last executing test programs: 22.784127941s ago: executing program 4 (id=540): socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000001010400000000000000000200000024000180140001febe013e6939f539bb08000200ac1414bb0c00028905000100000000002400028014000180080001000000000008000200000000000c00028005000100000000000800074000cdb30024000e80140001"], 0x88}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001800000000000000000000000200000000000000000000000c001680080404"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000c000180080001"], 0x20}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x0, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00000002c0)=0x46, 0x4) getpeername$l2tp6(r1, 0x0, &(0x7f00000000c0)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003d00010027bd82000000000002"], 0x14d8}}, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x101, 0x800) syz_io_uring_setup(0x6609, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0xffffffff}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r4 = io_uring_setup(0x9a7, &(0x7f0000000300)={0x0, 0xcee9, 0x10, 0x2, 0x260}) io_uring_register$IORING_UNREGISTER_RING_FDS(r4, 0x15, &(0x7f0000000640)=[{0x0, 0x1, 0x0, 0x0, 0x0}], 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xb8, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x0, 0x3b}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x10}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000023c0)={{}, 'syz0\x00', 0xe}) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x5) ioctl$UI_DEV_CREATE(r8, 0x5501) pread64(r7, &(0x7f0000000280)=""/4096, 0x1000, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) 20.801635932s ago: executing program 4 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010002104000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6179766c0600000c00028006000200000000000a000100aaaaaaaa00"], 0x48}, 0x1, 0x0, 0x0, 0x20048015}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000077e000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c2b805000000b9030000000f01c166ba430066b8003866efc4c105f141d0f3260f35c4e17c50e80f23090f825d00000067650f01ca2e0f08", 0x3a}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) (async, rerun: 32) ioprio_set$pid(0x2, 0x0, 0x0) (async) r4 = add_key$keyring(&(0x7f0000002400), &(0x7f0000002440)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000001380)='big_key\x00', 0x0, &(0x7f0000001400)="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", 0xfffff, r4) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000001f40)={'batadv_slave_0\x00', &(0x7f0000000440)=@ethtool_eee={0x1b, 0xfffffffd}}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r7 = syz_open_dev$vivid(&(0x7f0000000a80), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r7, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x7, 0xd, 0x4, 0x2, 0x2, {}, {0x3, 0x8, 0xfc, 0x6, 0xff, 0x47, "72e88817"}, 0xe56, 0x1, {0x0}, 0xfffffffd}) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r2}, 0x8) syz_kvm_setup_cpu$x86(r8, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000240)="660fd2aa0400ad3d3ef30f096766c7442402005800006766c74424060072000000000f011424baf80c66b8de6c438566efd3bafc0c0c00eebaf80c66b824b2238abafc0cb00eee0f230a0f320f01c80f30baf80c0f013f66efbafc0cb0afeed929", 0x61}], 0x1, 0x64, 0x0, 0x0) (async) io_setup(0xe, &(0x7f0000000080)=0x0) io_getevents(r9, 0x3a, 0x80000000000012c, &(0x7f0000000400), &(0x7f0000000200)={0x0, 0x3938700}) (async) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/266, @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000251a0000fcffffff9500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, @fallback, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 20.680071988s ago: executing program 4 (id=551): socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) (async) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000290000003600000000000000000000002400000000000000290000003200000000000000000000000000ffff"], 0x40}}], 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') read$FUSE(r2, &(0x7f0000004800)={0x2020}, 0x2020) preadv(r2, &(0x7f0000002240)=[{&(0x7f0000000080)=""/123, 0x83}], 0x1000000000000203, 0x0, 0x0) (async) read$FUSE(r2, &(0x7f00000027c0)={0x2020}, 0x2020) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x15, 0x9, 0x100008, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x1000, 0x2}}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001380)={0x2c, &(0x7f0000001180)={0x0, 0x0, 0x6, "dee6eb642785"}, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a00)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "e247558b0963"}, {0x5}, {0xd}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xffff, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000001200), 0x10001, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r4, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) syz_usb_control_io$printer(r0, 0x0, 0x0) epoll_create1(0x0) (async) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x7800, 0x7821, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x4, 0x0, @loopback, @private}}}}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) (async, rerun: 32) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e751d"], 0x24) (async, rerun: 64) semget(0x3, 0x0, 0x88) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 20.640798686s ago: executing program 4 (id=552): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000010c0)={{}, "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"}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r0 = socket$tipc(0x1e, 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) syz_usb_connect(0x3, 0x2d, &(0x7f0000000800)={{0x12, 0x1, 0x310, 0xc7, 0xa2, 0x55, 0x10, 0x763, 0x1002, 0xee60, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x6, 0x40, 0xa0, 0x3, [{{0x9, 0x4, 0x6, 0xf8, 0x0, 0xff, 0x4e, 0x98}}, {{0x9, 0x4, 0x19, 0xae, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0}) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x7, {{0x40, 0x1}}}, 0x10) r2 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x180000) sendmsg$tipc(r2, &(0x7f0000000900)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e20}}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000100)="6708eb7ec39fd7cdc6a564f4e097f4724d0e636b9cf66a5b3c4473ae6364e9e671a8e0a0e122a25113506d13622175c288cc19e9041a390665b42ebeaf1a2bc79c83c598f162482ad5d205e797e8a7d9b18aae33fa92a6d6707b9b", 0x5b}, {&(0x7f0000000180)="e58d1f0b0f30c97604ba666da70456de2680dd7d7bbdea2311e0d2d9041c8f58444fd57cb5b5596414cca04c103026fd13c6787bc6fc7f3ed7cbf111a80a9f65316c54539d498910108823f5464416816d912a3af2b243b4673e948ada917baaae46af312f605e444ef79b73ba65cb4246e632101fdfcdb54c57fe60282733b1d79f272408b84b3b81be6a", 0x8b}, {&(0x7f0000000280)="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", 0xfd}, {&(0x7f0000002600)="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", 0xffd}, {&(0x7f0000000440)="f4b7cf025c67a2118e3c89a03c27ddcdb4ad667d7070e23e559b24832130476e7f87e8190d9c797c1c4dfa40561058b72bc40b44340615f9d938535f45a6f12e022cc60b6e73e2d4185aadb994f3cbf5590837f5d5c82fd321cc7768e8cad5d250250b1e23771d0623f963dbfd9629758e34d24b8773bf3880d7d886fa3974d7fa46f56c8d0d81dfd61eb764a7597fce74c97dea84bf0f0e169872489a470270b016de4961df28c275f414509319725480e0a9e3aebcd73255413831544496584a78", 0xc2}, {&(0x7f0000000540)="f0b51d1029188cbf396dcf296eeabd5258254828ce089a770a12c61e6befe0ec3b29c906c6e8411092bcc6cfc032ae8085c0d4cf4d75dd8257770d27078c1bbc0d10a4acb3279517cfa9e2e0ecbed618cf55bdbe1dc34c13ee5c1029470e69d0dd972a5e99c9afff9bbbfa8b21b11af6c770bff4a6b9c5af40159604f0392af7c2bfb18a30b1581a81341716f34624558a2c91387b991273312ea314d5429b0a3947deecd04c964377c5eeb0d82cbe48accf04876801ef4e05e64b711dbecb6539bb9cb7b4ac5d8ad2c8f79878dcdd2719d53b4f6c86f19159b0d2f4c3dbede3d9731c55ceb58e", 0xe7}, {&(0x7f0000000380)="5fa2364cf7a153031d39d5d2fb42928ab3d7f78359a42a5ce1293015c382c689", 0x20}, {&(0x7f0000000640)="6df02fb1096c2172b73d23c199ab69ecbd1c0ec4f041a163fed412347023675ecbbc919fce75b7a95ffc7485bbf28b7aa321766f978069ae04fec45ebcd86c6fb78b5e81dcaf214cb3c727afa3a8ed04d2ccb492edb352f73dfd2a8c2ffb1b9e68a482dbfbcac77ddc2e08c466205e5973d122e11e52167bfeae541a241ee12671118607395102d3c150bf904329cfe5f5a28bf79cbacec21cd53950fee2507a52b30ced779d7910546e", 0xaa}, {&(0x7f0000000700)="447598f13a5bc229ec5181a958ffa7bd120f7d61f3d17b3295d40a13f1047c00ca245f844b500aeeee96fd261ae45c4e09db2cb8b0b513ad95e8cc379e59894b7184ae556f6fbf5a26179db0cf916c0718e7aa420bcd6362ddb802b610fcf79e84c6d217fafdb091df8ad9d65e96a2900e74e6d641dc1ed306d914ac981b14a4203946a82d9bba624469cbfaf216e6da3bd3355d51de4ea2edc1a1df59425ab60651c4709f7c139fecd93ad97201947ecd16d8c22524dadb16815a92b5073d534d660a7e54e0aba40190b0beedc1c58b35e19108f457e3b6eda08b598106cb284b266d412d1e", 0xfffffed3}], 0x9, &(0x7f00000003c0)="2969d82068", 0x5, 0x4081}, 0x20000010) r3 = socket$tipc(0x1e, 0x5, 0x0) recvmsg(r0, &(0x7f0000003800)={0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000025c0)=""/60, 0x3c}], 0x1, 0x0, 0xfffffffffffffcdf}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10, &(0x7f00000001c0), 0x1, 0x0, 0x0, 0x66b25a202fe02056}, 0x48044) 17.428046859s ago: executing program 4 (id=560): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {0x0, 0xd1}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb-twofish-avx\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x154}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000cc0)=[{&(0x7f0000000280)=""/105, 0x69}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000540)=""/179, 0x7e}, {&(0x7f00000009c0)=""/187, 0xbb}, {&(0x7f00000001c0)=""/1, 0x1}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000b80)=""/84, 0x54}, {&(0x7f0000000640)=""/123, 0x7b}], 0x9, &(0x7f00000006c0)=[{&(0x7f0000000c00)=""/176, 0xb0}], 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x40, 0x0, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000780)={0x2c, &(0x7f0000000580)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000380)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x400}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket(0x22, 0x1, 0x4) getsockname(r4, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000000c0)={0xffffffff, 0xbe9a}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000240)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14) 14.074951352s ago: executing program 2 (id=572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@link_local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty}, {0x0, 0x4e21, 0x8}}}}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000001040), 0x8) getsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, &(0x7f0000001000)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000ec0)=[{0x0, 0x7, 0x6}], 0x1, 0x29b, 0x0, 0x0, 0x0, 0x45}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x1, 0x1, 0x801, 0x0, 0x0, {}, [@CTA_ZONE={0x6}, @CTA_TUPLE_ORIG={0x4}]}, 0x20}}, 0x0) 13.987749991s ago: executing program 4 (id=573): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x22020600) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x244000, 0x0) readv(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x62}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) unshare(0x22020600) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x244000, 0x0) (async) readv(r0, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet6(0xa, 0x1, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) (async) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000140)={@local}, &(0x7f0000000040)=0x20) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) (async) bind$can_j1939(r3, &(0x7f0000001200)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x62}}, 0x0) (async) 13.731996812s ago: executing program 2 (id=574): r0 = memfd_create(&(0x7f0000000380)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fl\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X %\x91\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r\xec\xff\x83z\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]Wr{\xbb\xeb\xa7\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca', 0x0) dup(r0) fstatfs(0xffffffffffffffff, &(0x7f0000000040)=""/5) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf00d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x1, 0x1) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) connect$pppl2tp(r3, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socket$inet6_udp(0xa, 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) unshare(0x2a020400) ppoll(&(0x7f0000000440)=[{r6}], 0x1, 0x0, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x181042, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x970b) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000740)) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)=';\x00j') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/power/sync_on_suspend', 0x582080, 0x2) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000880)={0x74, 0x0, 0xc}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.779911563s ago: executing program 2 (id=575): r0 = socket$inet(0x2, 0x80001, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006500)=[{&(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r1}, &(0x7f0000000240)=0x8) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000100)={r10, 0x7}, 0x8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r6, @ANYBLOB="020528bd7000fbdbdf253700000008002700010000000500180118000000050018013900000008009f000000000008009f00050000000800a00004000000050019010c0000000800a00008000000050019010f0000000800220190000000050019010a00000008009f0004000000080027000100000008005700030000000800570003000000080026006c09000008009f000000000008009f00040000000800a0003f0000000800a00018160000080022014403000008002700020000000800260094090000050019010b000000050019010a0000000800270001000000080022018f0100000800a100ffffff7f"], 0xf4}}, 0x8400) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x933, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x0, 0x5, 0x8, 0x40, 0x1}, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="fa0e66b180162c1c23510002"], 0x7, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x82c}}, {0x92, &(0x7f0000000680)=ANY=[@ANYBLOB="9203631428c1c54ac4d9fc0bdbca3ebd43192e81660201cfc2f8156e56c6dc2fb0ddf43de2b34e120f5f2ad804674287b72126f67f51c617863dfda95a651f2c74f2ea88c3c71c1c966c235b347a2691fb293e96bd13303ac3688d096475bb9206dc9fcd1c22be02bb9851d942c7b8a1eefe572e98368f01c91be02fa07e3cd9db84ba9968dfe7d7e079c747460486af760b"]}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x80c}}]}) dup3(r9, r3, 0x80000) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x2}], 0x0, 0x0, 0x0}) memfd_secret(0x80000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r12, 0x8982, &(0x7f00000007c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800011d00000000000000000afe80ff", @ANYRES32=0x0, @ANYBLOB="000000001400010000000000000000000000000000000001080002"], 0x38}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000000009000200256420ad000000000900010073797a300000000008000540", @ANYRES8=r8, @ANYRESHEX=r7, @ANYRESDEC], 0xe0}}, 0x20040000) 6.571962831s ago: executing program 1 (id=585): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'syzkaller1\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80100020}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x68, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010501}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_TYPE={0xffffffffffffff4b}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_RECV_TIMEOUT={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) (async) setsockopt(r6, 0x84, 0x7d, &(0x7f0000000080)="1af3050000f2bd5b", 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x1}}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) io_uring_setup(0xc40, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000006000000000000000000", @ANYRES32=r1], 0x20}}, 0x0) 6.132867545s ago: executing program 3 (id=586): r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1c, 0xa, 0x0, "001e29746869ce4fb1258988e70000a100867a392f08d80e00"}) (async, rerun: 32) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x1002}, 0x4) (rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = io_uring_setup(0x3eae, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async, rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8040000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x1e8, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8, 0x3, "449188b8"}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "282dd79fe995193a7285c6c997d455608e90dbe9fed1d4a0881a1aabb86e4db780486a15"}}, @TIPC_NLA_NODE_ID={0x5d, 0x3, "741c56160f23d01ba29fb390c0b6b902b874d8ba43d47230733bd9182076fa0b0c4a5dc93ce0defc174060e79a6dec64239a5a660802173dbea5a7f39bde9140e8344af06edff9f00226533e6969a04d962c08819feeaf1f9b"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffff00}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2a000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe01}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x8000}, 0x8840) (async) futex(&(0x7f0000000000)=0x2, 0x0, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x1, 0x0) 5.936790749s ago: executing program 1 (id=587): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0xffffffffffffffff, &(0x7f0000000580)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="0006af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x8d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, &(0x7f0000000380)) capset(&(0x7f0000000440)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000480)={0x8, 0x8, 0x2, 0x7, 0x90000000}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000888f74500002800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000090090780080"], 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0xffffffffffffffff, &(0x7f0000000580)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="0006af"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet(0x2, 0x3, 0x8d) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) (async) getsockopt$inet_mreq(r1, 0x0, 0x20, 0x0, &(0x7f0000000380)) (async) capset(&(0x7f0000000440)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000480)={0x8, 0x8, 0x2, 0x7, 0x90000000}) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000002140)=ANY=[@ANYBLOB="aaaaaaaaaaaa00200000000888f74500002800", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000090090780080"], 0x0) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) 5.876179368s ago: executing program 3 (id=588): openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r1}}, 0x48) r2 = syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000200)='./bus\x00', 0x800000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000\x00\x000000010000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB=',default_permissions,allow_other,allow_other,max_read=0xfffffffffffffffc,dont_measure,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c6d6561737572652c66736d616769633d3078303030303030303030303030303264622c6673757569643d00303201373832642d626637312d353766302d3138661c2d37663064633664622c64697273796e632c657569643c", @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x0, 0x0, &(0x7f0000000240)="fc43268fb3a6d6704e7fcec6218d864153cb084b5ddc3f84c0c90335f312d7a81ae09501") r3 = open_tree(r2, &(0x7f0000000140)='./bus\x00', 0x8901) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) stat(&(0x7f00000002c0)='./bus\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r5, &(0x7f0000000580)) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="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", 0xa58}], 0x1}}], 0x1, 0x44004) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.809500323s ago: executing program 3 (id=589): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x2, 0x3, 0x67) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 1', 0x1a) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x48, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100003048b4f2c29bc05000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100240012800b00010062726964676500001400028008000500010000000800010015000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x80, 0x0}) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000180)={0xffff, r3}) 5.42580826s ago: executing program 3 (id=590): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000044199610b90661408801010203010902120001000000000904"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async, rerun: 64) r2 = eventfd(0x0) (rerun: 64) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f0000000300)=""/96, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async, rerun: 64) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000002c0)=0x200000000) (async, rerun: 64) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) (async) syz_io_uring_setup(0x7279, 0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x80402) (async) unshare(0x68040200) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async, rerun: 32) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) (rerun: 32) r5 = socket$inet6(0xa, 0x3, 0x6) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x401}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) timer_gettime(0x0, 0x0) (async) unshare(0x22020000) 5.128210209s ago: executing program 2 (id=591): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000480)=[{{0x80000000, 0x0}, {0x80000000}}]}) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) io_setup(0x3, &(0x7f0000000180)=0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000002340)=[&(0x7f0000000040)={0x0, 0x300, 0x0, 0x5, 0x0, r5, 0x0}]) r6 = socket$kcm(0x2, 0xa, 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r3, 0x0, &(0x7f0000000000)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000400)={{r1, r8, 0x0, [0x2, 0x2]}, {r7, r2, 0x3, [0x0, 0x4]}, 0x0, [0x1]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000091b025f0865fa82f1800df10ca38160215a6f80102030102"], 0x0) 4.876398057s ago: executing program 1 (id=592): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x21, &(0x7f0000000240)=ANY=[@ANYBLOB]}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32=r3, @ANYBLOB="03000000000000001c0012800e0001006960366772657461700000001600028004"], 0x3c}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="341000003b0007010000000000000000047c0000040000001400018008001600000000000600060080"], 0x1034}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) (async) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) (async) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) r5 = syz_open_pts(r4, 0x141601) ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) (async) r6 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x0) fcntl$setstatus(r5, 0x4, 0x102800) (async) fcntl$setstatus(r5, 0x4, 0x102800) dup2(r6, r4) 4.553771362s ago: executing program 3 (id=593): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="4005070009615f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xfffffffe, 0x0, {{0x26, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @local, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x400, 0x1000, 0x5, 0xfffffffc, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd, 0x4}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0) r6 = dup(r4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_io_uring_setup(0xd2, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 4.246812562s ago: executing program 0 (id=596): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020605000000000000000000000000050002000000050004eeffffff0009000200736a7a31000000001400", @ANYRESHEX], 0x4c}}, 0x0) r1 = userfaultfd(0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) r4 = syz_io_uring_setup(0x4172, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x2}, &(0x7f0000000100)=0x0, &(0x7f00000021c0)=0x0) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4008014) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x79a7e8590125ce10, 0x0, @fd_index=0x9, 0xffffffffffff7bf7, &(0x7f0000003400)=[{&(0x7f0000002200)=""/35, 0x23}, {&(0x7f0000002240)=""/4096, 0x1000}, {&(0x7f0000003240)=""/9, 0x9}, {&(0x7f0000003280)=""/23, 0x17}, {&(0x7f0000003480)=""/129, 0x81}, {&(0x7f0000003340)=""/172, 0xac}], 0x6, 0x2, 0x0, {0x0, r7}}) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0xeed, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0x20003}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r11 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x3, 0x5}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) io_uring_enter(r11, 0x20003d16, 0x80000, 0x0, 0x0, 0x0) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) fcntl$dupfd(r1, 0x0, r1) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000100), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r14, 0x0) r15 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r15, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0xffffff2f) write$FUSE_DIRENTPLUS(r15, &(0x7f0000002140)=ANY=[@ANYBLOB="d000000000000000", @ANYRES64=r16, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00@\x00'/32, @ANYBLOB="0000000000000000000000000300000000000000000000000000000024000000050000002dbb2edd3d27"], 0xd0) r17 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r17, 0x0, 0x0) 4.052140257s ago: executing program 1 (id=597): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000070000006a53"], 0x48}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\a'], 0x20000408}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x8240, 0x0) mmap(&(0x7f000004c000/0x1000)=nil, 0x1000, 0x1000001, 0x28011, r4, 0x300000) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) 3.622284594s ago: executing program 0 (id=599): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000000c0)={0x1}, 0x8) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000040)=0xffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000ac0)="df"}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x8000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f124e31182a1b003a00fa31b61409a6e7079e9528a19f15282c7214f1593a310d50c0c5b663116b028fbf10461593efd872f0cac4898cfd42ae842cd7495f76f762fffdd64f5f8bf4a5c55dba04e70916f474218d7c13a6fc9267f8a0d1696ceabd5e7d24bd"], 0x1c}}, 0x0) 3.219286388s ago: executing program 0 (id=600): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x21, "64a80c3f3336efade53deeb4e3ab158b39c1400000000000000092a6696fcfba", "95ddfb65f500c0d934717ef5dd3dfc83e29f92e4cfa26270ba343bd9e805026a", "5b4cbd6c4dd2752d74d58b94da2123cb1cda09b11357b3b94a80d506fd05f09f", "6ab12ed073d2c6db98497a51dd1b00c13240edd30c6348ec4b57eaab53bf94d6", "19e3c0787eebb27570731ffc8c0969f3b66abdd6331cf84bc6d25b3832f4be75", "79924d9a6cf1704ae3c04aa5"}}) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r5 = syz_open_dev$sndctrl(&(0x7f0000000a40), 0x1ff, 0x101000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000a80)=0x9) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000b00)=0x6) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff0000004c7ce56caac02aef0a154605f2151863171d498c9bbe3536300c6243c7cac07586f0abbc8dd49e28870bbd4ec6fa01ba89da4cf5aaefb798f9e3bc64b989eb6058a51fc2d2396e2eb2dd829cc2edca41eee59bf5b6a82030cabdad41917ffc2d6d587e2a6c7aea0ec3ecd5d1816533e190ec10cfe2a7ffe719bd8e385ae840be78747f6a9cbeb2e26307d112962d880b625d707d6091f94d02ae3be43c"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000280)={0x0, 0x0, 0x3, "d79504"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) unshare(0x2040400) fcntl$dupfd(r8, 0x406, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5]}) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@gettaction={0x18, 0x5a, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x0, 0xee01}}, './file0\x00'}) landlock_restrict_self(r10, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xffff0300, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB], 0x40}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000045d33f08ac05470223000001090212000100000000090000000003100200"], 0x0) setsockopt$inet6_tcp_TLS_TX(r11, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x303}, "842bc2f9638186dc", "d569b26dd7b05fccd11f25b07a9c3eac", "06c95e9e", "e89552534856e864"}, 0x28) 3.152577829s ago: executing program 1 (id=601): request_key(0x0, 0x0, 0x0, 0xfffffffffffffffb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = epoll_create1(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000404c05d50310000200000109022400010000000009041200010300000009210000000122010009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000380)=""/250) 1.899690759s ago: executing program 2 (id=602): sched_yield() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x8100, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) accept4(r3, 0x0, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="80040001"], 0x28}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) fchownat(r4, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x1000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)="14937dfd6c49ba32", 0x8}], 0x1}}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000280)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000000}}, 0x24) sendto$inet(r6, 0x0, 0x0, 0x24004000, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, 0x0) r8 = eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000180)=ANY=[@ANYRES64=r5], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @cgroup_sock_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f00000001c0)={0x0, r8}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1.348125679s ago: executing program 3 (id=603): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0xa2643) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f00000000c0)=""/33) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xa, "1a811bb6"}, @main=@item_4={0x3, 0x0, 0x8e8c50fc5a52dae5, "51418274"}, @main=@item_4={0x3, 0x0, 0xc, "b15e6e1c"}]}}, 0x0}, 0x0) (async, rerun: 32) r2 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x101200) (rerun: 32) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000080)={0x2, 0x100, 0x0, 0x0, 0x1, 0xa}) 966.971443ms ago: executing program 2 (id=604): r0 = getpid() syz_emit_ethernet(0x3f, &(0x7f0000000000)={@local, @link_local, @void, {@arp={0x806, @generic={0x3, 0x8906, 0x6, 0xd, 0x4, @broadcast, "acd73e1a13e3de38cc56fe9b2a", @local, "a3dd847e6a74a09f733a6c9db7513bd9"}}}}, 0x0) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f00000000c0)=""/168, 0x98}], 0x5d, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000033ba1ce04009048b1"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000d40), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000000080)={0x2, 0x100, 0x0, 0x0, 0x1, 0xa}) close_range(r2, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@random="43e2c358873b", @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x40, 0x3a, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0xffff, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, [], "17c11d58674e624c1a14ff3aaab57fff"}}}}}}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYRES8=r10, @ANYRES32, @ANYBLOB="14005080050002000600000005000a"], 0x30}}, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) modify_ldt$write(0x1, &(0x7f0000000080)={0x4, 0x20000800, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000001ac0)=""/4125, 0x101d) 888.108348ms ago: executing program 0 (id=605): getpid() (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000040)={0x0, 0xe03}) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000280000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="643e0f20def3a7650fdf08670f01caf0838ddb000abad104ed66b8000000000f23c80f21f866350800e0000f23f80f20e06635ae4000f30f22e0362e360f21976737", 0x42}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x103000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 638.438194ms ago: executing program 0 (id=606): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r1 = dup(r0) read(r0, &(0x7f0000000040)=""/19, 0x13) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000000)={0xf0f046}) r2 = socket$nl_generic(0x11, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x34, r4, 0x101, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0) 96.247725ms ago: executing program 0 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x28, 0xc, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x4, 0x2}) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x284901) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xd59) 0s ago: executing program 1 (id=608): read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = syz_open_procfs(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000100)=0xfffffdfa, 0x4) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x8b, 0x100000500) ioctl$SNDCTL_MIDI_INFO(r5, 0xc074510c, &(0x7f00000001c0)={"b5ff70db89ca8cb19cba8777db28ac1c37ed6577db131d658326f0355bc1", 0x7, 0x2, 0x5, [0x2, 0x0, 0x6, 0x2, 0x80000000, 0xdac0, 0xd, 0xfffffffa, 0xda, 0x5, 0xfff, 0x9, 0x7fffffff, 0xa000000, 0xfffffffd, 0xbc4, 0x5, 0x8]}) connect$inet(r4, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000540)={'#! ', './file1', [], 0xa, "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"}, 0x141) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r10 = gettid() fcntl$setownex(r9, 0xf, &(0x7f0000000140)={0x2, r10}) flock(r9, 0x4) fcntl$notify(r9, 0x402, 0x8000002d) creat(&(0x7f0000000000)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) mmap(&(0x7f00007dd000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0xc0aa5000) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[], 0x14) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100005fb8e520cd0c8000834a0182030109021b00020000000009046f0000aad88623f914000000a46a0f00"], 0x0) kernel console output (not intermixed with test programs): ed promiscuous mode [ 178.819258][ T54] Bluetooth: hci1: command tx timeout [ 178.899785][ T5877] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.919750][ T7698] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.926996][ T7698] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.935333][ T7698] bridge_slave_1: entered allmulticast mode [ 178.942729][ T7698] bridge_slave_1: entered promiscuous mode [ 179.022194][ T5877] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.079310][ T7698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.118933][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.437'. [ 179.137172][ T5877] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.161801][ T7698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.225517][ T7698] team0: Port device team_slave_0 added [ 179.241335][ T7698] team0: Port device team_slave_1 added [ 179.322915][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.335073][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.378671][ T54] Bluetooth: hci2: command tx timeout [ 179.388957][ T7698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.410342][ T7698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.420684][ T7698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.456574][ T7698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.475817][ T7586] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.552238][ T7586] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.592998][ T7586] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.612437][ T7698] hsr_slave_0: entered promiscuous mode [ 179.623139][ T7698] hsr_slave_1: entered promiscuous mode [ 179.630041][ T7698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.638022][ T7698] Cannot create hsr debugfs directory [ 179.662044][ T7586] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.711560][ T5877] bridge_slave_1: left allmulticast mode [ 179.717886][ T5877] bridge_slave_1: left promiscuous mode [ 179.723694][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.732588][ T5877] bridge_slave_0: left allmulticast mode [ 179.739046][ T5877] bridge_slave_0: left promiscuous mode [ 179.744786][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.760682][ T5877] bridge_slave_1: left allmulticast mode [ 179.766387][ T5877] bridge_slave_1: left promiscuous mode [ 179.775706][ T5286] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 179.784698][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.794519][ T5877] bridge_slave_0: left allmulticast mode [ 179.800582][ T5877] bridge_slave_0: left promiscuous mode [ 179.806243][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.940686][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.960969][ T5286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.972866][ T5286] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 179.992921][ T5286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.014208][ T5286] usb 2-1: config 0 descriptor?? [ 180.264199][ T54] Bluetooth: hci4: command tx timeout [ 180.436480][ T5286] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 180.454159][ T5286] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 180.557194][ T5877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.570370][ T5877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.582689][ T5877] bond0 (unregistering): Released all slaves [ 180.596112][ T5877] bond1 (unregistering): Released all slaves [ 180.635625][ T5286] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 180.723895][ T5877] tipc: Left network mode [ 180.781317][ T5877] tipc: Left network mode [ 180.899578][ T54] Bluetooth: hci1: command tx timeout [ 180.905154][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 180.917627][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 180.928299][ T54] Bluetooth: hci3: hardware error 0x00 [ 181.009548][ T7586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.029082][ T7586] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.045733][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 181.045752][ T29] audit: type=1326 audit(1729747601.909:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.106562][ T29] audit: type=1326 audit(1729747601.909:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.145394][ T29] audit: type=1326 audit(1729747601.909:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.188740][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.195913][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.204324][ T29] audit: type=1326 audit(1729747601.909:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.230265][ T25] usb 4-1: USB disconnect, device number 38 [ 181.242698][ T29] audit: type=1326 audit(1729747601.909:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.267870][ T29] audit: type=1326 audit(1729747601.909:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.353558][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.360760][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.372130][ T29] audit: type=1326 audit(1729747601.909:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.435678][ T29] audit: type=1326 audit(1729747601.909:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.521884][ T29] audit: type=1326 audit(1729747601.909:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.627986][ T29] audit: type=1326 audit(1729747601.919:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.1.