last executing test programs: 26.310518471s ago: executing program 0 (id=603): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x0, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x18}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), 0x2a}, 0x12100) 25.94343631s ago: executing program 0 (id=606): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x3e5101, 0x1d6) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r4) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000450000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0001000000"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r6, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x58}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3, 0x2c}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2b}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2841) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r6, @ANYRESHEX=0x0, @ANYBLOB="ffef16159f18b351706b8d24ca9b27cd0de9a0f5c1ff0bddfedfd90c888f66b89ed3aec824d59a38aeef1c6494f4ebcfb7"], 0xb0}, 0x1, 0x0, 0x0, 0xc104}, 0x4008851) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000c40)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 24.174371236s ago: executing program 0 (id=614): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x184}, {&(0x7f0000000f00)="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", 0x17e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)={@local, @random="de9ea3f675c1", @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "bebf7bd93cb23a1c"}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x20, 0xfffffffffffffff9, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r1, 0x5f57, 0x20}, 0xc) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000005a"], 0x0, 0x76}, 0x20) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 23.114908311s ago: executing program 0 (id=623): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="000032914016a5d7e437dc34bc4dee415ba400e5ffffffffb5ef000000000000850000000c000000b7000000000000b50000dc00c50000f5c7cc253434c174c1e196e72821054a13bc3d6fc4310abf865aebe4716eca426e30674297e6730af6f59271a0"], &(0x7f0000000980)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0xffffffffffffffff, 0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x35c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 21.973165607s ago: executing program 0 (id=628): ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f0000000340)=0xb0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) r4 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r5 = creat(&(0x7f0000001180)='./file0\x00', 0x0) pwritev(r5, &(0x7f0000000280)=[{&(0x7f0000000240)="f0", 0x1}], 0x1, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, &(0x7f00000002c0)={0x1, [[0x6aa, 0x5, 0x100, 0x0, 0x0, 0x7, 0x48, 0x1000], [0x101, 0xcf020c7, 0x6, 0x961, 0x7e, 0x7f, 0x0, 0x4], [0x4, 0x0, 0x7, 0x3f, 0x0, 0x82, 0x3, 0x10000]], '\x00', [{0x3, 0x9a, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1, 0x1}, {0xff, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x1, 0x28b, 0x1, 0x0, 0x1, 0x1}, {0x0, 0xe, 0x1, 0x0, 0x0, 0x1}, {0x8, 0xb473, 0x1}, {0x4, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x7, 0xfffffb05, 0x1}, {0x80, 0x81, 0x1, 0x0, 0x1}, {0x80, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x4c98, 0x9, 0x1}], '\x00', 0x6}) r6 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_WAIT_FOR_RESUME(r6, 0x80045519) fallocate(r5, 0x0, 0x0, 0x3fffe) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r5, r7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) fallocate(r4, 0x0, 0x0, 0x7000000) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000280)={0x0, r7, 0x8}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) pipe2$watch_queue(&(0x7f00000000c0), 0x80) 21.409701259s ago: executing program 0 (id=633): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0}, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), 0x2a}, 0x12100) 7.82123776s ago: executing program 1 (id=693): sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b000900000000090400020100350400"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)='V', 0x1) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) io_setup(0x8000, &(0x7f0000005640)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8000, 0x2, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc0585609, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x18}) 7.61568383s ago: executing program 5 (id=695): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x96a}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname(r4, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYBLOB="00000000000000001c0012800b000100627269646765009ad90002800600018000000000a2449d7813710548d68498f5e72997d0ca02392f52e2ab95d4b2a7553ede6a06132e9220fd82106d97111e6d623b47f378ea766c9b28f6fcb4485ec5e51ad70e82d6c6b4012c0cd016ab42e5cfb8e1b4cad6e93a0cd8ea528723a42efa95"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x3c, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x600}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x5502000000000000}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000000, r6, 0xf1315164bfce663f}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000f5000000000000daf0401e59cfb028"], 0x22) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000700)=[{&(0x7f0000000500)="d463d4e9bbbc55fb32e8c932377e84d3b8555dce8c726d3c0d180cc31bd7f521ce07dc57b996b45bd4fbbb57e3cd322701da63342daa20b4589c71b5d32c60f27cf3a50687936fcf1c448d5a34629c99d5160d735ce2fc626b2a8abee759649557a008cc9f51fe8e45b6ed85a227b5dd384c0da99a3acf6333aa41e919477ad16e85889fd1fa20c0fd8c6f9b78805fff5d8ce3e0ae2dd9f097d16ef0957ae75a5aaa51527c5abf", 0xa7}, {&(0x7f00000005c0)="a511785e9f6679fcf1245bedeb6158127320dc1448ab1aa1a56604cbb7bf7b92f8ce086408ae1c92936f2099f56b6e56c9f08adb815f9056d296178196c2952bb3205a6f911c3645b4053cc49a490c7aa476eacef9de91ed2db4352e4032252bfc86b92d1786f9b8bbd82835b1e9b52df498a38caf5016851718d7dad372c696fb64371974296bc19fcffb929cb245247ee9a1cad6b0fdddb19af8f8dfc485fd48e4e5932386f8b5ef2eeafcbe842b16d9228b0f6596ca5866ade260e6957479bb9cbaaf5102241219c2cf193089976c8bdf752573680c11ed237da30df9f06e938681d7e94aa3a0cad523c9aa", 0xed}, {&(0x7f00000006c0)="f10a3a1ed2a2d7a93e9727ce16f9530f4363a8ec363540d491f4a2de20a031bd7858c86ee0d93996e1e440a1a290d1ce92b4abe7", 0x34}], 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000010180100002020752500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r13}, 0x10) 7.286150134s ago: executing program 4 (id=697): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000001800)={[{@errors_continue}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x101}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@utf8}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@namecase}, {@utf8}, {@namecase}]}, 0x1, 0x151f, &(0x7f0000002140)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) umount2(&(0x7f0000000200)='./file0\x00', 0x1) 7.129121437s ago: executing program 4 (id=699): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x20044001) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r5, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x4, 0x4}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x43e}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)={0x2c, 0x0, 0x18fe2a01ed25d92f, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) 6.601774238s ago: executing program 5 (id=703): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="000032914016a5d7e437dc34bc4dee415ba400e5ffffffffb5ef000000000000850000000c000000b7000000000000b50000dc00c50000f5c7cc253434c174c1e196e72821054a13bc3d6fc4310abf865aebe4716eca426e30674297e6730af6f59271a0"], &(0x7f0000000980)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x35c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.117159098s ago: executing program 4 (id=704): r0 = msgget$private(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x25]}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0xffffffb5) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4000}, 0x0, 0x0, 0xbf, 0x1000, 0x0, 0x0, 0x8000, 0x0, 0x1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @void}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x400000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 5.698919912s ago: executing program 4 (id=705): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00001001"], 0x0) syz_usb_disconnect(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.603540033s ago: executing program 5 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r7 = eventfd(0x0) io_setup(0x8, &(0x7f0000000f00)=0x0) io_submit(r8, 0x1, &(0x7f0000002600)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x0, r7, 0x0, 0x0, 0x8}]) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000080)={0xa, 0x1403, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000004880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000000440)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40c90) r10 = syz_usb_connect(0x0, 0x651, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0xd, 0x8, [@generic={0x22, 0x6, "48d4a472d8eabf78f66235fcbc088b59d7a81d4f97164cf641a7bab07c13e860"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x8, 0x1, 0x3e, [@generic={0x87, 0xd, "21d06628a43111f237e9ec3738c07afae91998efa81f1c937b3cca95d5a7018a376f97d90e93f80d608da80423eb50c624637a4541a4d2bb86c3a91068533421b266d90047690208cc340e52848eb1c72d001e34c06da6cd9a0d4ffc0f47ab60c61e3464e6f9db82e0b981a2c8bc986688d2f51b1552e7037e6055c074741e5e0bd42b6139"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x0, 0x8, 0x1d, [@generic={0xd0, 0x0, "f85d5e0a54a5eaf698ad2bc10866f179c624a89c5e398f486e5235fe3ffc9ab0046f28a043be92f7be3159ceba4d67cae8e73244022cf8db7a6b486ed8a8ad0d74b58b86106ea44628385a4ab66976112d24dc92c01dfb9f8ba717f06e92af66da5ec3109881e3314e47fff7fc561fd80094816e9fc803496951acdf34e597bb6d553909fb272563791f15d18fa4237577964d8f82af2f932132d9a94f2739eecf4cb060fc6503cef7e6fc5daa558b104b011f93e00b835bbada664c8bff97bc7cee6dfe04f47d3524011164c2be"}, @generic={0xe1, 0x23, "48747d2dd24b5c4cce5e5604c73a8611f529666ad32b9a96425d789bd88a322d2e53d4d867c08f1ce2336d3e4a6f8ac92ea83da64dc0bca8e10619004b7a12da79215197e4671727da3d7835a950451e4cad5c190d959bbe61af6f145af252d7dfb33476dd397330061fbd8f5574ef1bf09ebfc5a9e2dbd74459e2c32582856f7e2e01040c5c83faf90824cc095c9a68daff61798fc62816db830a4d36aecf107845674a030883562ec7f54f2c97ba960aaa031acdbfc894b25f52f13120ab9bf3f6eca19c8f11f3c69f047abacada2cdfad886e64de6d1fd1f8231118d131"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x3, 0x9, 0x8, [@generic={0xce, 0xb, "cd8bc81d0e72f16ac2547dfa19d5b36d5c8a194fe9590f065c36b18a267aa05f113c9268739f60a9e9c6eb2a63068a5061eec17aa502cedf18f17b189f108ebf2e15a118282e7a3e4ba9c3b266d44c08f68e74399a62c76de84fb19793b525717f8614d5b5b4e7fb465afe0c6a87faf34420ef96a423ff0ae642aeea9ef3012fbe2a1ab401a06c63493db740cd7a286f6516db2cc615c27574c02ccc6868962ab049519778cfc2c3c7dff332ed796c62083777c018be55ea2016ae28942ec4b27184164c88a66776a12715de"}, @generic={0xf4, 0x24, "eb52f98804f4c4e00d7ae8d6cc6a55a05ed3701d85ac56e722b1531494dbf0ff00d58b666e8d5852349bd1b0c2647d27b7a2c7201202c29d8874cb930047abddef9d1615e03aeacb8a9c85e3007dbcf2f9388049f42b8361eb23dfa42e09238fc61df5ebb934c70bbe43120eab1cc827c73101659b95e0e817a3050bf45316b37deaecaad0f5fc74015aea957c73bc4685f7af96cb3f5379d119c61a9ae5f1e701504a2958bff5d7969cb4284619f85656333fe13d5480f85929bc30d7fbd06775bd484d6a623d03bae054a191b6aec094dd3d9db2edf5d61dae87e2d70d625f2c138e237237f44d243f514c163dae54fa8c"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x6, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xe, 0xea, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xb8, 0x7, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x22, 0x8, 0x6, [@generic={0xbd, 0x2, "ff14588c853fd297bd7125256f55aefe4df0164ab5c7461f95c3a59f94fd0ccc7dca7af47279d8572d4e648761f933ef44ea58dd21ec161707949d58241358d3b96c2009e7e9eb457914f895effc94f72d14a4d707e84b2f06ef48225c4b25ec6484888c421f0669ece21813140ed57d71435ed51f33966c05d35278f996d69eb8c845f79fb308df6be54b5f9bc8c7e987c4b7b4886d16235b10e75165e4c2b2bdf52937d2d2930c27c55cb4294ab12a94c1e6060254ca03d2bc3e"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x3, 0x1, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x23, 0x7, 0x9, [@generic={0x1b, 0x24, "13d14e74220e08dd2f5ee51c7f72b94eabd9d1709999969d9c"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x6, 0x4, [@generic={0x61, 0x0, "d316a7e17abc15827d4db368b64fa89cf0309832df2f5bcf5a8aaeedb3a184c30ef3de3f5c2c91e38199cc89f4a216fec19d65bfec4c7440d2f2166540de55a2525dbaec5ad4e4685e3d67947348dafb8a4779af655b2a86b7dbd42a1fb122"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x40}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x0, 0x6, 0x6, [@generic={0x57, 0x1, "27b6cba2b8792a77e129f5fd63f3d4aa31416b6ffbc65d8bcea26ae75a03d4fcf5d642e75819be9148016a034011c3b2cb90d0de8c246df62596520e538c166f323497fd08a386eb8dc81f8fc17845f104362a104b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x401}]}}]}}]}}]}}, &(0x7f0000005740)={0xa, &(0x7f00000055c0)={0xa, 0x6, 0x300, 0x9, 0x4, 0x8, 0x10, 0x8}, 0x62, &(0x7f0000005600)={0x5, 0xf, 0x62, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3, 0xd9}, @generic={0x45, 0x10, 0x3, "93d74930d870240ed2f0091cf08af34b9fd9862243fbcc3710458d846f198033f3bfbc658fcc97833f6f0ce72f160f72e458a5dec30c2ea45041d99414f9e3fa2768"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xb4, 0xc9, 0x7901, 0x5}]}, 0x3, [{0x4, &(0x7f0000005680)=@lang_id={0x4, 0x3, 0x3c01}}, {0x28, &(0x7f00000056c0)=@string={0x28, 0x3, "b1b1796a68f0f844e6ac3e760678424dd39d21cb068b568b36a276e3152c8d983509f33114fe"}}, {0x4, &(0x7f0000005700)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$uac1(r10, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xd, 0xb9, {0xb9, 0x21, "662d65286d8a567bf9d32a908dff8979103332a28f9405f0774f3c70d1cd2501cb0a8c4286afa1f702ef4a4bed322427efe357e62dbd20a1b7bf3ef840eccbb57807ffa526187f393338a9b645f85f56ee88bd0029e7b3fc59d06e2f38c54000557f50c1419d8a9d2613af9df5b683d73505c88b5d8895218fb0763f1430d412e38e363994deb266cef316b73e1d0a754d83064c0a41422c2bbfea9497f72cd55ea5f6e5ecc9d03d0e94f1551ed1b5986cfcf533bc219f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x27, @string={0x27, 0x3, "48da87ce8131aebd6885bac1fce151c6fba73bd16125e4ad6cd388907c3f7a2592e2c54dd3"}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="001398000000a020949c4c770803a328a27feff3edceb9facca62d750a18180f65fd2df4ebff67eff2a0131d88794798891ff76423fbfa5561debf34b1bfeec3c24cfbc0b524efe44705ea679f20093c8df50b06c4489ab97e54607a706328500ebce6cd5a33a2d5178c03ad94e1840cdc5a5d4e394126638aaf293338b442b896f1a8c02e6678d16ae8deeccd2e5f4a113cc975c851a5a64327c09281"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x81, 0x3, "3fcb68"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, '<'}, &(0x7f0000000300)={0x20, 0x83, 0x1, "db"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "51487eb2"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "9e0937"}}) 4.314069924s ago: executing program 1 (id=708): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 4.153481578s ago: executing program 1 (id=710): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7b, &(0x7f0000000180)={r6}, 0x14) 3.978522299s ago: executing program 3 (id=711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) lsm_set_self_attr(0x0, 0x0, 0x20, 0x0) 3.890746288s ago: executing program 1 (id=712): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0x5}, 0x2) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.735786685s ago: executing program 3 (id=713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4008080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) personality(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003}, 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x9, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 3.600369789s ago: executing program 1 (id=714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x96a}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}]}, 0x38}}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) getsockname(r4, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000810500"/20, @ANYBLOB="00000000000000001c0012800b000100627269646765009ad90002800600018000000000a2449d7813710548d68498f5e72997d0ca02392f52e2ab95d4b2a7553ede6a06132e9220fd82106d97111e6d623b47f378ea766c9b28f6fcb4485ec5e51ad70e82d6c6b4012c0cd016ab42e5cfb8e1b4cad6e93a0cd8ea528723a42efa95"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x3c, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x600}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x3c}, 0x1, 0x5502000000000000}, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x80000000, r6, 0xf1315164bfce663f}, 0x38) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000000f5000000000000daf0401e59cfb028"], 0x22) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000700)=[{&(0x7f0000000500)="d463d4e9bbbc55fb32e8c932377e84d3b8555dce8c726d3c0d180cc31bd7f521ce07dc57b996b45bd4fbbb57e3cd322701da63342daa20b4589c71b5d32c60f27cf3a50687936fcf1c448d5a34629c99d5160d735ce2fc626b2a8abee759649557a008cc9f51fe8e45b6ed85a227b5dd384c0da99a3acf6333aa41e919477ad16e85889fd1fa20c0fd8c6f9b78805fff5d8ce3e0ae2dd9f097d16ef0957ae75a5aaa51527c5abf", 0xa7}, {&(0x7f00000005c0)="a511785e9f6679fcf1245bedeb6158127320dc1448ab1aa1a56604cbb7bf7b92f8ce086408ae1c92936f2099f56b6e56c9f08adb815f9056d296178196c2952bb3205a6f911c3645b4053cc49a490c7aa476eacef9de91ed2db4352e4032252bfc86b92d1786f9b8bbd82835b1e9b52df498a38caf5016851718d7dad372c696fb64371974296bc19fcffb929cb245247ee9a1cad6b0fdddb19af8f8dfc485fd48e4e5932386f8b5ef2eeafcbe842b16d9228b0f6596ca5866ade260e6957479bb9cbaaf5102241219c2cf193089976c8bdf752573680c11ed237da30df9f06e938681d7e94aa3a0cad523c9aa", 0xed}, {&(0x7f00000006c0)="f10a3a1ed2a2d7a93e9727ce16f9530f4363a8ec363540d491f4a2de20a031bd7858c86ee0d93996e1e440a1a290d1ce92b4abe7", 0x34}], 