last executing test programs: 1m34.49834461s ago: executing program 1 (id=1683): futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e65766500010000008005000900010000000500080001000000"], 0x44}}, 0x0) mlockall(0x3) getrusage(0x1, &(0x7f0000000dc0)) landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) 1m33.458227275s ago: executing program 1 (id=1686): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) (async, rerun: 32) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x103200, 0x0) (rerun: 32) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000080)) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0}, 0x80) (async, rerun: 32) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6gre0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000300)={@private1}, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x7, {{0xa, 0x4e21, 0x0, @mcast2, 0xffff}}}, 0x88) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x40200) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000440)={0xcf6e, 0x0, 0x0, 'queue0\x00', 0x3ae4fee8}) r4 = memfd_secret(0x80000) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000ac0)=0x10001, 0x0, 0x4) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, 0x0) (async) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000001c80)={0x2, &(0x7f0000001c40)=[{0x8, 0x1000, &(0x7f0000000b40)="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", 0x1}, {0xfd, 0xde, &(0x7f0000001b40)="de744f74f859928332a116b1d652823f39fd9be78b737fdcad34fca4c951b506af4313fe63a7e36d3deb8efa445e72b41e07583d22bdd6b3e1b88212696eb65667ee5667c98d4300e046fbaacf54bd6d08c5b60832938ac3731dcded3272c6a417a80b582e2184030d16c6894f570911007b4ab756168d0d5d74db8c00055e1300310be59f0899231a3cd8e9e6a583fd47b69ffde85f3156727748b943136a3a8c9eb0e75691fb779ed0397f205041a1b46d7faac4fb0cb34af056fdc73b858d6e4eeb1ed021cb1a977055e6de657fa0ba2d313a9beb44b27d89873f171f", 0x0, 0x1}]}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001cc0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000001d00)={0x2, 0x0, 0xe41e, {}, 0x0, 0x5}) (async) syz_io_uring_complete(0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000001d80), 0x186, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) (async, rerun: 32) connect$inet6(r4, &(0x7f0000001dc0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, 0x8}, 0x1c) (rerun: 32) ioctl$TUNSETDEBUG(r5, 0x400454c9, &(0x7f0000001e00)=0x3) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) 1m31.327486362s ago: executing program 1 (id=1691): ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f00000002c0)={{}, {0x8001}, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0xb5, {0x1, 0xc, 0x82, "6577442d603dd802a77accc707bd4f8c7a5e2b70922835f9e7dcf93a2eb4665460ed67aedffbf52b97fb1b121690bbc4a9b7c71092cc6ccec096c18895fd10642fb2a8d83c21d13fd80d506ea28cc4750fa2228245a309dd67e8abda297ad1f4e9b506c52bfc7fdb904a678454b1e0606e0d067c0723fa0804e752d703fa96834f23", 0x26, "3325f8979a4dde1f3692068baa95872f50b292cd6e25bfbb6ff0c5294c8400d921b71aa7da2c"}, 0x56, "a6b9c8cff6ca6ac0e7100f61dbdfc07c80adf5ebd6a6aeda8e26388a08dfd6fb3d35507a56d02a114675bcd8c25cf16870d5f7eb7e6b0f95148178c622e60127c6d381cb9b6b7c0babd06797b499e71e00953943e7aa"}, 0x117}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a98d87b6d12bd41f10177d3d458dd4992861ac0000009000", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1m31.029406353s ago: executing program 1 (id=1694): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xe) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{}, "10eae40036f465ec", "5b72e7f351595d23d24575126a56eab2840b81a1adc6d8cfc4e551163ff66dec", "1c05008d", "fa31024de00b1600"}, 0x38) r2 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000001c0)={{r0}, 0x20000000008, 0x471aad49}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 1m30.567533717s ago: executing program 1 (id=1697): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcc, 0xe5, 0xf3, 0x40, 0xb57, 0xd863, 0x2ebb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)={{}, {0x4}}, 0xfe44, 0x0) r1 = socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = signalfd(r1, &(0x7f00000001c0)={[0xfffffffffffffffe]}, 0x8) r3 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}) io_uring_enter(r3, 0x2def, 0x0, 0x0, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x21) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r5, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) getpid() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) 1m26.826467572s ago: executing program 1 (id=1705): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xffffffffffffffcc}) r1 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x1, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x3}) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='gfs2\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#X\x85\xacc\xa5\xf3\xa7\x05q~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, 0xffffffffffffffff) ptrace$PTRACE_SETSIGMASK(0x420b, 0x0, 0x8, &(0x7f0000000440)={[0xfffffffffffffc00]}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, 0x0, &(0x7f0000000380)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c00000c00e10008000700040000001400018006000600880a"], 0x34}}, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000040)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(0xffffffffffffffff, 0x3b83, &(0x7f0000000200)={0x28, 0x0, r5, r5, 0x7ffffffffffffffe}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r7, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) fadvise64(r6, 0x0, 0x0, 0x4) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/sockstat6\x00') read$FUSE(r8, &(0x7f0000000300)={0x2020}, 0x2020) pidfd_getfd(r8, r0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0x2020) 1m23.044193357s ago: executing program 3 (id=1712): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$key(0xf, 0x3, 0x2) listen(r0, 0x4) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)=0x2000) ioctl$SNDCTL_DSP_SETFMT(r2, 0x5001, 0x0) 1m22.54513797s ago: executing program 3 (id=1714): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x1, 0x3, 0x1, {0xa, 0x4e22, 0x2, @private1, 0x3}}}, 0x32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_getnetconf={0x54, 0x52, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xe7}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x6}, @NETCONFA_FORWARDING={0x8}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x4}, @NETCONFA_FORWARDING={0x8, 0x2, 0x6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x8000}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048005) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, 0x0) 1m22.29211862s ago: executing program 3 (id=1715): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x8001028, r2, 0x0) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x11af, 0xdfd2, 0x1, 0x0, 0x0) (fail_nth: 40) 1m21.937915012s ago: executing program 3 (id=1718): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r1) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000975903000000000000000000000008000900010073797a31"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x9, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/148, 0x0}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000740)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_EXPBUF(r3, 0x2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000040)={0x6, r4}) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x141201) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000100)=0x6) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x8004, {0x0, 0x0, 0x0, {0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, r9, 0xffffffffffffffff, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m21.079064853s ago: executing program 0 (id=1719): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x4, 0x5, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x5, 0x8, 0xffff}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x83, 0x4003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x9, 0x9, 0x6c}) dup3(r2, r1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x6, 0xf3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xf7c8, 0x9, 0x1}) sendto$inet6(r0, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 1m20.70423072s ago: executing program 0 (id=1721): ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000080)) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="141f00e5a1dee52ff02680febd6e148ef16b343965630933303ef4a0b02b68", @ANYRES16=r0, @ANYBLOB="00012dbd7000fddbdf2511000000"], 0x14}}, 0x40000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) (async) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f00000000c0)=0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m20.068077699s ago: executing program 0 (id=1724): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYRES64, @ANYRES64=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000250000000c00018008000100", @ANYRES32=r2, @ANYBLOB="4685f1ec23c620e6c53d5f629df1d34aab3cf6c9f9de5ef4e799b944dd5e50d7918d603aa980ff8509338ead787f74ab2bd1dfff5f0ee86de222a47b902aeb5c685459ac5fb36e35200fcfc4223dde150c0318950fd10c70b244839d59a84c75d79c4d83c8d5823c34d32dc36594883d8a7baec6429c2c1f6d0fbc28f211bc072e3f1740287f68b172821916b762643c94597e1b3eb3ce91c4e1300657faa92f7e6af255a599d597f6fab9ffc10e9aa7dccb5ca218f8369ceb9ae735c623efd96250a61dae89b935b962869284b332bc8c361d276ecb8fe9259d21a5f52f10a9c583a25f79bbe1913137ddbd48c77f8259c06b21c9dab93f65d25aac2b41283cfcfd7d07380cba160ebe27bfa35adf3137df5683c15ec7e476bb47"], 0x20}}, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$alg(0x26, 0x5, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getrusage(0x0, &(0x7f00000000c0)) (async) getrusage(0x1, &(0x7f0000000000)) (async, rerun: 32) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TIOCGISO7816(r7, 0x80285442, 0x0) (async) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x20, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0x6}, 0x48) r8 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r8, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x4, 0x0, 0x4], [0x1], [0x80000000]], '\x00', [{0x0, 0x1}, {}, {}, {}, {}, {0x3}, {0x0, 0x3}, {0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) (async, rerun: 32) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) (async, rerun: 32) r10 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}) (async) io_uring_enter(r10, 0x6ed3, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDCTL_SEQ_PANIC(r9, 0x5100) r13 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r13, 0xc040565f, &(0x7f0000000000)={0x2, 0x100, 0x3, {0x0, 0x0, 0x2, 0x2}}) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r14, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x307}, 0x0, r15}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 1m19.901819503s ago: executing program 0 (id=1725): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6}]}}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000003c0)=0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000900)={0x208, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5e578731}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x363800, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff48}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth1_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40050}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14}}, 0x98}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000440)={'caif0\x00', 0x2}) 1m19.588373779s ago: executing program 0 (id=1726): capset(&(0x7f0000000040), 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ptrace(0x10, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0xc0045103, &(0x7f0000000180)=@e={0xff, 0x0, 0x0, 0x0, @generic}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006}]}) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, 0x0) ptrace(0x10, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000180)={0x9, 0x5, {r2}, {}, 0x10001, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) readv(r4, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) write$char_usb(r5, &(0x7f0000000040)="e2", 0x1068) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8481, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000013c0)) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xe2) 1m18.692036264s ago: executing program 3 (id=1727): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) socket$kcm(0x29, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000040)="00312e4ace6f3c1ce858816842c42da1d38e6ddf7387f532161bfad75044170efe8eb911c800000000000000000000000000000000000000000087f67cb200", 0x2}], 0x100000000000017b}, 0x8940) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='environ\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, &(0x7f0000492000/0xc000)=nil) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0x2020) add_key$keyring(&(0x7f00000003c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0x1100c08) set_mempolicy(0x6, &(0x7f0000000000)=0x40006, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000400000000000000000000000000060000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x11}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, 0x0, 0x0}, 0x90) keyctl$describe(0x6, r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x531000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x0, 0x1) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="01ff07000000aaaaaaaaaabb0a004600003400000000000190780a010102ac1414aa0703b30027096103ac14f2a945000000000000000000000200000000ac1414bb"], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) readv(r7, &(0x7f00000003c0)=[{&(0x7f0000001140)=""/136, 0x57}], 0x1) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x25a5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x24c480, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) 1m18.592458876s ago: executing program 0 (id=1729): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff61) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)={0x38, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x38}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x1, 0x2, 0x0, 0x3, 0x8, 0xffffffffffffffe0, 0xfffffffffffffff0}], &(0x7f00000011c0)='GPL\x00', 0x3, 0x5f, &(0x7f0000000100)=""/95}, 0x90) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000001080)={0x9, 0x0, 0x1}) accept(0xffffffffffffffff, &(0x7f0000001100)=@in, &(0x7f0000001180)=0x80) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r7 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}}) io_uring_enter(r7, 0x0, 0x400000, 0x1, 0x0, 0x0) io_uring_enter(r7, 0x52e, 0x0, 0x0, 0x0, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f00000009c0)={&(0x7f0000000540)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000900), 0x0, &(0x7f00000011c0), 0x0, 0x44}, 0x4004000) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f00000010c0)={r6}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r11, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x20000010304, @random="030720e5c63e"}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}}) 1m18.384102196s ago: executing program 3 (id=1731): socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x6, &(0x7f0000000140), &(0x7f0000000240)=0x4) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) memfd_create(0x0, 0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) lremovexattr(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f000060d000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000000), 0x4) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) 53.383579625s ago: executing program 4 (id=1758): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) fsetxattr(r0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r11}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) rt_sigqueueinfo(0x0, 0x2, &(0x7f0000000280)={0x29, 0x6, 0x9}) 52.071376512s ago: executing program 4 (id=1759): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x0, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, 0xfffffffffffffffd, 0x58) 51.836179963s ago: executing program 4 (id=1760): futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x25) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4008032, 0xffffffffffffffff, 0xea7e8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000000c0), 0x4) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0) mlockall(0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bda000/0x4000)=nil, 0x4000, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x8000}, 0x10, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x5460, 0x0) 49.963802495s ago: executing program 4 (id=1761): ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0x400c4807, &(0x7f0000000040)={0x3, 0x0, 0x8, 0x0, 0xffffffff}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000002840)={0xff}, &(0x7f0000002880)={0x0, 0x989680}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r5, 0x4610, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140672007b800bde9385a7a00170ac3800000200001a3cc4b90000000000d4dc4f145507dbbe0000"], 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x20040000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000080)='./file0\x00', 0xe) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSOFTCAR(r7, 0x5419, &(0x7f0000000480)) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000210000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="66ba4100985cb4207e00000000c738b9140300000f32660f608507000000663ab8c70000d00f20d466ba6100b000eef2260f32450f5cd28f4870efa2fc5f7e2ced", 0x41}], 0x1, 0x2, 0x0, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f0000000040)=ANY=[]) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x0, 0x108, 0x108, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@loopback, @dev, [0xffffff00], [], 'nicvf0\x00', 'veth0_to_bridge\x00', {}, {}, 0x5c}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0x0, 0xffffff00, 0xff], 0x4e20, 0x2, 0x4e24, 0x4e22, 0x6, 0xe, 0xfffffff8, 0xf}}}, {{@ipv6={@mcast1, @dev, [0x0, 0xffffffff], [], 'syzkaller1\x00', 'caif0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0xffffffff], 'batadv_slave_0\x00', 'veth1_to_bond\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8, 0x9, 0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009b23fd406d04b8088dee000000410902240001fa0000000904"], 0x0) ioctl$HIDIOCSFLAG(r9, 0x4004480f, &(0x7f0000000080)=0x2) 47.430336683s ago: executing program 4 (id=1762): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102370, 0x18ff2}], 0x1000000000000124, 0xfff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000147000/0x2000)=nil, 0x2000, 0x19) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40b80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x17) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5423, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r2 = socket(0xf, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028099210e1ba346b5b664a6050017"], 0x44}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x20000400) sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="f800000016000000000000000000000000000000000000000000000000000000e000000200"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc00000000000000000000000000000000000000000000005fec0be0c275bc6d40751dac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000690000000000000000000000000000000000000000000000e2ffffff000000000000000000d4e2157a5208b65300c931e80844e875aa116157ac37f4cfbc2a3dc8463b1f0cd8eab3d34612be3530a03b5c4da7cb2d0a4958126bda232bf78c78ce382ca3ea58817400000000006b3f18778eb6650000004282b428bd8c769c40ce16f2710646c5efff82587613ebf5e7643d3f0000000000152f2cb4bb40ee55dd5053be4fc7250b0c83f8351defbd716db280617d38fe387d84f2266279afc2919028768213b0d10e15111ee970b10809a76202"], 0xf8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="54010000100013070000000000000000fe8800000000000047575a2339b2a2a2b3ef1e4a3de80000000000000001ac1414bb00000000000000000000000000000000000000002b4f60cc00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r3], 0x50}}, 0x4800) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600000000000000000100000008000a40000000000900020073797a310000b1000900010073797a3000000000080005"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000dceef0a00a7fffffffff0a2c0000000b0a0101000000000000000000000c00574000000000000000011400000011000100"/70], 0x54}}, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = io_uring_setup(0x57f0, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x3, 0x8b}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x0) syz_io_uring_setup(0x4c64, &(0x7f0000000080)={0x0, 0x10005, 0x100, 0x0, 0x24c, 0x0, r4}, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 44.763867139s ago: executing program 4 (id=1763): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'veth0_vlan\x00', @random="2b2100004e05"}) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$FUSE(r0, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000001200), 0x0, 0x2) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0xc, 0x0, 0x0, 0x0, 0x0, "b1128136"}, 0x0, 0x3, {0x0}, 0x1, 0x0, r0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$kcm(0x10, 0x4, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 8.924622817s ago: executing program 2 (id=1767): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x101206, 0x0) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x3a, 0xce, 0x44, 0x8, 0x1044, 0x800d, 0x575c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xef, 0x1, 0x1, 0x0, [], [{{0x9, 0x5, 0x3}}]}}]}}]}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x82, 0x0, &(0x7f0000000300)) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x52b}}, 0x10001, 0xd, 0xa, 0x9ca, 0x3c0}, &(0x7f0000000140)=0x98) ioctl$UDMABUF_CREATE_LIST(r3, 0x40087543, &(0x7f0000000040)) setrlimit(0x40000000000008, &(0x7f0000000000)) r5 = syz_usb_connect$uac1(0x0, 0xae, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9c, 0x3, 0x1, 0x4, 0x20, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0xd, 0x4}, @as_header={0x7, 0x24, 0x1, 0x4, 0x5}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1ff, 0x1, 0x75, "5633e8c5f8146df77d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x7, 0x5}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x3, 0x8, 0x8, "dd2021"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0x18, 0x1, "abaf"}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x1d, 0x6, 0x970, 0x278, 0x480, 0xf8, 0xf8, 0x278, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x8a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}}]}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x148, 0x180, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@inet=@SET3={0x38}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, @local, @private1, @local, @dev, @rand_addr=' \x01\x00', @private1, @mcast2, @dev, @private2, @private1, @mcast2, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9d0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x44, 0x2, 0x6, 0x3, 0x9000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x44}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r9}, 0x38) r10 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r11, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, &(0x7f0000006740)={0x18, 0x0, &(0x7f0000006640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}, 0x0, 0x0, 0x0}, 0x0) 1.518703292s ago: executing program 2 (id=1768): r0 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000001100)={&(0x7f0000000400)=[{0x7ff, 0x2010, 0x0, 0x0}, {0x2, 0x0, 0x0, 0x0}], 0x2}) 1.244022413s ago: executing program 2 (id=1769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl1\x00', 0x0}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) preadv(r1, &(0x7f0000000000), 0x3f, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x4000000}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x0) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000480)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000300)="050000", 0x3, 0xfffffffffffffffb) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'macvtap0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r6, 0x107, 0x17, 0x0, &(0x7f0000000080)) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x15, r5, 0x1, 0x5, 0x6, @multicast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x1, 0x6, @remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000680)={&(0x7f0000000040), 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000080) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x4, 0x2}, 0x4) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x2, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000180)={r3, 0x0, 0xe9}, &(0x7f00000004c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f0000000340)=""/233) 847.924348ms ago: executing program 2 (id=1770): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7}, 0x600b010efb66d307) write$binfmt_misc(r0, 0x0, 0x0) close(r0) memfd_create(&(0x7f0000000180)='ns/er\x00\x00\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 319.146883ms ago: executing program 2 (id=1771): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) dup3(r1, r0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r2, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1772): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff0}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0xfff2) kernel console output (not intermixed with test programs): ivid-007: EDID Present: 0x00000000 [ 684.054884][T13972] vivid-007: ================== END STATUS ================== [ 684.140604][ T1821] team0 (unregistering): Port device team_slave_0 removed [ 684.345390][ T58] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 684.504157][T13977] loop2: detected capacity change from 0 to 7 [ 684.524059][T13977] Dev loop2: unable to read RDB block 7 [ 684.532266][T13977] loop2: unable to read partition table [ 684.556109][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 684.564949][T13977] loop2: partition table beyond EOD, truncated [ 684.572804][ T58] usb 1-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 684.587131][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.595299][T13977] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 684.604622][ T58] usb 1-1: Product: syz [ 684.608952][ T58] usb 1-1: Manufacturer: syz [ 684.613651][ T58] usb 1-1: SerialNumber: syz [ 684.631268][ T58] usb 1-1: config 0 descriptor?? [ 685.095294][ T5244] Bluetooth: hci0: command tx timeout [ 685.237765][T13939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'. [ 685.293090][T13973] tipc: Started in network mode [ 685.310574][T13973] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 685.338080][T13973] tipc: Enabled bearer , priority 10 [ 685.345377][T13905] chnl_net:caif_netlink_parms(): no params data found [ 685.548724][T13691] veth0_vlan: entered promiscuous mode [ 685.813560][T13691] veth1_vlan: entered promiscuous mode [ 685.858366][T13905] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.915474][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 685.915958][T13905] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.937900][ T58] usb 1-1: USB disconnect, device number 89 [ 685.957420][T13905] bridge_slave_0: entered allmulticast mode [ 686.036217][T13905] bridge_slave_0: entered promiscuous mode [ 686.059552][T13905] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.084279][T13905] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.111317][T13905] bridge_slave_1: entered allmulticast mode [ 686.125611][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 686.143041][T13905] bridge_slave_1: entered promiscuous mode [ 686.151565][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.166035][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.176875][ T9] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.190325][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 686.198904][ T9] usb 5-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 686.208559][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.224651][ T9] usb 5-1: config 0 descriptor?? [ 686.304166][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.311210][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.418863][T13905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.458248][ T8] tipc: Node number set to 4269801491 [ 686.479025][T13905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.515476][ T58] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 686.699709][T13905] team0: Port device team_slave_0 added [ 686.725453][ T58] usb 1-1: Using ep0 maxpacket: 8 [ 686.744112][T13905] team0: Port device team_slave_1 added [ 686.757981][ T58] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 686.779455][ T58] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 686.863443][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1602'. [ 686.875118][ T58] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 686.906935][ T58] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 686.928701][ T58] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.953775][ T58] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 686.963892][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.109284][T13691] veth0_macvtap: entered promiscuous mode [ 687.122887][T13905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 687.132872][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.175334][ T5244] Bluetooth: hci0: command tx timeout [ 687.206680][T13905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 687.240461][ T58] usb 1-1: usb_control_msg returned -32 [ 687.259217][ T58] usbtmc 1-1:16.0: can't read capabilities [ 687.266418][T13905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.273456][T13905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.349289][T13905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 687.500903][T13691] veth1_macvtap: entered promiscuous mode [ 687.656462][T14017] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 687.694191][T13905] hsr_slave_0: entered promiscuous mode [ 687.720779][T13905] hsr_slave_1: entered promiscuous mode [ 687.750666][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 687.757489][T13905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 687.802272][T13905] Cannot create hsr debugfs directory [ 