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 181.741735][ T5877] hsr_slave_0: left promiscuous mode [ 181.758166][ T5877] hsr_slave_1: left promiscuous mode [ 181.764676][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.777826][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.798341][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.805864][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.917179][ T5877] hsr_slave_0: left promiscuous mode [ 181.928625][ T5877] hsr_slave_1: left promiscuous mode [ 181.949037][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.967947][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.978671][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.986220][ T5877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.137879][ T5877] veth1_macvtap: left promiscuous mode [ 182.143510][ T5877] veth0_macvtap: left promiscuous mode [ 182.168033][ T5877] veth1_vlan: left promiscuous mode [ 182.173690][ T5877] veth0_vlan: left promiscuous mode [ 182.208910][ T5877] veth1_macvtap: left promiscuous mode [ 182.222168][ T5877] veth0_macvtap: left promiscuous mode [ 182.246697][ T5877] veth1_vlan: left promiscuous mode [ 182.256442][ T5877] veth0_vlan: left promiscuous mode [ 182.692166][ T5286] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 182.731959][ T5286] usb 2-1: USB disconnect, device number 28 [ 182.897489][ T5877] team0 (unregistering): Port device batadv1 removed [ 182.978719][ T54] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 182.985353][ T54] Bluetooth: hci1: command tx timeout [ 183.260853][ T7805] xt_TPROXY: Can be used only with -p tcp or -p udp [ 183.471169][ T7809] netlink: 88 bytes leftover after parsing attributes in process `syz.1.444'. [ 183.575768][ T7818] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 183.845675][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 183.929835][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 184.058430][ T5282] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 184.197728][ T5282] usb 4-1: device descriptor read/64, error -71 [ 184.438782][ T5282] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 184.584315][ T5282] usb 4-1: device descriptor read/64, error -71 [ 184.702559][ T5282] usb usb4-port1: attempt power cycle [ 184.736133][ T5877] team0 (unregistering): Port device team_slave_1 removed [ 184.785731][ T5877] team0 (unregistering): Port device team_slave_0 removed [ 185.051561][ T5282] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 185.059243][ T5243] Bluetooth: hci1: command tx timeout [ 185.078874][ T5282] usb 4-1: device descriptor read/8, error -71 [ 185.211821][ T7605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 185.226132][ T7605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 185.265038][ T7605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 185.314790][ T7605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.340728][ T5282] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 185.382986][ T5282] usb 4-1: device descriptor read/8, error -71 [ 185.459874][ T7586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.508850][ T5282] usb usb4-port1: unable to enumerate USB device [ 185.548087][ T46] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 185.604786][ T7586] veth0_vlan: entered promiscuous mode [ 185.674450][ T7605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.707869][ T7586] veth1_vlan: entered promiscuous mode [ 185.743036][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 185.758095][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 185.775219][ T7605] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.788563][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.824033][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 185.833295][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.842349][ T5875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.855232][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 185.860487][ T7698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.889644][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 185.910195][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 185.912643][ T7698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.935965][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.967420][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 185.969063][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.985811][ T5875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.998148][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.007372][ T7698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.020978][ T46] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 186.028951][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 186.040343][ T7586] veth0_macvtap: entered promiscuous mode [ 186.058756][ T7698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.063662][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.076059][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 186.093312][ T46] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 186.112369][ T7586] veth1_macvtap: entered promiscuous mode [ 186.131137][ T46] usb 2-1: string descriptor 0 read error: -22 [ 186.141919][ T46] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 186.169758][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.172783][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.189578][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.199929][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.211261][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.234226][ T46] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 186.251976][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.279171][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.292989][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.305993][ T7586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.325242][ T7586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.337355][ T7586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.417372][ T7586] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.435306][ T7586] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.458060][ T7586] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.466822][ T7586] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.491064][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.554641][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.603966][ T7605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.699329][ T2575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.707201][ T2575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.734018][ T7698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.751668][ T7698] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.799545][ T7605] veth0_vlan: entered promiscuous mode [ 186.821387][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.828599][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.839852][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.841309][ T5877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.847046][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.897703][ T5877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.906498][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 186.927905][ T937] usb 2-1: USB disconnect, device number 29 [ 186.930620][ T7605] veth1_vlan: entered promiscuous mode [ 187.062016][ T7698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.115468][ T7605] veth0_macvtap: entered promiscuous mode [ 187.129390][ T7605] veth1_macvtap: entered promiscuous mode [ 187.144907][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.155609][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.165623][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.176211][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.186169][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.196966][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.208663][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.218845][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.229392][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.239304][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.250046][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.260206][ T7605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.270898][ T7605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.282134][ T7605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.293300][ T7605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.293345][ T7605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.293373][ T7605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.293402][ T7605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.367766][ T5288] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 187.545552][ T7698] veth0_vlan: entered promiscuous mode [ 187.567751][ T5288] usb 5-1: Using ep0 maxpacket: 8 [ 187.576961][ T5288] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 187.590301][ T5288] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 187.606310][ T5288] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 187.623186][ T5288] usb 5-1: config 250 has no interface number 0 [ 187.631246][ T5877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.636052][ T7698] veth1_vlan: entered promiscuous mode [ 187.647059][ T5877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.654480][ T5288] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 187.654517][ T5288] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 187.654543][ T5288] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26 [ 187.721388][ T5288] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 187.765409][ T5288] usb 5-1: config 250 interface 228 has no altsetting 0 [ 187.775376][ T7698] veth0_macvtap: entered promiscuous mode [ 187.785915][ T5288] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 187.804086][ T5288] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 187.812790][ T5288] usb 5-1: Product: syz [ 187.817081][ T5288] usb 5-1: SerialNumber: syz [ 187.830975][ T7698] veth1_macvtap: entered promiscuous mode [ 187.837793][ T5234] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 187.857421][ T5288] hub 5-1:250.228: bad descriptor, ignoring hub [ 187.859190][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.881498][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.882325][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.898297][ T5288] hub 5-1:250.228: probe with driver hub failed with error -5 [ 187.914355][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.925944][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.945446][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.955738][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.975756][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.986965][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.997808][ T5234] usb 2-1: Using ep0 maxpacket: 16 [ 188.011219][ T5234] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.023269][ T5234] usb 2-1: can't read configurations, error -61 [ 188.032305][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.053725][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.120662][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.159629][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.169868][ T5234] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 188.197520][ T5288] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 46 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 188.217853][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.256386][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.271092][ T5288] usb 5-1: USB disconnect, device number 46 [ 188.288493][ T5288] usblp0: removed [ 188.295889][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.329532][ T5234] usb 2-1: Using ep0 maxpacket: 16 [ 188.336752][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.355729][ T7698] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.366585][ T5234] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.374599][ T5234] usb 2-1: can't read configurations, error -61 [ 188.381042][ T7698] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.391324][ T5234] usb usb2-port1: attempt power cycle [ 188.399097][ T7698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.413359][ T7904] IPv6: sit1: Disabled Multicast RS [ 188.445048][ T7698] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.457926][ T7698] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.466754][ T7698] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.476046][ T7698] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.557889][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 188.630308][ T5875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.651398][ T5875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.696423][ T5875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.715867][ T5875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.740563][ T5234] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 188.744846][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 188.778941][ T5234] usb 2-1: Using ep0 maxpacket: 16 [ 188.786617][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 188.804679][ T5234] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.828246][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 188.838453][ T5234] usb 2-1: can't read configurations, error -61 [ 188.882763][ T25] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 188.913448][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.955376][ T25] usb 4-1: config 0 descriptor?? [ 188.960036][ T5875] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.998315][ T5234] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 189.018206][ T5234] usb 2-1: Using ep0 maxpacket: 16 [ 189.037443][ T5234] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 189.049773][ T5234] usb 2-1: can't read configurations, error -61 [ 189.068386][ T5234] usb usb2-port1: unable to enumerate USB device [ 189.152712][ T5875] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.188051][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.210243][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.246777][ T46] usb 4-1: USB disconnect, device number 43 [ 189.305263][ T7936] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 189.326792][ T5875] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.452908][ T5875] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.593363][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.608892][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.618944][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.629183][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.637907][ T5282] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 189.649738][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 189.657041][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.665866][ T5875] bridge_slave_1: left allmulticast mode [ 189.674305][ T5875] bridge_slave_1: left promiscuous mode [ 189.692613][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.725358][ T5875] bridge_slave_0: left allmulticast mode [ 189.731891][ T5875] bridge_slave_0: left promiscuous mode [ 189.738028][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.788731][ T5282] usb 3-1: device descriptor read/64, error -71 [ 189.978312][ T7959] netlink: 'syz.0.461': attribute type 12 has an invalid length. [ 189.994510][ T7959] netlink: 'syz.0.461': attribute type 11 has an invalid length. [ 190.003036][ T7959] netlink: 190580 bytes leftover after parsing attributes in process `syz.0.461'. [ 190.029112][ T5282] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 190.173500][ T5282] usb 3-1: device descriptor read/64, error -71 [ 190.187810][ T937] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 190.240386][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.254762][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.266764][ T5875] bond0 (unregistering): Released all slaves [ 190.299154][ T5282] usb usb3-port1: attempt power cycle [ 190.351479][ T937] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 190.366295][ T937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.397842][ T937] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.414522][ T937] usb 4-1: config 1 has no interface number 1 [ 190.421705][ T937] usb 4-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 190.447130][ T937] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 190.470656][ T937] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.494069][ T937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.508100][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.516271][ T937] usb 4-1: Product: syz [ 190.521539][ T937] usb 4-1: Manufacturer: syz [ 190.526477][ T937] usb 4-1: SerialNumber: syz [ 190.668278][ T5282] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 190.699205][ T5282] usb 3-1: device descriptor read/8, error -71 [ 190.779553][ T5875] hsr_slave_0: left promiscuous mode [ 190.789848][ T5875] hsr_slave_1: left promiscuous mode [ 190.800487][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.818000][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.829411][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.846513][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.926462][ T5875] veth1_macvtap: left promiscuous mode [ 190.940634][ T5875] veth0_macvtap: left promiscuous mode [ 190.957198][ T5875] veth1_vlan: left promiscuous mode [ 190.962725][ T5282] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 190.976342][ T5875] veth0_vlan: left promiscuous mode [ 191.002756][ T5282] usb 3-1: device descriptor read/8, error -71 [ 191.107890][ T5303] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 191.128013][ T5282] usb usb3-port1: unable to enumerate USB device [ 191.282041][ T5303] usb 1-1: Using ep0 maxpacket: 8 [ 191.295089][ T5303] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.315846][ T5303] usb 1-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 191.338967][ T5303] usb 1-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 191.366459][ T5303] usb 1-1: config 0 interface 0 has no altsetting 0 [ 191.394464][ T5303] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 191.407221][ T5303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.425445][ T5303] usb 1-1: Product: syz [ 191.439644][ T5303] usb 1-1: Manufacturer: syz [ 191.444316][ T5303] usb 1-1: SerialNumber: syz [ 191.469625][ T5303] usb 1-1: config 0 descriptor?? [ 191.492778][ T5303] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 191.693303][ T5286] usb 1-1: USB disconnect, device number 30 [ 191.709485][ T54] Bluetooth: hci2: command tx timeout [ 191.778103][ T5875] team0 (unregistering): Port device team_slave_1 removed [ 191.832154][ T5875] team0 (unregistering): Port device team_slave_0 removed [ 192.374689][ T7986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 192.414312][ T7986] netlink: 32 bytes leftover after parsing attributes in process `syz.0.464'. [ 192.498999][ T937] usb 4-1: USB disconnect, device number 44 [ 192.599337][ T7951] chnl_net:caif_netlink_parms(): no params data found [ 192.717162][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 192.717181][ T29] audit: type=1326 audit(1729747613.579:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 192.751018][ T29] audit: type=1326 audit(1729747613.589:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 192.774126][ T29] audit: type=1326 audit(1729747613.589:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 192.797617][ T29] audit: type=1326 audit(1729747613.589:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 192.877748][ T29] audit: type=1326 audit(1729747613.589:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 192.968615][ T29] audit: type=1326 audit(1729747613.589:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 193.055496][ T8002] syzkaller0: entered promiscuous mode [ 193.107743][ T29] audit: type=1326 audit(1729747613.589:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 193.141375][ T8002] syzkaller0: entered allmulticast mode [ 193.177884][ T29] audit: type=1326 audit(1729747613.589:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 193.193410][ T8015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 193.233234][ T29] audit: type=1326 audit(1729747613.589:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 193.256067][ T29] audit: type=1326 audit(1729747613.589:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7990 comm="syz.1.