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000010180100002020752500000000002020207b1af8ff00000000bfa100000000000007"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r13}, 0x10) 2.541790584s ago: executing program 4 (id=715): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000002540)={'filter\x00', 0x5, "42de391533"}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r2, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239, 0x13}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) read$msr(r0, &(0x7f0000000240)=""/45, 0x2d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1b0b00000000000000001fffffff200001801c0002006261746164765f736c6176655f31"], 0x34}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001500)=ANY=[], 0x1c}}, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4096}) chdir(&(0x7f00000002c0)='\x00') setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000002ac1414aa00000000"], 0x14) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000380)='./file0\x00', 0x0) 2.447685284s ago: executing program 3 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x26e1, 0x0) 2.191206677s ago: executing program 5 (id=717): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xb}, 0x48) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f00000006c0)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="000032914016a5d7e437dc34bc4dee415ba400e5ffffffffb5ef000000000000850000000c000000b7000000000000b50000dc00c50000f5c7cc253434c174c1e196e72821054a13bc3d6fc4310abf865aebe4716eca426e30674297e6730af6f59271a0"], &(0x7f0000000980)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x35c}, {&(0x7f0000000fc0)=""/4096, 0x1f4}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.171502041s ago: executing program 3 (id=718): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x0, 0x1, 0x0, [@local]}, 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x400f, 0xfffffffc, @private1}, 0x3c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)='3', 0xffdf}], 0x1) 2.123392893s ago: executing program 2 (id=719): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xfff) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000380)) 2.120816624s ago: executing program 1 (id=720): sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)='V', 0x1) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) io_setup(0x8000, &(0x7f0000005640)) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000140)={0x0, 0x8000, 0x2, {0x1, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3314c94970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc0585609, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x18}) 2.00856079s ago: executing program 3 (id=721): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c2337", 0x89}, {&(0x7f0000000d40)="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", 0x184}, {&(0x7f0000000f00)="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", 0x17e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000340)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561ac1ad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07e153e3949b954c1d74b105c14411925a8ae24778d4111d2d9743b682d653bcf35d53fd33489a3a405042c0de5ec2cb4b991a31e1d76db8609d0bf66d8d723a6c28a50d42ab169de383345fbee97bea33e8bfb5d705852d360ab703fc956c1ea86157aedcff1782c784e074", 0xc5}, {&(0x7f0000000440)="03d54d8499", 0x5}, {&(0x7f0000000b80)="2a3ed204bd855fb67f6b94cfb2680c7352d91e366b2c80b512fcee9c7a398e630176e8b7f4d3bc19723cd52fbf9fb301e52334b5f8833cb7a1a94d63db20644e546b7511fb8fdf55754accdc7185c2b2cb384737f100d3aeaf5529ad", 0x5c}], 0x3}}], 0x2, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000400)={@local, @random="de9ea3f675c1", @void, {@can={0xc, {{0x1, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "bebf7bd93cb23a1c"}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x8, 0x20, 0xfffffffffffffff9, 0x4}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb010018000000000000005a"], 0x0, 0x76}, 0x20) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) 1.901348004s ago: executing program 2 (id=722): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x400e, &(0x7f0000000d80), 0x3, 0x434, &(0x7f0000000940)="$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") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x4, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)=ANY=[]) 1.780070379s ago: executing program 2 (id=723): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r5}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x7b, &(0x7f0000000180)={r6}, 0x14) 1.701765837s ago: executing program 2 (id=724): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000180)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) lsm_set_self_attr(0x0, 0x0, 0x20, 0x0) 1.624788026s ago: executing program 2 (id=725): syz_emit_ethernet(0x6e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @broadcast]}, @cipso={0x86, 0x1b, 0x0, [{0x0, 0x4, "e844"}, {0x0, 0xe, "f9d6b70bb90cb5e999e2bf65"}, {0x0, 0x3, '2'}]}]}}}}}}}, 0x0) 1.474422196s ago: executing program 2 (id=726): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109"], 0x0) syz_usb_disconnect(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.332984943s ago: executing program 4 (id=727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x12, &(0x7f00000004c0)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040211080210000000040000a118000200e0009bbb54fd0e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dc934e7ce80b2cf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730da4683f65985aab00dbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4e01c9b725de6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x18, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) 1.194883418s ago: executing program 5 (id=728): r0 = msgget$private(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000dc0)='./file0/file0\x00', 0x0, 0x1145d10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@size={'size', 0x3d, [0x25]}}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0xffffffb5) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4000}, 0x0, 0x0, 0xbf, 0x1000, 0x0, 0x0, 0x8000, 0x0, 0x1}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{}, {}, @device_b}, 0x0, @void}}]}, 0x3c}}, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e24, 0x400000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x100}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) 112.177869ms ago: executing program 3 (id=729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = eventfd(0x0) io_setup(0x8, &(0x7f0000000f00)=0x0) io_submit(r9, 0x1, &(0x7f0000002600)=[&(0x7f0000001040)={0x0, 0x0, 0x0, 0x3, 0x0, r8, 0x0, 0x0, 0x8}]) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x28}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000240)={&(0x7f0000000080)={0xa, 0x1403, 0x0, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000004880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004840)={&(0x7f0000000440)={0x2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40c90) r11 = syz_usb_connect(0x0, 0x651, &(0x7f0000004ec0)={{0x12, 0x1, 0x0, 0xae, 0xe5, 0x91, 0x20, 0xccd, 0x39, 0xa613, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63f, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xc, 0x6, 0x4a, 0xd9, 0x0, [], [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0xd, 0x8, [@generic={0x22, 0x6, "48d4a472d8eabf78f66235fcbc088b59d7a81d4f97164cf641a7bab07c13e860"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x10, 0x8, 0x1, 0x3e, [@generic={0x87, 0xd, "21d06628a43111f237e9ec3738c07afae91998efa81f1c937b3cca95d5a7018a376f97d90e93f80d608da80423eb50c624637a4541a4d2bb86c3a91068533421b266d90047690208cc340e52848eb1c72d001e34c06da6cd9a0d4ffc0f47ab60c61e3464e6f9db82e0b981a2c8bc986688d2f51b1552e7037e6055c074741e5e0bd42b6139"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x200, 0x0, 0x8, 0x1d, [@generic={0xd0, 0x0, "f85d5e0a54a5eaf698ad2bc10866f179c624a89c5e398f486e5235fe3ffc9ab0046f28a043be92f7be3159ceba4d67cae8e73244022cf8db7a6b486ed8a8ad0d74b58b86106ea44628385a4ab66976112d24dc92c01dfb9f8ba717f06e92af66da5ec3109881e3314e47fff7fc561fd80094816e9fc803496951acdf34e597bb6d553909fb272563791f15d18fa4237577964d8f82af2f932132d9a94f2739eecf4cb060fc6503cef7e6fc5daa558b104b011f93e00b835bbada664c8bff97bc7cee6dfe04f47d3524011164c2be"}, @generic={0xe1, 0x23, "48747d2dd24b5c4cce5e5604c73a8611f529666ad32b9a96425d789bd88a322d2e53d4d867c08f1ce2336d3e4a6f8ac92ea83da64dc0bca8e10619004b7a12da79215197e4671727da3d7835a950451e4cad5c190d959bbe61af6f145af252d7dfb33476dd397330061fbd8f5574ef1bf09ebfc5a9e2dbd74459e2c32582856f7e2e01040c5c83faf90824cc095c9a68daff61798fc62816db830a4d36aecf107845674a030883562ec7f54f2c97ba960aaa031acdbfc894b25f52f13120ab9bf3f6eca19c8f11f3c69f047abacada2cdfad886e64de6d1fd1f8231118d131"}]}}, {{0x9, 0x5, 0x1, 0x4, 0x10, 0x3, 0x9, 0x8, [@generic={0xce, 0xb, "cd8bc81d0e72f16ac2547dfa19d5b36d5c8a194fe9590f065c36b18a267aa05f113c9268739f60a9e9c6eb2a63068a5061eec17aa502cedf18f17b189f108ebf2e15a118282e7a3e4ba9c3b266d44c08f68e74399a62c76de84fb19793b525717f8614d5b5b4e7fb465afe0c6a87faf34420ef96a423ff0ae642aeea9ef3012fbe2a1ab401a06c63493db740cd7a286f6516db2cc615c27574c02ccc6868962ab049519778cfc2c3c7dff332ed796c62083777c018be55ea2016ae28942ec4b27184164c88a66776a12715de"}, @generic={0xf4, 0x24, "eb52f98804f4c4e00d7ae8d6cc6a55a05ed3701d85ac56e722b1531494dbf0ff00d58b666e8d5852349bd1b0c2647d27b7a2c7201202c29d8874cb930047abddef9d1615e03aeacb8a9c85e3007dbcf2f9388049f42b8361eb23dfa42e09238fc61df5ebb934c70bbe43120eab1cc827c73101659b95e0e817a3050bf45316b37deaecaad0f5fc74015aea957c73bc4685f7af96cb3f5379d119c61a9ae5f1e701504a2958bff5d7969cb4284619f85656333fe13d5480f85929bc30d7fbd06775bd484d6a623d03bae054a191b6aec094dd3d9db2edf5d61dae87e2d70d625f2c138e237237f44d243f514c163dae54fa8c"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x6, 0x7, 0x9}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xe, 0xea, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0xb8, 0x7, 0x9}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0x22, 0x8, 0x6, [@generic={0xbd, 0x2, "ff14588c853fd297bd7125256f55aefe4df0164ab5c7461f95c3a59f94fd0ccc7dca7af47279d8572d4e648761f933ef44ea58dd21ec161707949d58241358d3b96c2009e7e9eb457914f895effc94f72d14a4d707e84b2f06ef48225c4b25ec6484888c421f0669ece21813140ed57d71435ed51f33966c05d35278f996d69eb8c845f79fb308df6be54b5f9bc8c7e987c4b7b4886d16235b10e75165e4c2b2bdf52937d2d2930c27c55cb4294ab12a94c1e6060254ca03d2bc3e"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x20, 0x3, 0x1, 0x6}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x23, 0x7, 0x9, [@generic={0x1b, 0x24, "13d14e74220e08dd2f5ee51c7f72b94eabd9d1709999969d9c"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x9, 0x6, 0x4, [@generic={0x61, 0x0, "d316a7e17abc15827d4db368b64fa89cf0309832df2f5bcf5a8aaeedb3a184c30ef3de3f5c2c91e38199cc89f4a216fec19d65bfec4c7440d2f2166540de55a2525dbaec5ad4e4685e3d67947348dafb8a4779af655b2a86b7dbd42a1fb122"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x40}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x0, 0x6, 0x6, [@generic={0x57, 0x1, "27b6cba2b8792a77e129f5fd63f3d4aa31416b6ffbc65d8bcea26ae75a03d4fcf5d642e75819be9148016a034011c3b2cb90d0de8c246df62596520e538c166f323497fd08a386eb8dc81f8fc17845f104362a104b"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x401}]}}]}}]}}]}}, &(0x7f0000005740)={0xa, &(0x7f00000055c0)={0xa, 0x6, 0x300, 0x9, 0x4, 0x8, 0x10, 0x8}, 0x62, &(0x7f0000005600)={0x5, 0xf, 0x62, 0x5, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3, 0xd9}, @generic={0x45, 0x10, 0x3, "93d74930d870240ed2f0091cf08af34b9fd9862243fbcc3710458d846f198033f3bfbc658fcc97833f6f0ce72f160f72e458a5dec30c2ea45041d99414f9e3fa2768"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xb4, 0xc9, 0x7901, 0x5}]}, 0x3, [{0x4, &(0x7f0000005680)=@lang_id={0x4, 0x3, 0x3c01}}, {0x28, &(0x7f00000056c0)=@string={0x28, 0x3, "b1b1796a68f0f844e6ac3e760678424dd39d21cb068b568b36a276e3152c8d983509f33114fe"}}, {0x4, &(0x7f0000005700)=@lang_id={0x4, 0x3, 0x412}}]}) syz_usb_control_io$uac1(r11, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0xd, 0xb9, {0xb9, 0x21, "662d65286d8a567bf9d32a908dff8979103332a28f9405f0774f3c70d1cd2501cb0a8c4286afa1f702ef4a4bed322427efe357e62dbd20a1b7bf3ef840eccbb57807ffa526187f393338a9b645f85f56ee88bd0029e7b3fc59d06e2f38c54000557f50c1419d8a9d2613af9df5b683d73505c88b5d8895218fb0763f1430d412e38e363994deb266cef316b73e1d0a754d83064c0a41422c2bbfea9497f72cd55ea5f6e5ecc9d03d0e94f1551ed1b5986cfcf533bc219f"}}, &(0x7f00000000c0)={0x0, 0x3, 0x27, @string={0x27, 0x3, "48da87ce8131aebd6885bac1fce151c6fba73bd16125e4ad6cd388907c3f7a2592e2c54dd3"}}}, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="001398000000a020949c4c770803a328a27feff3edceb9facca62d750a18180f65fd2df4ebff67eff2a0131d88794798891ff76423fbfa5561debf34b1bfeec3c24cfbc0b524efe44705ea679f20093c8df50b06c4489ab97e54607a706328500ebce6cd5a33a2d5178c03ad94e1840cdc5a5d4e394126638aaf293338b442b896f1a8c02e6678d16ae8deeccd2e5f4a113cc975c851a5a64327c09281"], &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000280)={0x20, 0x81, 0x3, "3fcb68"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, '<'}, &(0x7f0000000300)={0x20, 0x83, 0x1, "db"}, &(0x7f0000000340)={0x20, 0x84, 0x4, "51487eb2"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "9e0937"}}) 0s ago: executing program 5 (id=730): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x130, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x10c, 0x33, @beacon={{{}, {}, @device_a, @broadcast, @random="90e488f9971a"}, 0x0, @random, 0x0, @void, @void, @val={0x3, 0x1}, @val={0x4, 0x6}, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x0, 0x0, 0x0, 0xb06}}, [{0xdd, 0x6, "2d5014b2109a"}, {0xdd, 0x57, "eb13a8b3df323b58645505746aa35226d44912415c3d4ac256aa5c2291a3317d27815fda589135d0308f4ff131b3c4a96dde0f9c497c9bbde281223c0596f01156deb1f851f7602fb2299c382c07898a4d7dddbc046ef6"}, {0xdd, 0x5e, "5dad8ac12f96664d51c30bd3379c2d305630cd93fec0b4249d429b451f52399f26b866650e0e9464949a974045190fa9251c8b6aacda7ecc351ee9cb5512364284512cf7643040ee1f52573ed7bb7527b9a86fc2f33bffce71947a0f29cf"}, {0xdd, 0x6, "83534cd40fda"}]}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x130}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x33) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000), 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x6e, 0x0, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c2000b0086dd6012000800383a00fc010000000000000000000000000000ff0200000000000000000000000000010100007800000000600ad91500002c00ff010000000000000000000000000001fe8000000000000000000000000000040000009000000000"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0xc, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) kernel console output (not intermixed with test programs): 1663][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 152.931309][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.996345][ T6427] team_slave_0: entered promiscuous mode [ 153.011798][ T6427] team_slave_0: entered allmulticast mode [ 153.079152][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.088666][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.097888][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.106365][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.114632][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.130418][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.156493][ T6427] team0: Port device team_slave_0 removed [ 153.541389][ T1047] bridge_slave_1: left allmulticast mode [ 153.557001][ T1047] bridge_slave_1: left promiscuous mode [ 153.577132][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.626169][ T1047] bridge_slave_0: left allmulticast mode [ 153.650580][ T1047] bridge_slave_0: left promiscuous mode [ 153.666563][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.003539][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.030860][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 154.168441][ T6436] loop1: detected capacity change from 0 to 32768 [ 154.226681][ T6436] read_mapping_page failed! [ 154.243213][ T6436] bread failed! [ 154.256125][ T8] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 154.261085][ T6436] jfs_create: dtInsert returned -EIO [ 154.282957][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.289177][ T8] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 154.301800][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 154.320644][ T6436] ERROR: (device loop1): jfs_create: [ 154.320644][ T6436] [ 154.330611][ T8] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.346462][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 154.357328][ T6436] ERROR: (device loop1): remounting filesystem as read-only [ 154.367219][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 154.378342][ T25] usb 1-1: SerialNumber: syz [ 154.378615][ T6455] ERROR: (device loop1): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 154.378615][ T6455] [ 154.407421][ T8] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 154.407877][ T6455] ERROR: (device loop1): __get_metapage: using a discarded metapage [ 154.407877][ T6455] [ 154.432236][ T6457] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 154.438764][ T6457] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 154.440661][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.463700][ T6457] vhci_hcd vhci_hcd.0: Device attached [ 154.492242][ T6458] vhci_hcd: connection closed [ 154.496938][ T8] usb 4-1: invalid MIDI out EP 0 [ 154.506802][ T35] vhci_hcd: stop threads [ 154.511593][ T35] vhci_hcd: release socket [ 154.516287][ T35] vhci_hcd: disconnect device [ 154.600434][ T8] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 154.666460][ T25] usb 1-1: 0:2 : does not exist [ 154.676708][ T25] usb 1-1: unit 5 not found! [ 154.708551][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.717591][ T25] usb 1-1: USB disconnect, device number 7 [ 154.719750][ T924] usb 4-1: USB disconnect, device number 5 [ 154.754344][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.754556][ T29] audit: type=1800 