687.819253][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.865648][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.895607][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.906866][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.917270][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.928345][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.940596][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.951657][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.962208][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.973848][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.988681][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.000419][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.015912][T13691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.017185][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.030109][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.043266][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.053716][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.065950][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.076494][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.088295][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.101334][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.112499][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.123112][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.134392][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.148256][T13691] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 688.160990][T13691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.173510][T13691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.202135][ T5292] usb 1-1: USB disconnect, device number 90 [ 688.209185][T14021] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 688.313197][T13691] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.338979][T13691] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.355397][T13691] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.364460][T13691] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.379733][ T5244] Bluetooth: hci2: command 0x0406 tx timeout [ 688.459509][T14024] loop2: detected capacity change from 0 to 7 [ 688.473624][T14024] Dev loop2: unable to read RDB block 7 [ 688.483281][T14024] loop2: unable to read partition table [ 688.522030][T14024] loop2: partition table beyond EOD, truncated [ 688.543045][T14024] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 688.803483][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 688.825392][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 688.857252][ T9] usb 5-1: USB disconnect, device number 97 [ 689.123294][ T5732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.135594][ T5732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.175708][ T5292] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 689.276815][ T5730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.284718][ T5730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.371552][T14039] vivid-007: ================= START STATUS ================= [ 689.385354][ T5292] usb 4-1: Using ep0 maxpacket: 16 [ 689.416814][T14039] vivid-007: Enable Output Cropping: true [ 689.416955][ T5292] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 689.422794][T14039] vivid-007: Enable Output Composing: true [ 689.422829][T14039] vivid-007: Enable Output Scaler: true [ 689.422856][T14039] vivid-007: Tx RGB Quantization Range: [ 689.454758][ T5292] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 689.475723][ T5292] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 689.484831][ T5292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.511501][ T5292] usb 4-1: config 0 descriptor?? [ 689.533190][ T5292] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 689.551086][T14039] Automatic [ 689.554309][T14039] vivid-007: Transmit Mode: HDMI [ 689.589178][T14039] vivid-007: Hotplug Present: 0x00000000 [ 689.598907][T14042] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 689.655960][T14039] [ 689.658359][T14039] vivid-007: RxSense Present: 0x00000000 [ 689.713318][T14048] tipc: Started in network mode [ 689.722032][T14048] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 689.740132][ T5253] Bluetooth: hci5: unexpected cc 0x1003 length: 2 < 9 [ 689.749410][T14039] vivid-007: EDID Present: 0x00000000 [ 689.797549][T14039] vivid-007: ================== END STATUS ================== [ 689.826716][T14048] tipc: Enabled bearer , priority 10 [ 690.025430][ T5304] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 690.167032][T14053] binder: 14029:14053 ioctl c0306201 0 returned -14 [ 690.197709][T14053] binder: 14029:14053 ioctl c0306201 20000240 returned -11 [ 690.245494][ T5304] usb 5-1: Using ep0 maxpacket: 8 [ 690.266801][ T5304] usb 5-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 690.281418][ T5304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.356674][ T5304] usb 5-1: Product: syz [ 690.360918][ T5304] usb 5-1: Manufacturer: syz [ 690.371404][ T5304] usb 5-1: SerialNumber: syz [ 690.419193][ T5304] usb 5-1: config 0 descriptor?? [ 690.482526][T13905] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 690.601877][T13905] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 690.740089][T13905] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 690.753328][T13905] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 690.840714][ T5335] tipc: Node number set to 4269801491 [ 691.176628][ T5335] usb 5-1: USB disconnect, device number 98 [ 691.314033][T14070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.340802][T13905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.364159][T14070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.398735][T13905] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.449728][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.457026][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.543133][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.550457][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.565595][ T5296] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 691.775372][ T5296] usb 3-1: Using ep0 maxpacket: 16 [ 691.803624][ T5296] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31 [ 691.844988][T13905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.852127][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.852164][ T5296] usb 3-1: Product: syz [ 691.852183][ T5296] usb 3-1: Manufacturer: syz [ 691.852202][ T5296] usb 3-1: SerialNumber: syz [ 691.860145][ T5296] usb 3-1: config 0 descriptor?? [ 691.890722][ T5296] usb 3-1: no audio or video endpoints found [ 691.966057][ T5296] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 691.991759][ T58] usb 4-1: USB disconnect, device number 90 [ 692.252943][T13905] veth0_vlan: entered promiscuous mode [ 692.272039][T14086] loop2: detected capacity change from 0 to 7 [ 692.326321][T14086] Dev loop2: unable to read RDB block 7 [ 692.345279][T14086] loop2: unable to read partition table [ 692.352859][T13905] veth1_vlan: entered promiscuous mode [ 692.380067][T14086] loop2: partition table beyond EOD, truncated [ 692.398226][T14086] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 692.536451][T13905] veth0_macvtap: entered promiscuous mode [ 692.568500][T13905] veth1_macvtap: entered promiscuous mode [ 692.613318][ T5296] usb 3-1: USB disconnect, device number 106 [ 692.718389][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.774405][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.811661][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.842540][T14094] netlink: 'syz.3.1619': attribute type 30 has an invalid length. [ 692.852123][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.868247][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 692.912142][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 692.983043][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.097285][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.107938][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.120262][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.132637][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.167773][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.219179][T14111] kernel profiling enabled (shift: 9) [ 693.234580][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.277543][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.294720][T13905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.333027][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.369863][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.425223][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.502240][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.548259][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.646858][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.709617][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.728446][T14124] input input57: cannot allocate more than FF_MAX_EFFECTS effects [ 693.780585][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.792167][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.815387][ T5253] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 693.816233][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.826553][ T5253] Bluetooth: hci5: Injecting HCI hardware error event [ 693.849896][ T5244] Bluetooth: hci5: hardware error 0x00 [ 693.947129][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.998763][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.015284][ T58] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 694.037502][T13905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.058065][T13905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.094025][T13905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.175565][T14118] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 694.238994][T14118] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 694.249171][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 694.336198][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 694.346829][T14118] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 694.387653][ T58] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 694.399530][T14118] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 694.419731][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.433987][T14118] geneve2: entered promiscuous mode [ 694.440834][T14118] geneve2: entered allmulticast mode [ 694.449380][ T58] usb 3-1: config 0 descriptor?? [ 694.465423][T14133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 694.507753][T13905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.529561][T13905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.540010][T13905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.563058][T13905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.865937][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 694.876857][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 694.918662][ T58] usb 3-1: USB disconnect, device number 107 [ 695.018152][ T1821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.067853][ T1821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.116491][T14156] xt_hashlimit: overflow, try lower: 3/0 [ 695.191742][ T5731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 695.204368][ T5731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.423567][T14160] loop2: detected capacity change from 0 to 7 [ 695.459465][T14160] Dev loop2: unable to read RDB block 7 [ 695.481856][T14160] loop2: unable to read partition table [ 695.506379][T14160] loop2: partition table beyond EOD, truncated [ 695.555392][ T58] usb 5-1: new low-speed USB device number 99 using dummy_hcd [ 695.563513][T14160] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 695.757400][ T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 695.774978][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 695.786039][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.796233][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 695.808140][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 695.878278][ T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 695.886000][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 695.896849][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.908788][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 695.923061][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 695.944570][ T58] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 695.955128][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 695.969613][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 695.981557][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 695.993088][ T58] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 696.012177][ T58] usb 5-1: string descriptor 0 read error: -22 [ 696.025445][ T58] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 696.036405][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.065439][ T58] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 696.215543][ T5244] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 696.590611][ T58] usb 5-1: USB disconnect, device number 99 [ 697.040990][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.067117][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.295364][T13922] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 697.319673][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1638'. [ 697.416149][ T5304] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 697.506255][T13922] usb 1-1: Using ep0 maxpacket: 8 [ 697.526112][T13922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 697.585323][T13922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 26056, setting to 1024 [ 697.621296][T13922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 697.638805][ T5304] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 697.651070][T13922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 697.666827][T13922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 697.678613][T13922] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 697.688695][ T5304] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 697.698561][ T5304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.708241][ T5304] usb 2-1: Product: syz [ 697.712778][T13922] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8d.58 [ 697.721998][ T5304] usb 2-1: Manufacturer: syz [ 697.726933][ T5304] usb 2-1: SerialNumber: syz [ 697.731641][T13922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.742939][ T5304] usb 2-1: config 0 descriptor?? [ 697.758889][T13922] usb 1-1: config 0 descriptor?? [ 697.766843][ T5335] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 697.813372][T14182] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 697.849906][ T5244] Bluetooth: hci7: urb ffff88805ebe7a00 submission failed (90) [ 697.965159][ T5335] usb 3-1: Using ep0 maxpacket: 8 [ 697.976347][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.988562][ T5335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 698.039201][ T5304] usb 1-1: USB disconnect, device number 91 [ 698.094345][ T5335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.118491][T13922] usb 2-1: USB disconnect, device number 87 [ 698.132125][ T5335] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 698.143652][ T5335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.171417][ T5335] usb 3-1: config 0 descriptor?? [ 698.311048][T14199] loop2: detected capacity change from 0 to 7 [ 698.379008][T14199] Dev loop2: unable to read RDB block 7 [ 698.439251][T14199] loop2: unable to read partition table [ 698.456129][T14199] loop2: partition table beyond EOD, truncated [ 698.495714][T14199] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 698.603332][ T5335] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 698.687015][ T5335] hid-picolcd 0003:04D8:C002.001E: unknown main item tag 0x0 [ 698.765649][ T5335] hid-picolcd 0003:04D8:C002.001E: No report with id 0x11 found [ 698.839625][ T5335] usb 3-1: USB disconnect, device number 108 [ 699.275215][ T5304] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 699.505581][ T5304] usb 5-1: Using ep0 maxpacket: 8 [ 699.593486][ T5304] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 699.611482][ T5304] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 699.619978][ T5304] usb 5-1: Product: syz [ 699.624371][ T5304] usb 5-1: Manufacturer: syz [ 699.629373][ T5304] usb 5-1: SerialNumber: syz [ 699.639734][ T5304] usb 5-1: config 0 descriptor?? [ 699.668804][ T5304] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 699.675920][ T5335] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 699.923743][ T5335] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.965190][ T5335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 699.977903][ T5335] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 699.994428][ T5335] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 700.034165][ T5335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.054539][ T5335] usb 1-1: Product: syz [ 700.060010][T14224] vivid-007: ================= START STATUS ================= [ 700.068207][ T5335] usb 1-1: Manufacturer: syz [ 700.073074][ T5335] usb 1-1: SerialNumber: syz [ 700.079806][T14224] vivid-007: Enable Output Cropping: true [ 700.088196][T14224] vivid-007: Enable Output Composing: true [ 700.095892][ T5335] usb 1-1: config 0 descriptor?? [ 700.101262][T14224] vivid-007: Enable Output Scaler: true [ 700.102028][T14215] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 700.115973][T14224] [ 700.124038][T14224] vivid-007: Tx RGB Quantization Range: Automatic [ 700.132505][T14224] vivid-007: Transmit Mode: [ 700.133456][T14226] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 700.134651][ T5335] usb 1-1: ucan: probing device on interface #0 [ 700.144817][T14229] FAULT_INJECTION: forcing a failure. [ 700.144817][T14229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.169484][ T5335] usb 1-1: ucan: invalid EP count (1) [ 700.174974][ T5335] usb 1-1: ucan: probe failed; try to update the device firmware [ 700.189341][T14229] CPU: 1 UID: 0 PID: 14229 Comm: syz.1.1650 Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 700.195833][T14224] HDMI [ 700.200157][T14229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 700.200182][T14229] Call Trace: [ 700.200195][T14229] [ 700.202860][T14224] [ 700.212902][T14229] dump_stack_lvl+0x241/0x360 [ 700.212941][T14229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 700.212966][T14229] ? __pfx__printk+0x10/0x10 [ 700.212991][T14229] ? __pfx_lock_release+0x10/0x10 [ 700.213032][T14229] should_fail_ex+0x3b0/0x4e0 [ 700.213073][T14229] _copy_from_user+0x2f/0xe0 [ 700.213104][T14229] vga_arb_write+0x13d/0x23a0 [ 700.213146][T14229] ? __pfx_vga_arb_write+0x10/0x10 [ 700.213188][T14229] ? end_current_label_crit_section+0x151/0x180 [ 700.213226][T14229] ? bpf_lsm_file_permission+0x9/0x10 [ 700.213260][T14229] ? security_file_permission+0x7f/0xa0 [ 700.277463][T14229] ? rw_verify_area+0x1d2/0x6b0 [ 700.282360][T14229] ? __pfx_vga_arb_write+0x10/0x10 [ 700.287497][T14229] vfs_write+0x2a2/0xc90 [ 700.291761][T14229] ? __pfx_vfs_write+0x10/0x10 [ 700.296534][T14229] ? __fget_files+0x29/0x470 [ 700.301142][T14229] ? __fget_files+0x3f6/0x470 [ 700.305834][T14229] ? __fget_files+0x29/0x470 [ 700.310560][T14229] ksys_write+0x1a0/0x2c0 [ 700.314905][T14229] ? __pfx_ksys_write+0x10/0x10 [ 700.319765][T14229] ? do_syscall_64+0x100/0x230 [ 700.324543][T14229] ? do_syscall_64+0xb6/0x230 [ 700.329239][T14229] do_syscall_64+0xf3/0x230 [ 700.333756][T14229] ? clear_bhb_loop+0x35/0x90 [ 700.338452][T14229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.344400][T14229] RIP: 0033:0x7f9ca217cef9 [ 700.348830][T14229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.368473][T14229] RSP: 002b:00007f9ca302f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 700.376914][T14229] RAX: ffffffffffffffda RBX: 00007f9ca2336058 RCX: 00007f9ca217cef9 [ 700.384921][T14229] RDX: 000000000000000c RSI: 0000000020000140 RDI: 0000000000000008 [ 700.392907][T14229] RBP: 00007f9ca302f090 R08: 0000000000000000 R09: 0000000000000000 [ 700.401069][T14229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.409083][T14229] R13: 0000000000000000 R14: 00007f9ca2336058 R15: 00007f9ca245fa28 [ 700.417086][T14229] [ 700.420180][ C1] vkms_vblank_simulate: vblank timer overrun [ 700.443813][ T5304] gspca_zc3xx: reg_w_i err -110 [ 700.451511][ T5304] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 700.476376][T14229] tipc: Started in network mode [ 700.505404][T14224] vivid-007: Hotplug Present: 0x00000000 [ 700.536743][T14224] vivid-007: RxSense Present: 0x00000000 [ 700.543924][T14229] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 700.555843][T14224] vivid-007: EDID Present: 0x00000000 [ 700.561504][T14224] vivid-007: ================== END STATUS ================== [ 700.569835][T14229] tipc: Enabled bearer , priority 10 [ 700.569902][T14228] vivid-007: ================= START STATUS ================= [ 700.584317][T14228] vivid-007: Enable Output Cropping: true [ 700.590622][T14228] vivid-007: Enable Output Composing: true [ 700.597084][T14228] vivid-007: Enable Output Scaler: true [ 700.602820][T14228] vivid-007: Tx RGB Quantization Range: Automatic [ 700.607025][ T5244] Bluetooth: hci4: unexpected cc 0x1003 length: 2 < 9 [ 700.610557][T14228] vivid-007: Transmit Mode: [ 700.617235][ T5253] Bluetooth: hci0: unexpected cc 0x1003 length: 2 < 9 [ 700.625374][T14226] tipc: Started in network mode [ 700.636179][T14228] HDMI [ 700.636216][T14228] vivid-007: Hotplug Present: 0x00000000 [ 700.636248][T14228] vivid-007: RxSense Present: 0x00000000 [ 700.636276][T14228] vivid-007: EDID Present: 0x00000000 [ 700.636305][T14228] vivid-007: ================== END STATUS ================== [ 700.664495][T14226] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 700.691512][T14226] tipc: Enabled bearer , priority 10 [ 700.889130][T14233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.897967][ T5304] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 700.919242][T14233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.975249][ T5335] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 701.058496][ T58] usb 1-1: USB disconnect, device number 92 [ 701.105425][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 701.160454][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 701.185358][ T5335] usb 2-1: Using ep0 maxpacket: 8 [ 701.196987][ T5335] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 701.218422][ T5304] usb 4-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 701.229523][ T5304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.238532][ T5304] usb 4-1: Product: syz [ 701.243524][ T5304] usb 4-1: Manufacturer: syz [ 701.252966][ T5335] usb 2-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 701.265319][ T5304] usb 4-1: SerialNumber: syz [ 701.273570][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.286968][ T5335] usb 2-1: Product: syz [ 701.291281][ T5335] usb 2-1: Manufacturer: syz [ 701.298051][ T5304] usb 4-1: config 0 descriptor?? [ 701.308596][ T5304] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input59 [ 701.318440][ T5335] usb 2-1: SerialNumber: syz [ 701.333259][ T5335] usb 2-1: config 0 descriptor?? [ 701.356824][ T5335] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input60 [ 701.369348][ T5304] input: failed to attach handler mousedev to device input59, error: -5 [ 701.416719][ T5335] input: failed to attach handler mousedev to device input60, error: -5 [ 701.546046][ T5335] usb 2-1: USB disconnect, device number 88 [ 701.591505][ T5304] tipc: Node number set to 4269801491 [ 701.805245][ T8] tipc: Node number set to 4269801491 [ 702.098952][ T5304] usb 4-1: USB disconnect, device number 91 [ 702.304553][ T5296] usb 5-1: USB disconnect, device number 100 [ 702.454136][T14244] loop2: detected capacity change from 0 to 7 [ 702.502700][ T7508] Dev loop2: unable to read RDB block 7 [ 702.562425][ T7508] loop2: unable to read partition table [ 702.615359][ T7508] loop2: partition table beyond EOD, truncated [ 702.655296][T14244] Dev loop2: unable to read RDB block 7 [ 702.665357][T14244] loop2: unable to read partition table [ 702.691336][T14244] loop2: partition table beyond EOD, truncated [ 702.745537][T14244] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 702.841635][T14252] loop2: detected capacity change from 0 to 7 [ 702.861895][ T5296] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 702.872271][T14252] Dev loop2: unable to read RDB block 7 [ 702.878461][T14252] loop2: unable to read partition table [ 702.886546][T14252] loop2: partition table beyond EOD, truncated [ 702.892820][T14252] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 703.067147][ T5296] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 703.126296][ T5296] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 703.145630][ T5296] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.168170][ T5296] usb 5-1: Product: syz [ 703.196888][ T5296] usb 5-1: Manufacturer: syz [ 703.211872][ T5296] usb 5-1: SerialNumber: syz [ 703.237626][ T5296] usb 5-1: config 0 descriptor?? [ 703.612033][ T29] audit: type=1326 audit(1725732054.838:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 703.735295][ T5304] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 703.744503][ T29] audit: type=1326 audit(1725732054.868:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 703.845271][ T29] audit: type=1326 audit(1725732054.868:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 703.933528][ T29] audit: type=1326 audit(1725732054.868:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 704.047877][ T5304] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 704.085689][ T29] audit: type=1326 audit(1725732054.868:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 704.133343][ T5304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.145584][ T5304] usb 3-1: Product: syz [ 704.149813][ T5304] usb 3-1: Manufacturer: syz [ 704.154739][ T5304] usb 3-1: SerialNumber: syz [ 704.173067][ T5304] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 704.259478][ T58] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 704.287134][ T29] audit: type=1326 audit(1725732054.878:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 704.455694][ T29] audit: type=1326 audit(1725732054.878:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 704.478127][ C1] vkms_vblank_simulate: vblank timer overrun [ 704.495766][ T29] audit: type=1326 audit(1725732054.878:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 704.518560][ T29] audit: type=1326 audit(1725732054.878:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 704.549549][ T29] audit: type=1326 audit(1725732054.878:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14262 comm="syz.3.1659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd67af7cef9 code=0x7ffc0000 [ 704.695708][ T5253] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 704.695806][ T5244] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 704.704791][ T5253] Bluetooth: hci4: Injecting HCI hardware error event [ 704.713569][ T5244] Bluetooth: hci0: Injecting HCI hardware error event [ 704.724666][ T5253] Bluetooth: hci4: hardware error 0x00 [ 704.734849][ T5243] Bluetooth: hci0: hardware error 0x00 [ 705.065080][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1657'. [ 705.455713][T14277] loop2: detected capacity change from 0 to 7 [ 705.498265][ T58] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 705.560797][ T58] ath9k_htc: Failed to initialize the device [ 705.563163][T14277] Dev loop2: unable to read RDB block 7 [ 705.620336][ T58] usb 3-1: ath9k_htc: USB layer deinitialized [ 705.719845][ T5304] usb 5-1: USB disconnect, device number 101 [ 705.727162][T14277] loop2: unable to read partition table [ 705.793921][T14277] loop2: partition table beyond EOD, truncated [ 705.941234][T14277] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 706.220195][T14279] vivid-007: ================= START STATUS ================= [ 706.284180][T14279] vivid-007: Enable Output Cropping: true [ 706.320867][T14279] vivid-007: Enable Output Composing: true [ 706.410554][T14279] vivid-007: Enable Output Scaler: true [ 706.448539][T14279] vivid-007: Tx RGB Quantization Range: Automatic [ 706.495336][T14280] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 706.505261][T14279] vivid-007: Transmit Mode: HDMI [ 706.524100][ T5296] usb 3-1: USB disconnect, device number 109 [ 706.594205][T14280] tipc: Enabling of bearer rejected, already enabled [ 706.595375][T14279] vivid-007: Hotplug Present: 0x00000000 [ 706.615430][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 2 < 9 [ 706.622287][ T5244] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 706.665693][T14279] vivid-007: RxSense Present: 0x00000000 [ 706.693010][T14279] vivid-007: EDID Present: 0x00000000 [ 706.702335][T14279] vivid-007: ================== END STATUS ================== [ 706.796081][ T5253] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 706.867043][ T5243] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 706.885219][ T8] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 706.953684][T14292] loop2: detected capacity change from 0 to 7 [ 706.965802][T14293] sctp: [Deprecated]: syz.3.1667 (pid 14293) Use of int in max_burst socket option deprecated. [ 706.965802][T14293] Use struct sctp_assoc_value instead [ 706.970199][ T6236] Dev loop2: unable to read RDB block 7 [ 707.018779][ T6236] loop2: unable to read partition table [ 707.040203][ T6236] loop2: partition table beyond EOD, truncated [ 707.060506][T14292] Dev loop2: unable to read RDB block 7 [ 707.066369][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 707.115871][T14292] loop2: unable to read partition table [ 707.134052][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 707.171153][T14292] loop2: partition table beyond EOD, truncated [ 707.205293][T14292] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 707.221862][ T8] usb 2-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 707.328324][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.335645][T14296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.405216][ T8] usb 2-1: Product: syz [ 707.409461][ T8] usb 2-1: Manufacturer: syz [ 707.414089][ T8] usb 2-1: SerialNumber: syz [ 707.439806][T14296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.514618][T14300] netlink: 209840 bytes leftover after parsing attributes in process `syz.2.1671'. [ 707.543141][ T8] usb 2-1: config 0 descriptor?? [ 707.606353][ T5304] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 707.673344][ T8] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input61 [ 707.741432][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 707.782552][ T8] input: failed to attach handler mousedev to device input61, error: -5 [ 708.353924][ T46] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 708.467042][ T5335] usb 2-1: USB disconnect, device number 89 [ 708.591111][T14303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.691435][T14303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.255410][ T5335] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 709.454296][ T46] usb 5-1: unable to get BOS descriptor or descriptor too short [ 709.466833][ T46] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 709.478471][ T5335] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 709.490014][ T46] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 709.501939][ T5335] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 709.511847][ T46] usb 5-1: can't read configurations, error -71 [ 709.518681][ T5335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.527934][ T5335] usb 2-1: Product: syz [ 709.532158][ T5335] usb 2-1: Manufacturer: syz [ 709.537798][ T5335] usb 2-1: SerialNumber: syz [ 709.552424][ T5335] usb 2-1: config 0 descriptor?? [ 709.655539][ T8] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 709.877140][ T5296] usb 2-1: USB disconnect, device number 90 [ 709.885436][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 709.895832][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 709.908787][ T8] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 709.920015][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.941574][ T8] usb 3-1: Product: syz [ 709.955179][ T8] usb 3-1: Manufacturer: syz [ 709.959846][ T8] usb 3-1: SerialNumber: syz [ 709.986722][ T8] usb 3-1: config 0 descriptor?? [ 710.125554][ T5335] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 710.187894][ T5253] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 710.208245][ T5296] usb 3-1: USB disconnect, device number 110 [ 710.222892][ T5253] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 710.234495][ T5253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 710.250006][ T5253] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 710.262395][ T5253] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 710.272283][ T5253] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 710.346161][ T5335] usb 4-1: Using ep0 maxpacket: 8 [ 710.388089][ T5335] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 710.405219][ T5335] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 710.415825][ T5335] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 710.426426][ T5335] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 710.445880][ T5335] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 710.479563][ T5335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.888087][T14336] loop2: detected capacity change from 0 to 7 [ 710.903492][ T6511] Dev loop2: unable to read RDB block 7 [ 710.914943][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.931222][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 710.950448][ T6511] loop2: unable to read partition table [ 710.980012][ T6511] loop2: partition table beyond EOD, truncated [ 710.997781][T14336] Dev loop2: unable to read RDB block 7 [ 711.007127][ T46] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 711.036561][T14336] loop2: unable to read partition table [ 711.090421][T14336] loop2: partition table beyond EOD, truncated [ 711.147415][T14336] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 711.158098][ T5335] usb 4-1: GET_CAPABILITIES returned 0 [ 711.163649][ T5335] usbtmc 4-1:16.0: can't read capabilities [ 711.209597][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.218247][ T46] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 711.230171][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.252628][ T46] usb 5-1: config 0 descriptor?? [ 711.258702][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 711.471642][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 711.471663][ T29] audit: type=1326 audit(1725732062.698:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.503421][T14334] xt_TPROXY: Can be used only with -p tcp or -p udp [ 711.516740][ T46] usb 5-1: string descriptor 0 read error: -71 [ 711.548609][ T46] pwc: Samsung MPC-C10 USB webcam detected. [ 711.551221][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.577312][ T29] audit: type=1326 audit(1725732062.698:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.601039][ T46] pwc: send_video_command error -71 [ 711.608476][ T46] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 711.617782][ T46] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 711.631047][ T46] usb 5-1: USB disconnect, device number 104 [ 711.645206][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 711.675917][ T29] audit: type=1326 audit(1725732062.698:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.702874][ T29] audit: type=1326 audit(1725732062.698:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.727614][ T29] audit: type=1326 audit(1725732062.768:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.752006][ T29] audit: type=1326 audit(1725732062.768:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.775205][ T29] audit: type=1326 audit(1725732062.768:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.800725][ T29] audit: type=1326 audit(1725732062.768:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.824885][ T29] audit: type=1326 audit(1725732062.778:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 711.850020][ T29] audit: type=1326 audit(1725732062.778:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14340 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad1197cef9 code=0x7ffc0000 [ 712.044305][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.070857][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 712.375391][ T5243] Bluetooth: hci7: command tx timeout [ 712.578630][T14327] chnl_net:caif_netlink_parms(): no params data found [ 712.628470][ T58] usb 4-1: USB disconnect, device number 93 [ 712.727711][T14346] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 712.819314][T14361] vivid-004: disconnect [ 712.857226][ T52] bridge_slave_1: left allmulticast mode [ 712.865979][ T52] bridge_slave_1: left promiscuous mode [ 712.875946][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.897309][ T52] bridge_slave_0: left allmulticast mode [ 712.906992][ T52] bridge_slave_0: left promiscuous mode [ 712.914366][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.289784][T14353] vivid-004: reconnect [ 713.724091][ T46] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 713.745233][ T8] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 713.937565][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 713.949708][ T8] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 713.957017][ T46] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.970581][ T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.993670][ T8] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 714.004951][ T46] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 714.005942][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.024422][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.040624][ T46] usb 5-1: Product: ÐŒ [ 714.049012][ T46] usb 5-1: Manufacturer: ﴢꚘ鷢鯷璩î¤î½·è¶Šæ©¹â‘€ãš³ì¿£á»®é‰¾ê§¦ï¹­à°¶à¯ï£ [ 714.061155][ T8] usb 4-1: Product: syz [ 714.080448][ T46] usb 5-1: SerialNumber: щ [ 714.081285][ T8] usb 4-1: Manufacturer: syz [ 714.090339][ T8] usb 4-1: SerialNumber: syz [ 714.118110][ T8] usb 4-1: config 0 descriptor?? [ 714.261019][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.278111][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.298733][ T52] bond0 (unregistering): Released all slaves [ 714.426698][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 714.466714][ T5243] Bluetooth: hci7: command tx timeout [ 714.530505][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 714.573795][ T52] tipc: Disabling bearer [ 714.583866][ T5304] usb 4-1: USB disconnect, device number 94 [ 714.590781][T14327] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.598193][ T52] tipc: Left network mode [ 714.616865][T14327] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.628847][T14327] bridge_slave_0: entered allmulticast mode [ 714.637913][T14327] bridge_slave_0: entered promiscuous mode [ 714.651660][ T46] usb 5-1: 0:2 : does not exist [ 714.697108][ T52] IPVS: stopping backup sync thread 13368 ... [ 714.699009][ T46] usb 5-1: USB disconnect, device number 105 [ 714.740895][T14327] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.805377][T14327] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.819315][T14327] bridge_slave_1: entered allmulticast mode [ 714.912923][T14327] bridge_slave_1: entered promiscuous mode [ 714.948874][ T6511] udevd[6511]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.279208][T14380] loop2: detected capacity change from 0 to 7 [ 715.309380][T14380] Dev loop2: unable to read RDB block 7 [ 715.348535][T14380] loop2: unable to read partition table [ 715.388249][T14327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.397984][T14380] loop2: partition table beyond EOD, truncated [ 715.434240][T14380] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 715.724099][T14383] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 715.798376][T14327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.152873][T14327] team0: Port device team_slave_0 added [ 716.265552][ T52] hsr_slave_0: left promiscuous mode [ 716.322440][ T52] hsr_slave_1: left promiscuous mode [ 716.341342][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 716.364352][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 716.389356][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 716.395559][ T5292] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 716.397066][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 716.491470][ T52] veth0_macvtap: left promiscuous mode [ 716.512271][ T52] veth1_vlan: left promiscuous mode [ 716.521167][ T52] veth0_vlan: left promiscuous mode [ 716.535313][ T5243] Bluetooth: hci7: command tx timeout [ 716.619497][ T5292] usb 2-1: New USB device found, idVendor=0b57, idProduct=d863, bcdDevice=2e.bb [ 716.635302][ T5292] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.657651][ T5292] usb 2-1: config 0 descriptor?? [ 716.698086][ T5292] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 717.843570][ T52] team0 (unregistering): Port device team_slave_1 removed [ 717.951503][ T52] team0 (unregistering): Port device team_slave_0 removed [ 718.615444][ T5243] Bluetooth: hci7: command tx timeout [ 718.732617][T14327] team0: Port device team_slave_1 added [ 718.760668][T14397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1695'. [ 718.951503][T14327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.972505][T14327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.052166][T14327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.112051][ T8] usb 2-1: USB disconnect, device number 91 [ 719.126818][T14327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.156498][T14327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.200420][T14327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.296219][T14435] fuse: Bad value for 'fd' [ 719.470635][T13922] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 719.480529][T14327] hsr_slave_0: entered promiscuous mode [ 719.492254][T14327] hsr_slave_1: entered promiscuous mode [ 719.536574][T14327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.549307][T14327] Cannot create hsr debugfs directory [ 719.704936][T13922] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 719.770442][T13922] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 719.799235][T13922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.814533][T13922] usb 3-1: Product: syz [ 719.823562][T13922] usb 3-1: Manufacturer: syz [ 719.840689][T13922] usb 3-1: SerialNumber: syz [ 719.856038][T13922] usb 3-1: config 0 descriptor?? [ 720.104865][T14457] openvswitch: netlink: Message has 8 unknown bytes. [ 720.176256][T13922] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 720.185823][ T46] usb 3-1: USB disconnect, device number 111 [ 720.223430][ T52] IPVS: stop unused estimator thread 0... [ 720.389980][T13922] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 720.432595][T13922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.445395][T13922] usb 4-1: config 0 has no interface number 0 [ 720.451578][T13922] usb 4-1: config 0 interface 64 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 720.466299][T13922] usb 4-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 720.479932][T13922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.502751][T13922] usb 4-1: config 0 descriptor?? [ 720.516736][T13922] usbhid 4-1:0.64: couldn't find an input interrupt endpoint [ 720.963138][T14469] syzkaller0: entered promiscuous mode [ 720.969733][T14469] syzkaller0: entered allmulticast mode [ 721.010586][T14469] PF_CAN: dropped non conform CAN FD skbuff: dev type 773, len 65487 [ 721.167847][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.193590][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.252641][T14327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 721.272439][T14327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 721.302908][T14327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 721.363208][T14327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 721.607902][T14327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.674366][ T5292] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 721.693575][T14327] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.753992][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.761275][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.803966][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.811273][ T5729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.897365][ T5292] usb 3-1: config 0 has no interfaces? [ 721.903143][ T5292] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 721.914629][ T5292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.942847][ T5292] usb 3-1: config 0 descriptor?? [ 722.127220][T14327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 722.194664][T14475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 722.228088][T14475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 722.301406][T14327] veth0_vlan: entered promiscuous mode [ 722.332872][T14327] veth1_vlan: entered promiscuous mode [ 