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c7317dff9 code=0x7ffc0000 [ 193.341520][ T7951] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.357825][ T7951] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.379874][ T7951] bridge_slave_0: entered allmulticast mode [ 193.386924][ T7951] bridge_slave_0: entered promiscuous mode [ 193.395233][ T7951] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.402462][ T7951] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.410893][ T7951] bridge_slave_1: entered allmulticast mode [ 193.418399][ T7951] bridge_slave_1: entered promiscuous mode [ 193.449005][ T5234] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 193.488069][ T8019] netlink: 'syz.3.471': attribute type 10 has an invalid length. [ 193.617692][ T5234] usb 3-1: Using ep0 maxpacket: 8 [ 193.629180][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.641465][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.651960][ T5234] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 193.661208][ T5286] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 193.678631][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.692686][ T7951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.699501][ T5234] usb 3-1: config 0 descriptor?? [ 193.710214][ T5234] usbhid 3-1:0.0: can't add hid device: -22 [ 193.716239][ T5234] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 193.785409][ T54] Bluetooth: hci2: command tx timeout [ 193.829141][ T5286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 193.852968][ T5286] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 193.898531][ T5286] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 193.940116][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 193.968377][ T5286] usb 4-1: SerialNumber: syz [ 194.156471][ T46] usb 3-1: USB disconnect, device number 46 [ 194.215624][ T5286] usb 4-1: 0:2 : does not exist [ 194.288762][ T5286] usb 4-1: USB disconnect, device number 45 [ 194.329172][ T5351] udevd[5351]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 194.566111][ T8042] Cannot find set identified by id 0 to match [ 194.668287][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.674720][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.651153][ T5303] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 195.828589][ T5303] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 195.844499][ T5303] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 195.863117][ T54] Bluetooth: hci2: command tx timeout [ 195.863176][ T5303] usb 2-1: config 0 has no interface number 0 [ 195.874753][ T5303] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1023 [ 195.885284][ T5303] usb 2-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 195.896234][ T5303] usb 2-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 195.908328][ T5303] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=cb.61 [ 195.917411][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.926933][ T5303] usb 2-1: Product: syz [ 195.931207][ T5303] usb 2-1: Manufacturer: syz [ 195.935862][ T5303] usb 2-1: SerialNumber: syz [ 195.948670][ T5303] usb 2-1: config 0 descriptor?? [ 195.961676][ T8058] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.979581][ T5303] kvaser_usb 2-1:0.29: error -ENODEV: Cannot get usb endpoint(s) [ 196.463029][ T7951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.582722][ T7951] team0: Port device team_slave_0 added [ 196.603930][ T7951] team0: Port device team_slave_1 added [ 196.631739][ T8062] program syz.0.478 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.670326][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.677339][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.778617][ T7951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.835864][ T7951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.863243][ T7951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.901899][ T7951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.027736][ T46] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 197.085032][ T7951] hsr_slave_0: entered promiscuous mode [ 197.109444][ T7951] hsr_slave_1: entered promiscuous mode [ 197.205685][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.216179][ T46] usb 3-1: config 0 has no interfaces? [ 197.245288][ T46] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 197.248359][ T5286] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 197.284141][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.371296][ T46] usb 3-1: Product: syz [ 197.389728][ T46] usb 3-1: Manufacturer: syz [ 197.403328][ T46] usb 3-1: SerialNumber: syz [ 197.419054][ T5286] usb 4-1: config 0 has no interfaces? [ 197.427858][ T8] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 197.436580][ T5286] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.455231][ T46] usb 3-1: config 0 descriptor?? [ 197.505473][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.568487][ T5286] usb 4-1: config 0 descriptor?? [ 197.587646][ T8] usb 1-1: device descriptor read/64, error -71 [ 197.828374][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 197.937715][ T54] Bluetooth: hci2: command tx timeout [ 197.981314][ T8] usb 1-1: device descriptor read/64, error -71 [ 197.990623][ T8074] syzkaller0: entered promiscuous mode [ 197.996704][ T8074] syzkaller0: entered allmulticast mode [ 198.130204][ T7951] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.153714][ T7951] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.160845][ T8] usb usb1-port1: attempt power cycle [ 198.199827][ T7951] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.222061][ T7951] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.394691][ T5286] usb 2-1: USB disconnect, device number 34 [ 198.519535][ T8] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 198.562942][ T8] usb 1-1: device descriptor read/8, error -71 [ 198.812298][ T8] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 198.852964][ T8] usb 1-1: device descriptor read/8, error -71 [ 198.977894][ T8] usb usb1-port1: unable to enumerate USB device [ 200.358002][ T8] usb 3-1: USB disconnect, device number 47 [ 200.707827][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 200.874038][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 200.891384][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 200.904769][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.932656][ T8] usb 3-1: Product: syz [ 200.936918][ T8] usb 3-1: Manufacturer: syz [ 200.953384][ T8] usb 3-1: SerialNumber: syz [ 200.968420][ T8] usb 3-1: config 0 descriptor?? [ 201.195113][ T8] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 201.311020][ T46] usb 4-1: USB disconnect, device number 46 [ 201.448948][ T7951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.515738][ T7951] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.632357][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.639570][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.697162][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.704360][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.929294][ T8145] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 202.051536][ T7951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.228655][ T5286] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 202.348956][ T7951] veth0_vlan: entered promiscuous mode [ 202.370506][ T7951] veth1_vlan: entered promiscuous mode [ 202.390327][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.404133][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 202.429769][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.442310][ T5286] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.484640][ T5286] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.495971][ T7951] veth0_macvtap: entered promiscuous mode [ 202.510953][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.521187][ T7951] veth1_macvtap: entered promiscuous mode [ 202.528417][ T937] usb 1-1: new low-speed USB device number 35 using dummy_hcd [ 202.538388][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 202.544252][ T5286] usb 4-1: config 0 descriptor?? [ 202.606690][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.613776][ T8145] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 202.625848][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.665418][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.687730][ T937] usb 1-1: Invalid ep0 maxpacket: 64 [ 202.695614][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.715519][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.728329][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.738633][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.762030][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.790755][ T8] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 202.793329][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.812538][ T8] usb 3-1: USB disconnect, device number 48 [ 202.838264][ T937] usb 1-1: new low-speed USB device number 36 using dummy_hcd [ 202.862440][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.879289][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.896440][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.933614][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.950243][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.985422][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.027230][ T7951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.046357][ T5286] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 203.069787][ T5286] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 203.081858][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 203.096891][ T7951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.098189][ T937] usb 1-1: Invalid ep0 maxpacket: 64 [ 203.132694][ T7951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.143917][ T5286] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 203.166139][ T937] usb usb1-port1: attempt power cycle [ 203.212120][ T7951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.230341][ T7951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.241579][ T7951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.251110][ T7951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.272065][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.293772][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.303229][ T5286] usb 4-1: USB disconnect, device number 47 [ 203.503101][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 203.503120][ T29] audit: type=1326 audit(1729747624.369:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 203.531967][ T937] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 203.547208][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.566528][ T937] usb 1-1: Invalid ep0 maxpacket: 64 [ 203.573037][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.631274][ T29] audit: type=1326 audit(1729747624.369:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 203.706036][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.717722][ T937] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 203.745591][ T29] audit: type=1326 audit(1729747624.369:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 203.745926][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.790382][ T937] usb 1-1: Invalid ep0 maxpacket: 64 [ 203.816619][ T937] usb usb1-port1: unable to enumerate USB device [ 203.894158][ T29] audit: type=1326 audit(1729747624.369:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 203.938376][ T29] audit: type=1326 audit(1729747624.369:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 203.969164][ T29] audit: type=1326 audit(1729747624.369:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 204.056338][ T29] audit: type=1326 audit(1729747624.369:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 204.147891][ T46] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 204.169031][ T29] audit: type=1326 audit(1729747624.369:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 204.238173][ T29] audit: type=1326 audit(1729747624.369:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 204.317943][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 204.332849][ T29] audit: type=1326 audit(1729747624.369:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8183 comm="syz.2.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa22c57dff9 code=0x7ffc0000 [ 204.371591][ T46] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2 [ 204.387907][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.497'. [ 204.402267][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.436544][ T46] usb 5-1: Product: syz [ 204.447611][ T46] usb 5-1: Manufacturer: syz [ 204.457880][ T46] usb 5-1: SerialNumber: syz [ 204.469597][ T46] usb 5-1: config 0 descriptor?? [ 204.489598][ T46] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I [ 204.704036][ T46] usb 5-1: reset high-speed USB device number 47 using dummy_hcd [ 204.753936][ T8198] netlink: 84 bytes leftover after parsing attributes in process `syz.2.498'. [ 205.087680][ T937] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 205.187763][ T5234] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 205.242903][ T937] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 205.250893][ T937] usb 4-1: can't read configurations, error -61 [ 205.341587][ T8229] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 205.349636][ T5234] usb 3-1: Using ep0 maxpacket: 8 [ 205.356771][ T8229] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 205.357169][ T5234] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.397836][ T937] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 205.397876][ T46] usb 5-1: [UEAGLE-ATM] interface 1 not found [ 205.405573][ T5234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.425433][ T46] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 205.436297][ T46] usb 5-1: USB disconnect, device number 47 [ 205.449589][ T5234] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.463345][ T5234] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.502102][ T5234] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.524910][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.584441][ T937] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 205.595369][ T937] usb 4-1: can't read configurations, error -61 [ 205.605959][ T937] usb usb4-port1: attempt power cycle [ 205.617898][ T46] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 205.734223][ T8237] netlink: 72 bytes leftover after parsing attributes in process `syz.0.506'. [ 205.766772][ T5234] usb 3-1: GET_CAPABILITIES returned 0 [ 205.774608][ T5234] usbtmc 3-1:16.0: can't read capabilities [ 205.790360][ T46] usb 5-1: device descriptor read/64, error -71 [ 205.964671][ T937] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 206.047050][ T5303] usb 3-1: USB disconnect, device number 49 [ 206.067891][ T46] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 206.077237][ T937] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 206.110059][ T937] usb 4-1: can't read configurations, error -61 [ 206.228419][ T46] usb 5-1: device descriptor read/64, error -71 [ 206.277694][ T937] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 206.300081][ T937] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 206.307909][ T937] usb 4-1: can't read configurations, error -61 [ 206.314721][ T937] usb usb4-port1: unable to enumerate USB device [ 206.361174][ T46] usb usb5-port1: attempt power cycle [ 206.788431][ T46] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 206.808915][ T46] usb 5-1: device descriptor read/8, error -71 [ 207.278810][ T5303] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 207.298134][ T5234] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 207.337879][ T5282] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 207.345715][ T46] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 207.372860][ T46] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 207.382149][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.392268][ T46] usb 5-1: config 0 descriptor?? [ 207.418487][ T5303] usb 3-1: device descriptor read/64, error -71 [ 207.450808][ T5234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.462187][ T5234] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 207.484772][ T5234] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 207.494624][ T5234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.502734][ T5234] usb 2-1: Product: syz [ 207.507055][ T5234] usb 2-1: Manufacturer: syz [ 207.511963][ T5234] usb 2-1: SerialNumber: syz [ 207.517474][ T5282] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.529214][ T5234] usb 2-1: config 0 descriptor?? [ 207.535242][ T5282] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 207.544425][ T5282] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 207.553715][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.553750][ T5234] option 2-1:0.0: GSM modem (1-port) converter detected [ 207.571273][ T5282] usb 1-1: config 0 descriptor?? [ 207.698124][ T5303] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 