audit(1719553748.872:136): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.358" name="bus" dev="sda1" ino=2009 res=0 errno=0 [ 154.796815][ T29] audit: type=1800 audit(1719553748.882:137): pid=6444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.358" name="bus" dev="sda1" ino=2009 res=0 errno=0 [ 154.799140][ T1047] bond0 (unregistering): Released all slaves [ 155.139402][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.149063][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.238293][ T5111] Bluetooth: hci8: unexpected event 0x2f length: 509 > 260 [ 155.240774][ T5111] Bluetooth: hci0: command tx timeout [ 155.512119][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.369'. [ 155.617134][ T1047] hsr_slave_0: left promiscuous mode [ 155.639543][ T1047] hsr_slave_1: left promiscuous mode [ 155.662177][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.675448][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.696347][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.712182][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.764282][ T1047] veth0_macvtap: left promiscuous mode [ 155.777852][ T1047] veth1_vlan: left promiscuous mode [ 155.798060][ T1047] veth0_vlan: left promiscuous mode [ 155.972480][ T5111] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 155.982027][ T5111] Bluetooth: hci4: Injecting HCI hardware error event [ 155.993426][ T5101] Bluetooth: hci4: hardware error 0x00 [ 156.390700][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 156.541827][ T924] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.590827][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 156.610111][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 156.636004][ T25] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 156.662034][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.685430][ T25] usb 5-1: config 0 descriptor?? [ 156.742394][ T924] usb 3-1: device descriptor read/64, error -71 [ 156.855217][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 156.902108][ T6484] overlayfs: missing 'lowerdir' [ 157.021183][ T924] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 157.095517][ T5111] Bluetooth: hci4: unexpected event for opcode 0x201c [ 157.197303][ T924] usb 3-1: device descriptor read/64, error -71 [ 157.281460][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.304407][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.323110][ T5111] Bluetooth: hci0: command tx timeout [ 157.324609][ T924] usb usb3-port1: attempt power cycle [ 157.352798][ T25] hid-generic 0003:0158:0100.0006: unknown main item tag 0x1 [ 157.360287][ T25] hid-generic 0003:0158:0100.0006: unexpected long global item [ 157.368894][ T25] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 157.511368][ T6477] team_slave_0: entered promiscuous mode [ 157.517131][ T6477] team_slave_0: entered allmulticast mode [ 157.562843][ T6477] team0: Port device team_slave_0 removed [ 157.591171][ T5105] usb 5-1: USB disconnect, device number 6 [ 157.603418][ T6429] chnl_net:caif_netlink_parms(): no params data found [ 157.771442][ T924] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.815444][ T924] usb 3-1: device descriptor read/8, error -71 [ 157.868347][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.882250][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.889543][ T6429] bridge_slave_0: entered allmulticast mode [ 157.897234][ T6429] bridge_slave_0: entered promiscuous mode [ 157.907494][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.914781][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.927052][ T6429] bridge_slave_1: entered allmulticast mode [ 157.934702][ T6429] bridge_slave_1: entered promiscuous mode [ 157.998175][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.020045][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.117776][ T6429] team0: Port device team_slave_0 added [ 158.158419][ T6429] team0: Port device team_slave_1 added [ 158.193397][ T5101] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 158.308459][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.345260][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.459468][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.534767][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.564283][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.590543][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.622677][ T924] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 158.741391][ T924] usb 3-1: device descriptor read/8, error -71 [ 158.852123][ T6429] hsr_slave_0: entered promiscuous mode [ 158.886317][ T924] usb usb3-port1: unable to enumerate USB device [ 158.899962][ T6429] hsr_slave_1: entered promiscuous mode [ 158.918536][ T6429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.929354][ T6429] Cannot create hsr debugfs directory [ 159.191108][ T5101] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 159.200216][ T5101] Bluetooth: hci8: Injecting HCI hardware error event [ 159.211066][ T5101] Bluetooth: hci8: hardware error 0x00 [ 159.330769][ T5161] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 159.400976][ T5111] Bluetooth: hci0: command tx timeout [ 159.691106][ T5161] usb 4-1: Using ep0 maxpacket: 32 [ 159.721238][ T5161] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 159.770558][ T5161] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 159.805109][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 159.810668][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 159.840591][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.860634][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 159.880550][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.931056][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 159.971899][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 160.025403][ T5161] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 160.032733][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.058760][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.071388][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 160.090029][ T5161] usb 4-1: Product: В [ 160.094732][ T5161] usb 4-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 160.095318][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 160.125444][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 160.131542][ T5161] usb 4-1: SerialNumber: syz [ 160.147984][ T25] usb 5-1: SerialNumber: syz [ 160.171694][ T5161] usb 4-1: config 0 descriptor?? [ 160.204958][ T5161] pvrusb2: Hardware description: Terratec Grabster AV400 [ 160.212753][ T5161] pvrusb2: ********** [ 160.217068][ T5161] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 160.227897][ T5161] pvrusb2: Important functionality might not be entirely working. [ 160.244020][ T5161] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 160.257748][ T5161] pvrusb2: ********** [ 160.387855][ T25] usb 5-1: 0:2 : does not exist [ 160.411678][ T25] usb 5-1: unit 5 not found! [ 160.445615][ T1974] pvrusb2: Invalid write control endpoint [ 160.500705][ T25] usb 5-1: USB disconnect, device number 7 [ 160.617887][ T1974] pvrusb2: Invalid write control endpoint [ 160.627016][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 160.668137][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 160.696495][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 160.719715][ T6429] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.730533][ T1974] pvrusb2: Device being rendered inoperable [ 160.739921][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 160.750569][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 160.768854][ T1974] pvrusb2: Attached sub-driver cx25840 [ 160.774677][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 160.790423][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 160.796504][ T6429] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.845044][ T6429] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.865641][ T6429] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.273362][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 161.277947][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.312359][ T6532] team_slave_0: entered promiscuous mode [ 161.320819][ T5101] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 161.329465][ T6532] team_slave_0: entered allmulticast mode [ 161.387268][ T6532] team0: Port device team_slave_0 removed [ 161.440314][ T6429] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.480982][ T5101] Bluetooth: hci0: command tx timeout [ 161.483321][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.493654][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.586791][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.594012][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.866910][ T5161] usb 4-1: USB disconnect, device number 6 [ 161.936281][ T6429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.963450][ T6429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.995372][ T6546] loop0: detected capacity change from 0 to 64 [ 162.621048][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 162.689489][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.783861][ T25] usb 1-1: device descriptor read/64, error -71 [ 163.070583][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 163.144132][ T6569] syzkaller1: entered promiscuous mode [ 163.149649][ T6569] syzkaller1: entered allmulticast mode [ 163.193526][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.397'. [ 163.270614][ T25] usb 1-1: device descriptor read/64, error -71 [ 163.401114][ T25] usb usb1-port1: attempt power cycle [ 163.761155][ T6429] veth0_vlan: entered promiscuous mode [ 163.788630][ T6429] veth1_vlan: entered promiscuous mode [ 163.829433][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.901809][ T25] usb 1-1: device descriptor read/8, error -71 [ 164.034010][ T6429] veth0_macvtap: entered promiscuous mode [ 164.091244][ T6429] veth1_macvtap: entered promiscuous mode [ 164.158010][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.209198][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.219872][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 164.252019][ T25] usb 1-1: device descriptor read/8, error -71 [ 164.325400][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.352371][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.366621][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.374554][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.383622][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.395586][ T25] usb usb1-port1: unable to enumerate USB device [ 164.403106][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 164.410773][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 164.439545][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.470305][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.509664][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.519580][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.634665][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.737023][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.868386][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.901520][ T5105] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.014664][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.154269][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.186052][ T5105] usb 5-1: Using ep0 maxpacket: 32 [ 165.272770][ T5105] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 165.346402][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.367248][ T5105] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 165.391074][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.394393][ T5105] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 165.410524][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.443702][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.450684][ T5105] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.491083][ T5105] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 165.506534][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.527448][ T5105] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 165.604526][ T5105] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 165.633469][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.675226][ T5105] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 165.691753][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.726413][ T5105] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 165.736492][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.747184][ T5105] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.767392][ T5105] usb 5-1: Product: В [ 165.771802][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.781967][ T5105] usb 5-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 165.801524][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.825049][ T5105] usb 5-1: SerialNumber: syz [ 165.851239][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.865840][ T5105] usb 5-1: config 0 descriptor?? [ 165.885506][ T5105] pvrusb2: Hardware description: Terratec Grabster AV400 [ 165.900578][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.911296][ T5105] pvrusb2: ********** [ 165.920795][ T5105] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 165.940624][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.960545][ T5105] pvrusb2: Important functionality might not be entirely working. [ 165.970593][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.990859][ T5105] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 166.010539][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.030633][ T5105] pvrusb2: ********** [ 166.044217][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.069985][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.101832][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.102518][ T1974] pvrusb2: Invalid write control endpoint [ 166.121791][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.141444][ T6581] loop3: detected capacity change from 0 to 32768 [ 166.149823][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.176001][ T6581] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.402 (6581) [ 166.189352][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.211079][ T1974] pvrusb2: Invalid write control endpoint [ 166.221928][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 166.239188][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.275054][ T6581] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 166.286837][ T6581] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 166.286867][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 166.296345][ T6581] BTRFS info (device loop3): using free-space-tree [ 166.409755][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 166.422793][ T6429] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.431735][ T6429] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.443411][ T5101] Bluetooth: hci5: command tx timeout [ 166.450796][ T1974] pvrusb2: Device being rendered inoperable [ 166.456856][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 166.464509][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 166.473309][ T1974] pvrusb2: Attached sub-driver cx25840 [ 166.485663][ T6429] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.510751][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 166.521064][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 166.524909][ T6429] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.782519][ T1047] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 166.872359][ T6626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.407'. [ 166.980604][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.988578][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.141904][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.157102][ T5546] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 167.162161][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.216198][ T6587] chnl_net:caif_netlink_parms(): no params data found [ 167.453831][ T5105] usb 5-1: USB disconnect, device number 8 [ 167.909404][ T6650] IPv6: Can't replace route, no match found [ 168.023442][ T6587] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.046976][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.071404][ T6587] bridge_slave_0: entered allmulticast mode [ 168.094044][ T6587] bridge_slave_0: entered promiscuous mode [ 168.114381][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.123043][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.131154][ T6587] bridge_slave_1: entered allmulticast mode [ 168.152288][ T6587] bridge_slave_1: entered promiscuous mode [ 168.170767][ T5105] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 168.330629][ T5105] usb 5-1: device descriptor read/64, error -71 [ 168.341000][ T6587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.423082][ T6587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.504630][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.411'. [ 168.521140][ T5101] Bluetooth: hci5: command tx timeout [ 168.610606][ T5105] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.759175][ T6587] team0: Port device team_slave_0 added [ 168.761663][ T5105] usb 5-1: device descriptor read/64, error -71 [ 168.773046][ T6587] team0: Port device team_slave_1 added [ 168.898790][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.910657][ T5159] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.918943][ T5105] usb usb5-port1: attempt power cycle [ 168.928529][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.989169][ T29] audit: type=1326 audit(1719553763.102:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 169.016846][ T6587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.041331][ T6587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.050903][ T6587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.071944][ T29] audit: type=1326 audit(1719553763.102:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 169.112879][ T6587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.130651][ T29] audit: type=1326 audit(1719553763.102:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 169.161487][ T5159] usb 3-1: Using ep0 maxpacket: 32 [ 169.178194][ T5159] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 169.197767][ T5159] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.220722][ T29] audit: type=1326 audit(1719553763.102:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 169.229180][ T5159] usb 3-1: config 0 has no interface number 0 [ 169.271381][ T5159] usb 3-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=3d.ae [ 169.290635][ T29] audit: type=1326 audit(1719553763.102:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6665 comm="syz.3.