722.424173][T14327] veth0_macvtap: entered promiscuous mode [ 722.486010][T14327] veth1_macvtap: entered promiscuous mode [ 722.596725][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.623036][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.635620][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.661617][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.682087][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.721887][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.752586][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.767666][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.783391][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.805453][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.821487][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.846845][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.868712][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.891342][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.944438][T14451] dccp_close: ABORT with 1964 bytes unread [ 722.972005][T14327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.987869][T13922] usb 4-1: USB disconnect, device number 95 [ 723.061011][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1710'. [ 723.108182][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.121416][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.150973][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.174713][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.185927][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.196924][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.207349][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.218563][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.229651][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.240836][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.250926][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.266200][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.278948][T14327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.289667][T14327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.319500][T14327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 723.391345][T14327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.434178][T14327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.449873][T14327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.458974][T14327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 723.911864][ T5732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.937753][ T5732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.092417][ T5732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.112766][ T5732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.492860][ T5296] usb 3-1: USB disconnect, device number 112 [ 725.035328][ T5296] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 725.065489][T13922] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 725.267415][ T5296] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 725.285419][T13922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.305347][T13922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.322387][ T5296] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 725.326839][T13922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 725.355300][ T5296] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.374541][ T5296] usb 3-1: Product: syz [ 725.387760][T13922] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.08 [ 725.406201][T13922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.413438][ T5296] usb 3-1: Manufacturer: syz [ 725.424849][T13922] usb 4-1: config 0 descriptor?? [ 725.452172][ T5296] usb 3-1: SerialNumber: syz [ 725.464474][ T5296] usb 3-1: config 0 descriptor?? [ 725.644027][T14542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.675525][T14542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.736806][T13922] usbhid 4-1:0.0: can't add hid device: -71 [ 725.743512][T13922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 725.758163][T13922] usb 4-1: USB disconnect, device number 96 [ 725.769555][ T5292] usb 3-1: USB disconnect, device number 113 [ 726.786163][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 726.955282][ T5292] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 726.994448][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 726.994470][ T29] audit: type=1326 audit(1725732078.218:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14578 comm="syz.0.1726" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9d6317cef9 code=0x0 [ 727.023226][ C0] vkms_vblank_simulate: vblank timer overrun [ 727.095408][T14564] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1722'. [ 727.125315][ T5292] usb 3-1: device descriptor read/64, error -71 [ 727.416023][ T5292] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 727.585384][ T5292] usb 3-1: device descriptor read/64, error -71 [ 727.715652][ T5292] usb usb3-port1: attempt power cycle [ 728.177311][ T5292] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 728.218845][ T5292] usb 3-1: device descriptor read/8, error -71 [ 728.523809][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.534548][ T5292] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 728.655878][ T5292] usb 3-1: device descriptor read/8, error -71 [ 728.776581][ T5292] usb usb3-port1: unable to enumerate USB device [ 728.886372][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.230837][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.426141][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.555443][ T5292] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 729.817998][ T5292] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 729.855707][ T5292] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 729.864831][ T5292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.875270][ T52] bridge_slave_1: left allmulticast mode [ 729.905403][ T52] bridge_slave_1: left promiscuous mode [ 729.911288][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.921983][ T5292] usb 5-1: Product: syz [ 729.945794][ T5292] usb 5-1: Manufacturer: syz [ 729.950515][ T5292] usb 5-1: SerialNumber: syz [ 729.980947][ T52] bridge_slave_0: left allmulticast mode [ 729.986784][ T5292] usb 5-1: config 0 descriptor?? [ 730.023638][ T52] bridge_slave_0: left promiscuous mode [ 730.079440][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.344452][ T5253] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 730.357250][ T5253] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 730.367435][ T5253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 730.376782][ T5253] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 730.386204][ T5253] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 730.396015][ T5253] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 730.547602][T13922] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 730.742438][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 730.752933][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 730.761779][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 730.765168][T13922] usb 3-1: Using ep0 maxpacket: 8 [ 730.877967][T13922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.904654][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 730.920344][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 730.929647][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 730.995249][T13922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 731.125930][T13922] usb 3-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 731.189704][T13922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.220161][T13922] usb 3-1: Product: syz [ 731.315699][T13922] usb 3-1: Manufacturer: syz [ 731.322810][T13922] usb 3-1: SerialNumber: syz [ 731.558960][T13922] usbhid 3-1:1.0: can't add hid device: -22 [ 731.572816][T13922] usbhid 3-1:1.0: probe with driver usbhid failed with error -22 [ 731.608294][T13922] usb 3-1: USB disconnect, device number 118 [ 732.293001][ T9] usb 5-1: USB disconnect, device number 106 [ 732.485389][ T5243] Bluetooth: hci3: command tx timeout [ 732.514582][T14627] netlink: 'syz.2.1737': attribute type 6 has an invalid length. [ 732.522913][T14627] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1737'. [ 732.559730][T14626] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 732.574640][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.644935][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.807539][ T52] bond0 (unregistering): Released all slaves [ 733.018276][ T5243] Bluetooth: hci4: command tx timeout [ 733.105177][ T5292] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 733.210040][ T52] tipc: Disabling bearer [ 733.225266][ T52] tipc: Left network mode [ 733.334253][ T5292] usb 3-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 733.379268][ T5292] usb 3-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 733.425975][ T5292] usb 3-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 733.445393][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.454070][ T5292] usb 3-1: Product: syz [ 733.458601][ T5292] usb 3-1: Manufacturer: syz [ 733.463332][ T5292] usb 3-1: SerialNumber: syz [ 733.677698][ T5292] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 733.770163][ T5292] usb 3-1: USB disconnect, device number 119 [ 734.535471][ T5243] Bluetooth: hci3: command tx timeout [ 734.657990][ T52] hsr_slave_0: left promiscuous mode [ 734.701339][ T52] hsr_slave_1: left promiscuous mode [ 734.781389][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 734.794472][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 734.827675][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 734.896791][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.075447][ T52] veth1_macvtap: left promiscuous mode [ 735.095350][ T5243] Bluetooth: hci4: command tx timeout [ 735.114904][ T52] veth0_macvtap: left promiscuous mode [ 735.120968][ T52] veth1_vlan: left promiscuous mode [ 735.127028][ T52] veth0_vlan: left promiscuous mode [ 735.270531][T14663] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1744'. [ 736.625514][ T5243] Bluetooth: hci3: command tx timeout [ 737.175266][ T5243] Bluetooth: hci4: command tx timeout [ 738.145288][ T52] team0 (unregistering): Port device team_slave_1 removed [ 738.376386][ T52] team0 (unregistering): Port device team_slave_0 removed [ 738.695254][ T5243] Bluetooth: hci3: command tx timeout [ 739.255303][ T5243] Bluetooth: hci4: command tx timeout [ 739.876162][ T5253] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 739.897178][ T5253] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 739.912476][ T5253] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 739.936688][ T5253] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 739.945379][ T5253] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 739.966067][ T5253] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 742.065848][ T5243] Bluetooth: hci8: command tx timeout [ 742.199647][T14622] chnl_net:caif_netlink_parms(): no params data found [ 742.591421][T14609] chnl_net:caif_netlink_parms(): no params data found [ 743.283294][T14670] chnl_net:caif_netlink_parms(): no params data found [ 743.468772][T14622] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.545249][T14622] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.552526][T14622] bridge_slave_0: entered allmulticast mode [ 743.565232][ T9] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 743.634176][T14622] bridge_slave_0: entered promiscuous mode [ 743.796069][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 743.801692][T14622] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.839138][T14622] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.879144][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.915467][T14622] bridge_slave_1: entered allmulticast mode [ 743.923128][T14622] bridge_slave_1: entered promiscuous mode [ 743.955671][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.976857][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.988913][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.005177][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 744.007772][ T5253] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 744.014762][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.029335][ T5253] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 744.052737][ T5253] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 744.078764][ T5253] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 744.107151][ T5253] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 744.116533][ T5253] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 744.136629][ T5253] Bluetooth: hci8: command tx timeout [ 744.482961][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 744.489027][ T9] usbtmc 5-1:16.0: can't read capabilities [ 744.619039][T14609] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.679904][T14609] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.688687][T14609] bridge_slave_0: entered allmulticast mode [ 744.698265][T14609] bridge_slave_0: entered promiscuous mode [ 744.732191][T14701] usb 5-1: usbtmc_ioctl_clear_in_halt returned -32 [ 744.815253][ T58] usb 5-1: USB disconnect, device number 107 [ 744.888744][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.010541][T14622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.143519][T14609] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.152714][T14609] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.160601][T14609] bridge_slave_1: entered allmulticast mode [ 745.169344][T14609] bridge_slave_1: entered promiscuous mode [ 745.518132][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.628967][T14622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.727076][T14670] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.734362][T14670] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.753653][T14670] bridge_slave_0: entered allmulticast mode [ 745.767432][T14670] bridge_slave_0: entered promiscuous mode [ 745.785575][T14670] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.794834][T14670] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.803033][T14670] bridge_slave_1: entered allmulticast mode [ 745.818304][T14670] bridge_slave_1: entered promiscuous mode [ 745.878350][T14609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.021421][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.215555][T14712] Bluetooth: hci8: command tx timeout [ 746.221130][ T5244] Bluetooth: hci6: command tx timeout [ 746.271929][T14622] team0: Port device team_slave_0 added [ 746.481553][T14609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.727017][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.928660][T14622] team0: Port device team_slave_1 added [ 746.939231][T14670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.970993][T14670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.456279][T14609] team0: Port device team_slave_0 added [ 747.470644][T14609] team0: Port device team_slave_1 added [ 747.491157][T14622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 