 0 [ 146.159174][ T6770] input: syz0 as /devices/virtual/input/input8 [ 146.312945][ T6774] netlink: 100 bytes leftover after parsing attributes in process `syz.0.231'. [ 146.323991][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 146.479188][ T6775] Cannot find add_set index 0 as target [ 146.662041][ T5835] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.832041][ T5835] usb 1-1: Using ep0 maxpacket: 32 [ 146.839117][ T5835] usb 1-1: config 0 has no interfaces? [ 146.844939][ T5835] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 146.854246][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.053215][ T5835] usb 1-1: config 0 descriptor?? [ 147.161332][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.233'. [ 147.320523][ T5835] usb 1-1: USB disconnect, device number 17 [ 147.399650][ T6788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.722035][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 147.882282][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 147.919849][ T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 147.928781][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.943723][ T10] usb 4-1: config 0 has no interface number 0 [ 147.967312][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 147.997923][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.037636][ T10] usb 4-1: Product: syz [ 148.059894][ T10] usb 4-1: Manufacturer: syz [ 148.127614][ T10] usb 4-1: SerialNumber: syz [ 148.172897][ T10] usb 4-1: config 0 descriptor?? [ 148.275007][ T5886] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 148.428619][ T10] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 148.435116][ T10] usb 4-1: No valid video chain found. [ 148.442101][ T5886] usb 1-1: Using ep0 maxpacket: 16 [ 148.450854][ T10] usb 4-1: USB disconnect, device number 14 [ 148.458733][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.474245][ T5886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 148.491608][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 148.529007][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.574515][ T5886] usb 1-1: config 0 descriptor?? [ 148.997019][ T5886] logitech 0003:046D:C623.0003: unknown main item tag 0x6 [ 149.008433][ T5886] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 149.016488][ T5886] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 149.024380][ T5886] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 149.031643][ T5886] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 149.039066][ T3080] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 149.046800][ T5886] logitech 0003:046D:C623.0003: unknown main item tag 0x2 [ 149.055815][ T5886] logitech 0003:046D:C623.0003: unknown main item tag 0x0 [ 149.065040][ T5886] logitech 0003:046D:C623.0003: collection stack underflow [ 149.072354][ T5886] logitech 0003:046D:C623.0003: item 0 4 0 12 parsing failed [ 149.080217][ T5886] logitech 0003:046D:C623.0003: parse failed [ 149.086425][ T5886] logitech 0003:046D:C623.0003: probe with driver logitech failed with error -22 [ 149.102190][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 149.202093][ T3080] usb 3-1: Using ep0 maxpacket: 32 [ 149.208931][ T3080] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 149.217406][ T3080] usb 3-1: config 0 has no interface number 0 [ 149.226668][ T3080] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 149.236110][ T3080] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.244276][ T3080] usb 3-1: Product: syz [ 149.248533][ T3080] usb 3-1: Manufacturer: syz [ 149.253196][ T3080] usb 3-1: SerialNumber: syz [ 149.259580][ T3080] usb 3-1: config 0 descriptor?? [ 149.269492][ T3080] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 149.273025][ T10] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 149.312843][ T6803] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 149.318521][ T10] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 149.331758][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.340309][ T10] usb 5-1: Product: syz [ 149.347171][ T10] usb 5-1: Manufacturer: syz [ 149.351792][ T10] usb 5-1: SerialNumber: syz [ 149.362920][ T10] usb 5-1: config 0 descriptor?? [ 149.373673][ T10] go7007-loader 5-1:0.0: can't handle multiple config [ 149.380534][ T10] go7007-loader 5-1:0.0: probe failed [ 149.471275][ T3080] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 149.484836][ T3080] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 149.675908][ T6795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.687047][ T6795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.897566][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 149.908122][ T3080] usb 3-1: USB disconnect, device number 18 [ 149.929003][ T3080] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 149.963755][ T3080] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 149.988283][ T3080] quatech2 3-1:0.51: device disconnected [ 150.672118][ T3080] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 150.822181][ T3080] usb 4-1: Using ep0 maxpacket: 16 [ 150.827758][ T3080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.827788][ T3080] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.827822][ T3080] usb 4-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 150.864244][ T3080] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.907802][ T3080] usb 4-1: config 0 descriptor?? [ 151.037066][ T5914] usb 1-1: USB disconnect, device number 18 [ 151.414670][ T3080] cherry 0003:046A:0027.0004: unknown global tag 0xe [ 151.425896][ T3080] cherry 0003:046A:0027.0004: item 0 0 1 14 parsing failed [ 151.438964][ T3080] cherry 0003:046A:0027.0004: probe with driver cherry failed with error -22 [ 151.642076][ T5914] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 151.802213][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 151.919955][ T5914] usb 1-1: config 0 has no interfaces? [ 152.041539][ T5886] usb 5-1: USB disconnect, device number 10 [ 152.100428][ T5914] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 152.129855][ T6825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.152350][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.342658][ T5914] usb 1-1: config 0 descriptor?? [ 152.443160][ T5886] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 152.579892][ T5914] usb 1-1: USB disconnect, device number 19 [ 152.592708][ T5886] usb 5-1: Using ep0 maxpacket: 16 [ 152.608620][ T5886] usb 5-1: config 2 has too many interfaces: 36, using maximum allowed: 32 [ 152.632463][ T5886] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 152.642743][ T5886] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 152.656656][ T5886] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 36 [ 152.672283][ T5886] usb 5-1: New USB device found, idVendor=eb1a, idProduct=a313, bcdDevice=42.9a [ 152.681633][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.690857][ T5886] usb 5-1: Product: syz [ 152.695975][ T5886] usb 5-1: Manufacturer: syz [ 152.700638][ T5886] usb 5-1: SerialNumber: syz [ 152.926713][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.935741][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.955649][ T5886] usb 5-1: USB disconnect, device number 11 [ 153.645855][ T5835] usb 4-1: USB disconnect, device number 15 [ 153.682159][ T6840] kvm: user requested TSC rate below hardware speed [ 153.689694][ T6840] FAULT_INJECTION: forcing a failure. [ 153.689694][ T6840] name failslab, interval 1, probability 0, space 0, times 0 [ 153.723139][ T6840] CPU: 1 UID: 0 PID: 6840 Comm: syz.2.251 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 153.723165][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.723176][ T6840] Call Trace: [ 153.723184][ T6840] [ 153.723192][ T6840] dump_stack_lvl+0x189/0x250 [ 153.723227][ T6840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.723254][ T6840] ? __pfx__printk+0x10/0x10 [ 153.723278][ T6840] ? __pfx___might_resched+0x10/0x10 [ 153.723295][ T6840] ? fs_reclaim_acquire+0x7d/0x100 [ 153.723328][ T6840] should_fail_ex+0x414/0x560 [ 153.723353][ T6840] should_failslab+0xa8/0x100 [ 153.723380][ T6840] __kmalloc_cache_noprof+0x70/0x3d0 [ 153.723404][ T6840] ? vhost_task_create+0xf6/0x290 [ 153.723429][ T6840] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 153.723450][ T6840] vhost_task_create+0xf6/0x290 [ 153.723470][ T6840] ? arch_stack_walk+0xfc/0x150 [ 153.723493][ T6840] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 153.723516][ T6840] ? __pfx_vhost_task_create+0x10/0x10 [ 153.723546][ T6840] ? __pfx_vhost_task_fn+0x10/0x10 [ 153.723587][ T6840] kvm_mmu_post_init_vm+0x147/0x2b0 [ 153.723613][ T6840] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 153.723649][ T6840] ? __mutex_trylock_common+0x153/0x260 [ 153.723689][ T6840] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 153.723723][ T6840] ? rcu_is_watching+0x15/0xb0 [ 153.723749][ T6840] ? trace_contention_end+0x39/0x120 [ 153.723767][ T6840] ? look_up_lock_class+0x74/0x170 [ 153.723793][ T6840] ? register_lock_class+0x51/0x320 [ 153.723826][ T6840] ? __lock_acquire+0xaac/0xd20 [ 153.723882][ T6840] kvm_vcpu_ioctl+0x95a/0xe90 [ 153.723917][ T6840] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 153.723958][ T6840] ? __lock_acquire+0xaac/0xd20 [ 153.724020][ T6840] ? __fget_files+0x2a/0x420 [ 153.724052][ T6840] ? __fget_files+0x3a0/0x420 [ 153.724087][ T6840] ? __fget_files+0x2a/0x420 [ 153.724115][ T6840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 153.724140][ T6840] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 153.724165][ T6840] __se_sys_ioctl+0xf9/0x170 [ 153.724187][ T6840] do_syscall_64+0xf6/0x210 [ 153.724214][ T6840] ? clear_bhb_loop+0x60/0xb0 [ 153.724236][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.724254][ T6840] RIP: 0033:0x7fb58f38e969 [ 153.724270][ T6840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.724285][ T6840] RSP: 002b:00007fb5902e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.724303][ T6840] RAX: ffffffffffffffda RBX: 00007fb58f5b5fa0 RCX: 00007fb58f38e969 [ 153.724316][ T6840] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 153.724326][ T6840] RBP: 00007fb5902e0090 R08: 0000000000000000 R09: 0000000000000000 [ 153.724336][ T6840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.724346][ T6840] R13: 0000000000000000 R14: 00007fb58f5b5fa0 R15: 00007fb58f6dfa28 [ 153.724375][ T6840] [ 154.164985][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 154.165002][ T30] audit: type=1326 audit(1747843671.379:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.180014][ T6849] netlink: 96 bytes leftover after parsing attributes in process `syz.0.254'. [ 154.253090][ T30] audit: type=1326 audit(1747843671.449:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.291296][ T30] audit: type=1326 audit(1747843671.449:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.313649][ T30] audit: type=1326 audit(1747843671.449:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.337348][ T30] audit: type=1326 audit(1747843671.449:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.350864][ T6854] syzkaller1: entered promiscuous mode [ 154.360514][ T30] audit: type=1326 audit(1747843671.449:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.389363][ T6854] syzkaller1: entered allmulticast mode [ 154.390071][ T30] audit: type=1326 audit(1747843671.459:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.421775][ T30] audit: type=1326 audit(1747843671.499:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.444931][ T30] audit: type=1326 audit(1747843671.499:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.467383][ T30] audit: type=1326 audit(1747843671.499:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab5018e969 code=0x7ffc0000 [ 154.502074][ T5835] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 154.654713][ T5835] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.667227][ T5835] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 154.680925][ T5835] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.690837][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.706279][ T6849] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 154.726120][ T5835] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 154.792209][ T5886] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.882152][ T5914] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 154.943238][ T5835] usb 1-1: USB disconnect, device number 20 [ 154.956235][ T5886] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 154.985286][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.021344][ T5886] usb 5-1: config 0 descriptor?? [ 155.048101][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 155.048819][ T5886] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 155.071671][ T5914] usb 4-1: config 0 has no interfaces? [ 155.077464][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.097852][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.118676][ T5914] usb 4-1: config 0 descriptor?? [ 155.347473][ T5914] usb 4-1: USB disconnect, device number 16 [ 155.661629][ T6867] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.957124][ T6869] netlink: 44 bytes leftover after parsing attributes in process `syz.3.261'. [ 155.980207][ T6869] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.988276][ T6869] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.382023][ T5914] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 156.479538][ T5886] usb 5-1: USB disconnect, device