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 169.290662][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.364096][ T6587] hsr_slave_0: entered promiscuous mode [ 169.372092][ T5159] usb 3-1: Product: syz [ 169.376352][ T5159] usb 3-1: Manufacturer: syz [ 169.382479][ T6587] hsr_slave_1: entered promiscuous mode [ 169.393658][ T5159] usb 3-1: SerialNumber: syz [ 169.400130][ T6587] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.417971][ T5159] usb 3-1: config 0 descriptor?? [ 169.423352][ T5105] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 169.430676][ T6587] Cannot create hsr debugfs directory [ 169.449470][ T5159] gspca_main: sonixb-2.14.0 probing 0c45:6019 [ 169.461395][ T5105] usb 5-1: device descriptor read/8, error -71 [ 169.653942][ T5159] sonixb 3-1:0.253: Error reading register 00: -71 [ 169.680931][ T5159] usb 3-1: USB disconnect, device number 10 [ 169.730671][ T5105] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.801020][ T5105] usb 5-1: device descriptor read/8, error -71 [ 169.898990][ T6668] loop5: detected capacity change from 0 to 32768 [ 169.921348][ T5105] usb usb5-port1: unable to enumerate USB device [ 169.948553][ T6668] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.422 (6668) [ 169.982199][ T6587] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.003667][ T6668] BTRFS info (device loop5): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 170.014162][ T6668] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm [ 170.032705][ T6668] BTRFS info (device loop5): using free-space-tree [ 170.054611][ T29] audit: type=1800 audit(1719553764.172:143): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.425" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 170.304548][ T6587] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.344215][ T6697] loop0: detected capacity change from 0 to 64 [ 170.572298][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 170.592682][ T4354] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 170.616736][ T5101] Bluetooth: hci5: command tx timeout [ 170.735389][ T6668] syz.5.422 (6668) used greatest stack depth: 15824 bytes left [ 171.002685][ T5159] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.179044][ T6587] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.380588][ T5159] usb 3-1: Using ep0 maxpacket: 32 [ 171.450963][ T5159] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 171.511836][ T5159] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 171.532382][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 171.551459][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.587320][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 171.607327][ T6429] BTRFS info (device loop5): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 171.660585][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 171.686090][ T6587] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.703315][ T5159] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 171.714884][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 171.741895][ T5159] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 171.762265][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.778408][ T5159] usb 3-1: Product: В [ 171.791635][ T6709] macvlan2: entered allmulticast mode [ 171.797165][ T5159] usb 3-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 171.825471][ T6709] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 171.830698][ T5159] usb 3-1: SerialNumber: syz [ 171.842261][ T6709] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 171.855529][ T5159] usb 3-1: config 0 descriptor?? [ 171.896177][ T5159] pvrusb2: Hardware description: Terratec Grabster AV400 [ 171.905602][ T6709] team0: Port device macvlan2 added [ 171.913219][ T5159] pvrusb2: ********** [ 171.933089][ T5159] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 171.990849][ T5159] pvrusb2: Important functionality might not be entirely working. [ 172.010577][ T5159] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 172.049946][ T5159] pvrusb2: ********** [ 172.117278][ T1974] pvrusb2: Invalid write control endpoint [ 172.204724][ T29] audit: type=1326 audit(1719553766.312:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 172.291626][ T1974] pvrusb2: Invalid write control endpoint [ 172.297402][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 172.310675][ T29] audit: type=1326 audit(1719553766.322:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 172.357260][ T6587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.369835][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 172.384203][ T29] audit: type=1326 audit(1719553766.322:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 172.397221][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 172.415512][ T6725] netlink: 24 bytes leftover after parsing attributes in process `syz.5.431'. [ 172.424514][ T6587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.448755][ T1974] pvrusb2: Device being rendered inoperable [ 172.452451][ T29] audit: type=1326 audit(1719553766.322:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6721 comm="syz.4.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 172.455672][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 172.514112][ T6587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.560220][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 172.563201][ T6587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.568963][ T1974] pvrusb2: Attached sub-driver cx25840 [ 172.627213][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 172.648783][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 172.677484][ T5101] Bluetooth: hci0: Malformed LE Event: 0x0d [ 172.688246][ T5111] Bluetooth: hci5: command tx timeout [ 172.860601][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.998386][ T6587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.040688][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 173.069965][ T25] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 173.122047][ T6587] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.133360][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.198230][ T25] usb 4-1: config 0 has no interface number 0 [ 173.216899][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.224197][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.252086][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=3d.ae [ 173.286096][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.343784][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.351043][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.370285][ T25] usb 4-1: Product: syz [ 173.382997][ T25] usb 4-1: Manufacturer: syz [ 173.387739][ T25] usb 4-1: SerialNumber: syz [ 173.440609][ T5162] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 173.451337][ T5161] usb 3-1: USB disconnect, device number 11 [ 173.585625][ T25] usb 4-1: config 0 descriptor?? [ 173.625210][ T5162] usb 6-1: Using ep0 maxpacket: 16 [ 173.638853][ T25] gspca_main: sonixb-2.14.0 probing 0c45:6019 [ 173.667102][ T5162] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 173.700277][ T5162] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 173.734590][ T5162] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.759521][ T5162] usb 6-1: config 0 descriptor?? [ 173.844809][ T25] sonixb 4-1:0.253: Error reading register 00: -71 [ 173.855955][ T25] usb 4-1: USB disconnect, device number 7 [ 173.987591][ T6742] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 174.029116][ T6742] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 174.121602][ T5161] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.129587][ T6587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.141051][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.445'. [ 174.249111][ T6587] veth0_vlan: entered promiscuous mode [ 174.278437][ T6587] veth1_vlan: entered promiscuous mode [ 174.341481][ T5161] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 174.346251][ T6587] veth0_macvtap: entered promiscuous mode [ 174.361556][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.369834][ T6587] veth1_macvtap: entered promiscuous mode [ 174.387267][ T5161] usb 3-1: config 0 has no interfaces? [ 174.390228][ T6742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.401936][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.421084][ T6742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.435253][ T5161] usb 3-1: config 0 has no interfaces? [ 174.456537][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.485758][ T5162] hid (null): invalid report_size 1684763247 [ 174.487218][ T5161] usb 3-1: config 0 has no interfaces? [ 174.509623][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.533072][ T5162] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1 [ 174.545986][ T5162] hid-generic 0003:0158:0100.0007: unexpected long global item [ 174.554503][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.554724][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.567105][ T5162] hid-generic 0003:0158:0100.0007: probe with driver hid-generic failed with error -22 [ 174.587056][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.597810][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.624494][ T5161] usb 3-1: config 0 has no interfaces? [ 174.638805][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.657109][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.680687][ T5161] usb 3-1: config 0 has no interfaces? [ 174.689556][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.689775][ T5162] usb 6-1: USB disconnect, device number 11 [ 174.717964][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.738057][ T5161] usb 3-1: config 0 has no interfaces? [ 174.750520][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.762765][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.773467][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.783879][ T5161] usb 3-1: config 0 has no interfaces? [ 174.789442][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.800810][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.816621][ T5161] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.826991][ T5161] usb 3-1: config 0 has no interfaces? [ 174.857166][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.869092][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.882597][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.902090][ T5161] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 174.911972][ T5161] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 174.920427][ T5161] usb 3-1: Product: syz [ 174.925284][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.959556][ T5161] usb 3-1: Manufacturer: syz [ 174.971994][ T5161] usb 3-1: SerialNumber: syz [ 174.980831][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.150895][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.157079][ T5161] usb 3-1: config 0 descriptor?? [ 175.202508][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.290157][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.712279][ T5105] usb 3-1: USB disconnect, device number 12 [ 175.714337][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.785018][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.808078][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.827624][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.841687][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.870589][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.886025][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.903462][ T6772] netlink: 28 bytes leftover after parsing attributes in process `syz.5.450'. [ 175.912416][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.927911][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.939211][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.949863][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.977540][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.999486][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.022002][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.035172][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.046358][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.058911][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.072142][ T6587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.082748][ T6587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.096808][ T6587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.119417][ T6762] netlink: 'syz.3.447': attribute type 2 has an invalid length. [ 176.127784][ T6762] netlink: 'syz.3.447': attribute type 8 has an invalid length. [ 176.138363][ T6762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.447'. [ 176.250151][ T6587] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.297912][ T6587] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.315582][ T6587] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.342261][ T6587] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.411264][ T924] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 177.591011][ T948] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.638047][ T948] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.703339][ T924] usb 5-1: Using ep0 maxpacket: 32 [ 177.722424][ T924] usb 5-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 177.756809][ T924] usb 5-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 177.776595][ T948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.794792][ T948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.813203][ T924] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 177.854337][ T924] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.903103][ T924] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 177.945736][ T924] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 177.983777][ T924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 178.035656][ T924] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 178.070836][ T924] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 178.071210][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 178.091156][ T5161] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 178.114793][ T924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.142726][ T924] usb 5-1: Product: В [ 178.160586][ T924] usb 5-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 178.190355][ T924] usb 5-1: SerialNumber: syz [ 178.196027][ T6808] team_slave_0: entered promiscuous mode [ 178.205093][ T6808] team_slave_0: entered allmulticast mode [ 178.227777][ T924] usb 5-1: config 0 descriptor?? [ 178.248935][ T924] pvrusb2: Hardware description: Terratec Grabster AV400 [ 178.267047][ T924] pvrusb2: ********** [ 178.275014][ T924] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 178.279279][ T6808] team0: Port device team_slave_0 removed [ 178.300838][ T5161] usb 6-1: Using ep0 maxpacket: 16 [ 178.307163][ T924] pvrusb2: Important functionality might not be entirely working. [ 178.370601][ T924] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 178.386990][ T5161] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 178.408579][ T5161] usb 6-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 178.425439][ T924] pvrusb2: ********** [ 178.450382][ T5161] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.485176][ T1974] pvrusb2: Invalid write control endpoint [ 178.492856][ T5161] usb 6-1: config 0 descriptor?? [ 178.511498][ T6811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 178.651438][ T1974] pvrusb2: Invalid write control endpoint [ 178.668134][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 178.706163][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 178.739334][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 178.754168][ T6802] overlayfs: missing 'lowerdir' [ 178.775297][ T1974] pvrusb2: Device being rendered inoperable [ 178.807912][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 178.835140][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 178.857425][ T1974] pvrusb2: Attached sub-driver cx25840 [ 178.863096][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 178.873633][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 179.059139][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.078716][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.118913][ T5161] hid (null): invalid report_size 1684763247 [ 179.153257][ T5161] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1 [ 179.177013][ T5161] hid-generic 0003:0158:0100.0008: unexpected long global item [ 179.206337][ T5161] hid-generic 0003:0158:0100.0008: probe with driver hid-generic failed with error -22 [ 179.566216][ T6821] netlink: 'syz.3.466': attribute type 2 has an invalid length. [ 179.575869][ T6821] netlink: 'syz.3.466': attribute type 8 has an invalid length. [ 179.583774][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.466'. [ 180.161170][ T5161] usb 6-1: USB disconnect, device number 12 [ 180.305117][ T8] usb 5-1: USB disconnect, device number 13 [ 