207.805961][ T46] [drm:udl_init] *ERROR* Selecting channel failed [ 207.834754][ T46] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 207.842337][ T46] [drm] Initialized udl on minor 2 [ 207.856618][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.865436][ T5303] usb 3-1: device descriptor read/64, error -71 [ 207.878855][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 207.924861][ T5284] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.934744][ T46] usb 5-1: USB disconnect, device number 51 [ 207.951036][ T5284] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 207.978142][ T5303] usb usb3-port1: attempt power cycle [ 207.991485][ T5282] Bluetooth: Can't get version to change to load ram patch err [ 208.004656][ T5282] Bluetooth: Loading sysconfig file failed [ 208.012605][ T5282] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 208.031178][ T5282] usb 1-1: USB disconnect, device number 39 [ 208.083149][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.514'. [ 208.357705][ T5303] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 208.378468][ T5303] usb 3-1: device descriptor read/8, error -71 [ 208.628059][ T5303] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 208.669693][ T5303] usb 3-1: device descriptor read/8, error -71 [ 208.797737][ T5282] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 208.815930][ T5303] usb usb3-port1: unable to enumerate USB device [ 208.979018][ T5282] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 208.997632][ T5282] usb 1-1: config 0 has no interface number 0 [ 209.020709][ T5282] usb 1-1: config 0 interface 250 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 209.060089][ T5282] usb 1-1: config 0 interface 250 altsetting 0 endpoint 0x4 has invalid maxpacket 50960, setting to 64 [ 209.099885][ T5282] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 209.127004][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.153460][ T5282] usb 1-1: config 0 descriptor?? [ 209.310893][ T5282] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 209.427764][ T937] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 209.537916][ T5234] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 209.587763][ T937] usb 4-1: Using ep0 maxpacket: 8 [ 209.601945][ T937] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 209.611346][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.620778][ T937] usb 4-1: Product: syz [ 209.625017][ T937] usb 4-1: Manufacturer: syz [ 209.629847][ T937] usb 4-1: SerialNumber: syz [ 209.636032][ T937] usb 4-1: config 0 descriptor?? [ 209.644328][ T937] gspca_main: sq930x-2.14.0 probing 2770:930c [ 209.703099][ T5234] usb 5-1: Using ep0 maxpacket: 16 [ 209.714803][ T5234] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 209.725993][ T5234] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.737069][ T5234] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 209.747107][ T5234] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 209.761076][ T5234] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 209.770364][ T5234] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 209.778600][ T5234] usb 5-1: Manufacturer: syz [ 209.785665][ T5234] usb 5-1: config 0 descriptor?? [ 209.933802][ T5303] usb 2-1: USB disconnect, device number 35 [ 209.960104][ T5303] option 2-1:0.0: device disconnected [ 210.020851][ T5282] usb 1-1: device descriptor read/64, error -71 [ 210.034794][ T8283] netlink: 'syz.1.519': attribute type 2 has an invalid length. [ 210.053095][ T937] gspca_sq930x: ucbus_write failed -71 [ 210.072564][ T937] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 210.084529][ T937] usb 4-1: USB disconnect, device number 52 [ 210.155929][ T8288] netlink: 36 bytes leftover after parsing attributes in process `syz.2.521'. [ 210.172437][ T8288] sit0: entered promiscuous mode [ 210.185542][ T8288] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 210.193857][ T8288] netlink: 1 bytes leftover after parsing attributes in process `syz.2.521'. [ 210.267772][ T5282] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 210.399335][ T5234] rc_core: IR keymap rc-hauppauge not found [ 210.399451][ T5282] usb 1-1: device descriptor read/64, error -71 [ 210.405262][ T5234] Registered IR keymap rc-empty [ 210.405876][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.439714][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.458105][ T5234] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.471843][ T5234] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 210.478383][ T5303] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 210.499552][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.518003][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.539275][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.557921][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.577936][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.598399][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.608092][ T46] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 210.630443][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.647905][ T5282] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 210.659197][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.664421][ T5303] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.676932][ T5303] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.679174][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.694923][ T5303] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 210.705532][ T5282] usb 1-1: device descriptor read/8, error -71 [ 210.717198][ T5303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 210.717924][ T5234] mceusb 5-1:0.0: Error: mce write urb status = -71 [ 210.728111][ T5303] usb 2-1: SerialNumber: syz [ 210.774804][ T5234] mceusb 5-1:0.0: Registered ࠁ with mce emulator interface version 1 [ 210.784947][ T5234] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.798128][ T5234] usb 5-1: USB disconnect, device number 52 [ 210.800038][ T46] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 210.837596][ T46] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.862610][ T46] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 210.888447][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.911140][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.923187][ T46] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.932719][ T46] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.940990][ T46] usb 3-1: Product: syz [ 210.951674][ T5303] usb 2-1: 0:2 : does not exist [ 210.956777][ T46] usb 3-1: Manufacturer: syz [ 210.961735][ T5282] usb 1-1: reset high-speed USB device number 40 using dummy_hcd [ 210.987508][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 210.993407][ T46] cdc_wdm 3-1:1.0: skipping garbage [ 210.999692][ T5282] usb 1-1: device descriptor read/8, error -71 [ 211.007494][ T46] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 211.013673][ T46] cdc_wdm 3-1:1.0: Unknown control protocol [ 211.127907][ T5282] usb 1-1: USB disconnect, device number 40 [ 211.186858][ T8290] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 211.194898][ T8290] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 211.203805][ T8290] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 211.211909][ T46] usb 3-1: USB disconnect, device number 54 [ 211.298630][ T5282] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 211.377896][ T5303] usb 2-1: USB disconnect, device number 36 [ 211.398250][ T5234] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 211.417039][ T5351] udevd[5351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.437814][ T5282] usb 1-1: device descriptor read/64, error -71 [ 211.587697][ T5234] usb 4-1: Using ep0 maxpacket: 8 [ 211.609541][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.622086][ T5234] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.633138][ T5234] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 211.647873][ T46] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 211.656934][ T5234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.678861][ T5234] usb 4-1: config 0 descriptor?? [ 211.818370][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 211.830444][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.866165][ T46] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.886549][ T46] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.898195][ T46] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.908587][ T46] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 212.014294][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.024987][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.041381][ T46] usb 5-1: Product: syz [ 212.048706][ T46] usb 5-1: Manufacturer: syz [ 212.053345][ T46] usb 5-1: SerialNumber: syz [ 212.118109][ T5234] hid-led 0003:04D8:F372.000D: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 212.213867][ T5234] hid-led 0003:04D8:F372.000D: Greynut Luxafor initialized [ 212.247880][ T5303] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 212.289232][ T46] cdc_ncm 5-1:1.0: bind() failure [ 212.298617][ T5284] usb 4-1: USB disconnect, device number 53 [ 212.324832][ T46] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 212.334101][ T5283] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 212.350802][ T5283] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 212.360418][ T46] cdc_ncm 5-1:1.1: bind() failure [ 212.370825][ T5283] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 212.380884][ T46] usb 5-1: USB disconnect, device number 53 [ 212.412822][ T5283] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 212.432394][ T5303] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.451405][ T25] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 212.462631][ T25] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 212.471399][ T5303] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 212.485749][ T25] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 212.498520][ T25] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 212.508928][ T5303] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.518544][ T5303] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.526597][ T5303] usb 2-1: Product: syz [ 212.532726][ T25] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 212.542647][ T5303] usb 2-1: Manufacturer: syz [ 212.548950][ T25] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 212.558464][ T5303] usb 2-1: SerialNumber: syz [ 212.566403][ T25] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 212.590416][ T46] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 212.603031][ T46] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 212.613989][ T46] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 212.625097][ T46] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 212.636057][ T46] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 212.647177][ T46] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 212.659798][ T46] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 212.791220][ T5303] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 212.808934][ T5303] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 212.825252][ T5303] usb 2-1: USB disconnect, device number 37 [ 212.847388][ T5351] udevd[5351]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.007816][ T25] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 213.167729][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 213.183838][ T25] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 213.193904][ T8333] pimreg: entered allmulticast mode [ 213.214729][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 213.225230][ T25] usb 3-1: can't read configurations, error -61 [ 213.239076][ T8335] snd_dummy snd_dummy.0: control 0:0:0:syz1:0 is already present [ 213.378621][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 213.548353][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 213.566797][ T25] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 213.574975][ T5284] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 213.603611][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 213.614306][ T25] usb 3-1: can't read configurations, error -61 [ 213.627982][ T25] usb usb3-port1: attempt power cycle [ 213.706862][ T8349] netlink: 5312 bytes leftover after parsing attributes in process `syz.4.540'. [ 213.727844][ T5284] usb 1-1: device descriptor read/64, error -71 [ 213.844425][ T8352] vlan2: entered promiscuous mode [ 213.852654][ T8352] vlan0: entered promiscuous mode [ 213.866662][ T8352] vlan0: left promiscuous mode [ 213.968685][ T5286] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 213.987776][ T5284] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 214.008684][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 214.057901][ T8356] netlink: 'syz.3.543': attribute type 1 has an invalid length. [ 214.068710][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 214.074510][ T25] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 214.084537][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.097727][ T25] usb 3-1: can't read configurations, error -61 [ 214.138064][ T5284] usb 1-1: device descriptor read/64, error -71 [ 214.138577][ T5286] usb 5-1: Using ep0 maxpacket: 32 [ 214.161609][ T5286] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.200119][ T5286] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.215075][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.226713][ T5286] usb 5-1: Product: syz [ 214.234682][ T5286] usb 5-1: Manufacturer: syz [ 214.239546][ T5286] usb 5-1: SerialNumber: syz [ 214.247938][ T5284] usb usb1-port1: attempt power cycle [ 214.253529][ T25] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 214.277758][ T5234] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 214.289795][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 214.301764][ T25] usb 3-1: too many configurations: 179, using maximum allowed: 8 [ 214.315328][ T25] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 214.330254][ T25] usb 3-1: can't read configurations, error -61 [ 214.337228][ T25] usb usb3-port1: unable to enumerate USB device [ 214.427672][ T5234] usb 2-1: Using ep0 maxpacket: 8 [ 214.434181][ T5234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 214.445625][ T5234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 214.463410][ T5234] usb 2-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 214.478150][ T5234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.486583][ T5234] usb 2-1: Product: syz [ 214.490914][ T5234] usb 2-1: Manufacturer: syz [ 214.495579][ T5234] usb 2-1: SerialNumber: syz [ 214.513341][ T5234] usb 2-1: config 0 descriptor?? [ 214.545142][ T8364] netlink: 84 bytes leftover after parsing attributes in process `syz.3.545'. [ 214.608032][ T5284] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 214.646642][ T5284] usb 1-1: device descriptor read/8, error -71 [ 214.691301][ T8349] input: syz0 as /devices/virtual/input/input32 [ 214.724076][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.745817][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.786433][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 214.786451][ T29] audit: type=1326 audit(1729747635.649:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8369 comm="syz.3.547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9588f7dff9 code=0x0 [ 214.828113][ T5234] usb 2-1: USB disconnect, device number 38 [ 214.846081][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.899738][ T5284] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 214.941040][ T5284] usb 1-1: device descriptor read/8, error -71 [ 215.047918][ T5284] usb usb1-port1: unable to enumerate USB device [ 215.115841][ T5286] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 215.146514][ T5286] cdc_ncm 5-1:1.0: bind() failure [ 215.155746][ T5286] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 215.162627][ T5286] cdc_ncm 5-1:1.1: bind() failure [ 215.175352][ T5286] usb 5-1: USB disconnect, device number 54 [ 215.265851][ T8376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.290023][ T8376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.302914][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.318401][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.346702][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.355876][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.364565][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.375054][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.387657][ T8379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.398814][ T8379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.406790][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.414402][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.422451][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.430194][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.438170][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.446018][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.454579][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.462951][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.470684][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.478996][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.486521][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.494269][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.502639][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.510177][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.517694][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.525145][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.532619][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.540165][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.547729][ T5284] hid-generic 5C96:0009:0004.000E: unknown main item tag 0x0 [ 215.566113][ T5284] hid-generic 5C96:0009:0004.000E: hidraw0: HID v0.07 Device [syz0] on syz0 [ 215.627707][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 215.628672][ T5285] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 215.767705][ T5285] usb 3-1: device descriptor read/64, error -71 [ 215.787918][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 215.798097][ T25] usb 2-1: config 3 has an invalid interface number: 55 but max is 3 [ 215.812401][ T25] usb 2-1: config 3 has an invalid descriptor of length 1, skipping remainder of the config [ 215.824725][ T25] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 215.834728][ T25] usb 2-1: config 3 has no interface number 0 [ 215.841572][ T25] usb 2-1: config 3 interface 55 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 215.855118][ T25] usb 2-1: config 3 interface 55 has no altsetting 0 [ 215.874781][ T25] usb 2-1: New USB device found, idVendor=07ca, idProduct=850b, bcdDevice=54.d5 [ 215.884210][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.895035][ T25] usb 2-1: Product: syz [ 215.901550][ T25] usb 2-1: Manufacturer: syz [ 215.906283][ T25] usb 2-1: SerialNumber: syz [ 216.017701][ T5285] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 216.144600][ T25] usb 2-1: USB disconnect, device number 39 [ 216.148746][ T5285] usb 3-1: device descriptor read/64, error -71 [ 216.197675][ T5286] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 216.268538][ T5285] usb usb3-port1: attempt power cycle [ 216.347750][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 216.361641][ T5286] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.381663][ T5286] usb 5-1: config 6 has an invalid interface number: 6 but max is 1 [ 216.390386][ T5286] usb 5-1: config 6 has an invalid interface number: 25 but max is 1 [ 216.403793][ T5286] usb 5-1: config 6 has no interface number 0 [ 216.416123][ T5286] usb 5-1: config 6 has no interface number 1 [ 216.426256][ T5286] usb 5-1: config 6 interface 6 has no altsetting 0 [ 216.435393][ T5286] usb 5-1: config 6 interface 25 has no altsetting 0 [ 216.445618][ T5286] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=ee.60 [ 216.457037][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.468441][ T5286] usb 5-1: Product: syz [ 216.472632][ T5286] usb 5-1: Manufacturer: syz [ 216.477973][ T5286] usb 5-1: SerialNumber: syz [ 216.618565][ T5285] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 216.638414][ T5285] usb 3-1: device descriptor read/8, error -71 [ 216.752797][ T5234] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 216.887779][ T5285] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 216.920361][ T5285] usb 3-1: device descriptor read/8, error -71 [ 216.930363][ T5234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.945515][ T5234] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 216.956816][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.981181][ T5234] usb 1-1: config 0 descriptor?? [ 217.001838][ T5234] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 217.048027][ T5285] usb usb3-port1: unable to enumerate USB device [ 217.244932][ T5234] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 217.372502][ T25] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 217.548224][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 217.555337][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 217.579885][ T25] usb 2-1: New USB device found, idVendor=eb1a, idProduct=a316, bcdDevice=d5.48 [ 217.597593][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.617703][ T25] usb 2-1: Product: syz [ 217.621921][ T25] usb 2-1: Manufacturer: syz [ 217.626522][ T25] usb 2-1: SerialNumber: syz [ 217.648501][ T25] usb 2-1: config 0 descriptor?? [ 217.662995][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (eb1a:a316, interface 0, class 0) [ 217.685081][ T25] em28xx 2-1:0.0: Video interface 0 found: [ 217.748244][ T8396] netlink: 76 bytes leftover after parsing attributes in process `syz.0.553'. [ 217.759605][ T8396] netlink: 52 bytes leftover after parsing attributes in process `syz.0.553'. [ 217.770722][ T937] usb 1-1: USB disconnect, device number 47 [ 217.889878][ T8404] netlink: 76 bytes leftover after parsing attributes in process `syz.3.555'. [ 218.327745][ T5284] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 218.497950][ T5284] usb 4-1: Using ep0 maxpacket: 32 [ 218.512411][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.533451][ T5284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.547035][ T5284] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 218.561163][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.575804][ T5284] usb 4-1: config 0 descriptor?? [ 218.584964][ T5284] hub 4-1:0.0: USB hub found [ 218.728061][ T5234] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 218.786696][ T5284] hub 4-1:0.0: 1 port detected [ 218.808159][ T25] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 218.815122][ T5284] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 218.828962][ T5284] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 218.870445][ T5284] usbhid 4-1:0.0: can't add hid device: -71 [ 218.886704][ T5284] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 218.897929][ T5234] usb 1-1: Using ep0 maxpacket: 32 [ 218.900419][ T25] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 218.930644][ T25] em28xx 2-1:0.0: board has no eeprom [ 218.931070][ T5286] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 218.949344][ T5234] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 218.958500][ T5284] usb 4-1: USB disconnect, device number 54 [ 218.981574][ T5234] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.998057][ T25] em28xx 2-1:0.0: Identified as Kworld PlusTV HD Hybrid 330 (card=57) [ 219.013405][ T5286] snd-usb-audio 5-1:6.6: probe with driver snd-usb-audio failed with error -2 [ 219.024006][ T5234] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.029151][ T25] em28xx 2-1:0.0: analog set to bulk mode. [ 219.043877][ T5286] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.056216][ T5303] em28xx 2-1:0.0: Registering V4L2 extension [ 219.080000][ T5234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.103202][ T5234] usb 1-1: config 0 descriptor?? [ 219.137841][ T5234] hub 1-1:0.0: bad descriptor, ignoring hub [ 219.160975][ T5234] hub 1-1:0.0: probe with driver hub failed with error -5 [ 219.195557][ T5234] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 219.209663][ T5303] em28xx 2-1:0.0: reading from i2c device at 0xb8 failed (error=-5) [ 219.214826][ T5286] snd-usb-audio 5-1:6.25: probe with driver snd-usb-audio failed with error -2 [ 219.220429][ T5303] em28xx 2-1:0.0: reading from i2c device at 0xba failed (error=-5) [ 219.240852][ T5286] usb 5-1: USB disconnect, device number 55 [ 219.304503][ T5241] udevd[5241]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.25/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.332516][ T5303] em28xx 2-1:0.0: reading from i2c device at 0x84 failed (error=-5) [ 219.345868][ T5303] em28xx 2-1:0.0: reading from i2c device at 0x86 failed (error=-5) [ 219.362514][ T5303] em28xx 2-1:0.0: reading from i2c device at 0x94 failed (error=-5) [ 219.375274][ T5303] em28xx 2-1:0.0: reading from i2c device at 0x96 failed (error=-5) [ 219.385113][ T5303] em28xx 2-1:0.0: reading from i2c device at 0xc0 failed (error=-5) [ 219.396740][ T5303] em28xx 2-1:0.0: reading from i2c device at 0xc2 failed (error=-5) [ 219.405521][ T5303] em28xx 2-1:0.0: reading from i2c device at 0xc4 failed (error=-5) [ 219.415678][ T5303] em28xx 2-1:0.0: reading from i2c device at 0xc6 failed (error=-5) [ 219.424186][ T5303] em28xx 2-1:0.0: reading from i2c device at 0xc8 failed (error=-5) [ 219.434345][ T5303] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 219.443177][ T5303] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 219.451468][ T5303] em28xx 2-1:0.0: No AC97 audio processor [ 219.463300][ T5303] em28xx 2-1:0.0: em28xx_v4l2_init: Error while setting audio - error [-5]! [ 219.473051][ T5303] em28xx 2-1:0.0: Binding DVB extension [ 219.478947][ T5303] em28xx 2-1:0.0: no endpoint for DVB mode and transfer type 0 [ 219.486658][ T5303] em28xx 2-1:0.0: failed to pre-allocate USB transfer buffers for DVB. [ 219.495161][ T5303] em28xx 2-1:0.0: Remote control support is not available for this card. [ 219.587698][ T5286] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 219.739473][ T5286] usb 5-1: Using ep0 maxpacket: 16 [ 219.746524][ T5286] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 219.759544][ T5286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 219.783048][ T5286] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 219.794944][ T937] usb 2-1: USB disconnect, device number 40 [ 219.804368][ T5286] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.812605][ T937] em28xx 2-1:0.0: Disconnecting em28xx [ 219.821910][ T937] em28xx 2-1:0.0: Closing input extension [ 219.829135][ T5286] usb 5-1: Product: syz [ 219.833349][ T5286] usb 5-1: Manufacturer: syz [ 219.842612][ T937] em28xx 2-1:0.0: Freeing device [ 219.847784][ T5286] usb 5-1: SerialNumber: syz [ 219.862100][ T5286] usb 5-1: config 0 descriptor?? [ 219.878361][ T5286] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 219.894958][ T5286] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 220.019701][ T5303] usb 1-1: USB disconnect, device number 48 [ 220.147233][ T8441] tipc: Can't bind to reserved service type 1 [ 220.237884][ T937] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 220.398434][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 220.437301][ T937] usb 2-1: New USB device found, idVendor=0582, idProduct=00e6, bcdDevice=4e.06 [ 220.458803][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.467529][ T937] usb 2-1: Product: syz [ 220.473206][ T937] usb 2-1: Manufacturer: syz [ 220.478721][ T937] usb 2-1: SerialNumber: syz [ 220.483794][ T29] audit: type=1326 audit(1729747641.349:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.487003][ T937] usb 2-1: config 0 descriptor?? [ 220.515178][ T5286] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 220.523769][ T29] audit: type=1326 audit(1729747641.379:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.538335][ T5286] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 220.557124][ T29] audit: type=1326 audit(1729747641.379:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.588263][ T29] audit: type=1326 audit(1729747641.379:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.631829][ T5238] udevd[5238]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.707047][ T29] audit: type=1326 audit(1729747641.379:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.743801][ T29] audit: type=1326 audit(1729747641.379:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.851169][ T8436] team0: entered promiscuous mode [ 220.853796][ T29] audit: type=1326 audit(1729747641.379:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.879173][ T8436] team_slave_0: entered promiscuous mode [ 220.885355][ T8436] team_slave_1: entered promiscuous mode [ 220.891424][ T8436] bond0: entered promiscuous mode [ 220.897335][ T29] audit: type=1326 audit(1729747641.379:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.898315][ T8436] bond_slave_0: entered promiscuous mode [ 220.928480][ T937] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 220.929406][ T29] audit: type=1326 audit(1729747641.379:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.959100][ T8436] bond_slave_1: entered promiscuous mode [ 220.961138][ T8458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.975864][ T29] audit: type=1326 audit(1729747641.379:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8446 comm="syz.0.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fc737dff9 code=0x7ffc0000 [ 220.976481][ T8436] team0: left promiscuous mode [ 221.037229][ T8436] team_slave_0: left promiscuous mode [ 221.048964][ T8436] team_slave_1: left promiscuous mode [ 221.054459][ T8436] bond0: left promiscuous mode [ 221.063180][ T5234] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 221.067789][ T8436] bond_slave_0: left promiscuous mode [ 221.076402][ T8436] bond_slave_1: left promiscuous mode [ 221.084789][ T8458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.107760][ T937] usb 4-1: Using ep0 maxpacket: 32 [ 221.120924][ T937] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 221.129432][ T937] usb 4-1: config 0 has no interface number 0 [ 221.135597][ T937] usb 4-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 221.196415][ T937] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 221.206760][ T5286] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 221.214426][ T5234] usb 1-1: device descriptor read/64, error -71 [ 221.229285][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 221.235829][ T937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.237011][ T5284] usb 2-1: USB disconnect, device number 41 [ 221.245560][ T937] usb 4-1: Product: syz [ 221.260258][ T937] usb 4-1: Manufacturer: syz [ 221.270208][ T937] usb 4-1: SerialNumber: syz [ 221.286689][ T937] usb 4-1: config 0 descriptor?? [ 221.295513][ T8455] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 221.467917][ T5234] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 221.607770][ T5234] usb 1-1: device descriptor read/64, error -71 [ 221.717872][ T5234] usb usb1-port1: attempt power cycle [ 221.859891][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 221.869999][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 221.878063][ T5286] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 221.897459][ T5286] usb 5-1: USB disconnect, device number 56 [ 222.067745][ T5234] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 222.088265][ T5234] usb 1-1: device descriptor read/8, error -71 [ 222.337733][ T5234] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 222.380544][ T5234] usb 1-1: device descriptor read/8, error -71 [ 222.518182][ T5234] usb usb1-port1: unable to enumerate USB device [ 222.558591][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.573'. [ 222.829189][ T3018] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.039188][ T3018] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.184957][ T3018] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.321185][ T3018] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.397467][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.408195][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.418335][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.427169][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.437341][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.445416][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.499371][ T937] net1080 4-1:0.113: probe with driver net1080 failed with error -71 [ 223.515823][ T937] usb 4-1: USB disconnect, device number 55 [ 223.779034][ T3018] bridge_slave_1: left allmulticast mode [ 223.779065][ T3018] bridge_slave_1: left promiscuous mode [ 223.779225][ T3018] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.782383][ T3018] bridge_slave_0: left allmulticast mode [ 223.806699][ T8477] program syz.3.576 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 223.832885][ T3018] bridge_slave_0: left promiscuous mode [ 223.833609][ T3018] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.253823][ T5303] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 224.413424][ T3018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.425016][ T3018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.427891][ T5303] usb 1-1: Using ep0 maxpacket: 16 [ 224.439131][ T25] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 224.453542][ T5303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.455612][ T3018] bond0 (unregistering): Released all slaves [ 224.465757][ T5303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.481675][ T5303] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 224.495362][ T5303] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 224.527723][ T5303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.560337][ T5303] usb 1-1: config 0 descriptor?? [ 224.615535][ T25] usb 4-1: config 0 has no interfaces? [ 224.621525][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.636315][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.673890][ T25] usb 4-1: config 0 descriptor?? [ 224.890205][ T3018] hsr_slave_0: left promiscuous mode [ 224.900820][ T3018] hsr_slave_1: left promiscuous mode [ 224.911550][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.944176][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.968067][ T3018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.008073][ T3018] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.128497][ T5303] usbhid 1-1:0.0: can't add hid device: -71 [ 225.156198][ T5303] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 225.237440][ T5303] usb 1-1: USB disconnect, device number 53 [ 225.243900][ T3018] veth1_macvtap: left promiscuous mode [ 225.270110][ T3018] veth0_macvtap: left promiscuous mode [ 225.308906][ T3018] veth1_vlan: left promiscuous mode [ 225.314261][ T3018] veth0_vlan: left promiscuous mode [ 225.373727][ T8507] capability: warning: `syz.1.579' uses 32-bit capabilities (legacy support in use) [ 225.537695][ T5243] Bluetooth: hci4: command tx timeout [ 225.628745][ T937] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 225.724653][ T5234] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 225.827779][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 225.854165][ T937] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 225.876190][ T937] usb 2-1: config 0 has an invalid descriptor of length 232, skipping remainder of the config [ 225.897620][ T937] usb 2-1: config 0 has no interface number 0 [ 225.915975][ T937] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 225.943931][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.966906][ T937] usb 2-1: Product: syz [ 225.974020][ T937] usb 2-1: Manufacturer: syz [ 225.979351][ T5234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.996016][ T937] usb 2-1: SerialNumber: syz [ 226.001898][ T5234] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 226.014010][ T937] usb 2-1: config 0 descriptor?? [ 226.059574][ T5234] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 226.070025][ T937] usb 2-1: Found UVC 0.00 device syz (046d:08d3) [ 226.079378][ T3018] team0 (unregistering): Port device team_slave_1 removed [ 226.133498][ T937] usb 2-1: No valid video chain found. [ 226.139607][ T3018] team0 (unregistering): Port device team_slave_0 removed [ 226.146967][ T5234] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.168748][ T5234] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 226.179372][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.187455][ T5234] usb 1-1: Product: syz [ 226.192426][ T5234] usb 1-1: Manufacturer: syz [ 226.197420][ T5234] usb 1-1: SerialNumber: syz [ 226.210497][ T5234] usb 1-1: config 0 descriptor?? [ 226.222247][ T5234] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 226.249325][ T5303] usb 2-1: USB disconnect, device number 42 [ 226.445978][ T8509] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.882837][ T8473] chnl_net:caif_netlink_parms(): no params data found [ 227.065448][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.081371][ T5234] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 227.102127][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.154818][ T8473] bridge_slave_0: entered allmulticast mode [ 227.165158][ T8473] bridge_slave_0: entered promiscuous mode [ 227.169694][ T937] usb 4-1: USB disconnect, device number 56 [ 227.189450][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.227900][ T5234] usb 2-1: device descriptor read/64, error -71 [ 227.235644][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.253677][ T8473] bridge_slave_1: entered allmulticast mode [ 227.261730][ T8473] bridge_slave_1: entered promiscuous mode [ 227.334679][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.379151][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.462295][ T8473] team0: Port device team_slave_0 added [ 227.484026][ T8473] team0: Port device team_slave_1 added [ 227.532623][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.545825][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.548191][ T5234] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 227.600232][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.617692][ T5243] Bluetooth: hci4: command tx timeout [ 227.657723][ T937] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 227.704556][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.723846][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.765701][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.788170][ T5234] usb 2-1: device descriptor read/64, error -71 [ 227.817687][ T937] usb 4-1: device descriptor read/64, error -71 [ 227.846877][ T8473] hsr_slave_0: entered promiscuous mode [ 227.855855][ T8473] hsr_slave_1: entered promiscuous mode [ 227.864356][ T8473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.876188][ T8473] Cannot create hsr debugfs directory [ 227.908011][ T5234] usb usb2-port1: attempt power cycle [ 228.077733][ T937] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 228.207821][ T937] usb 4-1: device descriptor read/64, error -71 [ 228.259628][ T5234] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 228.298559][ T5234] usb 2-1: device descriptor read/8, error -71 [ 228.327944][ T937] usb usb4-port1: attempt power cycle [ 228.443501][ T8473] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.453787][ T8473] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.464759][ T8473] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.475079][ T8473] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.549642][ T5234] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 228.577184][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.591031][ T5234] usb 2-1: device descriptor read/8, error -71 [ 228.604816][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.617264][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.624419][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.644053][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.651221][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.687977][ T937] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 228.711044][ T937] usb 4-1: device descriptor read/8, error -71 [ 228.737946][ T5234] usb usb2-port1: unable to enumerate USB device [ 228.783251][ T5234] usb 1-1: USB disconnect, device number 54 [ 228.808142][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.904338][ T8473] veth0_vlan: entered promiscuous mode [ 228.911209][ T8553] netlink: 96 bytes leftover after parsing attributes in process `syz.0.583'. [ 228.934287][ T8473] veth1_vlan: entered promiscuous mode [ 228.960336][ T937] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 229.008781][ T937] usb 4-1: device descriptor read/8, error -71 [ 229.022913][ T8473] veth0_macvtap: entered promiscuous mode [ 229.052403][ T8473] veth1_macvtap: entered promiscuous mode [ 229.069470][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.083933][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.095562][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.113555][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.126008][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.138104][ T937] usb usb4-port1: unable to enumerate USB device [ 229.146507][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.163889][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.187704][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.206651][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.241790][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.256572][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.269283][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.280820][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.292209][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.303182][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.313417][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.324278][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.335861][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.347655][ T5234] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 229.350901][ T8473] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.371775][ T8473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.383972][ T8473] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.400723][ T8473] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.497943][ T5234] usb 1-1: Using ep0 maxpacket: 32 [ 229.507344][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.517417][ T5234] usb 1-1: config 0 has no interfaces? [ 229.529479][ T5234] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 229.541664][ T5234] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.543829][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.557663][ T5234] usb 1-1: Product: syz [ 229.569737][ T5234] usb 1-1: Manufacturer: syz [ 229.577073][ T5234] usb 1-1: SerialNumber: syz [ 229.598277][ T5234] usb 1-1: config 0 descriptor?? [ 229.606610][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.626920][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.698120][ T5243] Bluetooth: hci4: command tx timeout [ 229.988766][ T5234] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 230.147843][ T5234] usb 3-1: Using ep0 maxpacket: 8 [ 230.156615][ T5234] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.166582][ T5234] usb 3-1: config 6 has an invalid interface number: 100 but max is 0 [ 230.175024][ T5234] usb 3-1: config 6 has an invalid interface number: 227 but max is 0 [ 230.183399][ T5234] usb 3-1: config 6 has an invalid interface number: 172 but max is 0 [ 230.191805][ T5234] usb 3-1: config 6 has 3 interfaces, different from the descriptor's value: 1 [ 230.201452][ T5234] usb 3-1: config 6 has no interface number 0 [ 230.207731][ T5234] usb 3-1: config 6 has no interface number 1 [ 230.213839][ T5234] usb 3-1: config 6 has no interface number 2 [ 230.220613][ T5234] usb 3-1: config 6 interface 100 altsetting 55 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 230.231751][ T5234] usb 3-1: config 6 interface 100 altsetting 55 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 230.245014][ T5234] usb 3-1: too many endpoints for config 6 interface 227 altsetting 62: 144, using maximum allowed: 30 [ 230.256324][ T5234] usb 3-1: config 6 interface 227 altsetting 62 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 230.268108][ T5234] usb 3-1: config 6 interface 227 altsetting 62 has an invalid descriptor for endpoint zero, skipping [ 230.284402][ T5234] usb 3-1: config 6 interface 227 altsetting 62 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 230.306640][ T5234] usb 3-1: config 6 interface 227 altsetting 62 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 230.318644][ T5234] usb 3-1: config 6 interface 227 altsetting 62 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 230.343420][ T5234] usb 3-1: config 6 interface 227 altsetting 62 has 9 endpoint descriptors, different from the interface descriptor's value: 144 [ 230.358176][ T5234] usb 3-1: too many endpoints for config 6 interface 172 altsetting 52: 146, using maximum allowed: 30 [ 230.370697][ T5234] usb 3-1: config 6 interface 172 altsetting 52 has a duplicate endpoint with address 0x5, skipping [ 230.382442][ T5234] usb 3-1: config 6 interface 172 altsetting 52 has a duplicate endpoint with address 0x5, skipping [ 230.396983][ T5234] usb 3-1: config 6 interface 172 altsetting 52 has 3 endpoint descriptors, different from the interface descriptor's value: 146 [ 230.428932][ T5234] usb 3-1: config 6 interface 100 has no altsetting 0 [ 230.437705][ T5234] usb 3-1: config 6 interface 227 has no altsetting 0 [ 230.444509][ T5234] usb 3-1: config 6 interface 172 has no altsetting 0 [ 230.470601][ T5234] usb 3-1: New USB device found, idVendor=0df6, idProduct=006c, bcdDevice=e0.30 [ 230.487707][ T5234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.495758][ T5234] usb 3-1: Product: 㰁 [ 230.506688][ T5234] usb 3-1: Manufacturer: ї [ 230.511988][ T5234] usb 3-1: SerialNumber: ࠬ [ 230.626300][ T8609] fuse: Bad value for 'fd' [ 230.731187][ T8582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.575'. [ 230.755045][ T5234] r8712u: register rtl8712_netdev_ops to netdev_ops [ 230.765359][ T5234] usb 3-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 230.786776][ T5234] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 230.798125][ T5234] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 230.805914][ T5234] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 230.827375][ T5234] r8712u: register rtl8712_netdev_ops to netdev_ops [ 230.834596][ T5234] usb 3-1: r8712u: USB_SPEED_HIGH with 8 endpoints [ 230.845050][ T5234] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 230.851930][ T5285] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 230.864495][ T5234] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 230.882153][ T5234] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 230.905692][ T5234] r8712u: register rtl8712_netdev_ops to netdev_ops [ 230.912687][ T5234] usb 3-1: r8712u: USB_SPEED_HIGH with 1 endpoints [ 230.922547][ T5234] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed [ 230.929744][ T5234] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00 [ 230.937416][ T5234] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin" [ 230.955654][ T5234] usb 3-1: USB disconnect, device number 63 [ 231.021431][ T5285] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 231.038994][ T5285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.059353][ T5285] usb 2-1: Product: syz [ 231.067247][ T5285] usb 2-1: Manufacturer: syz [ 231.076453][ T5285] usb 2-1: SerialNumber: syz [ 231.087157][ T5285] usb 2-1: config 0 descriptor?? [ 231.094204][ T5285] ch341 2-1:0.0: ch341-uart converter detected [ 231.347866][ T5286] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 231.504987][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.515307][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.523994][ T5286] usb 4-1: Using ep0 maxpacket: 16 [ 231.533521][ T5286] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 231.553622][ T5285] usb 2-1: failed to send control message: -71 [ 231.559891][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.568115][ T5234] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 231.578369][ T5285] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 231.588170][ T5286] usb 4-1: Product: syz [ 231.592650][ T5286] usb 4-1: Manufacturer: syz [ 231.597305][ T5286] usb 4-1: SerialNumber: syz [ 231.604588][ T5285] usb 2-1: USB disconnect, device number 47 [ 231.616687][ T5286] usb 4-1: config 0 descriptor?? [ 231.629291][ T5285] ch341 2-1:0.0: device disconnected [ 231.683682][ T8624] netlink: 4104 bytes leftover after parsing attributes in process `syz.1.592'. [ 231.710328][ T5234] usb 3-1: device descriptor read/64, error -71 [ 231.788751][ T5243] Bluetooth: hci4: command tx timeout [ 231.885273][ T5286] speedtch 4-1:0.0: speedtch_bind: wrong device class 68 [ 231.892895][ T5286] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 231.903398][ T5286] usb 4-1: USB disconnect, device number 61 [ 231.957905][ T5234] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 232.002610][ T5285] usb 1-1: USB disconnect, device number 55 [ 232.098608][ T5234] usb 3-1: device descriptor read/64, error -71 [ 232.207973][ T5234] usb usb3-port1: attempt power cycle [ 232.267796][ T5286] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 232.441461][ T5286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.453885][ T5286] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 232.464061][ T5286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.473671][ T5286] usb 4-1: config 0 descriptor?? [ 232.557704][ T5234] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 232.598755][ T5234] usb 3-1: device descriptor read/8, error -71 [ 232.667797][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 232.685618][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 232.696127][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 232.707066][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 232.715160][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 232.723283][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 232.872081][ T5234] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 232.908636][ T5234] usb 3-1: device descriptor read/8, error -71 [ 232.993649][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 233.028017][ T5234] usb usb3-port1: unable to enumerate USB device [ 233.159693][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.168008][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.175384][ T8655] bridge_slave_0: entered allmulticast mode [ 233.182938][ T8655] bridge_slave_0: entered promiscuous mode [ 233.192795][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.200222][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.207861][ T8655] bridge_slave_1: entered allmulticast mode [ 233.215165][ T8655] bridge_slave_1: entered promiscuous mode [ 233.324488][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.370076][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.436491][ T8655] team0: Port device team_slave_0 added [ 233.456525][ T8655] team0: Port device team_slave_1 added [ 233.513952][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.531040][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.557792][ T8655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.569207][ T46] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 233.580705][ T8655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.588104][ T8655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.615310][ T8655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.667701][ T5303] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 233.685537][ T8655] hsr_slave_0: entered promiscuous mode [ 233.699985][ T8655] hsr_slave_1: entered promiscuous mode [ 233.726594][ T8655] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.741396][ T8655] Cannot create hsr debugfs directory [ 233.742782][ T46] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 233.771090][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.796553][ T46] usb 1-1: Product: syz [ 233.806323][ T46] usb 1-1: Manufacturer: syz [ 233.815934][ T46] usb 1-1: SerialNumber: syz [ 233.824452][ T5303] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 233.833986][ T5303] usb 2-1: config 0 has no interface number 0 [ 233.841258][ T46] usb 1-1: config 0 descriptor?? [ 233.847100][ T5303] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.861769][ T5303] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.894423][ T5303] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 233.914153][ T5303] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 233.925493][ T5303] usb 2-1: Manufacturer: syz [ 233.958333][ T5303] usb 2-1: config 0 descriptor?? [ 233.967451][ T8655] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.055439][ T8655] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.170871][ T8655] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.272094][ T46] usb 1-1: Firmware: major: 215, minor: 149, hardware type: HULUSB (4) [ 234.304694][ T8655] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.414058][ T5303] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.000F/input/input33 [ 234.483695][ T5303] sony 0003:054C:03D5.000F: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 234.502927][ T8669] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 234.608744][ T8669] wireguard0: entered promiscuous mode [ 234.638258][ T8669] wireguard0: entered allmulticast mode [ 234.700745][ T8678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.729122][ T8678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.818373][ T54] Bluetooth: hci5: command tx timeout [ 234.863251][ T8655] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 234.928824][ T8655] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 234.974628][ T8655] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.034202][ T8655] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.065016][ T5286] usbhid 4-1:0.0: can't add hid device: -71 [ 235.091241][ T5286] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 235.149421][ T5286] usb 4-1: USB disconnect, device number 62 [ 235.273226][ T8655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.299073][ T46] usb 1-1: failed to fetch extended address, random address set [ 235.311128][ T8655] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.327603][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.334752][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.389978][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.397061][ T1123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.485239][ T46] usb 1-1: USB disconnect, device number 56 [ 235.517847][ T5286] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 235.632562][ T8655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.667929][ T5286] usb 4-1: device descriptor read/64, error -71 [ 235.699723][ T5284] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 235.758455][ T8655] veth0_vlan: entered promiscuous mode [ 235.776288][ T8655] veth1_vlan: entered promiscuous mode [ 235.810612][ T8655] veth0_macvtap: entered promiscuous mode [ 235.854007][ T8655] veth1_macvtap: entered promiscuous mode [ 235.892132][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.903155][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.915950][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.931801][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.941944][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.947779][ T5234] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 235.960072][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.960098][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.960145][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.960161][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.960560][ T5286] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 235.990616][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.064361][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.074848][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.085538][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.096372][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.107068][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.137591][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.159768][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.178662][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.197602][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.214025][ T8655] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.224671][ T5286] usb 4-1: device descriptor read/64, error -71 [ 236.231413][ T5234] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.244328][ T8655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.261829][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 236.279661][ T5234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 236.290419][ T8655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.298374][ T5234] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.311517][ T5234] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.320623][ T5234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.331186][ T8655] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.343783][ T5234] usb 3-1: config 0 descriptor?? [ 236.349296][ T5286] usb usb4-port1: attempt power cycle [ 236.357848][ T8655] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.366885][ T8655] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.382371][ T8655] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.504339][ T8699] [ 236.506722][ T8699] ===================================================== [ 236.513675][ T8699] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 236.517129][ T8655] ieee80211 phy47: Selected rate control algorithm 'minstrel_ht' [ 236.521127][ T8699] 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 Not tainted [ 236.521141][ T8699] ----------------------------------------------------- [ 236.521149][ T8699] syz.1.608/8699 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 236.521171][ T8699] ffffffff8e60a058 [ 236.544527][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.550414][ T8699] (tasklist_lock){.