number 12 [ 156.602142][ T5914] usb 4-1: Using ep0 maxpacket: 16 [ 156.609177][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.620470][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 156.640758][ T5914] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 156.660081][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.677088][ T5914] usb 4-1: config 0 descriptor?? [ 156.911465][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 156.925831][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 156.948641][ T5914] usb 4-1: USB disconnect, device number 17 [ 157.096075][ T6880] ======================================================= [ 157.096075][ T6880] WARNING: The mand mount option has been deprecated and [ 157.096075][ T6880] and is ignored by this kernel. Remove the mand [ 157.096075][ T6880] option from the mount to silence this warning. [ 157.096075][ T6880] ======================================================= [ 157.104247][ T6879] vlan3: entered promiscuous mode [ 157.147235][ T6879] vlan2: entered promiscuous mode [ 157.159447][ T6879] erspan0: entered promiscuous mode [ 157.352570][ T6889] fuse: Unknown parameter 'ff¢Zoý*ÑÆ+;u¥øÿýzM_LC´AMÿoŸyñJ' [ 157.644452][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 157.842142][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 157.852715][ T10] usb 5-1: config 0 has no interfaces? [ 157.858412][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 157.870280][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.889387][ T10] usb 5-1: config 0 descriptor?? [ 158.108526][ T24] usb 5-1: USB disconnect, device number 13 [ 158.387870][ T6903] ipvlan2: entered promiscuous mode [ 158.395622][ T6903] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 158.413396][ T6903] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.096347][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.102982][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.693296][ T31] INFO: task syz.1.6:5899 blocked for more than 143 seconds. [ 235.700737][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 235.708780][ T31] Blocked by coredump. [ 235.713516][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.722255][ T31] task:syz.1.6 state:D stack:24936 pid:5899 tgid:5893 ppid:5852 task_flags:0x40054c flags:0x00004006 [ 235.734249][ T31] Call Trace: [ 235.737549][ T31] [ 235.740508][ T31] __schedule+0x16e2/0x4cd0 [ 235.746366][ T31] ? schedule+0x165/0x360 [ 235.750729][ T31] ? __pfx___schedule+0x10/0x10 [ 235.755693][ T31] ? schedule+0x91/0x360 [ 235.760043][ T31] schedule+0x165/0x360 [ 235.764298][ T31] schedule_preempt_disabled+0x13/0x30 [ 235.769786][ T31] __mutex_lock+0x724/0xe80 [ 235.774471][ T31] ? kobject_put+0x43f/0x480 [ 235.779107][ T31] ? __mutex_lock+0x51b/0xe80 [ 235.783971][ T31] ? rfkill_unregister+0xc8/0x220 [ 235.789029][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 235.794187][ T31] ? __pfx_device_del+0x10/0x10 [ 235.799070][ T31] rfkill_unregister+0xc8/0x220 [ 235.803979][ T31] nfc_unregister_device+0x96/0x2a0 [ 235.809213][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 235.815189][ T31] virtual_ncidev_close+0x56/0x90 [ 235.820255][ T31] __fput+0x44c/0xa70 [ 235.824336][ T31] task_work_run+0x1d1/0x260 [ 235.828960][ T31] ? __pfx_task_work_run+0x10/0x10 [ 235.834221][ T31] do_exit+0x8d6/0x2550 [ 235.838421][ T31] ? do_raw_spin_lock+0x121/0x290 [ 235.846203][ T31] ? __pfx_do_exit+0x10/0x10 [ 235.850843][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.858555][ T31] do_group_exit+0x21c/0x2d0 [ 235.864938][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.870383][ T31] get_signal+0x125e/0x1310 [ 235.875826][ T31] arch_do_signal_or_restart+0x95/0x780 [ 235.881408][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 235.887708][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 235.893667][ T31] syscall_exit_to_user_mode+0x8b/0x120 [ 235.899240][ T31] do_syscall_64+0x103/0x210 [ 235.903916][ T31] ? clear_bhb_loop+0x60/0xb0 [ 235.908617][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.914581][ T31] RIP: 0033:0x7f9902b8e969 [ 235.919013][ T31] RSP: 002b:00007f9903a590e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 235.927685][ T31] RAX: fffffffffffffe00 RBX: 00007f9902db6168 RCX: 00007f9902b8e969 [ 235.935732][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9902db6168 [ 235.947000][ T31] RBP: 00007f9902db6160 R08: 0000000000000000 R09: 0000000000000000 [ 235.956340][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9902db616c [ 235.966451][ T31] R13: 0000000000000000 R14: 00007f9902edf940 R15: 00007f9902edfa28 [ 235.974773][ T31] [ 235.977816][ T31] INFO: task kworker/0:5:5913 blocked for more than 143 seconds. [ 235.988574][ T31] Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 [ 235.996279][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.005083][ T31] task:kworker/0:5 state:D stack:28648 pid:5913 tgid:5913 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 236.017444][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 236.024235][ T31] Call Trace: [ 236.027545][ T31] [ 236.030490][ T31] __schedule+0x16e2/0x4cd0 [ 236.035246][ T31] ? schedule+0x165/0x360 [ 236.039604][ T31] ? __pfx___schedule+0x10/0x10 [ 236.044589][ T31] ? schedule+0x91/0x360 [ 236.050186][ T31] schedule+0x165/0x360 [ 236.056474][ T31] schedule_preempt_disabled+0x13/0x30 [ 236.063267][ T31] __mutex_lock+0x724/0xe80 [ 236.067809][ T31] ? __mutex_lock+0x51b/0xe80 [ 236.072849][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 236.079125][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 236.084469][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 236.090239][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 236.096198][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 236.102549][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 236.108296][ T31] process_scheduled_works+0xadb/0x17a0 [ 236.114845][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 236.120889][ T31] worker_thread+0x8a0/0xda0 [ 236.125595][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 236.132050][ T31] ? __kthread_parkme+0x7b/0x200 [ 236.137013][ T31] kthread+0x70e/0x8a0 [ 236.141084][ T31] ? __pfx_worker_thread+0x10/0x10 [ 236.146348][ T31] ? __pfx_kthread+0x10/0x10 [ 236.150980][ T31] ? __pfx_kthread+0x10/0x10 [ 236.155664][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.160896][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.166299][ T31] ? __pfx_kthread+0x10/0x10 [ 236.170926][ T31] ret_from_fork+0x4b/0x80 [ 236.175474][ T31] ? __pfx_kthread+0x10/0x10 [ 236.180096][ T31] ret_from_fork_asm+0x1a/0x30 [ 236.185009][ T31] [ 236.188163][ T31] [ 236.188163][ T31] Showing all locks held in the system: [ 236.202468][ T31] 4 locks held by kworker/u8:0/12: [ 236.207715][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 236.217874][ T31] #1: ffff8880b8823b08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39e/0x6d0 [ 236.229584][ T31] #2: ffffffff8ddd6b10 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 236.239499][ T31] #3: ffffffff8dff8728 (jump_label_mutex){+.+.}-{4:4}, at: static_key_disable_cpuslocked+0x8d/0x1b0 [ 236.250504][ T31] 1 lock held by khungtaskd/31: [ 236.255807][ T31] #0: ffffffff8df3dee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 236.266069][ T31] 2 locks held by getty/5593: [ 236.270770][ T31] #0: ffff8880304ea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 236.280631][ T31] #1: ffffc90002ffe2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 236.290843][ T31] 1 lock held by syz-executor/5852: [ 236.296315][ T31] #0: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 236.306574][ T31] 4 locks held by kworker/0:4/5885: [ 236.311785][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 236.323113][ T31] #1: ffffc9000472fc60 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 236.334305][ T31] #2: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 236.343944][ T31] #3: ffff88802133c100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 236.353731][ T31] 2 locks held by syz.1.6/5899: [ 236.358596][ T31] #0: ffff88802133c100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 236.368480][ T31] #1: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 236.378687][ T31] 3 locks held by kworker/0:5/5913: [ 236.384174][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 236.395444][ T31] #1: ffffc900048afc60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 236.409058][ T31] #2: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 236.420542][ T31] 2 locks held by syz-executor/6136: [ 236.425919][ T31] #0: ffff8880782f6118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 236.436019][ T31] #1: ffffffff8f5ce888 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 236.446050][ T31] [ 236.448387][ T31] ============================================= [ 236.448387][ T31] [ 236.456878][ T31] NMI backtrace for cpu 1 [ 236.456895][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 