180.514922][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 180.514943][ T29] audit: type=1326 audit(1719553774.632:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 180.552642][ T29] audit: type=1326 audit(1719553774.672:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 180.593363][ T29] audit: type=1326 audit(1719553774.672:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 180.638636][ T29] audit: type=1326 audit(1719553774.672:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 180.872340][ T29] audit: type=1326 audit(1719553774.672:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 181.013465][ T29] audit: type=1326 audit(1719553774.692:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6826 comm="syz.3.468" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 181.318052][ T29] audit: type=1800 audit(1719553775.432:156): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 181.353062][ T8] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 181.380620][ T29] audit: type=1800 audit(1719553775.432:157): pid=6817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="bus" dev="sda1" ino=2017 res=0 errno=0 [ 181.429450][ T29] audit: type=1804 audit(1719553775.492:158): pid=6846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.465" name="/root/syzkaller.L3tJdF/2/file1" dev="sda1" ino=2018 res=1 errno=0 [ 181.597570][ T8] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 181.598666][ T6850] loop0: detected capacity change from 0 to 1024 [ 181.609376][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.626526][ T6850] ext4: Unknown parameter 'appraise_type' [ 181.645817][ T8] usb 5-1: config 0 has no interfaces? [ 181.662181][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.690621][ T8] usb 5-1: config 0 has no interfaces? [ 181.727263][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.728069][ T6850] loop0: detected capacity change from 0 to 512 [ 181.744148][ T5105] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.758125][ T8] usb 5-1: config 0 has no interfaces? [ 181.789618][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.790638][ T6850] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 181.830804][ T8] usb 5-1: config 0 has no interfaces? [ 181.845337][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.874752][ T8] usb 5-1: config 0 has no interfaces? [ 181.888466][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.892151][ T6850] EXT4-fs (loop0): 1 truncate cleaned up [ 181.910446][ T8] usb 5-1: config 0 has no interfaces? [ 181.922169][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.928224][ T6850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.934781][ T8] usb 5-1: config 0 has no interfaces? [ 181.955166][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.961657][ T5105] usb 4-1: Using ep0 maxpacket: 16 [ 181.967285][ T8] usb 5-1: config 0 has no interfaces? [ 181.978864][ T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 181.991086][ T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 181.999447][ T8] usb 5-1: Product: syz [ 182.011435][ T8] usb 5-1: Manufacturer: syz [ 182.014013][ T5105] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 182.016021][ T8] usb 5-1: SerialNumber: syz [ 182.033831][ T8] usb 5-1: config 0 descriptor?? [ 182.071314][ T5105] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.150268][ T5105] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 182.232515][ T6863] netlink: 'syz.1.481': attribute type 2 has an invalid length. [ 182.241075][ T6863] netlink: 'syz.1.481': attribute type 8 has an invalid length. [ 182.243360][ T5105] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.263463][ T6863] netlink: 132 bytes leftover after parsing attributes in process `syz.1.481'. [ 182.359196][ T5105] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.901742][ T5105] usb 4-1: Product: syz [ 182.906075][ T5105] usb 4-1: Manufacturer: syz [ 182.910772][ T5105] usb 4-1: SerialNumber: syz [ 182.978120][ T5162] usb 5-1: USB disconnect, device number 14 [ 183.008440][ T5100] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.304630][ T5105] usb 4-1: 0:2 : does not exist [ 183.363806][ T5105] usb 4-1: USB disconnect, device number 8 [ 183.530695][ T6879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.487'. [ 183.627362][ T6858] loop5: detected capacity change from 0 to 32768 [ 183.670664][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.769038][ T6892] IPv6: Can't replace route, no match found [ 183.835667][ T6858] bcachefs (loop5): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=xxhash,data_checksum=none,background_compression=lz4,str_hash=crc64,nojournal_transaction_names [ 183.862603][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 183.879182][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 183.901254][ T9] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 183.910315][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.911266][ T6858] bcachefs (loop5): recovering from clean shutdown, journal seq 10 [ 183.954974][ T9] usb 2-1: config 0 descriptor?? [ 184.111041][ T6858] bcachefs (loop5): alloc_read... done [ 184.127417][ T29] audit: type=1326 audit(1719553778.232:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6898 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20f3375b29 code=0x7ffc0000 [ 184.156034][ T6858] bcachefs (loop5): stripes_read... done [ 184.170603][ T6858] bcachefs (loop5): snapshots_read... done [ 184.205651][ T6858] bcachefs (loop5): journal_replay... done [ 184.210309][ T6877] overlayfs: missing 'lowerdir' [ 184.232430][ T6858] bcachefs (loop5): resume_logged_ops... done [ 184.291538][ T6858] bcachefs (loop5): going read-write [ 184.321959][ T6858] bcachefs (loop5): done starting filesystem [ 184.566960][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.597151][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.653203][ T9] hid (null): invalid report_size 1684763247 [ 184.708698][ T9] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1 [ 184.744424][ T9] hid-generic 0003:0158:0100.0009: unexpected long global item [ 184.783242][ T9] hid-generic 0003:0158:0100.0009: probe with driver hid-generic failed with error -22 [ 184.864534][ T9] usb 2-1: USB disconnect, device number 4 [ 186.117115][ T5162] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 186.295913][ T6429] bcachefs (loop5): shutting down [ 186.310755][ T6429] bcachefs (loop5): going read-only [ 186.332229][ T5162] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 186.340139][ T6429] bcachefs (loop5): finished waiting for writes to stop [ 186.355859][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.372953][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 186.397465][ T6429] bcachefs (loop5): flushing journal and stopping allocators, journal seq 10 [ 186.400117][ T5162] usb 5-1: config 0 has no interfaces? [ 186.445657][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.445781][ T6429] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 10 [ 186.480572][ T5162] usb 5-1: config 0 has no interfaces? [ 186.526973][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.541846][ T6429] bcachefs (loop5): shutdown complete, journal seq 11 [ 186.549960][ T6429] bcachefs (loop5): marking filesystem clean [ 186.563807][ T5162] usb 5-1: config 0 has no interfaces? [ 186.592524][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 186.601208][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 186.649394][ T8] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 186.671639][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.699282][ T6955] loop0: detected capacity change from 0 to 256 [ 186.717599][ T8] usb 2-1: config 0 descriptor?? [ 186.749051][ T6429] bcachefs (loop5): shutdown complete [ 186.827420][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.828799][ T6955] exfat: Deprecated parameter 'utf8' [ 186.837704][ T5162] usb 5-1: config 0 has no interfaces? [ 186.839093][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.859499][ T5162] usb 5-1: config 0 has no interfaces? [ 186.879163][ T6955] exfat: Deprecated parameter 'namecase' [ 186.881900][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.912462][ T5162] usb 5-1: config 0 has no interfaces? [ 186.924559][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.936577][ T5162] usb 5-1: config 0 has no interfaces? [ 186.943548][ T6955] exfat: Deprecated parameter 'utf8' [ 186.988770][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.019316][ T5162] usb 5-1: config 0 has no interfaces? [ 187.065359][ T6955] exfat: Deprecated parameter 'namecase' [ 187.100902][ T6941] netlink: 16 bytes leftover after parsing attributes in process `syz.1.509'. [ 187.134423][ T5162] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 187.193574][ T6955] exFAT-fs (loop0): Invalid exboot-signature(sector = 4): 0x05550000 [ 187.239088][ T5162] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 187.320352][ T6955] exFAT-fs (loop0): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ab2b) [ 187.374410][ T5162] usb 5-1: Product: syz [ 187.423134][ T5162] usb 5-1: Manufacturer: syz [ 187.442870][ T6955] exFAT-fs (loop0): invalid boot region [ 187.451194][ T5162] usb 5-1: SerialNumber: syz [ 187.468704][ T6955] exFAT-fs (loop0): failed to recognize exfat type [ 187.761653][ T5162] usb 5-1: config 0 descriptor?? [ 188.292407][ T6941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.358219][ T9] usb 5-1: USB disconnect, device number 15 [ 188.365511][ T6941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.429688][ T8] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1 [ 188.479299][ T8] hid-generic 0003:0158:0100.000A: unexpected long global item [ 188.508181][ T8] hid-generic 0003:0158:0100.000A: probe with driver hid-generic failed with error -22 [ 188.613944][ T5228] usb 2-1: USB disconnect, device number 5 [ 188.891677][ T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 189.030826][ T5159] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 189.117810][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 189.154488][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 189.230771][ T5159] usb 4-1: Using ep0 maxpacket: 16 [ 189.241476][ T8] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 189.257682][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.292274][ T8] usb 1-1: config 0 descriptor?? [ 189.576921][ T6970] overlayfs: missing 'lowerdir' [ 189.903953][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.524'. [ 190.008922][ T6970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.051881][ T6970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.125351][ T8] hid (null): invalid report_size 1684763247 [ 190.183229][ T8] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1 [ 190.243559][ T8] hid-generic 0003:0158:0100.000B: unexpected long global item [ 190.329822][ T8] hid-generic 0003:0158:0100.000B: probe with driver hid-generic failed with error -22 [ 190.367218][ T8] usb 1-1: USB disconnect, device number 12 [ 190.750924][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.530'. [ 190.760808][ T5112] Bluetooth: hci2: command 0x0406 tx timeout [ 190.767771][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 191.641160][ T5162] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 191.686300][ T5159] usb 4-1: unable to get BOS descriptor or descriptor too short [ 191.732834][ T5159] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 191.762331][ T5159] usb 4-1: can't read configurations, error -71 [ 191.861354][ T5162] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 191.891764][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.930545][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.945023][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.955310][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.968279][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 191.994152][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.022789][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.060582][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.078796][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.109529][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.150159][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.212474][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.231125][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.249175][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.274112][ T7014] overlayfs: missing 'lowerdir' [ 192.279721][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.293370][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.311949][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 192.324511][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.333956][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.349403][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.370085][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.392679][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.408228][ T5162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.438216][ T5162] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 192.459112][ T5162] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.477159][ T5162] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 192.488551][ T7050] loop5: detected capacity change from 0 to 256 [ 192.496240][ T5162] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 192.508866][ T7050] exfat: Deprecated parameter 'utf8' [ 192.514339][ T5162] usb 5-1: Product: syz [ 192.518758][ T5162] usb 5-1: Manufacturer: syz [ 192.525963][ T7050] exfat: Deprecated parameter 'namecase' [ 192.532081][ T7050] exfat: Deprecated parameter 'utf8' [ 192.537513][ T5162] usb 5-1: SerialNumber: syz [ 192.544344][ T7050] exfat: Deprecated parameter 'namecase' [ 192.554505][ T5162] usb 5-1: config 0 descriptor?? [ 192.575187][ T7050] exFAT-fs (loop5): Invalid exboot-signature(sector = 4): 0x05550000 [ 192.590175][ T5162] yurex 5-1:0.0: Could not find endpoints [ 192.606089][ T7050] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ab2b) [ 192.646930][ T7050] exFAT-fs (loop5): invalid boot region [ 192.680731][ T7050] exFAT-fs (loop5): failed to recognize exfat type [ 192.813167][ T5162] usb 5-1: USB disconnect, device number 16 [ 192.890692][ T5159] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 193.085433][ T5159] usb 4-1: Using ep0 maxpacket: 16 [ 193.110590][ T5159] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 193.153901][ T5159] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 193.212162][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.241508][ T5159] usb 4-1: config 0 descriptor?? [ 193.460565][ T7048] overlayfs: missing 'workdir' [ 193.820065][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.826529][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.856277][ T7048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.908616][ T7048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.924077][ T5162] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 194.015732][ T5159] hid-generic 0003:0158:0100.000C: unknown main item tag 0x1 [ 194.030798][ T5159] hid-generic 0003:0158:0100.000C: unexpected long global item [ 194.039345][ T5159] hid-generic 0003:0158:0100.000C: probe with driver hid-generic failed with error -22 [ 194.160808][ T5162] usb 3-1: Using ep0 maxpacket: 16 [ 194.189090][ T5162] usb 3-1: descriptor type invalid, skip [ 194.200798][ T5162] usb 3-1: descriptor type invalid, skip [ 194.217073][ T5162] usb 3-1: descriptor type invalid, skip [ 194.234517][ T5159] usb 4-1: USB disconnect, device number 10 [ 194.255112][ T5162] usb 3-1: descriptor type invalid, skip [ 194.268800][ T5162] usb 3-1: descriptor type invalid, skip [ 194.279993][ T5162] usb 3-1: descriptor type invalid, skip [ 194.286164][ T5162] usb 3-1: descriptor type invalid, skip [ 194.302374][ T5162] usb 3-1: descriptor type invalid, skip [ 194.322887][ T5162] usb 3-1: descriptor type invalid, skip [ 194.358150][ T5162] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 194.397418][ T5162] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 194.461166][ T5162] usb 3-1: string descriptor 0 read error: -22 [ 194.473036][ T5162] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 194.531160][ T5162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.587409][ T5162] usb 3-1: 0:2 : does not exist [ 194.855831][ T7089] loop5: detected capacity change from 0 to 256 [ 195.807877][ T5101] Bluetooth: hci5: command tx timeout [ 195.894416][ T7089] exfat: Deprecated parameter 'utf8' [ 195.934957][ T7089] exfat: Deprecated parameter 'namecase' [ 195.963972][ T7089] exfat: Deprecated parameter 'utf8' [ 195.978416][ T7089] exfat: Deprecated parameter 'namecase' [ 196.023280][ T7089] exFAT-fs (loop5): Invalid exboot-signature(sector = 4): 0x05550000 [ 196.047267][ T7089] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ab2b) [ 196.082723][ T7089] exFAT-fs (loop5): invalid boot region [ 196.105883][ T7089] exFAT-fs (loop5): failed to recognize exfat type [ 196.559843][ T9] usb 3-1: USB disconnect, device number 13 [ 196.810682][ T5153] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 197.062169][ T5153] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 197.103346][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.130427][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.158316][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.171946][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.187748][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.217997][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.251257][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.318214][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.378547][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.425358][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.454698][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.507379][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.535190][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.575893][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.617172][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.656175][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.690740][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.695372][ T7126] netlink: 'syz.2.576': attribute type 21 has an invalid length. [ 197.722411][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.745272][ T7126] netlink: 128 bytes leftover after parsing attributes in process `syz.2.576'. [ 197.763657][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.788047][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.826388][ T7098] loop3: detected capacity change from 0 to 32768 [ 197.840295][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 197.876048][ T5153] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.891367][ T7126] netlink: 'syz.2.576': attribute type 4 has an invalid length. [ 197.921952][ T7098] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.564 (7098) [ 197.944237][ T5153] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.972906][ T7126] netlink: 'syz.2.576': attribute type 5 has an invalid length. [ 197.984793][ T5153] usb 6-1: config 0 interface 0 has no altsetting 0 [ 198.030610][ T5153] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 198.071679][ T5153] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 198.098616][ T7098] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 198.116559][ T5153] usb 6-1: Product: syz [ 198.121296][ T7126] netlink: 3 bytes leftover after parsing attributes in process `syz.2.576'. [ 198.151002][ T7098] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 198.190289][ T5153] usb 6-1: Manufacturer: syz [ 198.196081][ T7098] BTRFS info (device loop3): using free-space-tree [ 198.215951][ T5153] usb 6-1: SerialNumber: syz [ 198.279454][ T5153] usb 6-1: config 0 descriptor?? [ 198.312058][ T5153] yurex 6-1:0.0: Could not find endpoints [ 198.543892][ T5159] usb 6-1: USB disconnect, device number 13 [ 198.736867][ T5546] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 198.757938][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.583'. [ 199.484871][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 199.710607][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 199.760691][ T8] usb 3-1: config 0 has an invalid interface number: 253 but max is 0 [ 199.768889][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.810594][ T8] usb 3-1: config 0 has no interface number 0 [ 199.827392][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=3d.ae [ 199.853346][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.861926][ T8] usb 3-1: Product: syz [ 199.875404][ T8] usb 3-1: Manufacturer: syz [ 199.890511][ T8] usb 3-1: SerialNumber: syz [ 199.918051][ T8] usb 3-1: config 0 descriptor?? [ 199.950436][ T8] gspca_main: sonixb-2.14.0 probing 0c45:6019 [ 199.960946][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 200.163523][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 200.180297][ T8] sonixb 3-1:0.253: Error reading register 00: -71 [ 200.190803][ T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 200.214692][ T8] usb 3-1: USB disconnect, device number 14 [ 200.234248][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.292216][ T9] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 200.309109][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.327412][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.347243][ T9] usb 1-1: Product: syz [ 200.355970][ T9] usb 1-1: Manufacturer: syz [ 200.373163][ T9] usb 1-1: SerialNumber: syz [ 200.767531][ T9] usb 1-1: 0:2 : does not exist [ 200.805906][ T7188] overlayfs: missing 'lowerdir' [ 200.840211][ T9] usb 1-1: USB disconnect, device number 13 [ 200.920177][ T7207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 201.205094][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.598'. [ 201.539544][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 201.539566][ T29] audit: type=1326 audit(1719553795.652:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 201.616112][ T29] audit: type=1326 audit(1719553795.692:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 201.654403][ T29] audit: type=1326 audit(1719553795.692:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 201.699975][ T29] audit: type=1326 audit(1719553795.692:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 201.772353][ T29] audit: type=1326 audit(1719553795.702:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7215 comm="syz.4.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7c6e375b29 code=0x7ffc0000 [ 201.834868][ T7224] loop3: detected capacity change from 0 to 512 [ 201.894686][ T7224] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.097677][ T7224] EXT4-fs (loop3): 1 truncate cleaned up [ 202.203861][ T7224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.439053][ T5546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.608300][ T7244] netlink: 'syz.1.610': attribute type 2 has an invalid length. [ 202.616508][ T7244] netlink: 'syz.1.610': attribute type 8 has an invalid length. [ 202.625388][ T7244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'. [ 203.337073][ T5162] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 203.591945][ T5162] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 203.632772][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.671117][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.712741][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.726158][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.787090][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.796164][ T779] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 203.815042][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.825845][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.836147][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.846289][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.855638][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.861487][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.614'. [ 203.874833][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.897296][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.922146][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.949003][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 203.968359][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 203.992339][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.002590][ T779] usb 5-1: Using ep0 maxpacket: 32 [ 204.020196][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.034459][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.081751][ T779] usb 5-1: config 0 has an invalid interface number: 253 but max is 0 [ 204.089947][ T779] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.092004][ T7266] dccp_invalid_packet: P.Data Offset(0) too small [ 204.120625][ T779] usb 5-1: config 0 has no interface number 0 [ 204.136539][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.161841][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.180705][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.189202][ T779] usb 5-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=3d.ae [ 204.198360][ T779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.226973][ T5162] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.237374][ T5159] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 204.244999][ T779] usb 5-1: Product: syz [ 204.249175][ T779] usb 5-1: Manufacturer: syz [ 204.253919][ T5162] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.278183][ T779] usb 5-1: SerialNumber: syz [ 204.284509][ T5162] usb 6-1: config 0 interface 0 has no altsetting 0 [ 204.301717][ T779] usb 5-1: config 0 descriptor?? [ 204.317768][ T5162] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 204.333670][ T779] gspca_main: sonixb-2.14.0 probing 0c45:6019 [ 204.359226][ T5162] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 204.380737][ T5162] usb 6-1: Product: syz [ 204.385240][ T5162] usb 6-1: Manufacturer: syz [ 204.389996][ T5162] usb 6-1: SerialNumber: syz [ 204.420136][ T5162] usb 6-1: config 0 descriptor?? [ 204.436406][ T5162] yurex 6-1:0.0: Could not find endpoints [ 204.460568][ T5159] usb 4-1: Using ep0 maxpacket: 16 [ 204.469576][ T5159] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 204.496612][ T5159] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.517500][ T5159] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 204.554378][ T5159] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 204.566178][ T779] sonixb 5-1:0.253: Error reading register 00: -71 [ 204.581708][ T5159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.597676][ T779] usb 5-1: USB disconnect, device number 17 [ 204.603911][ T5159] usb 4-1: Product: syz [ 204.613980][ T5159] usb 4-1: Manufacturer: syz [ 204.639554][ T5159] usb 4-1: SerialNumber: syz [ 204.725352][ T5162] usb 6-1: USB disconnect, device number 14 [ 204.898430][ T5159] usb 4-1: 0:2 : does not exist [ 204.915293][ T29] audit: type=1326 audit(1719553799.032:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa547f75b29 code=0x7ffc0000 [ 205.002596][ T5159] usb 4-1: USB disconnect, device number 11 [ 205.030620][ T29] audit: type=1326 audit(1719553799.032:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa547f75b29 code=0x7ffc0000 [ 205.117276][ T29] audit: type=1326 audit(1719553799.062:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fa547f75b29 code=0x7ffc0000 [ 205.216684][ T29] audit: type=1326 audit(1719553799.062:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa547f75b29 code=0x7ffc0000 [ 205.289336][ T29] audit: type=1326 audit(1719553799.062:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7274 comm="syz.0.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa547f75b29 code=0x7ffc0000 [ 207.181121][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.5.635'. [ 207.430667][ T5162] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 207.637177][ T5162] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 207.651123][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.678175][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.728450][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.801160][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.861137][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.897094][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 207.933783][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.986067][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.017980][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.053435][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.080829][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.093318][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.101656][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.109514][ T7346] dccp_invalid_packet: P.Data Offset(0) too small [ 208.120450][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.133919][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.143382][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.153951][ T5111] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.161353][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.170805][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.176004][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.183960][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.203172][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.213526][ T5111] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 208.221932][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.231168][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.244432][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.252233][ T5111] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.261441][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.271614][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.280789][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.293964][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.302408][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.312748][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.322867][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.335833][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.344925][ T5162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.355169][ T5162] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 208.364314][ T5162] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.393492][ T5162] usb 3-1: config 0 interface 0 has no altsetting 0 [ 208.430846][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 208.437504][ T5162] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 208.447774][ T7350] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 208.454302][ T7350] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 208.480894][ T5162] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 208.489251][ T5162] usb 3-1: Product: syz [ 208.505783][ T7350] vhci_hcd vhci_hcd.0: Device attached [ 208.524312][ T5162] usb 3-1: Manufacturer: syz [ 208.529052][ T5162] usb 3-1: SerialNumber: syz [ 208.543032][ T7351] vhci_hcd: connection closed [ 208.548431][ T1100] vhci_hcd: stop threads [ 208.548630][ T5162] usb 3-1: config 0 descriptor?? [ 208.570625][ T1100] vhci_hcd: release socket [ 208.574509][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.575051][ T1100] vhci_hcd: disconnect device [ 208.605813][ T5162] yurex 3-1:0.0: Could not find endpoints [ 208.632893][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.666760][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 208.697475][ T9] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 208.721307][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 208.754763][ T9] usb 5-1: SerialNumber: syz [ 208.812145][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.026618][ T5161] usb 3-1: USB disconnect, device number 15 [ 209.053501][ T9] usb 5-1: 0:2 : does not exist [ 209.062618][ T9] usb 5-1: unit 5 not found! [ 209.811584][ T5228] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 209.920925][ T9] usb 5-1: USB disconnect, device number 18 [ 210.015894][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.100682][ T5228] usb 4-1: Using ep0 maxpacket: 32 [ 210.114870][ T5228] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 210.168636][ T5228] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 210.403774][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 210.404171][ T5111] Bluetooth: hci4: command tx timeout [ 210.420629][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 210.431479][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 210.513143][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 211.159374][ T5228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 211.170760][ T5228] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 211.190580][ T5228] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 211.207042][ T5228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.222706][ T5228] usb 4-1: Product: В [ 211.258119][ T5228] usb 4-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 211.270550][ T5228] usb 4-1: SerialNumber: syz [ 211.294353][ T5228] usb 4-1: config 0 descriptor?? [ 211.317855][ T5228] pvrusb2: Hardware description: Terratec Grabster AV400 [ 211.360050][ T5228] pvrusb2: ********** [ 211.377416][ T5228] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 211.399015][ T5228] pvrusb2: Important functionality might not be entirely working. [ 211.450036][ T5228] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 211.469274][ T5228] pvrusb2: ********** [ 211.549893][ T12] bridge_slave_1: left allmulticast mode [ 211.566096][ T12] bridge_slave_1: left promiscuous mode [ 211.571592][ T1974] pvrusb2: Invalid write control endpoint [ 211.588303][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.670124][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 211.727575][ T12] bridge_slave_0: left allmulticast mode [ 211.758966][ T12] bridge_slave_0: left promiscuous mode [ 211.789094][ T1974] pvrusb2: Invalid write control endpoint [ 211.789658][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.833335][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 211.861157][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 211.869645][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 211.882283][ T1974] pvrusb2: Device being rendered inoperable [ 211.888408][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 211.898114][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 211.945876][ T1974] pvrusb2: Attached sub-driver cx25840 [ 211.958414][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 211.972621][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 212.450721][ T5111] Bluetooth: hci4: command tx timeout [ 212.921483][ T9] usb 4-1: USB disconnect, device number 12 [ 213.112517][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.183912][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.259674][ T12] bond0 (unregistering): Released all slaves [ 213.338768][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.656'. [ 213.350806][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 213.380150][ T7379] syzkaller1: entered promiscuous mode [ 213.398408][ T7379] syzkaller1: entered allmulticast mode [ 213.609309][ T7399] netlink: 'syz.3.663': attribute type 21 has an invalid length. [ 213.664964][ T7399] netlink: 128 bytes leftover after parsing attributes in process `syz.3.663'. [ 213.698234][ T7399] netlink: 'syz.3.663': attribute type 4 has an invalid length. [ 213.756541][ T7399] netlink: 'syz.3.663': attribute type 5 has an invalid length. [ 213.768580][ T7399] netlink: 3 bytes leftover after parsing attributes in process `syz.3.663'. [ 214.011149][ T50] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.110001][ T7411] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 214.116535][ T7411] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 214.213326][ T7411] vhci_hcd vhci_hcd.0: Device attached [ 214.264045][ T50] usb 2-1: Using ep0 maxpacket: 16 [ 214.294187][ T7412] vhci_hcd: connection closed [ 214.295633][ T2804] vhci_hcd: stop threads [ 214.312947][ T50] usb 2-1: descriptor type invalid, skip [ 214.334596][ T50] usb 2-1: descriptor type invalid, skip [ 214.355321][ T2804] vhci_hcd: release socket [ 214.372230][ T50] usb 2-1: descriptor type invalid, skip [ 214.380691][ T2804] vhci_hcd: disconnect device [ 214.422837][ T50] usb 2-1: descriptor type invalid, skip [ 214.428501][ T50] usb 2-1: descriptor type invalid, skip [ 214.479180][ T50] usb 2-1: descriptor type invalid, skip [ 214.506019][ T50] usb 2-1: descriptor type invalid, skip [ 214.521426][ T5111] Bluetooth: hci4: command tx timeout [ 214.535357][ T50] usb 2-1: descriptor type invalid, skip [ 214.551357][ T50] usb 2-1: descriptor type invalid, skip [ 214.571920][ T50] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.589430][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.594671][ T50] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 214.605572][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.605951][ T7341] bridge_slave_0: entered allmulticast mode [ 214.645300][ T50] usb 2-1: string descriptor 0 read error: -22 [ 214.649909][ T7341] bridge_slave_0: entered promiscuous mode [ 214.658013][ T50] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.680812][ T50] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.713572][ T50] usb 2-1: 0:2 : does not exist [ 214.811921][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.829909][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.838716][ T5161] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 214.873927][ T7341] bridge_slave_1: entered allmulticast mode [ 214.892486][ T7341] bridge_slave_1: entered promiscuous mode [ 215.050653][ T50] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 215.066968][ T5161] usb 4-1: Using ep0 maxpacket: 16 [ 215.088318][ T5161] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 215.114643][ T12] mac80211_hwsim hwsim6 wlan0 (unregistering): left allmulticast mode [ 215.129846][ T5161] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.162422][ T5161] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 215.213857][ T5161] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 215.234349][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.245042][ T50] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 215.245548][ T5161] usb 4-1: Product: syz [ 215.257403][ T5161] usb 4-1: Manufacturer: syz [ 215.262276][ T5161] usb 4-1: SerialNumber: syz [ 215.301789][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.320621][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.352374][ T12] team0: Port device macvlan2 removed [ 215.367480][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.387640][ T7429] loop5: detected capacity change from 0 to 256 [ 215.433934][ T12] team0: Port device macvlan3 removed [ 215.439973][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.442155][ T7429] exfat: Deprecated parameter 'utf8' [ 215.460556][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.496331][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.502750][ T7429] exfat: Deprecated parameter 'namecase' [ 215.515775][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.516103][ T12] team0: Port device macvlan4 removed [ 215.551182][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.555479][ T7429] exfat: Deprecated parameter 'utf8' [ 215.575051][ T7429] exfat: Deprecated parameter 'namecase' [ 215.621138][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.639758][ T7429] exFAT-fs (loop5): Invalid exboot-signature(sector = 4): 0x05550000 [ 215.644907][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.675593][ T7429] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1119ab2b) [ 215.705917][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.713642][ T7429] exFAT-fs (loop5): invalid boot region [ 215.754367][ T7429] exFAT-fs (loop5): failed to recognize exfat type [ 215.787548][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.816741][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.829968][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.851438][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 215.873984][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.902544][ T5161] usb 4-1: 0:2 : does not exist [ 215.908670][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 215.933302][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.955218][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.980105][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.006981][ T5161] usb 4-1: USB disconnect, device number 13 [ 216.013557][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.051232][ T12] hsr_slave_0: left promiscuous mode [ 216.060905][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.073801][ T12] hsr_slave_1: left promiscuous mode [ 216.091310][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.116645][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.130808][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.139906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.161003][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.180382][ T7432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.673'. [ 216.191201][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.200099][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.213517][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.222992][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.233558][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.253165][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.290418][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.298250][ T12] veth1_macvtap: left promiscuous mode [ 216.318363][ T12] veth0_macvtap: left promiscuous mode [ 216.325373][ T50] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.336452][ T12] veth1_vlan: left promiscuous mode [ 216.341957][ T50] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 216.351394][ T12] veth0_vlan: left promiscuous mode [ 216.357988][ T50] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 216.374557][ T50] usb 3-1: config 0 interface 0 has no altsetting 0 [ 216.413853][ T50] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 216.429929][ T50] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 216.446929][ T50] usb 3-1: Product: syz [ 216.469141][ T50] usb 3-1: Manufacturer: syz [ 216.490129][ T50] usb 3-1: SerialNumber: syz [ 216.525590][ T50] usb 3-1: config 0 descriptor?? [ 216.583702][ T50] yurex 3-1:0.0: Could not find endpoints [ 216.600724][ T5111] Bluetooth: hci4: command tx timeout [ 216.621681][ T50] usb 2-1: USB disconnect, device number 6 [ 216.789635][ T5162] usb 3-1: USB disconnect, device number 16 [ 216.838019][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.676'. [ 218.099064][ T7453] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 218.105630][ T7453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 218.135723][ T7453] vhci_hcd vhci_hcd.0: Device attached [ 218.161428][ T7455] vhci_hcd: connection closed [ 218.170624][ T948] vhci_hcd: stop threads [ 218.181576][ T948] vhci_hcd: release socket [ 218.186105][ T948] vhci_hcd: disconnect device [ 218.559221][ T12] team0 (unregistering): Port device team_slave_1 removed [ 218.575780][ T7442] loop3: detected capacity change from 0 to 40427 [ 218.589335][ T7467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 218.610605][ T7442] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 218.618706][ T7442] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 218.672728][ T7442] F2FS-fs (loop3): invalid crc value [ 218.699530][ T7442] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.891859][ T7442] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 218.906826][ T7442] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 219.073366][ T7478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.687'. [ 219.872600][ T7341] team0: Port device team_slave_0 added [ 219.915804][ T7341] team0: Port device team_slave_1 added [ 219.957764][ T6790] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 219.979829][ T7493] dccp_invalid_packet: P.Data Offset(0) too small [ 219.996282][ T6790] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 220.123328][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.160526][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.235278][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.277205][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.304850][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.335427][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.403561][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 220.422270][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.695'. [ 220.573178][ T7341] hsr_slave_0: entered promiscuous mode [ 220.611017][ T7341] hsr_slave_1: entered promiscuous mode [ 220.617830][ T7341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.627084][ T7341] Cannot create hsr debugfs directory [ 220.636077][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 220.645760][ T7506] syzkaller1: entered promiscuous mode [ 220.658289][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.671371][ T7506] syzkaller1: entered allmulticast mode [ 220.680402][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.703940][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.731265][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.739527][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.758713][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.767105][ T7520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.700'. [ 220.783521][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.843144][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.855663][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.883131][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 220.907342][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 220.946451][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.988443][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.022636][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.041617][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.055039][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.065819][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.078118][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.097137][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.111582][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.204717][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.230676][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.257445][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.287248][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.305832][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.321333][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.348537][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.380762][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.400180][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.411349][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 221.435366][ T8] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.465247][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 221.486856][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 221.496352][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 221.506612][ T8] usb 2-1: Product: syz [ 221.516188][ T8] usb 2-1: Manufacturer: syz [ 221.535331][ T8] usb 2-1: SerialNumber: syz [ 221.554925][ T8] usb 2-1: config 0 descriptor?? [ 221.576904][ T8] yurex 2-1:0.0: Could not find endpoints [ 221.794396][ T8] usb 2-1: USB disconnect, device number 7 [ 221.861219][ T7524] overlayfs: missing 'lowerdir' [ 222.253852][ T7341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.469193][ T7341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.562368][ T7341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 222.754679][ T7341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.780335][ T7542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 222.964035][ T8] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 223.290778][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 223.418696][ T8] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 223.450594][ T8] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 223.464180][ T25] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 223.469311][ T8] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 223.516854][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.547654][ T8] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 223.568998][ T8] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 223.611869][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 223.648229][ T8] usb 6-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 223.685834][ T8] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 223.692339][ T25] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 223.700522][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.722415][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.723625][ T8] usb 6-1: Product: В [ 223.734105][ T8] usb 6-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 223.745954][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 223.776510][ T25] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.786222][ T8] usb 6-1: SerialNumber: syz [ 223.806339][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.822261][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.827690][ T8] usb 6-1: config 0 descriptor?? [ 223.838942][ T5105] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.846156][ T5105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.854978][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.890781][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 223.894725][ T25] usb 5-1: invalid MIDI out EP 0 [ 223.897803][ T8] pvrusb2: ********** [ 223.897815][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 223.897833][ T8] pvrusb2: Important functionality might not be entirely working. [ 223.897847][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 223.913243][ T5105] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.943709][ T5105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.009714][ T8] pvrusb2: ********** [ 224.053385][ T7557] misc userio: Invalid payload size [ 224.080984][ T25] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 224.118392][ T1974] pvrusb2: Invalid write control endpoint [ 224.125050][ T25] usb 5-1: USB disconnect, device number 19 [ 224.343014][ T7341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.393256][ T7341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.449422][ T7563] syzkaller1: entered promiscuous mode [ 224.745588][ T1974] pvrusb2: Invalid write control endpoint [ 224.761200][ T7563] syzkaller1: entered allmulticast mode [ 224.786732][ T1974] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 224.916996][ T1974] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 224.998696][ T1974] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 225.023102][ T1974] pvrusb2: Device being rendered inoperable [ 225.035522][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 225.053658][ T1974] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 225.097373][ T1974] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 225.197437][ T1974] pvrusb2: Attached sub-driver cx25840 [ 225.246161][ T1974] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 225.310656][ T1974] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 225.424481][ T779] usb 6-1: USB disconnect, device number 15 [ 225.737042][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.863349][ T7341] veth0_vlan: entered promiscuous mode [ 225.909282][ T7341] veth1_vlan: entered promiscuous mode [ 225.984700][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 225.994952][ T7341] veth0_macvtap: entered promiscuous mode [ 226.020312][ T7341] veth1_macvtap: entered promiscuous mode [ 226.034076][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 226.079172][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.090079][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.102977][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.113618][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.129980][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.146121][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.156797][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.167719][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.178242][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.189434][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.199532][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.209080][ T7595] dccp_invalid_packet: P.Data Offset(0) too small [ 226.212437][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.228065][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.248510][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.260834][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 