last executing test programs: 15.256387718s ago: executing program 3 (id=1847): socket(0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) unshare(0x2c060000) unshare(0x24020400) connect$unix(r1, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, 0x0, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x4c, r5, 0x1, 0x0, 0x0, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xab}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18002022}, 0xffffffffffffffe6, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r6, @ANYBLOB="00082cbd7000fddbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b00800000000600110001040000"], 0x4c}, 0x1, 0x0, 0x0, 0x20014}, 0x24048000) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, &(0x7f0000000ec0), &(0x7f0000000f40)=0x80) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$TIOCMGET(r8, 0x5415, &(0x7f00000002c0)) r9 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) r10 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r8, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) socket$can_raw(0x1d, 0x3, 0x1) 14.083248274s ago: executing program 3 (id=1854): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', '', [], 0xa, "9e0f3a4dd706694091c3dad313275fc93784e85e1ee0d86ac9d25a3be1a7821d1168fe076591f0022cc4a0b5d73b3b0e104f145063b8742f449b69d7e53f18cf27255459cb2730b52a70c996b94558fdee94aad4f45d"}, 0x5a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000080601020000000000000000000000000500010006000000d4ac7e058002f0937688f389d0cc4c6b03db69a4be1dea83f0c03459e044f5795da021413293c3859c6b61ae447a7e1b88deb6ffa90383f370edbb6640e7a4c350a902229042f3f7f4e79e478b86da808988bdd7e09ef3f54f84ffff5a287d9495562121e2996002f7f1054ab223fb40168ed3770fd0d1ccf6164826558746b246858beec79b0af6d9173c04860f208046449f76121826ae"], 0x1c}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) 11.24306684s ago: executing program 3 (id=1861): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000480)=""/177, 0xb1}], 0x1, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 9.484404134s ago: executing program 0 (id=1867): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000680)="07c145f2e4a13f01a450c7c3d24f362509aa54ec4f2ec22b4f7ea54715bc3775decb7e3c12f72339aab67e54fb24500c2b3f2ef4d556efb8f5b1", 0x3a}, {&(0x7f0000002900)="ccb0f1104dc7f600b9a3720847aac9a2b51a80af95655526910c1431d37326cf17d44ca3f624286da9a17d8ec43ffa4e99584810546966d0fffc95cf5fe175560742ca5687d6bee70b3645903a33108420903aa541c59e04bfeaa460604649dcaf74d53ddf83e069d8d0df09b6b7191c0bfbd0c1d902aa78ceef3acb7c98228820b57ba692214312e9e49b43a0b9fe75985351a8ec66bca294e27c8abebd428f7de70f8fe6334f87b5666082eb31d9f0b3bf772a71bfde2321b2411d488a3c62aa1605f6d1ec8a22ab724b90a3d38c095c3e3ef04ed1380f3e8e13bfcf42faac14ab07b40ff1", 0xe6}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 9.112677214s ago: executing program 0 (id=1870): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x400c00000000008, 0xb5a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x22) close(r4) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',w\x00dno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) syz_io_uring_submit(r5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000001df3f3a5f8ffffffb703000008000000b704000000008000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x90) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2, 0x4) sendmsg$inet6(r9, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x0, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1486a8b672b985048fcb00000000000000290000"], 0x18}, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)) unshare(0x22000600) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r8}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 7.817130163s ago: executing program 4 (id=1873): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f21e0dd037a3f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000000680)="07c145f2e4a13f01a450c7c3d24f362509aa54ec4f2ec22b4f7ea54715bc3775decb7e3c12f72339aab67e54fb24500c2b3f2ef4d556efb8f5b1", 0x3a}, {&(0x7f0000002900)="ccb0f1104dc7f600b9a3720847aac9a2b51a80af95655526910c1431d37326cf17d44ca3f624286da9a17d8ec43ffa4e99584810546966d0fffc95cf5fe175560742ca5687d6bee70b3645903a33108420903aa541c59e04bfeaa460604649dcaf74d53ddf83e069d8d0df09b6b7191c0bfbd0c1d902aa78ceef3acb7c98228820b57ba692214312e9e49b43a0b9fe75985351a8ec66bca294e27c8abebd428f7de70f8fe6334f87b5666082eb31d9f0b3bf772a71bfde2321b2411d488a3c62aa1605f6d1ec8a22ab724b90a3d38c095c3e3ef04ed1380f3e8e13bfcf42faac14ab07b40ff1", 0xe6}], 0x2}, 0x0) recvmmsg(r1, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}], "2584c4f2a80e9a3265fb6d42981b1f009c7d1dd0b18ffc777138c7fcfaabecb530f9cc7d0673ee29c9c6aec7e8cc9af152d81b805bac98ddb3a899b36b2521c3959a79a0ceb078c288e39b4a8dffd21f3a2f2b4b096932e09e82371ae5339f88808a776150cf61b26b121fb6c1a0f59045b05e5ccf3fac5ec8360931f4efd6289c4e78e37c3700754ece97984632419e295acc9f6a22d52f85"}, 0x111) 7.596714288s ago: executing program 4 (id=1874): syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'wlan1\x00'}) pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0x2, 0xa1, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000008c0)='GPL\x00'}, 0x90) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) epoll_create(0x0) (async) epoll_create(0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r5, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r1, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000000)={{{@in=@private, @in=@private}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000100)) 7.249617158s ago: executing program 2 (id=1875): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000000400)=0x40000a3, 0x4) modify_ldt$read(0x0, &(0x7f0000000180)=""/84, 0x54) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fspick(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}}}, 0x24}}, 0x20000010) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000012c0)={0x2020}, 0x2020) close_range(r5, 0xffffffffffffffff, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r7, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback={0xc00}}, 0x1c) socket$netlink(0x10, 0x3, 0x4) 7.195248599s ago: executing program 4 (id=1876): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c0004800800034000000000080005400c000000080008"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x0, "c9c0e2f5"}, @local=@item_012={0x1, 0x2, 0x4, 'e'}, @main=@item_4={0x3, 0x0, 0xb, "1000090e"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480d, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000640)={0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x41045508, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff}) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x589080, 0x180, 0x39}, 0x18) getdents64(r6, &(0x7f0000000080)=""/41, 0x29) socket(0x10, 0x3, 0x0) 6.009565306s ago: executing program 2 (id=1877): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 5.723941152s ago: executing program 2 (id=1878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x30002004}) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x404) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x1df67, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000002340)='./bus\x00') r3 = open(&(0x7f0000007f80)='./bus\x00', 0x141142, 0x0) ftruncate(r3, 0x2007ffb) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x0, {0x0, 0x400}}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0245720, &(0x7f0000000080)={0x1}) 5.666804219s ago: executing program 3 (id=1879): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x9, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f4188a9876a9431deeb98e3edfaafa03a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738bcc7e1ce3aa7a3df2572a082809f406467bc0f0b47872a2ecc399861b90da1ffcfb35a8f5579b72e3cde817a2a78ff205c6fee57f9177bbeeb2f3d121b9c508660c2d90b0dc3f2412b62e7d99a7dfa6960b663bb8e14764efb33f9465c242b84b75a436ef9af2492b19a15bb9108656d828553e1719de91aa29cb5bf187a0162d50e234b6207725486c9e828d756ff9b6d4f5c4960469dd3a48b4e525f0cbf7158f95d603a37c272f874ee3b", 0xf8, 0x4040004, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) 4.088939528s ago: executing program 3 (id=1881): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3.934959674s ago: executing program 2 (id=1883): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@remote}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) memfd_create(0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000010000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003200)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r8, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) 3.2182691s ago: executing program 4 (id=1887): socket(0x40000000015, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x3}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000300)=ANY=[@ANYBLOB="00180000", @ANYRES16, @ANYBLOB="cf0400000000000000001300000008000300", @ANYBLOB="04"], 0x54}}, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000080), 0xc) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) write$binfmt_script(r2, &(0x7f0000002180), 0xb) recvmmsg(r1, &(0x7f0000004580)=[{{0x0, 0xa00, 0x0}}], 0x300, 0x10062, 0x0) 2.975218869s ago: executing program 0 (id=1888): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x40000d00) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000140)={0x156, @time={0x48}}) eventfd2(0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.97417306s ago: executing program 1 (id=1889): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 2.733320798s ago: executing program 2 (id=1890): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.639572915s ago: executing program 1 (id=1891): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="623bed114d4241fc1c60ea4388a8", 0x5bc}], 0x1}, 0x0) close(r2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={r6, 0xae, 0x3, 0x34325241, 0x3, [r7, 0x0, 0x0, r8], [0x2b8, 0x0, 0x0, 0x400], [], [0x0, 0x0, 0x2, 0x3ff]}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='smackfstransmute', &(0x7f0000000040)='u+\x1d\x00\x00.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000600)='smackfstransmute', &(0x7f0000000700)='{\x00', 0x0) r11 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r11, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r11, 0xab00, r10) ioctl$NBD_DO_IT(r9, 0xab03) ioctl$NBD_CLEAR_SOCK(r11, 0xab04) 2.566006412s ago: executing program 0 (id=1892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) 2.485387665s ago: executing program 2 (id=1893): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) open(0x0, 0x14927e, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x0, &(0x7f0000000140)=0x2958, 0x4) sendmmsg$sock(r2, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) 2.255270031s ago: executing program 1 (id=1894): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) chdir(0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)="623bed114d4241fc1c60ea4388a8", 0x5bc}], 0x1}, 0x0) close(r2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000001c0)={r6, 0xae, 0x3, 0x34325241, 0x3, [r7, 0x0, 0x0, r8], [0x2b8, 0x0, 0x0, 0x400], [], [0x0, 0x0, 0x2, 0x3ff]}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3}) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r9, 0xab00, r10) r11 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r11, 0x1, &(0x7f0000000600)='smackfstransmute', &(0x7f0000000700)='{\x00', 0x0) r12 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r12, 0xab0a, 0x1000001000104) ioctl$NBD_SET_SOCK(r12, 0xab00, r10) ioctl$NBD_DO_IT(r9, 0xab03) ioctl$NBD_CLEAR_SOCK(r12, 0xab04) 1.51558533s ago: executing program 0 (id=1895): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000002e) r3 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000180)='./bus\x00', 0x16d27e, 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='gfs2meta\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x40}, 0x10) sendmsg$tipc(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d1d98db000400000000000000000000a4fa03a746b815b48bdfc144da4cc235d13dea579aacbeb65d2e58f13e9d41ef6061dfc9434d514ed3b4b1d612bf98982a8afda598450d4d84c99f657117e4f3aaa377c89f9f9a8b7f1c43e9a3aeca690059638739a3fcfe14487a84814eafc31abd910a163c71efd7eaff5568c439f32019e5342640a2e9ca3f9ae72e963a3de014646c80f04938a60196c1b6a39414d5b0f3e8717344909a78f364f17778dbb0acae6175769e60dea5c961642509a1053e24b3e826a15da493955a9f2c667a2bedecfe3ff8afedf5d3e04a263a02dcef08ddab1fe7b481afcd15c7d600b68f501918ad"], 0x0, 0x1a}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000240)) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) r7 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$dri(&(0x7f00000003c0), 0x5a9d60b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000340)={0xfffffffffffffdb9, 0x0, 0x0}) 1.402505537s ago: executing program 4 (id=1896): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) lseek(r2, 0x4, 0x0) getdents(0xffffffffffffffff, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x24, 0x0) socket$key(0xf, 0x3, 0x2) gettid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_submit(r5, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r4, &(0x7f0000000080)="4e8fc38e71", 0x5}]) io_submit(r5, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000400)=[{r0, 0x100}, {r2, 0x400}, {r0, 0x482}, {r1, 0x4000}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x40}, {r0}, {r1, 0x1}, {0xffffffffffffffff, 0x400}], 0x9, 0xcb5) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="80010000100013070000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x0) 1.318958711s ago: executing program 1 (id=1897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000002e) r3 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f00000002c0)={0xc023, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = open(&(0x7f0000000180)='./bus\x00', 0x16d27e, 0x0) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280)='gfs2meta\x00', 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x40}, 0x10) sendmsg$tipc(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1d1d98db000400000000000000000000a4fa03a746b815b48bdfc144da4cc235d13dea579aacbeb65d2e58f13e9d41ef6061dfc9434d514ed3b4b1d612bf98982a8afda598450d4d84c99f657117e4f3aaa377c89f9f9a8b7f1c43e9a3aeca690059638739a3fcfe14487a84814eafc31abd910a163c71efd7eaff5568c439f32019e5342640a2e9ca3f9ae72e963a3de014646c80f04938a60196c1b6a39414d5b0f3e8717344909a78f364f17778dbb0acae6175769e60dea5c961642509a1053e24b3e826a15da493955a9f2c667a2bedecfe3ff8afedf5d3e04a263a02dcef08ddab1fe7b481afcd15c7d600b68f501918ad"], 0x0, 0x1a}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(0xffffffffffffffff, 0xc00864c0, &(0x7f0000000240)) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) r6 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$dri(&(0x7f00000003c0), 0x5a9d60b5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r6, 0xc01064c8, &(0x7f0000000340)={0xfffffffffffffdb9, 0x0, 0x0}) 929.332186ms ago: executing program 1 (id=1898): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000030800000000000000000000000000000900010073797a31000000001c0004800800034000000000080005400c000000080008"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x0, "c9c0e2f5"}, @local=@item_012={0x1, 0x2, 0x4, 'e'}, @main=@item_4={0x3, 0x0, 0xb, "1000090e"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480d, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000000640)={0x3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(0x0, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r4, 0x41045508, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r5, 0xc018480b, &(0x7f0000000040)={0x3, 0xffffffff}) syz_open_dev$evdev(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x589080, 0x180, 0x39}, 0x18) getdents64(r6, &(0x7f0000000080)=""/41, 0x29) socket(0x10, 0x3, 0x0) 363.475876ms ago: executing program 0 (id=1899): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000380)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', '', [], 0xa, "9e0f3a4dd706694091c3dad313275fc93784e85e1ee0d86ac9d25a3be1a7821d1168fe076591f0022cc4a0b5d73b3b0e104f145063b8742f449b69d7e53f18cf27255459cb2730b52a70c996b94558fdee94aad4f45d"}, 0x5a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000080601020000000000000000000000000500010007000000d4ac7e058002f0937688f389d0cc4c6b03db69a4be1dea83f0c03459e044f5795da021413293c3859c6b61ae447a7e1b88deb6ffa90383f370edbb6640e7a4c350a902229042f3f7f4e79e478b86da808988bdd7e09ef3f54f84ffff5a287d9495562121e2996002f7f1054ab223fb40168ed3770fd0d1ccf6164826558746b246858beec79b0af6d9173c04860f208046449f76121826ae"], 0x1c}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000000)={@null, @null, 0x2, 0x44}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) 144.896731ms ago: executing program 4 (id=1900): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000000)={@remote}, &(0x7f00000000c0)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) memfd_create(0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000010000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003200)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0xb000001c}) epoll_pwait(r9, &(0x7f0000000180)=[{}], 0x1, 0xa2c, 0x0, 0x0) close(r7) 56.652194ms ago: executing program 3 (id=1901): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32], 0x20}, 0x1, 0xc00000000000000}, 0x0) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r5, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001e40)=""/169, 0xa9}], 0x1, &(0x7f0000001f00)=""/90, 0x5a}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000002200), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 1 (id=1902): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}}) kernel console output (not intermixed with test programs): d, idProduct=db1a, bcdDevice=61.23 [ 447.009686][ T5304] usb 5-1: config 0 descriptor?? [ 447.017167][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.270452][ T9955] FAULT_INJECTION: forcing a failure. [ 447.270452][ T9955] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.279707][ T5303] usb 2-1: GET_CAPABILITIES returned 0 [ 447.289833][ T9955] CPU: 1 UID: 0 PID: 9955 Comm: syz.3.1272 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 447.300228][ T9955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 447.307000][ T5303] usbtmc 2-1:16.0: can't read capabilities [ 447.310298][ T9955] Call Trace: [ 447.310314][ T9955] [ 447.310325][ T9955] dump_stack_lvl+0x241/0x360 [ 447.310364][ T9955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.310392][ T9955] ? __pfx__printk+0x10/0x10 [ 447.310429][ T9955] should_fail_ex+0x3b0/0x4e0 [ 447.310468][ T9955] strncpy_from_user+0x36/0x2e0 [ 447.310514][ T9955] __se_sys_add_key+0xd9/0x490 [ 447.310545][ T9955] ? __pfx___se_sys_add_key+0x10/0x10 [ 447.310574][ T9955] ? __secure_computing+0x125/0x370 [ 447.310604][ T9955] ? __x64_sys_add_key+0x20/0xc0 [ 447.310630][ T9955] do_syscall_64+0xf3/0x230 [ 447.371420][ T9955] ? clear_bhb_loop+0x35/0x90 [ 447.376127][ T9955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.382038][ T9955] RIP: 0033:0x7fe5de977299 [ 447.386473][ T9955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.406188][ T9955] RSP: 002b:00007fe5df78c048 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 447.414703][ T9955] RAX: ffffffffffffffda RBX: 00007fe5deb05f80 RCX: 00007fe5de977299 [ 447.422691][ T9955] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 447.430672][ T9955] RBP: 00007fe5df78c0a0 R08: fffffffffffffffd R09: 0000000000000000 [ 447.438652][ T9955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.446751][ T9955] R13: 000000000000000b R14: 00007fe5deb05f80 R15: 00007ffdcbbe3df8 [ 447.454821][ T9955] [ 447.520358][ T5303] usb 2-1: USB disconnect, device number 26 [ 447.614283][ T9960] gfs2: gfs2 mount does not exist [ 449.273069][ T9982] netlink: 'syz.3.1279': attribute type 4 has an invalid length. [ 449.489609][ T5303] usb 5-1: USB disconnect, device number 24 [ 449.589811][ T9989] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1282'. [ 451.919883][ T6673] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 452.115604][ T6673] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 452.141949][ T6673] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 452.151833][ T6673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.175458][ T6673] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 452.371472][T10024] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 452.480597][ T5303] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 452.630837][T10044] block nbd2: Device being setup by another task [ 452.692590][ T5303] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.704617][T10048] block nbd2: shutting down sockets [ 452.725002][T10047] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 452.735658][ T5303] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 452.748639][ T5303] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 452.758408][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.768862][ T5303] usb 2-1: config 0 descriptor?? [ 452.812739][T10047] fuse: Bad value for 'user_id' [ 452.822411][T10047] fuse: Bad value for 'user_id' [ 453.036997][T10056] gfs2: gfs2 mount does not exist [ 453.261567][ T6673] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 453.466277][ T6673] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 453.496723][ T6673] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 453.525293][ T6673] usb 1-1: USB disconnect, device number 35 [ 454.258490][ T5339] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 454.453370][ T5339] usb 5-1: not running at top speed; connect to a high speed hub [ 454.472486][ T5339] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 454.486243][ T5339] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 454.497534][ T5339] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 454.508698][ T5339] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 454.520999][ T5339] usb 5-1: config 1 has no interface number 1 [ 454.527287][ T5339] usb 5-1: too many endpoints for config 1 interface 4 altsetting 128: 140, using maximum allowed: 30 [ 454.543881][ T5339] usb 5-1: config 1 interface 4 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 454.558004][ T5339] usb 5-1: config 1 interface 4 has no altsetting 0 [ 454.577659][ T5339] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 454.600760][ T5339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.622764][ T5339] usb 5-1: Product: syz [ 454.635659][ T5339] usb 5-1: Manufacturer: syz [ 454.645859][ T5339] usb 5-1: SerialNumber: syz [ 455.820701][ T6673] usb 2-1: USB disconnect, device number 27 [ 455.989960][ T5339] usb 5-1: 0:2 : does not exist [ 456.106472][ T5339] hub 5-1:1.4: bad descriptor, ignoring hub [ 456.126483][ T5339] hub 5-1:1.4: probe with driver hub failed with error -5 [ 456.217149][ T5339] usb 5-1: USB disconnect, device number 25 [ 456.579020][ T9496] udevd[9496]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.940211][T10112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1313'. [ 458.018698][ T9712] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 458.240851][ T9712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.258637][ T9712] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 458.278957][ T9712] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 458.288063][ T9712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.336222][ T9712] usb 1-1: config 0 descriptor?? [ 458.478483][ T6673] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 458.674135][ T6673] usb 2-1: not running at top speed; connect to a high speed hub [ 458.690958][ T6673] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 458.708391][ T6673] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 458.725644][ T6673] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 458.739023][ T6673] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 458.764091][ T6673] usb 2-1: config 1 has no interface number 1 [ 458.778590][ T6673] usb 2-1: too many endpoints for config 1 interface 4 altsetting 128: 140, using maximum allowed: 30 [ 458.810643][ T6673] usb 2-1: config 1 interface 4 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 458.832313][ T6673] usb 2-1: config 1 interface 4 has no altsetting 0 [ 458.848175][ T6673] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.867912][ T6673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.888517][ T6673] usb 2-1: Product: syz [ 458.892826][ T6673] usb 2-1: Manufacturer: syz [ 458.897514][ T6673] usb 2-1: SerialNumber: syz [ 459.010156][T10156] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1328'. [ 459.209454][ T6673] usb 2-1: 0:2 : does not exist [ 459.287648][ T6673] hub 2-1:1.4: bad descriptor, ignoring hub [ 459.297336][ T6673] hub 2-1:1.4: probe with driver hub failed with error -5 [ 459.358565][ T6673] usb 2-1: USB disconnect, device number 28 [ 459.676079][ T9496] udevd[9496]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.262973][ T5339] usb 1-1: USB disconnect, device number 36 [ 462.735532][T10205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.819094][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1345'. [ 464.958662][T10221] sit0: left promiscuous mode [ 465.177098][T10230] Invalid logical block size (3774) [ 465.747118][T10223] sit0: entered promiscuous mode [ 465.850258][T10232] gfs2: gfs2 mount does not exist [ 467.264177][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1352'. [ 468.163322][T10258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.355988][T10260] overlayfs: failed to resolve './file0': -2 [ 469.980920][T10262] netlink: 'syz.1.1357': attribute type 4 has an invalid length. [ 470.100248][T10263] netlink: 'syz.1.1357': attribute type 4 has an invalid length. [ 472.588418][ T5279] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 472.913479][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.930658][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 472.954480][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 472.980438][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.030480][ T5279] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.060037][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 473.098725][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.108593][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 473.118983][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 473.138375][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 473.154668][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 473.163153][ T5279] usb 1-1: config 0 descriptor?? [ 473.168485][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 473.176883][T10286] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 473.416621][T10300] gfs2: gfs2 mount does not exist [ 473.490208][T10302] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 473.643575][ T5279] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 473.686869][ T5279] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 473.734235][ T5279] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 473.857744][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.889799][ T5279] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 473.927832][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.282622][T10290] chnl_net:caif_netlink_parms(): no params data found [ 474.306276][ T6673] usb 1-1: USB disconnect, device number 37 [ 474.723341][T10290] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.750089][T10290] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.777871][T10290] bridge_slave_0: entered allmulticast mode [ 474.805899][T10290] bridge_slave_0: entered promiscuous mode [ 474.847410][T10290] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.872335][T10290] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.898597][T10290] bridge_slave_1: entered allmulticast mode [ 474.917574][T10290] bridge_slave_1: entered promiscuous mode [ 474.940767][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1371'. [ 475.258038][T10336] Invalid logical block size (3774) [ 475.330034][ T5222] Bluetooth: hci5: command tx timeout [ 475.832695][T10290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.907660][T10290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.687911][T10290] team0: Port device team_slave_0 added [ 476.866537][T10290] team0: Port device team_slave_1 added [ 477.130741][T10290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.180063][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.366150][ T5222] Bluetooth: hci5: command tx timeout [ 477.387075][T10290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.444167][T10290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.504603][T10290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.548323][T10290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.415797][T10290] hsr_slave_0: entered promiscuous mode [ 478.469981][T10290] hsr_slave_1: entered promiscuous mode [ 478.488417][T10290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.488484][ T5279] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 478.504833][T10290] Cannot create hsr debugfs directory [ 478.726498][ T5279] usb 5-1: Using ep0 maxpacket: 32 [ 478.753778][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 478.784675][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 478.824460][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 478.858832][ T5279] usb 5-1: New USB device found, idVendor=0cde, idProduct=0012, bcdDevice=73.be [ 478.882221][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.904218][ T5279] usb 5-1: Product: syz [ 478.908696][ T5279] usb 5-1: Manufacturer: syz [ 478.915278][ T5279] usb 5-1: SerialNumber: syz [ 478.957934][ T5279] usb 5-1: config 0 descriptor?? [ 478.980199][ T5279] usb 5-1: Could not find all expected endpoints [ 479.197880][ T5279] usb 5-1: USB disconnect, device number 26 [ 479.244527][T10290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 479.295605][T10290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 479.374204][T10290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.418529][ T5222] Bluetooth: hci5: command tx timeout [ 479.638104][T10290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 479.667044][T10290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 479.732219][T10290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.996132][T10290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 480.022009][T10290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 480.059469][T10290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.190234][T10290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 480.221203][T10290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 480.268482][T10290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.358527][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 480.486644][T10392] gfs2: gfs2 mount does not exist [ 480.569292][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 480.593026][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83 [ 480.641611][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.678159][ T9] usb 3-1: Product: syz [ 480.709697][ T9] usb 3-1: Manufacturer: syz [ 480.723620][ T9] usb 3-1: SerialNumber: syz [ 480.781515][ T9] usb 3-1: config 0 descriptor?? [ 480.842400][T10290] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 480.895951][T10290] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 480.965559][T10290] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 481.026346][T10290] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.033364][ T9] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device: [ 481.033391][ T9] 00 00 00 00 00 00 00 00 [ 481.033505][ T9] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 481.324227][T10395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.377450][T10395] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address [ 481.428529][T10395] bond0: (slave ip6tnl0): Error -95 calling set_mac_address [ 481.499020][ T5222] Bluetooth: hci5: command tx timeout [ 481.712355][T10290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.774969][T10290] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.837856][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.845112][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.876166][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.883459][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.037823][T10290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 482.110715][T10290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 482.197888][T10415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 482.609204][ T2912] bridge_slave_1: left allmulticast mode [ 482.638426][ T2912] bridge_slave_1: left promiscuous mode [ 482.647719][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.690428][ T2912] bridge_slave_0: left allmulticast mode [ 482.697300][ T2912] bridge_slave_0: left promiscuous mode [ 482.708902][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.117271][ T5339] usb 3-1: USB disconnect, device number 22 [ 484.165737][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 484.200856][ T2912] bond_slave_0: left promiscuous mode [ 484.232953][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.259925][ T2912] bond_slave_1: left promiscuous mode [ 484.317451][ T2912] bond0 (unregistering): Released all slaves [ 484.368081][ T2912] bond1 (unregistering): Released all slaves [ 484.531510][T10444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 484.631789][T10444] team_slave_0: entered promiscuous mode [ 484.637969][T10444] team_slave_1: entered promiscuous mode [ 484.712190][T10444] macvtap1: entered promiscuous mode [ 484.748493][T10444] team0: entered promiscuous mode [ 484.780937][T10444] macvtap1: entered allmulticast mode [ 484.816108][T10444] team0: entered allmulticast mode [ 484.846520][T10444] team_slave_0: entered allmulticast mode [ 484.872807][T10444] team_slave_1: entered allmulticast mode [ 484.912711][T10444] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 484.987169][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1403'. [ 485.416561][T10290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 485.955126][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 485.965972][ T5235] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 485.975138][ T5235] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 485.984211][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 485.994117][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 486.001661][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 486.073478][ T2912] hsr_slave_0: left promiscuous mode [ 486.095028][ T2912] hsr_slave_1: left promiscuous mode [ 486.115728][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.133797][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.153928][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.173090][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.252827][ T2912] veth1_macvtap: left promiscuous mode [ 486.267193][ T2912] veth0_macvtap: left promiscuous mode [ 486.286720][ T2912] veth1_vlan: left promiscuous mode [ 486.306547][ T2912] veth0_vlan: left promiscuous mode [ 486.966041][T10506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.200155][ T6673] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 487.418536][ T6673] usb 5-1: Using ep0 maxpacket: 8 [ 487.471063][ T6673] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 487.526094][ T6673] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 487.547535][ T6673] usb 5-1: Product: syz [ 487.555685][ T6673] usb 5-1: Manufacturer: syz [ 487.561693][ T6673] usb 5-1: SerialNumber: syz [ 487.597600][ T6673] usb 5-1: config 0 descriptor?? [ 487.686421][ T6673] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 491.998397][ T6673] gspca_zc3xx: reg_w_i err -110 [ 491.998428][ T5222] Bluetooth: hci1: command tx timeout [ 492.003415][ T6673] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 492.287441][T10517] gfs2: gfs2 mount does not exist [ 492.401205][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 492.471559][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 493.146164][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1410'. [ 493.262660][ T5304] usb 5-1: USB disconnect, device number 27 [ 493.471054][T10290] veth0_vlan: entered promiscuous mode [ 493.486753][T10290] veth1_vlan: entered promiscuous mode [ 493.736184][T10290] veth0_macvtap: entered promiscuous mode [ 493.759057][T10481] chnl_net:caif_netlink_parms(): no params data found [ 493.808128][T10290] veth1_macvtap: entered promiscuous mode [ 493.897329][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.909166][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.927626][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.940249][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.958089][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.968950][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.982800][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.993781][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.006118][T10290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.035694][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1421'. [ 494.046429][T10539] netlink: 'syz.1.1423': attribute type 4 has an invalid length. [ 494.058491][ T5222] Bluetooth: hci1: command tx timeout [ 494.094918][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.107571][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.118567][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.129846][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.141039][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.162314][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.176232][T10290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.192305][T10290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.205547][T10290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.319802][T10290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.337211][T10290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.346598][T10290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.397748][T10290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.434194][T10548] gfs2: gfs2 mount does not exist [ 494.460656][T10549] gfs2: gfs2 mount does not exist [ 494.587572][T10481] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.620653][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.645821][T10481] bridge_slave_0: entered allmulticast mode [ 494.667646][T10481] bridge_slave_0: entered promiscuous mode [ 494.714924][T10481] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.728868][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.739145][T10481] bridge_slave_1: entered allmulticast mode [ 494.766125][T10481] bridge_slave_1: entered promiscuous mode [ 495.077220][ T2912] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.842903][T10481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.879945][T10559] netlink: 'syz.4.1428': attribute type 4 has an invalid length. [ 495.981792][ T2912] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.060435][T10481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.130125][T10559] netlink: 'syz.4.1428': attribute type 4 has an invalid length. [ 496.139022][ T5222] Bluetooth: hci1: command tx timeout [ 496.198099][ T2912] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.272150][T10572] netlink: 'syz.2.1432': attribute type 4 has an invalid length. [ 496.314833][T10481] team0: Port device team_slave_0 added [ 496.333678][T10481] team0: Port device team_slave_1 added [ 496.375801][ T2912] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.398963][ T5304] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 496.424473][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.445561][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.531643][T10481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.548785][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.575850][T10481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.616588][T10481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.633296][ T5304] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 496.645128][ T5304] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 496.657961][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.684598][ T5304] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 496.696116][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.706741][T10481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.726203][T10571] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 496.738029][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.762725][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.926981][T10481] hsr_slave_0: entered promiscuous mode [ 496.964829][T10481] hsr_slave_1: entered promiscuous mode [ 497.039676][ T5304] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 497.087531][ T5304] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input19 [ 497.153487][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 497.191487][ T2912] bridge_slave_1: left allmulticast mode [ 497.212068][T10588] gfs2: gfs2 mount does not exist [ 497.213047][ T2912] bridge_slave_1: left promiscuous mode [ 497.228430][ T5304] usb 5-1: USB disconnect, device number 28 [ 497.266757][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.318935][ T2912] bridge_slave_0: left allmulticast mode [ 497.324661][ T2912] bridge_slave_0: left promiscuous mode [ 497.371852][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.421718][T10592] gfs2: gfs2 mount does not exist [ 498.219586][ T5222] Bluetooth: hci1: command tx timeout [ 498.659543][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.694485][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.723634][ T2912] bond0 (unregistering): Released all slaves [ 498.825678][T10601] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 499.575735][ T2912] hsr_slave_0: left promiscuous mode [ 499.621524][ T2912] hsr_slave_1: left promiscuous mode [ 499.643262][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.666749][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.703296][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.717582][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.769124][T10639] gfs2: gfs2 mount does not exist [ 499.813055][ T2912] veth1_macvtap: left promiscuous mode [ 499.844337][ T2912] veth0_macvtap: left promiscuous mode [ 499.858991][ T2912] veth1_vlan: left promiscuous mode [ 499.864394][ T2912] veth0_vlan: left promiscuous mode [ 500.736747][T10661] gfs2: gfs2 mount does not exist [ 500.908851][ T6673] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 501.107063][ T6673] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 501.137147][ T6673] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 501.153060][ T6673] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 501.174256][ T6673] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.229961][T10658] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 501.484092][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 501.604226][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 501.846841][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.858885][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.660366][T10655] netlink: 'syz.4.1453': attribute type 4 has an invalid length. [ 502.698768][T10651] netlink: 'syz.4.1453': attribute type 4 has an invalid length. [ 502.827900][ T6673] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 502.878459][ T6673] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input20 [ 502.949117][ T6673] usb 5-1: USB disconnect, device number 29 [ 502.955100][ C0] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 503.492879][T10481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 503.534147][T10481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 503.584159][T10481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 503.620025][T10481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.927869][T10481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.955874][T10481] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.011923][ T5318] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.019435][ T5318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.075269][ T5339] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.082557][ T5339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.448516][T10481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.678053][T10481] veth0_vlan: entered promiscuous mode [ 505.725611][T10481] veth1_vlan: entered promiscuous mode [ 505.894852][T10481] veth0_macvtap: entered promiscuous mode [ 505.944064][T10481] veth1_macvtap: entered promiscuous mode [ 506.151693][ T5318] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 511.074798][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.114174][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.215994][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.284129][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.315899][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.347612][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.396160][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.438466][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.505815][T10481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.548118][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.586837][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.625200][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.668316][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.716328][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.757049][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.816304][T10481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.847696][T10481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.895004][T10481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.934167][T10762] netlink: 'syz.3.1474': attribute type 4 has an invalid length. [ 511.994967][T10481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.024062][T10481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.083253][T10481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.127084][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 512.137326][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 512.150454][T10481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.179669][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 512.191353][T10757] netlink: 'syz.3.1474': attribute type 4 has an invalid length. [ 512.192011][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 512.211219][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 512.228838][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.608395][ T5279] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 512.791124][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.811694][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.819833][ T5279] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 255, changing to 11 [ 512.868398][ T5279] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 59391, setting to 1024 [ 512.915856][ T5279] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 512.947269][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.966318][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.989803][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.994393][T10757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 513.131164][T10765] chnl_net:caif_netlink_parms(): no params data found [ 513.288911][ T5279] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 513.310256][ T5279] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input21 [ 513.359158][ T5279] usb 4-1: USB disconnect, device number 35 [ 513.365134][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 513.517740][T10765] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.538571][T10765] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.546172][T10765] bridge_slave_0: entered allmulticast mode [ 513.548611][ T5318] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 513.555764][T10765] bridge_slave_0: entered promiscuous mode [ 513.581427][T10765] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.598659][T10765] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.616349][T10765] bridge_slave_1: entered allmulticast mode [ 513.624512][T10765] bridge_slave_1: entered promiscuous mode [ 513.755549][ T5318] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=68.24 [ 513.762256][T10765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.785801][ T5318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.798325][ T5318] usb 1-1: Product: syz [ 513.802549][ T5318] usb 1-1: Manufacturer: syz [ 513.813239][ T5318] usb 1-1: SerialNumber: syz [ 513.820620][T10765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.827458][ T5318] usb 1-1: config 0 descriptor?? [ 513.846958][ T5318] ipw 1-1:0.0: IPWireless converter converter detected [ 514.045010][T10765] team0: Port device team_slave_0 added [ 514.060974][T10783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.065416][T10765] team0: Port device team_slave_1 added [ 514.105302][T10783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.165408][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 514.188809][T10765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 514.206369][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.218612][T10783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1406'. [ 514.249642][T10794] 9pnet: Could not find request transport: rdmaÀ [ 514.256836][T10765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 514.293587][T10765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 514.300881][ T5222] Bluetooth: hci2: command tx timeout [ 514.323507][ T5279] usb 1-1: USB disconnect, device number 38 [ 514.332265][ T5279] ipw 1-1:0.0: device disconnected [ 514.343496][T10765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 514.468598][T10765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.624616][T10765] hsr_slave_0: entered promiscuous mode [ 514.639687][T10765] hsr_slave_1: entered promiscuous mode [ 514.648958][T10765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.677648][T10765] Cannot create hsr debugfs directory [ 514.917176][T10811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1485'. [ 515.252303][T10765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.269053][ T5304] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 515.433327][T10765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.472380][T10823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.514603][ T5304] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 515.550108][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 515.618594][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 515.688571][ T5304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.726848][T10765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.726979][ T5304] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.789308][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.864253][ T5304] usb 1-1: config 0 descriptor?? [ 515.894591][T10813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 515.964919][T10765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.379650][ T5222] Bluetooth: hci2: command tx timeout [ 516.383000][ T5304] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 516.453088][ T5304] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 516.600775][T10813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.601675][ T5304] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 516.679385][T10813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.699626][T10765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 516.700539][ T5304] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 516.748058][T10765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 516.880617][T10765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 516.952956][T10765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.031319][ T5304] usb 1-1: USB disconnect, device number 39 [ 517.279174][T10765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.323940][T10765] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.351107][ T5318] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.358387][ T5318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.389697][ T5318] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.396971][ T5318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.428387][ T6673] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 517.649044][ T6673] usb 3-1: Using ep0 maxpacket: 16 [ 517.663413][ T6673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.703978][ T6673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.730705][ T6673] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 517.760016][ T6673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.792553][ T6673] usb 3-1: config 0 descriptor?? [ 518.461425][ T5222] Bluetooth: hci2: command tx timeout [ 518.862633][ T6673] smartjoyplus 0003:6666:8802.001D: item fetching failed at offset 2/5 [ 518.934212][ T6673] smartjoyplus 0003:6666:8802.001D: parse failed [ 518.951571][T10765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.958678][ T6673] smartjoyplus 0003:6666:8802.001D: probe with driver smartjoyplus failed with error -22 [ 518.976884][T10852] gfs2: gfs2 mount does not exist [ 519.158607][ T5279] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 519.205831][T10765] veth0_vlan: entered promiscuous mode [ 519.310477][T10765] veth1_vlan: entered promiscuous mode [ 519.347527][T10844] mmap: syz.3.1496 (10844): VmData 25841664 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 519.370761][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 519.391828][ T5279] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 519.411779][T10765] veth0_macvtap: entered promiscuous mode [ 519.427737][ T5279] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 519.456071][T10765] veth1_macvtap: entered promiscuous mode [ 519.480046][ T5279] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 519.514005][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.540327][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.559375][ T5279] usb 1-1: config 0 descriptor?? [ 519.572648][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.591024][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.602552][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.615688][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.627825][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.638739][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.663668][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.678631][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.700457][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.751654][T10765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.788041][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.833373][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.855182][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.866454][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.877164][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.904390][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.922834][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.947274][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.959728][T10765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.971651][T10765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.984885][T10765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.024158][T10765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.047444][T10765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.060250][T10765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.069477][T10765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.168811][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1501'. [ 520.227378][ T5279] usbhid 1-1:0.0: can't add hid device: -71 [ 520.244515][ T5279] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 520.253531][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.266163][ T7584] usb 3-1: USB disconnect, device number 23 [ 520.292592][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.305638][ T5279] usb 1-1: USB disconnect, device number 40 [ 520.427144][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.450825][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.538873][ T5222] Bluetooth: hci2: command tx timeout [ 520.604987][T10872] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1502'. [ 520.928478][ T7584] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 521.608479][ T5339] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 521.638558][ T7584] usb 3-1: Using ep0 maxpacket: 8 [ 521.648646][ T7584] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 521.666306][ T7584] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 521.682759][ T7584] usb 3-1: Product: syz [ 521.687727][ T7584] usb 3-1: Manufacturer: syz [ 521.694552][ T7584] usb 3-1: SerialNumber: syz [ 521.729595][T10894] gfs2: gfs2 mount does not exist [ 521.739101][ T7584] usb 3-1: config 0 descriptor?? [ 521.799533][ T7584] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 521.831817][ T5339] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 521.873694][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 521.904529][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 521.925909][ T5339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.941093][ T5339] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.955227][ T5339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.978824][ T5339] usb 1-1: config 0 descriptor?? [ 521.988735][T10880] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 522.188465][ T5279] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 522.320852][T10903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.486995][ T7584] gspca_zc3xx: reg_w_i err -110 [ 523.502775][ T5339] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 523.518444][ T7584] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 523.538714][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 523.549064][ T5279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 523.561417][ T5339] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 523.580207][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 523.592675][ T5339] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 523.602025][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 523.697052][ T5339] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 523.719159][T10880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.739182][ T5279] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 523.751232][ T7584] usb 3-1: USB disconnect, device number 24 [ 523.760455][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.769489][T10880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.791094][ T5279] usb 4-1: Product: syz [ 523.795350][ T5279] usb 4-1: Manufacturer: syz [ 523.845261][ T5279] usb 4-1: SerialNumber: syz [ 523.860511][ T5279] usb 4-1: config 0 descriptor?? [ 523.895027][T10898] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 523.997453][ T5339] usb 1-1: USB disconnect, device number 41 [ 524.053492][ C0] eth0: bad gso: type: 1, size: 1408 [ 524.144798][ T5279] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 524.175499][ T5279] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input22 [ 524.682181][T10898] Bluetooth: hci3: Opcode 0x0c20 failed: -4 [ 524.710669][ C1] powermate: config urb returned -71 [ 524.711330][ T9] usb 4-1: USB disconnect, device number 36 [ 524.715997][ C1] powermate: usb_submit_urb(config) failed [ 524.722397][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 524.730245][ T6673] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 525.000262][ T6673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.023455][ T6673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.052571][ T6673] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.080416][ T6673] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.103255][ T6673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.128001][ T6673] usb 3-1: config 0 descriptor?? [ 525.438855][T10925] ptrace attach of "./syz-executor exec"[10765] was attempted by " [ 525.512409][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1519'. [ 525.913796][ T6673] usbhid 3-1:0.0: can't add hid device: -71 [ 525.949655][ T6673] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 526.063789][ T6673] usb 3-1: USB disconnect, device number 25 [ 526.379212][ C0] eth0: bad gso: type: 1, size: 1408 [ 526.458619][T10945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.560167][ T6673] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 527.728579][ T5279] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 527.748896][ T6673] usb 5-1: Using ep0 maxpacket: 16 [ 527.771259][ T6673] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 527.809228][ T6673] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.858375][ T6673] usb 5-1: config 0 has no interface number 0 [ 527.899443][ T6673] usb 5-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.920580][ T5279] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 527.935981][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 527.984635][ T6673] usb 5-1: config 0 interface 155 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 527.988607][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 528.034389][ T6673] usb 5-1: config 0 interface 155 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 528.069585][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 528.113556][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 528.126801][ T6673] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=9f.7a [ 528.170777][ T5279] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 528.174851][ T6673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.203537][ T6673] usb 5-1: Product: syz [ 528.207762][ T6673] usb 5-1: Manufacturer: syz [ 528.217151][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.248563][ T6673] usb 5-1: SerialNumber: syz [ 528.269979][ T5279] usb 4-1: config 0 descriptor?? [ 528.294726][T10949] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 528.299566][ T6673] usb 5-1: config 0 descriptor?? [ 528.330658][ T6673] kvaser_usb 5-1:0.155: Cannot get usb endpoint(s) [ 528.556208][ T5339] usb 5-1: USB disconnect, device number 30 [ 528.737409][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.757378][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.765679][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.773809][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.783014][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.801464][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.821209][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.833679][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.843443][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.854865][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.868525][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.925171][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.934200][T10949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.948392][T10949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.958515][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.982320][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 528.997229][ T5279] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 529.008895][ T5279] plantronics 0003:047F:FFFF.001F: No inputs registered, leaving [ 529.024128][ T5279] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 529.064407][ T5279] usb 4-1: USB disconnect, device number 37 [ 529.447423][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 529.618644][ T6673] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 529.809080][ T6673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.874014][ T6673] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.920791][ T6673] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 530.055209][ T6673] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 530.156787][ T6673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.365460][ T6673] usb 3-1: config 0 descriptor?? [ 530.543473][T10995] loop0: detected capacity change from 0 to 127 [ 530.886076][ T5339] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 531.090164][ T5339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 531.123670][ T5339] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 531.138950][ T6673] usbhid 3-1:0.0: can't add hid device: -71 [ 531.146511][ T5339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.156947][ T6673] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 531.165026][ T5339] usb 1-1: Product: syz [ 531.165053][ T5339] usb 1-1: Manufacturer: syz [ 531.165072][ T5339] usb 1-1: SerialNumber: syz [ 531.181928][ T5339] usb 1-1: config 0 descriptor?? [ 531.200551][ T6673] usb 3-1: USB disconnect, device number 26 [ 531.203174][ T5339] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 531.398586][ T5273] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 531.481710][ T5339] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 531.533850][T10743] udevd[10743]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.588369][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 531.603271][ T5273] usb 5-1: config 0 has an invalid interface number: 155 but max is 0 [ 531.612188][ T5273] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.625312][ T5273] usb 5-1: config 0 has no interface number 0 [ 531.632026][ T5273] usb 5-1: config 0 interface 155 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 531.634121][ T5304] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 531.654146][ T5273] usb 5-1: config 0 interface 155 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 531.675679][T10995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.693267][ T5273] usb 5-1: config 0 interface 155 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 0 [ 531.700131][T10995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.722824][ T6673] usb 1-1: USB disconnect, device number 42 [ 531.732333][ T5273] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=9f.7a [ 531.768348][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.786893][ T5273] usb 5-1: Product: syz [ 531.807245][ T5273] usb 5-1: Manufacturer: syz [ 531.814238][ T5273] usb 5-1: SerialNumber: syz [ 531.827400][ T5273] usb 5-1: config 0 descriptor?? [ 531.836023][ T5273] kvaser_usb 5-1:0.155: Cannot get usb endpoint(s) [ 531.879929][ T5304] usb 4-1: not running at top speed; connect to a high speed hub [ 531.889216][ T5304] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 531.897274][ T5304] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 531.913653][ T5304] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 531.934413][ T5304] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 531.943948][ T5304] usb 4-1: config 1 has no interface number 1 [ 531.953805][ T5304] usb 4-1: too many endpoints for config 1 interface 4 altsetting 128: 140, using maximum allowed: 30 [ 531.965221][ T5304] usb 4-1: config 1 interface 4 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 531.979781][ T5304] usb 4-1: config 1 interface 4 has no altsetting 0 [ 531.989619][ T5304] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.999822][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.007864][ T5304] usb 4-1: Product: syz [ 532.012725][ T5304] usb 4-1: Manufacturer: syz [ 532.017716][ T5304] usb 4-1: SerialNumber: syz [ 532.040385][ T5273] usb 5-1: USB disconnect, device number 31 [ 532.078369][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 532.302193][ T9] usb 3-1: config index 0 descriptor too short (expected 45, got 36) [ 532.433259][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.566502][ T5304] usb 4-1: 0:2 : does not exist [ 532.695595][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 532.880239][ C0] eth0: bad gso: type: 1, size: 1408 [ 532.930346][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 532.943348][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.959656][ T5304] hub 4-1:1.4: bad descriptor, ignoring hub [ 532.965632][ T5304] hub 4-1:1.4: probe with driver hub failed with error -5 [ 532.998362][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 533.007475][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.050767][ T5304] usb 4-1: USB disconnect, device number 38 [ 533.064420][ T9] usb 3-1: config 0 descriptor?? [ 533.070913][T11033] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1555'. [ 533.101308][T11021] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 533.148522][T11033] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 533.390068][T10743] udevd[10743]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.468880][T11044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1558'. [ 533.590260][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.653517][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.705536][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.728600][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.736074][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.778343][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.783762][T11021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.785830][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.785867][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.810795][T11021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.888475][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.896042][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.937591][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.958606][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.966166][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 533.988915][ T5273] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 533.999212][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 534.016997][ T9] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 534.035065][ T9] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 534.065178][ T9] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 534.107073][ T9] usb 3-1: USB disconnect, device number 27 [ 534.129299][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 534.142909][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 534.153560][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 534.161497][ T5273] usb 4-1: device descriptor read/64, error -71 [ 534.173501][ T5235] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 534.189722][ T5235] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 534.197931][ T5235] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 534.327096][ T2912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.416328][ T2912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.430629][ T5273] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 534.510609][ C0] eth0: bad gso: type: 1, size: 1408 [ 534.607824][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.616971][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.624713][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.628392][ T5273] usb 4-1: device descriptor read/64, error -71 [ 534.633263][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.646001][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.656367][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.666943][ T2912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.674544][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.690012][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.699289][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.706734][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.714253][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.721980][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.730948][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.739747][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.747191][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.755622][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.766291][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.774224][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.782519][ T5273] usb usb4-port1: attempt power cycle [ 534.792124][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.811903][ T2912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.811999][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.841735][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.857838][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.869311][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.870467][T11065] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1565'. [ 534.876746][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.893003][T11065] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 534.897376][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 534.913673][T11065] 0ªX¹¦Dö»: entered allmulticast mode [ 534.926005][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.933615][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.946097][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.957626][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.971017][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 534.984381][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 535.004146][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 535.024741][ T5304] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 535.051194][ T2912] bridge_slave_1: left allmulticast mode [ 535.052300][ T5304] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.09 Device [syz0] on syz0 [ 535.066917][ T2912] bridge_slave_1: left promiscuous mode [ 535.074558][ T2912] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.091409][ T2912] bridge_slave_0: left allmulticast mode [ 535.097368][ T2912] bridge_slave_0: left promiscuous mode [ 535.110539][ T2912] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.122398][ T9] usb 3-1: config 0 has no interfaces? [ 535.128053][ T9] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 535.151088][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.182557][ T9] usb 3-1: config 0 descriptor?? [ 535.208699][ T5273] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 535.257223][ T5273] usb 4-1: device descriptor read/8, error -71 [ 535.365999][T11072] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1568'. [ 535.435254][T11072] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 535.539588][ T5273] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 535.601621][ T5273] usb 4-1: device descriptor read/8, error -71 [ 535.748789][ T5273] usb usb4-port1: unable to enumerate USB device [ 535.979674][ T2912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 535.993181][ T2912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.006593][ T2912] bond0 (unregistering): Released all slaves [ 536.085018][T11053] chnl_net:caif_netlink_parms(): no params data found [ 536.300116][ T5222] Bluetooth: hci4: command tx timeout [ 537.700076][ T5303] usb 3-1: USB disconnect, device number 28 [ 538.065109][ T5279] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 538.089256][T11053] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.097458][T11053] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.119072][T11053] bridge_slave_0: entered allmulticast mode [ 538.241267][T11053] bridge_slave_0: entered promiscuous mode [ 538.266111][T11053] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.310397][T11053] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.398493][ T5222] Bluetooth: hci4: command tx timeout [ 538.423798][T11053] bridge_slave_1: entered allmulticast mode [ 538.600206][T11053] bridge_slave_1: entered promiscuous mode [ 539.035306][ T5279] usb 4-1: not running at top speed; connect to a high speed hub [ 539.089792][ T5279] usb 4-1: config 1 has an invalid interface number: 4 but max is 2 [ 539.119856][ T2912] hsr_slave_0: left promiscuous mode [ 539.128512][ T5279] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 539.709798][ T2912] hsr_slave_1: left promiscuous mode [ 539.774352][ T5279] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 539.786216][ T5279] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 539.795713][ T5279] usb 4-1: config 1 has no interface number 1 [ 539.802766][ T5279] usb 4-1: too many endpoints for config 1 interface 4 altsetting 128: 140, using maximum allowed: 30 [ 539.814876][ T5279] usb 4-1: config 1 interface 4 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 539.848595][ T5279] usb 4-1: config 1 interface 4 has no altsetting 0 [ 539.858016][ T5279] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 539.886762][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.909117][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.918718][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.941703][ T2912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.118325][ T5279] usb 4-1: Product: syz [ 540.129148][ T5279] usb 4-1: Manufacturer: syz [ 540.138346][ T2912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.138440][ T5279] usb 4-1: SerialNumber: syz [ 540.628556][ T5222] Bluetooth: hci4: command tx timeout [ 540.951672][ T5279] usb 4-1: 0:2 : does not exist [ 540.955403][ T2912] veth1_macvtap: left promiscuous mode [ 540.993743][ T2912] veth0_macvtap: left promiscuous mode [ 541.335108][ T2912] veth1_vlan: left promiscuous mode [ 541.393605][ T5279] hub 4-1:1.4: bad descriptor, ignoring hub [ 541.399782][ T5279] hub 4-1:1.4: probe with driver hub failed with error -5 [ 541.401773][ T2912] veth0_vlan: left promiscuous mode [ 541.448533][ T5279] usb 4-1: USB disconnect, device number 43 [ 541.751103][T10743] udevd[10743]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.659123][ T5279] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 542.662010][ T2912] team0 (unregistering): Port device team_slave_1 removed [ 542.698616][ T5222] Bluetooth: hci4: command tx timeout [ 543.039163][ T5279] usb 4-1: New USB device found, idVendor=058f, idProduct=3820, bcdDevice=bf.93 [ 543.130837][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.338596][ T5279] usb 4-1: Product: syz [ 543.349050][ T5279] usb 4-1: Manufacturer: syz [ 543.384476][ T5279] usb 4-1: SerialNumber: syz [ 543.442741][ T5279] usb 4-1: config 0 descriptor?? [ 543.453850][ T2912] team0 (unregistering): Port device team_slave_0 removed [ 543.730167][ T5279] usb 4-1: USB disconnect, device number 44 [ 544.116601][T11053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.159764][T11053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.290516][T11166] fuse: Bad value for 'fd' [ 544.418359][T11053] team0: Port device team_slave_0 added [ 544.858470][ T5222] Bluetooth: hci4: command tx timeout [ 545.177752][T11053] team0: Port device team_slave_1 added [ 545.829299][T11053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 545.853936][T11053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.902293][T11053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 545.925371][T11053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 545.932605][T11053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 545.975272][T11053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.289502][T11053] hsr_slave_0: entered promiscuous mode [ 546.336238][T11053] hsr_slave_1: entered promiscuous mode [ 546.370166][T11053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.414493][T11053] Cannot create hsr debugfs directory [ 546.906576][T11202] netlink: 'syz.2.1599': attribute type 72 has an invalid length. [ 546.924893][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1599'. [ 547.538377][ T2636] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 547.760623][ T2636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.787458][ T2636] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.824318][ T2636] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 547.875550][ T2636] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 547.917651][ T2636] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.938408][ T5279] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 547.981296][ T2636] usb 3-1: config 0 descriptor?? [ 548.097840][T11053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 548.127845][T11053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 548.162175][ T5279] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 548.174879][T11053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 548.188330][ T5279] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.214158][ T5279] usb 1-1: config 0 descriptor?? [ 548.255318][T11053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 548.460005][ T5279] usb 1-1: Cannot read MAC address [ 548.465478][ T5279] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 548.527137][T11053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.548977][ T5304] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 548.596932][T11053] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.631130][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.639021][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.670215][ T2636] usbhid 3-1:0.0: can't add hid device: -71 [ 548.676317][ T2636] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 548.693462][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.700749][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.710390][T11229] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 548.720337][ T2636] usb 3-1: USB disconnect, device number 29 [ 548.754471][ T5304] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 548.771542][ T5304] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 548.820614][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 548.837982][T11053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.843247][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 548.871128][ T5304] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 548.893533][ T5304] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 548.914871][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.955028][ T5304] usb 4-1: config 0 descriptor?? [ 548.980217][T11224] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 549.425861][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.436190][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.467532][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.486541][T11053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.486581][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.514985][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.528155][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.563484][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.586848][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.600741][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.629286][T11224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.638523][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.638779][T11224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.648089][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.663907][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.830075][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.837811][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 549.845899][ T5304] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 550.177566][ T5304] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 550.208910][ T5304] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 550.243275][ T5304] usb 4-1: USB disconnect, device number 45 [ 550.540021][T11053] veth0_vlan: entered promiscuous mode [ 550.586925][T11053] veth1_vlan: entered promiscuous mode [ 550.687702][T11286] netlink: 'syz.3.1609': attribute type 72 has an invalid length. [ 550.717853][T11286] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1609'. [ 550.743334][ T2912] Bluetooth: hci6: Frame reassembly failed (-84) [ 550.753276][ T2636] usb 1-1: USB disconnect, device number 43 [ 550.810850][T11053] veth0_macvtap: entered promiscuous mode [ 550.883383][T11053] veth1_macvtap: entered promiscuous mode [ 550.943881][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.962058][T11294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.979443][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.999669][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.012840][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.024044][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.035284][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.045892][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.056975][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.073165][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 551.088740][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.129587][T11053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.140537][T11295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1611'. [ 551.177109][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.221402][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.268161][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.296333][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.307396][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.320185][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.334898][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.361474][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.495851][T11053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 551.533056][T11053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 551.560876][T11053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.597921][T11053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.620410][T11053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.637847][T11053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.684761][T11053] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.035373][ T2941] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.064331][ T2941] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.798986][ T5222] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 553.389902][ T1122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.459427][ T1122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.710261][T11321] gfs2: gfs2 mount does not exist [ 554.133301][T11328] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1617'. [ 554.146701][T11328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 555.443257][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1622'. [ 555.489455][T11339] FAULT_INJECTION: forcing a failure. [ 555.489455][T11339] name failslab, interval 1, probability 0, space 0, times 0 [ 555.514106][ T5279] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 555.553342][T11339] CPU: 0 UID: 0 PID: 11339 Comm: syz.3.1622 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 555.563859][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 555.574135][T11339] Call Trace: [ 555.577465][T11339] [ 555.580434][T11339] dump_stack_lvl+0x241/0x360 [ 555.585163][T11339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.590407][T11339] ? __pfx__printk+0x10/0x10 [ 555.595030][T11339] ? ref_tracker_alloc+0x332/0x490 [ 555.600160][T11339] should_fail_ex+0x3b0/0x4e0 [ 555.604948][T11339] ? skb_clone+0x20c/0x390 [ 555.609379][T11339] should_failslab+0xac/0x100 [ 555.614075][T11339] ? skb_clone+0x20c/0x390 [ 555.618503][T11339] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 555.623914][T11339] skb_clone+0x20c/0x390 [ 555.628171][T11339] __netlink_deliver_tap+0x3cc/0x7c0 [ 555.633486][T11339] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.638700][T11339] netlink_deliver_tap+0x19d/0x1b0 [ 555.643826][T11339] netlink_sendskb+0x68/0x140 [ 555.648517][T11339] netlink_unicast+0x39d/0x990 [ 555.653380][T11339] ? __asan_memcpy+0x40/0x70 [ 555.658004][T11339] ? __pfx_netlink_unicast+0x10/0x10 [ 555.663314][T11339] netlink_rcv_skb+0x262/0x430 [ 555.668095][T11339] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 555.673567][T11339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 555.678979][T11339] ? netlink_deliver_tap+0x2e/0x1b0 [ 555.684200][T11339] netlink_unicast+0x7f0/0x990 [ 555.688990][T11339] ? __pfx_netlink_unicast+0x10/0x10 [ 555.694288][T11339] ? __virt_addr_valid+0x183/0x530 [ 555.699409][T11339] ? __check_object_size+0x49c/0x900 [ 555.704708][T11339] ? bpf_lsm_netlink_send+0x9/0x10 [ 555.709925][T11339] netlink_sendmsg+0x8e4/0xcb0 [ 555.714717][T11339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.720018][T11339] ? __import_iovec+0x536/0x820 [ 555.725150][T11339] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 555.730533][T11339] ? security_socket_sendmsg+0x87/0xb0 [ 555.736004][T11339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 555.741304][T11339] __sock_sendmsg+0x221/0x270 [ 555.746003][T11339] ____sys_sendmsg+0x525/0x7d0 [ 555.750807][T11339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.756132][T11339] __sys_sendmsg+0x2b0/0x3a0 [ 555.760752][T11339] ? __pfx___sys_sendmsg+0x10/0x10 [ 555.765882][T11339] ? vfs_write+0x7c4/0xc90 [ 555.770627][T11339] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 555.776991][T11339] ? do_syscall_64+0x100/0x230 [ 555.781869][T11339] ? do_syscall_64+0xb6/0x230 [ 555.786649][T11339] do_syscall_64+0xf3/0x230 [ 555.791170][T11339] ? clear_bhb_loop+0x35/0x90 [ 555.795967][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.801897][T11339] RIP: 0033:0x7f74eab77299 [ 555.806332][T11339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.825953][T11339] RSP: 002b:00007f74eb8b1048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.834379][T11339] RAX: ffffffffffffffda RBX: 00007f74ead05f80 RCX: 00007f74eab77299 [ 555.842532][T11339] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 555.850528][T11339] RBP: 00007f74eb8b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 555.858506][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.866489][T11339] R13: 000000000000000b R14: 00007f74ead05f80 R15: 00007ffd0bdef818 [ 555.874485][T11339] [ 555.994034][ T5279] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 556.015675][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.069872][ T5279] usb 5-1: config 0 descriptor?? [ 556.130398][T11346] overlayfs: failed to resolve './file1': -2 [ 556.328973][ T5279] usb 5-1: Cannot read MAC address [ 556.338727][ T5279] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 556.738176][T11356] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1621'. [ 556.747869][T11356] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1621'. [ 556.757178][T11356] netlink: 'syz.0.1621': attribute type 5 has an invalid length. [ 556.765430][T11356] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1621'. [ 557.441184][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1628'. [ 557.561940][T11367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.150667][ T9] usb 5-1: USB disconnect, device number 32 [ 558.891925][ T5235] block nbd2: Receive control failed (result -32) [ 558.905821][ T5235] block nbd2: Receive control failed (result -32) [ 558.975838][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 558.987779][T11388] block nbd2: shutting down sockets [ 559.030244][ T5235] block nbd0: Receive control failed (result -32) [ 559.039255][ T5235] block nbd0: Receive control failed (result -32) [ 559.074203][T11389] block nbd0: shutting down sockets [ 559.157107][T11393] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1638'. [ 559.201329][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.258876][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.267009][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.301093][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.301922][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 559.325640][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.337338][ T9] usb 5-1: config 0 descriptor?? [ 559.348367][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.388364][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.395866][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.417189][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.457460][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.473533][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.508654][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.529453][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.536994][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.559011][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.598411][ T5318] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 559.609184][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.622949][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.631193][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.638901][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.646862][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.654587][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.664196][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.671936][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.681556][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.689233][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.697237][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.706868][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.715398][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.723116][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.731114][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.739505][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.758699][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.767237][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.789508][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.797888][ T5273] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 559.810626][ T5318] usb 3-1: config 0 has no interfaces? [ 559.816486][ T5318] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 559.837762][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.851449][ T5273] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.09 Device [syz0] on syz0 [ 559.852317][ T9] logitech-djreceiver 0003:046D:C513.0024: unknown main item tag 0x0 [ 559.909770][ T5318] usb 3-1: config 0 descriptor?? [ 559.913894][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1642'. [ 559.928604][ T9] logitech-djreceiver 0003:046D:C513.0024: unknown main item tag 0x0 [ 560.059468][ T9] usb 5-1: USB disconnect, device number 33 [ 560.680450][T11410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1644'. [ 560.789547][T11413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1645'. [ 563.265694][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.978484][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.082668][ T5279] usb 3-1: USB disconnect, device number 30 [ 568.590289][ T5279] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 568.630499][T11422] nullb0: AHDI p1 [ 568.700491][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 568.700513][ T29] audit: type=1800 audit(1722128442.464:64): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1646" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 568.790502][ T5279] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 568.801477][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.817893][ T5279] usb 3-1: config 0 descriptor?? [ 569.038495][ T5318] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 569.053238][ T5279] usb 3-1: Cannot read MAC address [ 569.061148][ T5279] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 569.078597][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 569.246106][ T5318] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 569.259115][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 569.275989][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 569.287837][ T5318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 569.302298][ T5318] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 569.308380][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 569.313640][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.332061][ T5318] usb 5-1: config 0 descriptor?? [ 569.338919][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 569.339077][T11427] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 569.347989][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.378580][ T9] usb 4-1: config 0 descriptor?? [ 569.402116][ T9] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 569.656948][T11421] ======================================================= [ 569.656948][T11421] WARNING: The mand mount option has been deprecated and [ 569.656948][T11421] and is ignored by this kernel. Remove the mand [ 569.656948][T11421] option from the mount to silence this warning. [ 569.656948][T11421] ======================================================= [ 569.702280][T11441] syz_tun: entered promiscuous mode [ 569.732912][T11441] batadv_slave_0: entered promiscuous mode [ 569.755792][T11441] syz_tun: left promiscuous mode [ 569.764491][T11441] batadv_slave_0: left promiscuous mode [ 569.827961][ T5318] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 569.836560][ T5318] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0 [ 569.846504][ T5318] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 569.862674][ T5318] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 569.950729][ T9] gspca_sunplus: reg_w_riv err -71 [ 569.964806][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 570.005825][ T9] usb 4-1: USB disconnect, device number 46 [ 570.035801][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.048194][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.807980][ T5318] usb 5-1: USB disconnect, device number 34 [ 572.025560][ T8] usb 3-1: USB disconnect, device number 31 [ 572.104155][T11464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.928358][ T5273] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 573.158477][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 573.169822][ T5273] usb 5-1: unable to get BOS descriptor or descriptor too short [ 573.189988][ T5273] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.238703][ T5273] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.250408][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.259563][ T5273] usb 5-1: Product: syz [ 573.264276][ T5273] usb 5-1: Manufacturer: syz [ 573.271230][ T5273] usb 5-1: SerialNumber: syz [ 573.301835][ T5273] cdc_ether 5-1:1.0: skipping garbage [ 573.314314][ T5273] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 575.952316][ T5279] usb 5-1: USB disconnect, device number 35 [ 575.986010][T11509] netlink: 'syz.0.1672': attribute type 21 has an invalid length. [ 576.269106][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 576.500042][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 576.526717][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 576.576105][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 576.618198][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 576.660452][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 576.718786][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.766925][ T8] usb 3-1: config 0 descriptor?? [ 576.783257][T11512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 577.127452][T11537] FAULT_INJECTION: forcing a failure. [ 577.127452][T11537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.217328][ T8] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 577.226197][T11537] CPU: 1 UID: 0 PID: 11537 Comm: syz.3.1682 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 577.227796][ T8] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 577.236654][T11537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 577.236676][T11537] Call Trace: [ 577.236688][T11537] [ 577.236699][T11537] dump_stack_lvl+0x241/0x360 [ 577.236737][T11537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 577.236766][T11537] ? __pfx__printk+0x10/0x10 [ 577.236800][T11537] ? snprintf+0xda/0x120 [ 577.236834][T11537] should_fail_ex+0x3b0/0x4e0 [ 577.236872][T11537] _copy_to_user+0x2f/0xb0 [ 577.236901][T11537] simple_read_from_buffer+0xca/0x150 [ 577.236942][T11537] proc_fail_nth_read+0x1e9/0x250 [ 577.246048][ T8] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 