747.565126][T14622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.657626][T14622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 747.681122][T14622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.688190][T14622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.749656][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.756721][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.766118][T14622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.886122][T14670] team0: Port device team_slave_0 added [ 748.008694][T14609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.038412][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.135592][T14609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.260949][T14670] team0: Port device team_slave_1 added [ 748.299383][T14712] Bluetooth: hci8: command tx timeout [ 748.306702][ T5244] Bluetooth: hci6: command tx timeout [ 748.345206][ T58] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 748.466131][T14609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.473156][T14609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.499129][ C1] vkms_vblank_simulate: vblank timer overrun [ 748.506787][T14609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.535308][ T58] usb 5-1: Using ep0 maxpacket: 32 [ 748.543534][ T58] usb 5-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 748.555913][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.578519][ T58] usb 5-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 748.597240][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.614584][ T58] usb 5-1: config 0 has an invalid descriptor of length 250, skipping remainder of the config [ 748.653094][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 748.653550][T14670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.671824][ T58] usb 5-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 748.694284][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.702521][ T58] usb 5-1: Product: syz [ 748.715194][ T58] usb 5-1: Manufacturer: syz [ 748.719867][ T58] usb 5-1: SerialNumber: syz [ 748.732489][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.772214][T14670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.776483][ T58] usb 5-1: config 0 descriptor?? [ 748.890762][ T58] usb 5-1: bad CDC descriptors [ 748.907781][ T58] cdc_acm 5-1:0.0: Zero length descriptor references [ 748.915976][ T58] cdc_acm 5-1:0.0: probe with driver cdc_acm failed with error -22 [ 748.989013][T14622] hsr_slave_0: entered promiscuous mode [ 749.013443][T14622] hsr_slave_1: entered promiscuous mode [ 749.035713][T14622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.043467][T14622] Cannot create hsr debugfs directory [ 749.096020][ T58] usb 5-1: USB disconnect, device number 108 [ 749.176605][T14670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.183579][T14670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.265223][T14670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.501069][T14609] hsr_slave_0: entered promiscuous mode [ 749.518949][T14609] hsr_slave_1: entered promiscuous mode [ 749.538641][T14609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 749.563676][T14609] Cannot create hsr debugfs directory [ 750.030803][T14670] hsr_slave_0: entered promiscuous mode [ 750.099275][T14670] hsr_slave_1: entered promiscuous mode [ 750.120671][T14670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.135264][T14670] Cannot create hsr debugfs directory [ 750.376031][T14712] Bluetooth: hci6: command tx timeout [ 750.735837][T14713] chnl_net:caif_netlink_parms(): no params data found [ 750.858260][ T52] bridge_slave_1: left allmulticast mode [ 750.863997][ T52] bridge_slave_1: left promiscuous mode [ 750.885627][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.946261][ T52] bridge_slave_0: left allmulticast mode [ 750.975166][ T52] bridge_slave_0: left promiscuous mode [ 750.982142][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.115159][ T9] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 751.350904][ T9] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 751.404788][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 751.419319][ T9] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 751.437799][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 751.448354][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.537885][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 751.631793][ T9] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 751.659456][T14745] udevd[14745]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 751.707095][ T9] usb 5-1: USB disconnect, device number 109 [ 752.457123][T14712] Bluetooth: hci6: command tx timeout [ 753.423868][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.494171][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.556082][ T52] bond0 (unregistering): Released all slaves [ 755.090577][T14622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.389414][T14713] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.396912][T14713] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.404301][T14713] bridge_slave_0: entered allmulticast mode [ 755.442889][T14713] bridge_slave_0: entered promiscuous mode [ 755.531731][ T52] hsr_slave_0: left promiscuous mode [ 755.570368][ T52] hsr_slave_1: left promiscuous mode [ 755.596133][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.603694][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.666387][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.674017][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.878108][ T52] veth1_macvtap: left promiscuous mode [ 755.883743][ T52] veth0_macvtap: left promiscuous mode [ 755.911207][ T52] veth1_vlan: left promiscuous mode [ 755.928236][ T52] veth0_vlan: left promiscuous mode [ 757.395301][ T5316] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 757.586086][ T5316] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 757.596331][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.626335][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.657133][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.704767][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.730012][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.756482][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.778139][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.801424][ T5316] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 757.829863][ T5316] usb 5-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=ee.8d [ 757.845263][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.889586][ T5316] pwc: Logitech QuickCam detected (reserved ID). [ 757.914200][ T5316] pwc: Warning: more than 1 configuration available. [ 758.454154][ T52] team0 (unregistering): Port device team_slave_1 removed [ 758.638671][ T5316] pwc: Failed to set LED on/off time (-71) [ 758.655159][ T5316] pwc: send_video_command error -71 [ 758.669916][ T5316] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 758.693352][ T5316] Philips webcam 5-1:250.0: probe with driver Philips webcam failed with error -71 [ 758.738083][ T5316] usb 5-1: USB disconnect, device number 110 [ 758.928099][ T52] team0 (unregistering): Port device team_slave_0 removed [ 761.062112][T14622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.286246][T14713] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.293419][T14713] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.325368][T14713] bridge_slave_1: entered allmulticast mode [ 761.333008][T14713] bridge_slave_1: entered promiscuous mode [ 761.899706][T14622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.970432][T14713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.984058][T14713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.107217][T14713] team0: Port device team_slave_0 added [ 762.122070][T14713] team0: Port device team_slave_1 added [ 762.341269][T14622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.566939][T14713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.573961][T14713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.689980][T14713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.754706][T14713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.779476][T14713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.810884][T14713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.566602][T14713] hsr_slave_0: entered promiscuous mode [ 763.636180][T14713] hsr_slave_1: entered promiscuous mode [ 763.715668][ T5244] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 763.726688][ T5244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 763.757339][ T5244] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 763.766588][T14713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 763.774209][T14713] Cannot create hsr debugfs directory [ 763.782794][ T5244] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 763.793591][ T5244] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 763.801582][ T5244] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 765.670216][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.895298][ T5244] Bluetooth: hci5: command tx timeout [ 765.985727][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.356061][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.611167][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.851672][T14609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 766.889759][T14609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 767.172065][T14670] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.526717][T14609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 767.595717][T14609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 767.976212][ T5244] Bluetooth: hci5: command tx timeout [ 767.996034][T14670] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.129185][T14808] chnl_net:caif_netlink_parms(): no params data found [ 768.627783][T14670] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.145991][T14670] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.257342][ T52] bridge_slave_1: left allmulticast mode [ 769.263069][ T52] bridge_slave_1: left promiscuous mode [ 769.279545][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.297315][ T52] bridge_slave_0: left allmulticast mode [ 769.303023][ T52] bridge_slave_0: left promiscuous mode [ 769.309010][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.055707][ T5244] Bluetooth: hci5: command tx timeout [ 771.126816][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.188754][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.201900][ T52] bond0 (unregistering): Released all slaves [ 771.394384][ T52] tipc: Disabling bearer [ 771.400359][ T52] tipc: Left network mode [ 771.460602][T14808] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.505582][T14808] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.514275][T14808] bridge_slave_0: entered allmulticast mode [ 771.537860][T14808] bridge_slave_0: entered promiscuous mode [ 771.569025][T14808] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.597008][T14808] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.615494][T14808] bridge_slave_1: entered allmulticast mode [ 771.623114][T14808] bridge_slave_1: entered promiscuous mode [ 772.135376][ T5244] Bluetooth: hci5: command tx timeout [ 772.231884][T14808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.423703][T14808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.707182][ T52] hsr_slave_0: left promiscuous mode [ 772.725318][ T52] hsr_slave_1: left promiscuous mode [ 772.738320][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.753640][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.765831][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.773280][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.907905][ T52] veth1_macvtap: left promiscuous mode [ 772.913555][ T52] veth0_macvtap: left promiscuous mode [ 773.001006][ T52] veth1_vlan: left promiscuous mode [ 773.077532][ T52] veth0_vlan: left promiscuous mode [ 775.616483][ T52] team0 (unregistering): Port device team_slave_1 removed [ 775.875293][ T52] team0 (unregistering): Port device team_slave_0 removed [ 777.767638][T14622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 778.036738][T14808] team0: Port device team_slave_0 added [ 778.135563][T14622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 778.236538][T14622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 778.439628][T14808] team0: Port device team_slave_1 added [ 778.514058][T14622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 778.892326][T14808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.905060][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.943074][T14808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.329662][T14808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.356253][T14808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.505380][T14808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.851705][T14808] hsr_slave_0: entered promiscuous mode [ 779.903263][T14808] hsr_slave_1: entered promiscuous mode [ 779.944838][T14808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 779.990471][T14808] Cannot create hsr debugfs directory [ 780.147936][T14609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.888246][T14609] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.000106][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.007333][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.136360][T14622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.146940][T14713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 781.188600][T14713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 781.302057][T14670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 781.323623][T14713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 781.478229][T14670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 781.523647][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.530870][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 781.558685][T14713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 781.773737][T14670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 781.825790][T14670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 782.244007][T14622] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.412684][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.419977][ T5733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.587297][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.594518][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.507321][T14713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.610207][T14808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 783.639470][T14808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 783.691384][T14808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 783.747585][T14808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 