226.281824][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.293111][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.303508][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.314227][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.323344][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.325856][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.333226][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.335527][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.348548][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.363975][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.382397][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.391561][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.401753][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.412408][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.423664][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.436052][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.460707][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.477949][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.487990][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.494966][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.505717][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.518780][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.520300][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.538212][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.559587][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.560280][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.580610][ T779] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 226.590762][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.606120][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.622200][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.630910][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.633315][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.653808][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.665269][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.675530][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.688671][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.705460][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 226.715472][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.740500][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 226.785728][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.787339][ T779] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 226.807668][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 226.850743][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.860958][ T779] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.861032][ T779] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 226.861064][ T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.906181][ T779] usb 3-1: invalid MIDI out EP 0 [ 226.932781][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 227.156500][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.160346][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.171328][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 227.184379][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 227.200617][ T8] usb 2-1: Product: syz [ 227.210653][ T8] usb 2-1: Manufacturer: syz [ 227.220684][ T8] usb 2-1: SerialNumber: syz [ 227.230738][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.243783][ T8] usb 2-1: config 0 descriptor?? [ 227.396009][ T8] yurex 2-1:0.0: Could not find endpoints [ 227.398765][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.445969][ T779] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 227.456465][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.489144][ T779] usb 3-1: USB disconnect, device number 17 [ 227.563812][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.653857][ T7606] netlink: 'syz.4.727': attribute type 2 has an invalid length. [ 227.663198][ T9] usb 2-1: USB disconnect, device number 8 [ 227.671319][ T7606] netlink: 'syz.4.727': attribute type 8 has an invalid length. [ 227.679415][ T7606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.727'. [ 227.703386][ T7341] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.722648][ T30] INFO: task syz.4.5:5270 blocked for more than 143 seconds. [ 227.739978][ T30] Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 227.755843][ T7341] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.766451][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 227.786011][ T7341] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.799668][ T30] task:syz.4.5 state:D stack:24528 pid:5270 tgid:5241 ppid:5099 flags:0x00004006 [ 227.810186][ T7341] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.830164][ T30] Call Trace: [ 227.836988][ T30] [ 227.839947][ T30] __schedule+0x17e8/0x4a20 [ 227.852691][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.858358][ T30] ? __pfx___schedule+0x10/0x10 [ 228.023605][ T30] ? __pfx_lock_release+0x10/0x10 [ 228.028805][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.035151][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.042949][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 228.048971][ T30] ? schedule+0x90/0x320 [ 228.058423][ T30] schedule+0x14b/0x320 [ 228.062691][ T30] io_schedule+0x8d/0x110 [ 228.067056][ T30] folio_wait_bit_common+0x882/0x12b0 [ 228.072560][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 228.078407][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 228.845722][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.905987][ T30] ? jfs_error+0x21d/0x2e0 [ 228.928812][ T30] ? __pfx_folio_mark_accessed+0x10/0x10 [ 228.943990][ T30] ? __get_metapage+0x555/0x1050 [ 228.955789][ T30] release_metapage+0x8c/0x870 [ 228.964190][ T30] ? __pfx_metapage_read_folio+0x10/0x10 [ 228.969848][ T30] __get_metapage+0xb1d/0x1050 [ 228.974720][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 228.980030][ T30] jfs_readdir+0x2945/0x4660 [ 228.985414][ T30] ? __pfx_jfs_readdir+0x10/0x10 [ 228.990417][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.996222][ T30] ? __pfx___down_write_common+0x10/0x10 [ 229.006687][ T30] ? end_current_label_crit_section+0x14e/0x180 [ 229.018541][ T5161] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.026276][ T30] ? __pfx_jfs_readdir+0x10/0x10 [ 229.031359][ T30] wrap_directory_iterator+0x96/0xe0 [ 229.036670][ T30] iterate_dir+0x660/0x820 [ 229.044408][ T30] __se_sys_getdents64+0x20d/0x4f0 [ 229.049555][ T30] ? __pfx___se_sys_getdents64+0x10/0x10 [ 229.055329][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 229.061565][ T30] ? __pfx_filldir64+0x10/0x10 [ 229.066440][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.072891][ T30] ? do_syscall_64+0x100/0x230 [ 229.077701][ T30] ? do_syscall_64+0xb6/0x230 [ 229.083822][ T30] do_syscall_64+0xf3/0x230 [ 229.088375][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.094405][ T30] RIP: 0033:0x7f4fceb75b29 [ 229.098839][ T30] RSP: 002b:00007f4fcf9d7048 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 229.109396][ T30] RAX: ffffffffffffffda RBX: 00007f4fced04140 RCX: 00007f4fceb75b29 [ 229.117557][ T30] RDX: 0000000000001000 RSI: 0000000020000f80 RDI: 0000000000000007 [ 229.126512][ T30] RBP: 00007f4fcebf6756 R08: 0000000000000000 R09: 0000000000000000 [ 229.134553][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.142709][ T30] R13: 000000000000006e R14: 00007f4fced04140 R15: 00007fffcc3628b8 [ 229.150780][ T30] [ 229.153844][ T30] [ 229.153844][ T30] Showing all locks held in the system: [ 229.163335][ T30] 1 lock held by khungtaskd/30: [ 229.168202][ T30] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 229.191437][ T30] 3 locks held by kworker/u8:7/1100: [ 229.196883][ T30] 3 locks held by kworker/u8:8/2804: [ 229.203736][ T30] #0: ffff888029eb1148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 229.220116][ T30] #1: ffffc90009947d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 229.241741][ T5161] usb 4-1: Using ep0 maxpacket: 32 [ 229.248008][ T30] #2: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 229.252187][ T5161] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 229.268902][ T30] 2 locks held by getty/4845: [ 229.272381][ T5161] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 229.275427][ T30] #0: [ 229.282646][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 229.290544][ T30] ffff88802a8a40a0 [ 229.298526][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.306125][ T30] ( [ 229.317246][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 229.326679][ T30] &tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 229.332032][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 229.340806][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 229.349233][ T5161] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 229.373533][ T5161] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 229.384694][ T30] 3 locks held by kworker/1:4/5159: [ 229.387692][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.5.730'. [ 229.390708][ T30] #0: ffff888015078948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 229.417883][ T30] #1: ffffc90004b1fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 229.431522][ T5161] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 229.434014][ T30] #2: [ 229.440687][ T5161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.440720][ T5161] usb 4-1: Product: В [ 229.440742][ T5161] usb 4-1: Manufacturer: 놱橹䓸곦瘾砆䵂鷓쬡謆譖ꈶⰕ颍वㇳ︔ [ 229.440766][ T5161] usb 4-1: SerialNumber: syz [ 229.463176][ T5161] usb 4-1: config 0 descriptor?? [ 229.466374][ T30] ffff88806279e240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 229.476580][ T5161] pvrusb2: Hardware description: Terratec Grabster AV400 [ 229.486929][ T30] 9 locks held by kworker/0:5/5161: [ 229.498757][ T5161] pvrusb2: ********** [ 229.505684][ T5161] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 229.512327][ T30] 2 locks held by syz.4.5/5270: [ 229.520559][ T5161] pvrusb2: Important functionality might not be entirely working. [ 229.529081][ T5161] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 229.537373][ T30] #0: ffff888022a98fc8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 229.547283][ T5161] pvrusb2: ********** [ 229.550136][ T30] #1: ffff88805f6c33c0 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: wrap_directory_iterator+0x5d/0xe0 [ 229.565600][ T30] 2 locks held by syz.2.77/5457: [ 229.571978][ T30] #0: ffff88807fbdc5c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 229.581799][ T30] #1: ffff88805f570580 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: wrap_directory_iterator+0x5d/0xe0 [ 229.593079][ T30] 2 locks held by syz.1.357/6455: [ 229.598116][ T30] #0: ffff88801e5a8ac8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 229.607534][ T30] #1: ffff88805f5758c0 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: wrap_directory_iterator+0x5d/0xe0 [ 229.620510][ T30] 3 locks held by syz-executor/7341: [ 229.625821][ T30] #0: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 229.635553][ T30] #1: ffff8880609e1408 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x22d/0x420 [ 229.648264][ T30] #2: ffffffff8e339338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 229.659701][ T30] 2 locks held by syz.5.730/7616: [ 229.664798][ T30] #0: ffffffff8f64d5f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 229.673749][ T30] #1: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 229.687417][ T30] 1 lock held by syz.5.730/7617: [ 229.692459][ T30] #0: ffffffff8f5e7188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 229.702344][ T1974] pvrusb2: Invalid write control endpoint [ 229.708964][ T30] [ 229.714756][ T30] ============================================= [ 229.714756][ T30] [ 229.724869][ T30] NMI backtrace for cpu 1 [ 229.729221][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 229.739130][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 229.749199][ T30] Call Trace: [ 229.752483][ T30] [ 229.755436][ T30] dump_stack_lvl+0x241/0x360 [ 229.760138][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.765372][ T30] ? __pfx__printk+0x10/0x10 [ 229.769992][ T30] ? vprintk_emit+0x631/0x770 [ 229.774706][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 229.779770][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 229.784738][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 229.790204][ T30] ? _printk+0xd5/0x120 [ 229.794375][ T30] ? __pfx__printk+0x10/0x10 [ 229.798984][ T30] ? __wake_up_klogd+0xcc/0x110 [ 229.803852][ T30] ? __pfx__printk+0x10/0x10 [ 229.808456][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.814092][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 229.819137][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 229.825131][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 229.831133][ T30] watchdog+0xfde/0x1020 [ 229.835399][ T30] ? watchdog+0x1ea/0x1020 [ 229.839833][ T30] ? __pfx_watchdog+0x10/0x10 [ 229.844522][ T30] kthread+0x2f2/0x390 [ 229.848603][ T30] ? __pfx_watchdog+0x10/0x10 [ 229.853285][ T30] ? __pfx_kthread+0x10/0x10 [ 229.857888][ T30] ret_from_fork+0x4d/0x80 [ 229.862321][ T30] ? __pfx_kthread+0x10/0x10 [ 229.866923][ T30] ret_from_fork_asm+0x1a/0x30 [ 229.871716][ T30] [ 229.876126][ T30] Sending NMI from CPU 1 to CPUs 0: [ 229.882348][ C0] NMI backtrace for cpu 0 [ 229.882361][ C0] CPU: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 229.882385][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 229.882400][ C0] Workqueue: 0x0 (events_unbound) [ 229.882428][ C0] RIP: 0010:update_load_avg+0x46/0x1a00 [ 229.882457][ C0] Code: 00 00 00 fc ff df 48 8d 9f e4 01 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 04 16 00 00 83 3b 00 0f 85 6a 15 00 00 <49> 8d 9f 78 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 [ 229.882476][ C0] RSP: 0018:ffffc90000117a18 EFLAGS: 00000046 [ 229.882494][ C0] RAX: 0000000000000000 RBX: ffff8880b943ea24 RCX: dffffc0000000000 [ 229.882510][ C0] RDX: 0000000000000001 RSI: ffff888016ebbc80 RDI: ffff8880b943e840 [ 229.882526][ C0] RBP: ffff8880b943e840 R08: ffffffff8fad506f R09: 1ffffffff1f5aa0d [ 229.882544][ C0] R10: dffffc0000000000 R11: fffffbfff1f5aa0e R12: dffffc0000000000 [ 229.882560][ C0] R13: ffff888016ebbc80 R14: dffffc0000000000 R15: ffff8880b943e840 [ 229.882581][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 229.882600][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 229.882616][ C0] CR2: 00007fd7b73c0000 CR3: 000000001f86e000 CR4: 0000000000350ef0 [ 229.882634][ C0] Call Trace: [ 229.882642][ C0] [ 229.882650][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 229.882676][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 229.882703][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 229.882727][ C0] ? nmi_handle+0x2a/0x5a0 [ 229.882774][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 229.882801][ C0] ? nmi_handle+0x151/0x5a0 [ 229.882839][ C0] ? nmi_handle+0x2a/0x5a0 [ 229.882875][ C0] ? update_load_avg+0x46/0x1a00 [ 229.882901][ C0] ? default_do_nmi+0x63/0x160 [ 229.882928][ C0] ? exc_nmi+0x123/0x1f0 [ 229.882951][ C0] ? end_repeat_nmi+0xf/0x53 [ 229.882996][ C0] ? update_load_avg+0x46/0x1a00 [ 229.883023][ C0] ? update_load_avg+0x46/0x1a00 [ 229.883052][ C0] ? update_load_avg+0x46/0x1a00 [ 229.883079][ C0] [ 229.883086][ C0] [ 229.883094][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.883116][ C0] ? __dequeue_entity+0x7b8/0xa10 [ 229.883164][ C0] set_next_entity+0x10e/0x4c0 [ 229.883195][ C0] pick_next_task_fair+0x36e/0xde0 [ 229.883230][ C0] __pick_next_task+0xb0/0x2c0 [ 229.883270][ C0] __schedule+0x729/0x4a20 [ 229.883305][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.883332][ C0] ? __pfx___schedule+0x10/0x10 [ 229.883355][ C0] ? schedule+0x90/0x320 [ 229.883376][ C0] ? __pfx_lock_release+0x10/0x10 [ 229.883402][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 229.883428][ C0] ? schedule+0x90/0x320 [ 229.883449][ C0] ? wq_worker_sleeping+0x66/0x240 [ 229.883476][ C0] ? schedule+0x90/0x320 [ 229.883497][ C0] schedule+0x14b/0x320 [ 229.883521][ C0] worker_thread+0xa2c/0xd50 [ 229.883558][ C0] ? __kthread_parkme+0x169/0x1d0 [ 229.883586][ C0] ? __pfx_worker_thread+0x10/0x10 [ 229.883611][ C0] kthread+0x2f2/0x390 [ 229.883638][ C0] ? __pfx_worker_thread+0x10/0x10 [ 229.883662][ C0] ? __pfx_kthread+0x10/0x10 [ 229.883690][ C0] ret_from_fork+0x4d/0x80 [ 229.883720][ C0] ? __pfx_kthread+0x10/0x10 [ 229.883748][ C0] ret_from_fork_asm+0x1a/0x30 [ 229.883793][ C0] [ 229.957581][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 229.957602][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00175-g6d6444ba8205 #0 [ 229.957631][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 229.957647][ T30] Call Trace: [ 229.957659][ T30] [ 229.957671][ T30] dump_stack_lvl+0x241/0x360 [ 229.957720][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.957777][ T30] ? __pfx__printk+0x10/0x10 [ 229.957811][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 229.957854][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.957881][ T30] ? vscnprintf+0x5d/0x90 [ 229.957912][ T30] panic+0x349/0x860 [ 229.957947][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.957976][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 229.958007][ T30] ? __pfx_panic+0x10/0x10 [ 229.958039][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 229.958078][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.958104][ T30] ? __irq_work_queue_local+0x137/0x410 [ 229.958135][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.958165][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 229.958196][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 229.958224][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 229.958256][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 229.958283][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 229.958316][ T30] watchdog+0x101d/0x1020 [ 229.958349][ T30] ? watchdog+0x1ea/0x1020 [ 229.958387][ T30] ? __pfx_watchdog+0x10/0x10 [ 229.958417][ T30] kthread+0x2f2/0x390 [ 229.958450][ T30] ? __pfx_watchdog+0x10/0x10 [ 229.958479][ T30] ? __pfx_kthread+0x10/0x10 [ 229.958513][ T30] ret_from_fork+0x4d/0x80 [ 229.958549][ T30] ? __pfx_kthread+0x10/0x10 [ 229.958581][ T30] ret_from_fork_asm+0x1a/0x30 [ 229.958636][ T30] [ 229.959435][ T30] Kernel Offset: disabled [ 230.393397][ T30] Rebooting in 86400 seconds..