577.254451][T11537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.254503][T11537] ? rw_verify_area+0x520/0x6b0 [ 577.254525][T11537] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 577.254562][T11537] vfs_read+0x204/0xbc0 [ 577.326844][T11537] ? __pfx_lock_release+0x10/0x10 [ 577.331906][T11537] ? __pfx_vfs_read+0x10/0x10 [ 577.336602][T11537] ? __fget_files+0x29/0x470 [ 577.341207][T11537] ? __fget_files+0x3f6/0x470 [ 577.345908][T11537] ksys_read+0x1a0/0x2c0 [ 577.350166][T11537] ? __pfx_ksys_read+0x10/0x10 [ 577.354949][T11537] ? do_syscall_64+0x100/0x230 [ 577.359833][T11537] ? do_syscall_64+0xb6/0x230 [ 577.364536][T11537] do_syscall_64+0xf3/0x230 [ 577.369090][T11537] ? clear_bhb_loop+0x35/0x90 [ 577.373828][T11537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.379747][T11537] RIP: 0033:0x7f74eab75d7c [ 577.384169][T11537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 577.403796][T11537] RSP: 002b:00007f74eb8b1040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 577.412229][T11537] RAX: ffffffffffffffda RBX: 00007f74ead05f80 RCX: 00007f74eab75d7c [ 577.420221][T11537] RDX: 000000000000000f RSI: 00007f74eb8b10b0 RDI: 0000000000000007 [ 577.428207][T11537] RBP: 00007f74eb8b10a0 R08: 0000000000000000 R09: 0000000000000000 [ 577.436218][T11537] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 577.436928][ T8] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 577.444203][T11537] R13: 000000000000000b R14: 00007f74ead05f80 R15: 00007ffd0bdef818 [ 577.444244][T11537] [ 577.584427][T11512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.661151][T11512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.766270][ T5318] usb 3-1: USB disconnect, device number 32 [ 578.017050][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1685'. [ 579.378542][ T5318] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 579.448352][ T5235] Bluetooth: hci4: link tx timeout [ 579.454120][ T5235] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.485837][ T5222] Bluetooth: hci4: link tx timeout [ 579.495475][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.505562][ T5222] Bluetooth: hci4: link tx timeout [ 579.511103][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.525275][ T5222] Bluetooth: hci4: link tx timeout [ 579.530854][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.559315][ T5222] Bluetooth: hci4: link tx timeout [ 579.564504][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.575335][ T5222] Bluetooth: hci4: link tx timeout [ 579.581624][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 579.650465][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.668678][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.680903][ T5318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 579.695413][ T5318] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 579.704912][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.725711][ T5318] usb 5-1: config 0 descriptor?? [ 580.340381][T11588] netlink: 'syz.2.1696': attribute type 4 has an invalid length. [ 580.391025][ T5318] usbhid 5-1:0.0: can't add hid device: -71 [ 580.415883][ T5318] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 580.459641][ T5318] usb 5-1: USB disconnect, device number 36 [ 580.542654][ T5222] Bluetooth: hci4: link tx timeout [ 580.557550][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.566764][ T5222] Bluetooth: hci4: link tx timeout [ 580.582350][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.651321][ T5222] Bluetooth: hci4: link tx timeout [ 580.656505][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.665540][ T5222] Bluetooth: hci4: link tx timeout [ 580.671933][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.679716][ T5222] Bluetooth: hci4: link tx timeout [ 580.684833][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.693998][ T5222] Bluetooth: hci4: link tx timeout [ 580.699246][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.708328][ T5222] Bluetooth: hci4: link tx timeout [ 580.714267][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.722209][ T5222] Bluetooth: hci4: link tx timeout [ 580.727578][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.737469][ T5222] Bluetooth: hci4: link tx timeout [ 580.743153][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.750907][ T5222] Bluetooth: hci4: link tx timeout [ 580.756035][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.763924][ T5222] Bluetooth: hci4: link tx timeout [ 580.769219][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.787705][ T5222] Bluetooth: hci4: link tx timeout [ 580.792942][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.801293][ T5222] Bluetooth: hci4: link tx timeout [ 580.806561][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.814795][ T5222] Bluetooth: hci4: link tx timeout [ 580.820046][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 580.827747][ T5222] Bluetooth: hci4: link tx timeout [ 580.833042][ T5222] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 581.025926][T11596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 581.509699][ T5222] Bluetooth: hci4: command 0x0406 tx timeout [ 581.561450][T11600] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1701'. [ 589.058747][ T8] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 590.310388][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 590.333663][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.368646][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.380799][ T8] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 590.391580][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.464314][ T8] usb 5-1: config 0 descriptor?? [ 590.848648][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 590.933555][ T8] saitek 0003:06A3:0621.0027: item fetching failed at offset 2/5 [ 590.949215][ T8] saitek 0003:06A3:0621.0027: parse failed [ 590.965665][ T8] saitek 0003:06A3:0621.0027: probe with driver saitek failed with error -22 [ 592.515258][ T8] usb 5-1: USB disconnect, device number 37 [ 592.542656][T11651] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1716'. [ 593.036316][ T8] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 597.077937][ T8] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 597.107643][ T8] usb 5-1: can't read configurations, error -71 [ 598.120946][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 598.220601][ T5224] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 598.418513][ T5224] usb 3-1: Using ep0 maxpacket: 16 [ 598.429738][ T5224] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 598.448181][ T5224] usb 3-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 598.463182][ T5224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.472399][ T6673] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 598.484056][ T5224] usb 3-1: Product: syz [ 598.496071][ T5224] usb 3-1: Manufacturer: syz [ 598.501247][ T5224] usb 3-1: SerialNumber: syz [ 598.528851][ T5224] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input23 [ 598.691146][ T6673] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 598.713652][ T6673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.739115][ T4653] bcm5974 3-1:1.0: could not read from device [ 598.761333][ T6673] usb 4-1: config 0 descriptor?? [ 598.777906][ T4653] bcm5974 3-1:1.0: could not read from device [ 598.798563][ T5224] usb 3-1: USB disconnect, device number 33 [ 599.057094][ T5235] Bluetooth: hci5: command 0x0406 tx timeout [ 599.146034][ T6673] usb 4-1: Cannot read MAC address [ 599.175567][ T6673] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 601.533268][ T6673] usb 4-1: USB disconnect, device number 47 [ 601.890106][T11726] block nbd3: shutting down sockets [ 604.118875][T11757] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.839846][T11767] fuse: Bad value for 'fd' [ 606.863428][T11770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.607810][T11782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1752'. [ 608.866463][T11787] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1756'. [ 609.246752][T11794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.944173][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 612.163038][T11804] block nbd2: shutting down sockets [ 612.222282][T11818] netlink: 'syz.3.1764': attribute type 4 has an invalid length. [ 613.274140][T11824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.806802][T11839] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1769'. [ 614.864373][T11844] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1771'. [ 615.338408][ T5339] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 615.525110][T11856] block nbd3: shutting down sockets [ 615.531119][ T5339] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 615.548897][ T5339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.562898][ T5339] usb 5-1: config 0 descriptor?? [ 616.159383][ T5339] usb 5-1: Cannot read MAC address [ 616.166762][ T5339] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 617.451354][T11875] netlink: 'syz.3.1779': attribute type 4 has an invalid length. [ 618.273581][T11886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 618.309945][ T5318] usb 5-1: USB disconnect, device number 40 [ 620.519270][T11908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1789'. [ 620.903242][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1792'. [ 620.951114][T11921] macsec1: entered allmulticast mode [ 620.957867][T11921] veth1_macvtap: entered allmulticast mode [ 621.560225][T11936] block nbd3: shutting down sockets [ 621.667183][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1798'. [ 622.220013][ T5318] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 622.641405][ T5318] usb 5-1: Using ep0 maxpacket: 8 [ 622.849488][ T5318] usb 5-1: config 1 has an invalid interface number: 4 but max is 2 [ 622.886529][ T5318] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 622.948390][ T5318] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 622.978353][ T5318] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 623.027152][ T5318] usb 5-1: config 1 has no interface number 1 [ 623.037368][ T5318] usb 5-1: too many endpoints for config 1 interface 4 altsetting 128: 140, using maximum allowed: 30 [ 623.056880][ T5318] usb 5-1: config 1 interface 4 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 623.072225][ T5318] usb 5-1: config 1 interface 4 has no altsetting 0 [ 623.090909][ T5318] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 623.100244][ T5318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.124668][ T5318] usb 5-1: Product: syz [ 623.135248][T11952] gfs2: gfs2 mount does not exist [ 623.136544][ T5318] usb 5-1: Manufacturer: syz [ 623.146183][ T5318] usb 5-1: SerialNumber: syz [ 623.385991][ T5318] usb 5-1: 0:2 : does not exist [ 623.416590][T11959] fuse: Bad value for 'fd' [ 623.476632][ T5318] hub 5-1:1.4: bad descriptor, ignoring hub [ 623.483237][ T5318] hub 5-1:1.4: probe with driver hub failed with error -5 [ 623.520396][ T5318] usb 5-1: USB disconnect, device number 41 [ 623.830477][ T5224] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 623.932062][ C0] eth0: bad gso: type: 1, size: 1408 [ 624.070778][ T5224] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.091667][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 624.108749][ T5224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 624.126804][ T5224] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.142048][T11974] netlink: 'syz.0.1809': attribute type 4 has an invalid length. [ 624.159381][ T5224] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.170956][T11662] udevd[11662]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.192092][ T5224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.253581][ T5224] usb 4-1: config 0 descriptor?? [ 624.328991][T11958] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 624.464942][T11980] fuse: Bad value for 'fd' [ 624.735190][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.747593][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.782031][ T5224] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 624.825063][ T5224] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 624.870805][ T5224] plantronics 0003:047F:FFFF.0028: No inputs registered, leaving [ 624.901329][ T5224] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 625.733384][ T5224] usb 4-1: USB disconnect, device number 48 [ 626.351455][T12013] block nbd4: shutting down sockets [ 626.558081][T12015] netlink: 'syz.0.1822': attribute type 4 has an invalid length. [ 626.719830][T12016] block nbd3: shutting down sockets [ 630.525408][T12053] netlink: 'syz.0.1833': attribute type 4 has an invalid length. [ 630.546359][ T5279] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 630.569212][T12050] block nbd2: shutting down sockets [ 630.750272][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 630.775930][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 630.801703][ T5279] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 630.823273][ T5279] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.838804][ T5279] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.850376][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.887490][ T5279] usb 4-1: config 0 descriptor?? [ 630.902803][T12044] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 630.951214][ T5318] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 631.168627][ T5318] usb 1-1: Using ep0 maxpacket: 8 [ 631.191589][ T5318] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 631.218373][ T5318] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 631.245223][ T5318] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 631.274300][ T5318] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 631.298406][ T5318] usb 1-1: config 1 has no interface number 1 [ 631.309430][ T5318] usb 1-1: too many endpoints for config 1 interface 4 altsetting 128: 140, using maximum allowed: 30 [ 631.345802][ T5279] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 631.368331][ T5318] usb 1-1: config 1 interface 4 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 140 [ 631.384427][ T5279] plantronics 0003:047F:FFFF.0029: unknown main item tag 0x0 [ 631.393228][ T5279] plantronics 0003:047F:FFFF.0029: No inputs registered, leaving [ 631.401556][ T5318] usb 1-1: config 1 interface 4 has no altsetting 0 [ 631.421963][ T5318] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.438789][ T5279] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 631.451295][ T5318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.460135][ T5318] usb 1-1: Product: syz [ 631.495311][ T5318] usb 1-1: Manufacturer: syz [ 631.518390][ T5318] usb 1-1: SerialNumber: syz [ 631.820513][ T5224] usb 4-1: USB disconnect, device number 49 [ 632.683788][ T5318] usb 1-1: 0:2 : does not exist [ 632.825502][ T5318] hub 1-1:1.4: bad descriptor, ignoring hub [ 633.081423][ T5318] hub 1-1:1.4: probe with driver hub failed with error -5 [ 633.130127][ T5318] usb 1-1: USB disconnect, device number 44 [ 633.875851][ T2636] infiniband syz1: ib_query_port failed (-19) [ 633.900612][T12068] infiniband syz1: set down [ 633.936659][T12068] infiniband syz1: added syzkaller0 [ 634.016082][T12068] RDS/IB: syz1: added [ 634.030099][T11662] udevd[11662]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 634.035878][T12068] smc: adding ib device syz1 with port count 1 [ 634.057255][T12068] smc: ib device syz1 port 1 has pnetid [ 634.078899][T11552] smc: removing ib device syz1 [ 634.806384][T12097] block nbd3: shutting down sockets [ 635.109675][T12068] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 635.231192][T12105] block nbd0: shutting down sockets [ 635.646263][T12119] block nbd4: shutting down sockets [ 636.348331][ T5318] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 636.863024][ T5318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 636.932091][ T5318] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.974838][ T5318] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 637.058529][T11811] Bluetooth: hci2: command 0x0406 tx timeout [ 637.183650][ T5318] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 637.194083][ T5318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.211140][ T5318] usb 1-1: config 0 descriptor?? [ 639.094852][ T5318] usbhid 1-1:0.0: can't add hid device: -71 [ 639.117154][ T5318] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 639.159850][ T5318] usb 1-1: USB disconnect, device number 45 [ 639.669194][T12159] infiniband syz1: set down [ 639.689197][T12159] infiniband syz1: added syzkaller0 [ 639.796972][T12170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.862008][T12159] RDS/IB: syz1: added [ 639.866349][T12159] smc: adding ib device syz1 with port count 1 [ 639.872966][T12159] smc: ib