+.+}-{2:2}, at: send_sigio+0x108/0x390 [ 236.550465][ T8699] [ 236.550465][ T8699] and this task is already holding: [ 236.550472][ T8699] ffff888025347d20 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 236.550517][ T8699] which would create a new lock dependency: [ 236.550524][ T8699] (&f_owner->lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2} [ 236.550568][ T8699] [ 236.550568][ T8699] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 236.550578][ T8699] (&dev->event_lock#2){..-.}-{2:2} [ 236.550599][ T8699] [ 236.550599][ T8699] ... which became SOFTIRQ-irq-safe at: [ 236.550607][ T8699] lock_acquire+0x1ed/0x550 [ 236.550630][ T8699] _raw_spin_lock_irqsave+0xd5/0x120 [ 236.550659][ T8699] input_inject_event+0xc5/0x340 [ 236.550680][ T8699] kd_sound_helper+0x101/0x210 [ 236.550700][ T8699] input_handler_for_each_handle+0x103/0x1d0 [ 236.550723][ T8699] call_timer_fn+0x18e/0x650 [ 236.550746][ T8699] __run_timer_base+0x66a/0x8e0 [ 236.550766][ T8699] run_timer_softirq+0xb7/0x170 [ 236.550788][ T8699] handle_softirqs+0x2c5/0x980 [ 236.550809][ T8699] __irq_exit_rcu+0xf4/0x1c0 [ 236.550829][ T8699] irq_exit_rcu+0x9/0x30 [ 236.550849][ T8699] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 236.550874][ T8699] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 236.550893][ T8699] lock_release+0x658/0xa30 [ 236.550916][ T8699] up_read+0x16/0x20 [ 236.550933][ T8699] vma_end_read+0xde/0x170 [ 236.563273][ T8655] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 236.569687][ T8699] exc_page_fault+0x4c8/0x8c0 [ 236.569718][ T8699] asm_exc_page_fault+0x26/0x30 [ 236.569735][ T8699] [ 236.569735][ T8699] to a SOFTIRQ-irq-unsafe lock: [ 236.569743][ T8699] (tasklist_lock){.+.+}-{2:2} [ 236.569766][ T8699] [ 236.569766][ T8699] ... which became SOFTIRQ-irq-unsafe at: [ 236.569775][ T8699] ... [ 236.569779][ T8699] lock_acquire+0x1ed/0x550 [ 236.578629][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.585687][ T8699] _raw_read_lock+0x36/0x50 [ 236.585720][ T8699] __do_wait+0x12d/0x850 [ 236.629211][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.631408][ T8699] do_wait+0x1e9/0x560 [ 236.631434][ T8699] kernel_wait+0xe9/0x240 [ 236.636967][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.641265][ T8699] call_usermodehelper_exec_work+0xbd/0x230 [ 236.641292][ T8699] process_scheduled_works+0xa63/0x1850 [ 236.641315][ T8699] worker_thread+0x870/0xd30 [ 236.800808][ T8699] kthread+0x2f0/0x390 [ 236.801815][ T5286] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 236.804971][ T8699] ret_from_fork+0x4b/0x80 [ 236.805004][ T8699] ret_from_fork_asm+0x1a/0x30 [ 236.805027][ T8699] [ 236.805027][ T8699] other info that might help us debug this: [ 236.805027][ T8699] [ 236.832015][ T8699] Chain exists of: [ 236.832015][ T8699] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 236.832015][ T8699] [ 236.845098][ T8699] Possible interrupt unsafe locking scenario: [ 236.845098][ T8699] [ 236.853699][ T8699] CPU0 CPU1 [ 236.854559][ T5286] usb 4-1: device descriptor read/8, error -71 [ 236.859056][ T8699] ---- ---- [ 236.859066][ T8699] lock(tasklist_lock); [ 236.859083][ T8699] local_irq_disable(); [ 236.859089][ T8699] lock(&dev->event_lock#2); [ 236.859109][ T8699] lock(&f_owner->lock); [ 236.859124][ T8699] [ 236.859129][ T8699] lock(&dev->event_lock#2); [ 236.903988][ T8699] [ 236.903988][ T8699] *** DEADLOCK *** [ 236.903988][ T8699] [ 236.912144][ T8699] 5 locks held by syz.1.608/8699: [ 236.917178][ T8699] #0: ffff88803134e420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 236.926356][ T8699] #1: ffff888079fcf1d0 (&type->i_mutex_dir_key#5){++++}-{3:3}, at: path_openat+0x89a/0x3590 [ 236.936575][ T8699] #2: ffffffff9a444d70 (&fsnotify_mark_srcu){.+.+}-{0:0}, at: fsnotify+0x5d8/0x1f60 [ 236.946068][ T8699] #3: ffff888031255038 (&mark->lock){+.+.}-{2:2}, at: dnotify_handle_event+0x61/0x460 [ 236.955775][ T8699] #4: ffff888025347d20 (&f_owner->lock){....}-{2:2}, at: send_sigio+0x37/0x390 [ 236.964865][ T8699] [ 236.964865][ T8699] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 236.975284][ T8699] -> (&dev->event_lock#2){..-.}-{2:2} { [ 236.981052][ T8699] IN-SOFTIRQ-W at: [ 236.985201][ T8699] lock_acquire+0x1ed/0x550 [ 236.991712][ T8699] _raw_spin_lock_irqsave+0xd5/0x120 [ 236.999022][ T8699] input_inject_event+0xc5/0x340 [ 237.005985][ T8699] kd_sound_helper+0x101/0x210 [ 237.012772][ T8699] input_handler_for_each_handle+0x103/0x1d0 [ 237.020779][ T8699] call_timer_fn+0x18e/0x650 [ 237.027396][ T8699] __run_timer_base+0x66a/0x8e0 [ 237.034261][ T8699] run_timer_softirq+0xb7/0x170 [ 237.041117][ T8699] handle_softirqs+0x2c5/0x980 [ 237.047889][ T8699] __irq_exit_rcu+0xf4/0x1c0 [ 237.054501][ T8699] irq_exit_rcu+0x9/0x30 [ 237.060751][ T8699] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 237.068389][ T8699] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 237.076386][ T8699] lock_release+0x658/0xa30 [ 237.082882][ T8699] up_read+0x16/0x20 [ 237.088784][ T8699] vma_end_read+0xde/0x170 [ 237.095201][ T8699] exc_page_fault+0x4c8/0x8c0 [ 237.101907][ T8699] asm_exc_page_fault+0x26/0x30 [ 237.108755][ T8699] INITIAL USE at: [ 237.112831][ T8699] lock_acquire+0x1ed/0x550 [ 237.119243][ T8699] _raw_spin_lock_irqsave+0xd5/0x120 [ 237.126519][ T8699] input_inject_event+0xc5/0x340 [ 237.133424][ T8699] kbd_led_trigger_activate+0xb8/0x100 [ 237.140805][ T8699] led_trigger_set+0x582/0x9c0 [ 237.147472][ T8699] led_trigger_set_default+0x229/0x260 [ 237.154858][ T8699] led_classdev_register_ext+0x6e6/0x8a0 [ 237.162430][ T8699] input_leds_connect+0x489/0x630 [ 237.169381][ T8699] input_register_device+0xd3b/0x1110 [ 237.176689][ T8699] atkbd_connect+0x752/0xa00 [ 237.183470][ T8699] serio_driver_probe+0x7f/0xa0 [ 237.190242][ T8699] really_probe+0x2b8/0xad0 [ 237.196761][ T8699] __driver_probe_device+0x1a2/0x390 [ 237.200624][ T5286] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 237.203984][ T8699] driver_probe_device+0x50/0x430 [ 237.204011][ T8699] __driver_attach+0x45f/0x710 [ 237.204027][ T8699] bus_for_each_dev+0x239/0x2b0 [ 237.204048][ T8699] serio_handle_event+0x1c7/0x920 [ 237.204066][ T8699] process_scheduled_works+0xa63/0x1850 [ 237.246224][ T8699] worker_thread+0x870/0xd30 [ 237.252591][ T5286] usb 4-1: device descriptor read/8, error -71 [ 237.252736][ T8699] kthread+0x2f0/0x390 [ 237.252762][ T8699] ret_from_fork+0x4b/0x80 [ 237.271458][ T8699] ret_from_fork_asm+0x1a/0x30 [ 237.278132][ T8699] } [ 237.280812][ T8699] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 237.290021][ T8699] -> (&new->fa_lock){....}-{2:2} { [ 237.295250][ T8699] INITIAL USE at: [ 237.299259][ T8699] lock_acquire+0x1ed/0x550 [ 237.305534][ T8699] _raw_write_lock_irq+0xd3/0x120 [ 237.312312][ T8699] fasync_remove_entry+0xff/0x1d0 [ 237.319090][ T8699] lease_modify+0x1bd/0x3a0 [ 237.325345][ T8699] locks_remove_file+0x577/0x10c0 [ 237.332110][ T8699] __fput+0x1a6/0x880 [ 237.338009][ T8699] task_work_run+0x24f/0x310 [ 237.344336][ T8699] syscall_exit_to_user_mode+0x168/0x370 [ 237.351702][ T8699] do_syscall_64+0x100/0x230 [ 237.358054][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.365965][ T8699] INITIAL READ USE at: [ 237.370402][ T8699] lock_acquire+0x1ed/0x550 [ 237.377102][ T8699] _raw_read_lock_irqsave+0xdd/0x130 [ 237.384591][ T8699] kill_fasync+0x199/0x4f0 [ 237.391202][ T8699] sock_wake_async+0x147/0x170 [ 237.398185][ T8699] sk_wake_async+0x183/0x280 [ 237.401061][ T5286] usb usb4-port1: unable to enumerate USB device [ 237.404960][ T8699] unix_release_sock+0x727/0xd00 [ 237.404990][ T8699] unix_release+0x91/0xc0 [ 237.405012][ T8699] sock_close+0xbc/0x240 [ 237.431320][ T8699] __fput+0x23f/0x880 [ 237.437481][ T8699] task_work_run+0x24f/0x310 [ 237.444275][ T8699] get_signal+0x15e8/0x1740 [ 237.450950][ T8699] arch_do_signal_or_restart+0x96/0x860 [ 237.458690][ T8699] syscall_exit_to_user_mode+0xc9/0x370 [ 237.466407][ T8699] do_syscall_64+0x100/0x230 [ 237.473180][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.481273][ T8699] } [ 237.483871][ T8699] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 237.492664][ T8699] ... acquired at: [ 237.496562][ T8699] lock_acquire+0x1ed/0x550 [ 237.501263][ T8699] _raw_read_lock_irqsave+0xdd/0x130 [ 237.506748][ T8699] kill_fasync+0x199/0x4f0 [ 237.511366][ T8699] mousedev_notify_readers+0x719/0xc80 [ 237.517008][ T8699] mousedev_event+0x5ca/0x1390 [ 237.521960][ T8699] input_handler_events_default+0x107/0x1c0 [ 237.528041][ T8699] input_pass_values+0x286/0x860 [ 237.533159][ T8699] input_event_dispose+0x30f/0x600 [ 237.538537][ T8699] input_handle_event+0xa71/0xbe0 [ 237.543753][ T8699] input_inject_event+0x22f/0x340 [ 237.548964][ T8699] evdev_write+0x5fd/0x790 [ 237.553572][ T8699] vfs_write+0x29c/0xc90 [ 237.558021][ T8699] ksys_write+0x183/0x2b0 [ 237.562619][ T8699] do_syscall_64+0xf3/0x230 [ 237.567309][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.573404][ T8699] [ 237.575740][ T8699] -> (&f_owner->lock){....}-{2:2} { [ 237.580978][ T8699] INITIAL USE at: [ 237.584882][ T8699] lock_acquire+0x1ed/0x550 [ 237.590991][ T8699] _raw_write_lock_irq+0xd3/0x120 [ 237.597594][ T8699] __f_setown+0x6b/0x380 [ 237.603424][ T8699] generic_setlease+0xc74/0x1550 [ 237.609947][ T8699] fcntl_setlease+0x404/0x540 [ 237.616195][ T8699] do_fcntl+0x69d/0x1a60 [ 237.622164][ T8699] __se_sys_fcntl+0xd2/0x1e0 [ 237.628346][ T8699] do_syscall_64+0xf3/0x230 [ 237.634420][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.641883][ T8699] INITIAL READ USE at: [ 237.646220][ T8699] lock_acquire+0x1ed/0x550 [ 237.652746][ T8699] _raw_read_lock_irq+0xda/0x120 [ 237.659710][ T8699] f_getown+0x55/0x2a0 [ 237.665795][ T8699] sock_ioctl+0x498/0x8e0 [ 237.672123][ T8699] __se_sys_ioctl+0xf9/0x170 [ 237.678733][ T8699] do_syscall_64+0xf3/0x230 [ 237.685264][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.693202][ T8699] } [ 237.695708][ T8699] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 237.704564][ T8699] ... acquired at: [ 237.708375][ T8699] lock_acquire+0x1ed/0x550 [ 237.713066][ T8699] _raw_read_lock_irqsave+0xdd/0x130 [ 237.718543][ T8699] send_sigio+0x37/0x390 [ 237.722987][ T8699] kill_fasync+0x256/0x4f0 [ 237.727603][ T8699] sock_wake_async+0x147/0x170 [ 237.732564][ T8699] sk_wake_async+0x183/0x280 [ 237.737343][ T8699] unix_release_sock+0x727/0xd00 [ 237.742481][ T8699] unix_release+0x91/0xc0 [ 237.747012][ T8699] sock_close+0xbc/0x240 [ 237.751449][ T8699] __fput+0x23f/0x880 [ 237.755658][ T8699] task_work_run+0x24f/0x310 [ 237.760425][ T8699] get_signal+0x15e8/0x1740 [ 237.765286][ T8699] arch_do_signal_or_restart+0x96/0x860 [ 237.771008][ T8699] syscall_exit_to_user_mode+0xc9/0x370 [ 237.776726][ T8699] do_syscall_64+0x100/0x230 [ 237.781496][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.787597][ T8699] [ 237.789925][ T8699] [ 237.789925][ T8699] the dependencies between the lock to be acquired [ 237.789934][ T8699] and SOFTIRQ-irq-unsafe lock: [ 237.803448][ T8699] -> (tasklist_lock){.+.+}-{2:2} { [ 237.808632][ T8699] HARDIRQ-ON-R at: [ 237.812630][ T8699] lock_acquire+0x1ed/0x550 [ 237.818808][ T8699] _raw_read_lock+0x36/0x50 [ 237.824969][ T8699] __do_wait+0x12d/0x850 [ 237.830874][ T8699] do_wait+0x1e9/0x560 [ 237.836611][ T8699] kernel_wait+0xe9/0x240 [ 237.842618][ T8699] call_usermodehelper_exec_work+0xbd/0x230 [ 237.850181][ T8699] process_scheduled_works+0xa63/0x1850 [ 237.857400][ T8699] worker_thread+0x870/0xd30 [ 237.863661][ T8699] kthread+0x2f0/0x390 [ 237.869387][ T8699] ret_from_fork+0x4b/0x80 [ 237.875476][ T8699] ret_from_fork_asm+0x1a/0x30 [ 237.881915][ T8699] SOFTIRQ-ON-R at: [ 237.885902][ T8699] lock_acquire+0x1ed/0x550 [ 237.892080][ T8699] _raw_read_lock+0x36/0x50 [ 237.898268][ T8699] __do_wait+0x12d/0x850 [ 237.904176][ T8699] do_wait+0x1e9/0x560 [ 237.909896][ T8699] kernel_wait+0xe9/0x240 [ 237.915876][ T8699] call_usermodehelper_exec_work+0xbd/0x230 [ 237.923447][ T8699] process_scheduled_works+0xa63/0x1850 [ 237.930652][ T8699] worker_thread+0x870/0xd30 [ 237.936900][ T8699] kthread+0x2f0/0x390 [ 237.942622][ T8699] ret_from_fork+0x4b/0x80 [ 237.948704][ T8699] ret_from_fork_asm+0x1a/0x30 [ 237.955161][ T8699] INITIAL USE at: [ 237.959111][ T8699] lock_acquire+0x1ed/0x550 [ 237.965198][ T8699] _raw_write_lock_irq+0xd3/0x120 [ 237.971800][ T8699] copy_process+0x2267/0x3d50 [ 237.978045][ T8699] kernel_clone+0x226/0x8f0 [ 237.984125][ T8699] user_mode_thread+0x132/0x1a0 [ 237.990565][ T8699] rest_init+0x23/0x300 [ 237.996306][ T8699] start_kernel+0x47f/0x500 [ 238.002389][ T8699] x86_64_start_reservations+0x2a/0x30 [ 238.009420][ T8699] x86_64_start_kernel+0x9f/0xa0 [ 238.015921][ T8699] common_startup_64+0x13e/0x147 [ 238.022444][ T8699] INITIAL READ USE at: [ 238.026782][ T8699] lock_acquire+0x1ed/0x550 [ 238.033296][ T8699] _raw_read_lock+0x36/0x50 [ 238.039818][ T8699] __do_wait+0x12d/0x850 [ 238.046073][ T8699] do_wait+0x1e9/0x560 [ 238.052155][ T8699] kernel_wait+0xe9/0x240 [ 238.058490][ T8699] call_usermodehelper_exec_work+0xbd/0x230 [ 238.066393][ T8699] process_scheduled_works+0xa63/0x1850 [ 238.073948][ T8699] worker_thread+0x870/0xd30 [ 238.080557][ T8699] kthread+0x2f0/0x390 [ 238.086632][ T8699] ret_from_fork+0x4b/0x80 [ 238.093057][ T8699] ret_from_fork_asm+0x1a/0x30 [ 238.099824][ T8699] } [ 238.102343][ T8699] ... key at: [] tasklist_lock+0x18/0x40 [ 238.110074][ T8699] ... acquired at: [ 238.113871][ T8699] lock_acquire+0x1ed/0x550 [ 238.118553][ T8699] _raw_read_lock+0x36/0x50 [ 238.123270][ T8699] send_sigio+0x108/0x390 [ 238.127795][ T8699] dnotify_handle_event+0x157/0x460 [ 238.133384][ T8699] fsnotify+0x1946/0x1f60 [ 238.137908][ T8699] path_openat+0x1686/0x3590 [ 238.142696][ T8699] do_filp_open+0x235/0x490 [ 238.147395][ T8699] do_sys_openat2+0x13e/0x1d0 [ 238.152260][ T8699] __x64_sys_creat+0x123/0x170 [ 238.157212][ T8699] do_syscall_64+0xf3/0x230 [ 238.161928][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.168008][ T8699] [ 238.170337][ T8699] [ 238.170337][ T8699] stack backtrace: [ 238.176324][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.1.608 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 238.186918][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 238.196991][ T8699] Call Trace: [ 238.200289][ T8699] [ 238.203237][ T8699] dump_stack_lvl+0x241/0x360 [ 238.207941][ T8699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.213138][ T8699] ? __pfx__printk+0x10/0x10 [ 238.217743][ T8699] ? print_shortest_lock_dependencies+0xf2/0x160 [ 238.224090][ T8699] validate_chain+0x4ebd/0x5920 [ 238.228965][ T8699] ? __pfx_validate_chain+0x10/0x10 [ 238.234191][ T8699] ? __lock_acquire+0x1384/0x2050 [ 238.239228][ T8699] ? mark_lock+0x9a/0x360 [ 238.243563][ T8699] __lock_acquire+0x1384/0x2050 [ 238.248433][ T8699] lock_acquire+0x1ed/0x550 [ 238.252958][ T8699] ? send_sigio+0x108/0x390 [ 238.257477][ T8699] ? __pfx_lock_acquire+0x10/0x10 [ 238.262503][ T8699] ? do_raw_read_lock+0x3c/0x90 [ 238.267354][ T8699] ? _raw_read_lock_irqsave+0xe9/0x130 [ 238.272803][ T8699] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 238.278705][ T8699] ? do_raw_spin_lock+0x14f/0x370 [ 238.283744][ T8699] _raw_read_lock+0x36/0x50 [ 238.288269][ T8699] ? send_sigio+0x108/0x390 [ 238.292799][ T8699] send_sigio+0x108/0x390 [ 238.297142][ T8699] dnotify_handle_event+0x157/0x460 [ 238.302376][ T8699] fsnotify+0x1946/0x1f60 [ 238.306735][ T8699] ? fsnotify+0x5d8/0x1f60 [ 238.311155][ T8699] ? __pfx_fsnotify+0x10/0x10 [ 238.315862][ T8699] ? _raw_spin_unlock+0x28/0x50 [ 238.320720][ T8699] path_openat+0x1686/0x3590 [ 238.325328][ T8699] ? __pfx_path_openat+0x10/0x10 [ 238.330279][ T8699] do_filp_open+0x235/0x490 [ 238.334808][ T8699] ? __pfx_do_filp_open+0x10/0x10 [ 238.339846][ T8699] ? _raw_spin_unlock+0x28/0x50 [ 238.344697][ T8699] ? alloc_fd+0x5a1/0x640 [ 238.349121][ T8699] do_sys_openat2+0x13e/0x1d0 [ 238.353822][ T8699] ? __pfx_do_futex+0x10/0x10 [ 238.358517][ T8699] ? __pfx_do_sys_openat2+0x10/0x10 [ 238.363724][ T8699] __x64_sys_creat+0x123/0x170 [ 238.368494][ T8699] ? __pfx___x64_sys_creat+0x10/0x10 [ 238.373815][ T8699] ? do_syscall_64+0x100/0x230 [ 238.378604][ T8699] ? do_syscall_64+0xb6/0x230 [ 238.383300][ T8699] do_syscall_64+0xf3/0x230 [ 238.387820][ T8699] ? clear_bhb_loop+0x35/0x90 [ 238.392493][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.398420][ T8699] RIP: 0033:0x7f5c7317dff9 [ 238.402867][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.422494][ T8699] RSP: 002b:00007f5c73ebd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 238.430938][ T8699] RAX: ffffffffffffffda RBX: 00007f5c73335f80 RCX: 00007f5c7317dff9 [ 238.438917][ T8699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 238.446908][ T8699] RBP: 00007f5c731f0296 R08: 0000000000000000 R09: 0000000000000000 [ 238.454904][ T8699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.462897][ T8699] R13: 0000000000000000 R14: 00007f5c73335f80 R15: 00007f5c7345fa28 [ 238.470914][ T8699] [ 238.477075][ T54] Bluetooth: hci5: command tx timeout [ 238.714507][ T5234] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 238.722034][ T5234] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 238.730359][ T5234] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 238.738291][ T5234] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 238.745728][ T5234] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 238.753342][ T5234] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 238.760911][ T5234] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 238.771111][ T5234] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 238.780280][ T5234] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 238.817683][ T5284] usb 2-1: device descriptor read/64, error -71 [ 239.022660][ T5234] usb 3-1: USB disconnect, device number 68 [ 239.057714][ T5284] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 239.187664][ T5284] usb 2-1: device descriptor read/64, error -71 [ 239.427659][ T5284] usb 2-1: reset high-speed USB device number 48 using dummy_hcd [ 239.448300][ T5284] usb 2-1: device descriptor read/8, error -71 [ 240.328150][ T5282] usb 2-1: USB disconnect, device number 48 [ 240.498002][ T54] Bluetooth: hci5: command tx timeout [ 242.577950][ T54] Bluetooth: hci5: command tx timeout