236.456931][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.456948][ T31] Call Trace: [ 236.456956][ T31] [ 236.456964][ T31] dump_stack_lvl+0x189/0x250 [ 236.456995][ T31] ? __wake_up_klogd+0xd9/0x110 [ 236.457022][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.457052][ T31] ? __pfx__printk+0x10/0x10 [ 236.457084][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 236.457111][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 236.457130][ T31] ? _printk+0xcf/0x120 [ 236.457154][ T31] ? __pfx__printk+0x10/0x10 [ 236.457177][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 236.457201][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 236.457227][ T31] watchdog+0xfee/0x1030 [ 236.457256][ T31] ? watchdog+0x1de/0x1030 [ 236.457296][ T31] kthread+0x70e/0x8a0 [ 236.457325][ T31] ? __pfx_watchdog+0x10/0x10 [ 236.457349][ T31] ? __pfx_kthread+0x10/0x10 [ 236.457372][ T31] ? __pfx_kthread+0x10/0x10 [ 236.457393][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.457415][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.457440][ T31] ? __pfx_kthread+0x10/0x10 [ 236.457462][ T31] ret_from_fork+0x4b/0x80 [ 236.457482][ T31] ? __pfx_kthread+0x10/0x10 [ 236.457505][ T31] ret_from_fork_asm+0x1a/0x30 [ 236.457539][ T31] [ 236.457547][ T31] Sending NMI from CPU 1 to CPUs 0: [ 236.604618][ C0] NMI backtrace for cpu 0 [ 236.604634][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 236.604654][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.604664][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 236.604692][ C0] Code: c3 d4 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 8f 11 00 f3 0f 1e fa fb f4 98 d4 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 236.604707][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 236.604723][ C0] RAX: bef5ae394e3d9f00 RBX: ffffffff81977108 RCX: bef5ae394e3d9f00 [ 236.604737][ C0] RDX: 0000000000000001 RSI: ffffffff8d74e0ce RDI: ffffffff8bc1f3c0 [ 236.604749][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 236.604761][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7f3370 [ 236.604774][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 236.604785][ C0] FS: 0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000 [ 236.604799][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 236.604811][ C0] CR2: 00005619d0d7e660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 236.604826][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 236.604836][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 236.604848][ C0] Call Trace: [ 236.604855][ C0] [ 236.604862][ C0] default_idle+0x13/0x20 [ 236.604886][ C0] default_idle_call+0x74/0xb0 [ 236.604911][ C0] do_idle+0x1e8/0x510 [ 236.604931][ C0] ? __pfx_do_idle+0x10/0x10 [ 236.604956][ C0] cpu_startup_entry+0x44/0x60 [ 236.604972][ C0] rest_init+0x2de/0x300 [ 236.604985][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 236.605006][ C0] start_kernel+0x470/0x4f0 [ 236.605030][ C0] x86_64_start_reservations+0x2a/0x30 [ 236.605047][ C0] x86_64_start_kernel+0x66/0x70 [ 236.605064][ C0] common_startup_64+0x13e/0x147 [ 236.605096][ C0] [ 236.605650][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 236.810268][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(full) [ 236.822075][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.832135][ T31] Call Trace: [ 236.835415][ T31] [ 236.838351][ T31] dump_stack_lvl+0x99/0x250 [ 236.842956][ T31] ? __asan_memcpy+0x40/0x70 [ 236.847548][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.852750][ T31] ? __pfx__printk+0x10/0x10 [ 236.857349][ T31] panic+0x2db/0x790 [ 236.861255][ T31] ? __pfx_panic+0x10/0x10 [ 236.865674][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 236.871485][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 236.876863][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 236.883024][ T31] watchdog+0x102d/0x1030 [ 236.887539][ T31] ? watchdog+0x1de/0x1030 [ 236.891969][ T31] kthread+0x70e/0x8a0 [ 236.896039][ T31] ? __pfx_watchdog+0x10/0x10 [ 236.900719][ T31] ? __pfx_kthread+0x10/0x10 [ 236.905314][ T31] ? __pfx_kthread+0x10/0x10 [ 236.909920][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.915112][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.920305][ T31] ? __pfx_kthread+0x10/0x10 [ 236.924894][ T31] ret_from_fork+0x4b/0x80 [ 236.929308][ T31] ? __pfx_kthread+0x10/0x10 [ 236.933894][ T31] ret_from_fork_asm+0x1a/0x30 [ 236.938663][ T31] [ 236.942025][ T31] Kernel Offset: disabled [ 236.946352][ T31] Rebooting in 86400 seconds..