device syz1 port 1 has pnetid [ 640.638880][T12172] fuseblk: Bad value for 'fd' [ 640.667309][T12173] block nbd2: shutting down sockets [ 641.493669][T11560] smc: removing ib device syz1 [ 642.573836][T12186] block nbd2: shutting down sockets [ 642.862072][T12193] Cannot find add_set index 0 as target [ 642.946606][T12192] Cannot find add_set index 0 as target [ 644.265785][T12159] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 644.307791][T12201] 9pnet_fd: Insufficient options for proto=fd [ 644.340444][ T5224] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 644.431665][ T29] audit: type=1326 audit(1722128518.204:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12180 comm="syz.0.1870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81f0577299 code=0x0 [ 644.444971][T12212] bridge1: entered promiscuous mode [ 644.470089][T12217] fuseblk: Bad value for 'fd' [ 644.488391][T12212] bridge1: entered allmulticast mode [ 644.573850][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.617614][ T5224] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.682688][ T5224] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 644.736658][ T5224] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.761424][ T5224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.779528][T12223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 644.800287][ T5224] usb 5-1: config 0 descriptor?? [ 644.809680][T12225] netlink: 'syz.3.1879': attribute type 4 has an invalid length. [ 646.481957][ T5224] usbhid 5-1:0.0: can't add hid device: -71 [ 646.488037][ T5224] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 646.547316][ T5224] usb 5-1: USB disconnect, device number 42 [ 646.939904][T12251] gfs2: gfs2 mount does not exist [ 647.519188][T12266] fuse: Bad value for 'fd' [ 647.552953][T12266] fuseblk: Bad value for 'fd' [ 649.125739][T12292] gfs2: gfs2 mount does not exist [ 649.182503][T12295] gfs2: gfs2 mount does not exist [ 650.309245][ T30] INFO: task syz.1.1444:10605 blocked for more than 143 seconds. [ 650.318067][ T30] Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 650.327042][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.337101][ T30] task:syz.1.1444 state:D stack:24672 pid:10605 tgid:10605 ppid:7593 flags:0x00004004 [ 650.347794][ T30] Call Trace: [ 650.352083][ T30] [ 650.355073][ T30] __schedule+0x17ae/0x4a10 [ 650.362144][ T30] ? __pfx___schedule+0x10/0x10 [ 650.367187][ T30] ? __pfx_lock_release+0x10/0x10 [ 650.372570][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 650.382443][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.390199][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 650.395811][ T30] ? schedule+0x90/0x320 [ 650.400981][ T30] schedule+0x14b/0x320 [ 650.412432][ T30] ? do_exit+0x4ff/0x27f0 [ 650.435191][ T30] do_exit+0x57c/0x27f0 [ 651.363292][ T30] ? __pfx_do_exit+0x10/0x10 [ 651.574991][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 651.678955][T12324] fuse: Bad value for 'fd' [ 651.690591][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.710217][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 651.716972][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 651.740621][T12324] fuseblk: Bad value for 'fd' [ 651.760332][ T30] do_group_exit+0x207/0x2c0 [ 651.776771][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 651.783287][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 651.796803][ T30] get_signal+0x1695/0x1730 [ 651.824122][ T30] ? __pfx_get_signal+0x10/0x10 [ 651.841341][ T30] arch_do_signal_or_restart+0x96/0x860 [ 651.858342][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 651.890897][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 651.906159][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 651.914750][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 651.926481][ T30] do_syscall_64+0x100/0x230 [ 651.940153][ T30] ? clear_bhb_loop+0x35/0x90 [ 651.950266][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.956292][ T30] RIP: 0033:0x7f9303577299 [ 651.965081][ T30] RSP: 002b:00007ffcfe744f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 651.975532][ T30] RAX: fffffffffffffdfc RBX: 0000000000079cd8 RCX: 00007f9303577299 [ 651.991715][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f930370613c [ 652.003811][ T30] RBP: 00007f930370613c R08: 00007f9303705f80 R09: 00007ffcfe74527f [ 652.012327][ T30] R10: 00007ffcfe745090 R11: 0000000000000246 R12: 0000000000000032 [ 652.023614][ T30] R13: 00007ffcfe745090 R14: 00007ffcfe7450b0 R15: 0000000000079ca6 [ 652.035267][ T30] [ 652.038627][ T30] INFO: task syz.1.1444:10613 blocked for more than 145 seconds. [ 652.048660][ T30] Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 652.055996][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.064787][ T30] task:syz.1.1444 state:D stack:25744 pid:10613 tgid:10605 ppid:7593 flags:0x00004006 [ 652.075083][ T30] Call Trace: [ 652.098848][ T30] [ 652.108481][ T30] __schedule+0x17ae/0x4a10 [ 652.133109][ T30] ? __pfx___schedule+0x10/0x10 [ 652.138082][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.152721][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.159542][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.166223][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 652.175936][ T30] ? schedule+0x90/0x320 [ 652.182615][ T30] schedule+0x14b/0x320 [ 652.187169][ T30] ? do_exit+0x4ff/0x27f0 [ 652.200070][ T30] do_exit+0x57c/0x27f0 [ 652.205535][ T30] ? __pfx_do_exit+0x10/0x10 [ 652.216067][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 652.225987][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.241206][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.247736][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 652.257684][ T30] do_group_exit+0x207/0x2c0 [ 652.262866][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.268593][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 652.273952][ T30] get_signal+0x1695/0x1730 [ 652.278958][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.285439][ T30] ? __pfx_get_signal+0x10/0x10 [ 652.290719][ T30] arch_do_signal_or_restart+0x96/0x860 [ 652.296474][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 652.302849][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.311313][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 652.317193][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 652.322896][ T30] do_syscall_64+0x100/0x230 [ 652.327534][ T30] ? clear_bhb_loop+0x35/0x90 [ 652.332314][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.339424][ T30] RIP: 0033:0x7f9303577299 [ 652.343879][ T30] RSP: 002b:00007f930428d048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 652.353637][ T30] RAX: fffffffffffffffb RBX: 00007f9303706058 RCX: 00007f9303577299 [ 652.365044][ T30] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 652.373148][ T30] RBP: 00007f93035e48e6 R08: 0000000020000680 R09: 0000000000000000 [ 652.381642][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.389772][ T30] R13: 000000000000006e R14: 00007f9303706058 R15: 00007ffcfe744e38 [ 652.397798][ T30] [ 652.401065][ T30] INFO: task syz.1.1444:10615 blocked for more than 145 seconds. [ 652.419611][ T30] Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 652.426953][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 652.435908][ T30] task:syz.1.1444 state:D stack:27424 pid:10615 tgid:10605 ppid:7593 flags:0x00000004 [ 652.446194][ T30] Call Trace: [ 652.449777][ T30] [ 652.452734][ T30] __schedule+0x17ae/0x4a10 [ 652.459413][ T30] ? __pfx___schedule+0x10/0x10 [ 652.464321][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.471982][ T30] ? schedule+0x90/0x320 [ 652.476278][ T30] schedule+0x14b/0x320 [ 652.480545][ T30] schedule_timeout+0xb0/0x310 [ 652.485457][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 652.490923][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.497037][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.502367][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 652.507613][ T30] __wait_for_common+0x3ea/0x6d0 [ 652.512762][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 652.518336][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 652.523851][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 652.530911][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.536155][ T30] wait_for_completion_state+0x1c/0x40 [ 652.541829][ T30] do_coredump+0x984/0x2a30 [ 652.546393][ T30] ? __pfx_lock_release+0x10/0x10 [ 652.551564][ T30] ? __kasan_slab_free+0x37/0x60 [ 652.558059][ T30] ? arch_do_signal_or_restart+0x96/0x860 [ 652.564048][ T30] ? __pfx_do_coredump+0x10/0x10 [ 652.570051][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 652.575289][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 652.584376][ T30] get_signal+0x13ee/0x1730 [ 652.589854][ T30] ? __pfx_get_signal+0x10/0x10 [ 652.594759][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 652.601033][ T30] arch_do_signal_or_restart+0x96/0x860 [ 652.606630][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 652.613071][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.619186][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 652.624944][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 652.630649][ T30] do_syscall_64+0x100/0x230 [ 652.635276][ T30] ? clear_bhb_loop+0x35/0x90 [ 652.640078][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.646013][ T30] RIP: 0033:0x7f9303577299 [ 652.650542][ T30] RSP: 002b:00007f930426c0f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 652.660302][ T30] RAX: 00000000000000ca RBX: 00007f9303706138 RCX: 00007f9303577299 [ 652.668460][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f930370613c [ 652.676466][ T30] RBP: 00007f9303706130 R08: 7fffffffffffffff R09: 00007f930426c6c0 [ 652.685364][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f930370613c [ 652.693824][ T30] R13: 000000000000006e R14: 00007ffcfe744d50 R15: 00007ffcfe744e38 [ 652.705243][ T30] [ 652.708475][ T30] [ 652.708475][ T30] Showing all locks held in the system: [ 652.716228][ T30] 1 lock held by khungtaskd/30: [ 652.721485][ T30] #0: ffffffff8e737660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 652.731636][ T30] 1 lock held by klogd/4657: [ 652.736259][ T30] #0: ffff8880b923e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 652.746509][ T30] 2 locks held by getty/4975: [ 652.751367][ T30] #0: ffff88802f40a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 652.762538][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 652.772949][ T30] [ 652.775304][ T30] ============================================= [ 652.775304][ T30] [ 652.784096][ T30] NMI backtrace for cpu 0 [ 652.788894][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 652.799088][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 652.809180][ T30] Call Trace: [ 652.812474][ T30] [ 652.815421][ T30] dump_stack_lvl+0x241/0x360 [ 652.820123][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.825348][ T30] ? __pfx__printk+0x10/0x10 [ 652.829954][ T30] ? vprintk_emit+0x631/0x770 [ 652.834664][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 652.839707][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 652.844669][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 652.850147][ T30] ? _printk+0xd5/0x120 [ 652.854314][ T30] ? __pfx__printk+0x10/0x10 [ 652.858918][ T30] ? __wake_up_klogd+0xcc/0x110 [ 652.863787][ T30] ? __pfx__printk+0x10/0x10 [ 652.868397][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 652.873455][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 652.879451][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 652.885456][ T30] watchdog+0xfee/0x1030 [ 652.889719][ T30] ? watchdog+0x1ea/0x1030 [ 652.894158][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.898851][ T30] kthread+0x2f0/0x390 [ 652.902925][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.907614][ T30] ? __pfx_kthread+0x10/0x10 [ 652.912211][ T30] ret_from_fork+0x4b/0x80 [ 652.916729][ T30] ? __pfx_kthread+0x10/0x10 [ 652.921324][ T30] ret_from_fork_asm+0x1a/0x30 [ 652.926126][ T30] [ 652.930440][ T30] Sending NMI from CPU 0 to CPUs 1: [ 652.935701][ C1] NMI backtrace for cpu 1 [ 652.935715][ C1] CPU: 1 UID: 0 PID: 11560 Comm: kworker/u8:19 Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 652.935736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 652.935747][ C1] Workqueue: bat_events batadv_nc_worker [ 652.935771][ C1] RIP: 0010:batadv_nc_process_nc_paths+0x92/0x3a0 [ 652.935793][ C1] Code: 0f 84 eb 02 00 00 48 8b 6c 24 08 48 89 e8 48 c1 e8 03 48 89 44 24 18 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 18 80 3c 01 00 <74> 08 48 89 ef e8 14 1e 80 f6 4c 63 74 24 10 49 c1 e6 03 4c 03 75 [ 652.935809][ C1] RSP: 0018:ffffc900033ffae8 EFLAGS: 00000246 [ 652.935824][ C1] RAX: dffffc0000000000 RBX: ffff88802cb08cc0 RCX: 1ffff11005e1bc68 [ 652.935838][ C1] RDX: 0000000000000000 RSI: 0000000000000052 RDI: ffffffff8c3f9560 [ 652.935849][ C1] RBP: ffff88802f0de340 R08: ffffffff8ff65cef R09: 1ffffffff1fecb9d [ 652.935863][ C1] R10: dffffc0000000000 R11: fffffbfff1fecb9e R12: ffff88802cb08cc0 [ 652.935876][ C1] R13: 1ffff110059612fb R14: ffff88805740a288 R15: ffffffff8b777cd0 [ 652.935889][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 652.935904][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.935916][ C1] CR2: 00007f704f6d2178 CR3: 000000007ac2c000 CR4: 00000000003506f0 [ 652.935932][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 652.935942][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 652.935953][ C1] Call Trace: [ 652.935961][ C1] [ 652.935968][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 652.935994][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 652.936020][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 652.936045][ C1] ? nmi_handle+0x2a/0x5a0 [ 652.936072][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 652.936094][ C1] ? nmi_handle+0x14f/0x5a0 [ 652.936111][ C1] ? nmi_handle+0x2a/0x5a0 [ 652.936129][ C1] ? batadv_nc_process_nc_paths+0x92/0x3a0 [ 652.936148][ C1] ? default_do_nmi+0x63/0x160 [ 652.936174][ C1] ? exc_nmi+0x123/0x1f0 [ 652.936199][ C1] ? end_repeat_nmi+0xf/0x53 [ 652.936221][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 652.936247][ C1] ? batadv_nc_process_nc_paths+0x92/0x3a0 [ 652.936267][ C1] ? batadv_nc_process_nc_paths+0x92/0x3a0 [ 652.936288][ C1] ? batadv_nc_process_nc_paths+0x92/0x3a0 [ 652.936314][ C1] [ 652.936320][ C1] [ 652.936328][ C1] ? batadv_nc_process_nc_paths+0xb5/0x3a0 [ 652.936349][ C1] batadv_nc_worker+0x42a/0x610 [ 652.936371][ C1] ? process_scheduled_works+0x945/0x1830 [ 652.936394][ C1] process_scheduled_works+0xa2c/0x1830 [ 652.936434][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.936463][ C1] ? assign_work+0x364/0x3d0 [ 652.936487][ C1] worker_thread+0x86d/0xd40 [ 652.936520][ C1] ? __kthread_parkme+0x169/0x1d0 [ 652.936550][ C1] ? __pfx_worker_thread+0x10/0x10 [ 652.936573][ C1] kthread+0x2f0/0x390 [ 652.936589][ C1] ? __pfx_worker_thread+0x10/0x10 [ 652.936612][ C1] ? __pfx_kthread+0x10/0x10 [ 652.936628][ C1] ret_from_fork+0x4b/0x80 [ 652.936652][ C1] ? __pfx_kthread+0x10/0x10 [ 652.936667][ C1] ret_from_fork_asm+0x1a/0x30 [ 652.936702][ C1] [ 653.256516][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 653.263427][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12710-g3a7e02c040b1 #0 [ 653.273618][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 653.283717][ T30] Call Trace: [ 653.287026][ T30] [ 653.289981][ T30] dump_stack_lvl+0x241/0x360 [ 653.294677][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.299988][ T30] ? __pfx__printk+0x10/0x10 [ 653.304614][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 653.310634][ T30] ? vscnprintf+0x5d/0x90 [ 653.314982][ T30] panic+0x349/0x860 [ 653.318900][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 653.325185][ T30] ? __pfx_panic+0x10/0x10 [ 653.329650][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 653.335292][ T30] ? __irq_work_queue_local+0x137/0x410 [ 653.340861][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 653.346258][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 653.352425][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 653.358607][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 653.364808][ T30] watchdog+0x102d/0x1030 [ 653.369285][ T30] ? watchdog+0x1ea/0x1030 [ 653.373742][ T30] ? __pfx_watchdog+0x10/0x10 [ 653.378451][ T30] kthread+0x2f0/0x390 [ 653.382570][ T30] ? __pfx_watchdog+0x10/0x10 [ 653.387435][ T30] ? __pfx_kthread+0x10/0x10 [ 653.392054][ T30] ret_from_fork+0x4b/0x80 [ 653.396502][ T30] ? __pfx_kthread+0x10/0x10 [ 653.401120][ T30] ret_from_fork_asm+0x1a/0x30 [ 653.406025][ T30] [ 653.409645][ T30] Kernel Offset: disabled [ 653.413981][ T30] Rebooting in 86400 seconds..