783.993803][T14713] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.046446][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.053581][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.198995][T14609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.361212][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.368503][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.621264][T14670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.010052][T14670] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.051471][T14622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.119987][ T1821] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.127195][ T1821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.447646][T14609] veth0_vlan: entered promiscuous mode [ 785.479269][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.486623][ T5733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.623914][T14609] veth1_vlan: entered promiscuous mode [ 785.730308][T14713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.850639][T14622] veth0_vlan: entered promiscuous mode [ 786.046162][T14622] veth1_vlan: entered promiscuous mode [ 786.093999][T14808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.362735][T14609] veth0_macvtap: entered promiscuous mode [ 786.451713][T14670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 786.544349][T14609] veth1_macvtap: entered promiscuous mode [ 786.656900][T14808] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.762580][T14713] veth0_vlan: entered promiscuous mode [ 786.861334][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.868532][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.952230][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.959459][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.991666][T14713] veth1_vlan: entered promiscuous mode [ 787.088221][T14622] veth0_macvtap: entered promiscuous mode [ 787.389141][T14622] veth1_macvtap: entered promiscuous mode [ 787.491553][T14670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.673580][T14808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 787.782032][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.816183][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.858471][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.895481][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.916270][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.935213][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.945989][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.958613][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.969234][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.985294][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.998810][T14609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.029050][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.039728][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.054153][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.167145][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.179014][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.207647][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.236314][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.249434][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.262232][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.274755][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.299036][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.311701][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.360995][T14622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.384983][T14713] veth0_macvtap: entered promiscuous mode [ 788.421385][T14713] veth1_macvtap: entered promiscuous mode [ 788.459035][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.487136][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.498802][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.535062][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.544963][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.597963][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.657904][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.715501][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.755271][T14609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.804721][T14609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.818109][T14609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.900151][T14609] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.925396][T14609] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.934176][T14609] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.972221][T14609] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.989446][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.061210][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.104049][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.116099][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.126093][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.136681][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.161499][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.188210][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.259187][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.337585][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.376063][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.438728][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.468098][T14622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.500370][T14622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.511658][T14622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.525257][T14622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.534599][T14622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.804119][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.835286][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.855076][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.875083][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.885909][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.896873][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.915169][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.955222][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.976511][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.989688][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.000079][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.011303][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.022371][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.045185][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.107465][T14713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.298296][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.365191][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.405743][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.425180][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.445138][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.525936][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.601456][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.686151][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.748704][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.795088][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.855197][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.909319][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.969300][T14713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.006732][T14713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.077484][T14713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.089626][T14808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.219557][T14713] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.347235][T14713] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.386982][T14713] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.465166][T14713] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.557606][T14712] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 791.572929][T14712] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 791.595218][T14712] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 791.612357][T14712] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 791.621801][T14712] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 791.629782][T14712] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 791.740120][T14670] veth0_vlan: entered promiscuous mode [ 792.009315][T14670] veth1_vlan: entered promiscuous mode [ 792.117466][ T5244] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 792.128970][ T5244] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 792.183621][ T5244] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 792.193604][ T5244] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 792.201612][ T5244] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 792.209155][ T5244] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 793.264380][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.566727][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.665265][T14712] Bluetooth: hci9: command tx timeout [ 793.760189][T14670] veth0_macvtap: entered promiscuous mode [ 794.010571][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.148734][T14670] veth1_macvtap: entered promiscuous mode [ 794.251564][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.292207][T14808] veth0_vlan: entered promiscuous mode [ 794.298383][T14712] Bluetooth: hci10: command tx timeout [ 794.418544][ T1821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.475506][ T1821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.686274][T14808] veth1_vlan: entered promiscuous mode [ 795.116439][ T5732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.195073][ T5732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.272286][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.287813][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.305921][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.317092][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.327690][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.345172][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.357960][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.369525][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.380278][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.398734][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.409390][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.426820][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.438986][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.450459][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.465194][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.476472][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.499859][T14670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.736078][T14712] Bluetooth: hci9: command tx timeout [ 795.800292][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.834371][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.855245][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.868596][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.878647][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.889207][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.899441][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.917711][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.932463][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.947675][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.959614][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.995397][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.008864][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.020060][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.037582][T14670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.049633][T14670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.069638][T14670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.078629][T14982] chnl_net:caif_netlink_parms(): no params data found [ 796.266764][ T52] bridge_slave_1: left allmulticast mode [ 796.274805][ T52] bridge_slave_1: left promiscuous mode [ 796.281730][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.299134][ T52] bridge_slave_0: left allmulticast mode [ 796.304853][ T52] bridge_slave_0: left promiscuous mode [ 796.316272][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.378539][T14712] Bluetooth: hci10: command tx timeout [ 797.816290][T14712] Bluetooth: hci9: command tx timeout [ 798.095276][ T5298] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 798.385245][ T5298] usb 3-1: Using ep0 maxpacket: 8 [ 798.402987][ T5298] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 798.425653][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.455620][T14712] Bluetooth: hci10: command tx timeout [ 798.456928][ T5298] usb 3-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 798.478052][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.498388][ T5298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.528500][ T52] bond0 (unregistering): Released all slaves [ 798.550728][ T5298] usb 3-1: Product: syz [ 798.571799][ T5298] usb 3-1: Manufacturer: syz [ 798.602946][ T5298] usb 3-1: SerialNumber: syz [ 798.635843][ T5298] usb 3-1: config 0 descriptor?? [ 798.643665][T14670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.673389][T14670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.686129][ T5298] usb 3-1: bad CDC descriptors [ 798.697617][T14670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.707823][T14670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.732526][T14972] chnl_net:caif_netlink_parms(): no params data found [ 798.853001][T15000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.966097][T15000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.987144][T15000] x_tables: duplicate underflow at hook 2 [ 799.023708][T14808] veth0_macvtap: entered promiscuous mode [ 799.545776][ T52] hsr_slave_0: left promiscuous mode [ 799.621228][ T52] hsr_slave_1: left promiscuous mode [ 799.641211][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.653151][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.681090][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.764542][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 799.776491][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 799.785697][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 799.793176][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.803173][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 799.813801][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 799.823913][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 799.895607][ T5244] Bluetooth: hci9: command tx timeout [ 799.973179][ T52] veth1_macvtap: left promiscuous mode [ 800.003235][ T52] veth0_macvtap: left promiscuous mode [ 800.048880][ T52] veth1_vlan: left promiscuous mode [ 800.075348][ T52] veth0_vlan: left promiscuous mode [ 800.535827][ T5244] Bluetooth: hci10: command tx timeout [ 801.896605][ T5244] Bluetooth: hci3: command tx timeout [ 802.156680][ T52] team0 (unregistering): Port device team_slave_1 removed [ 802.378976][ T52] team0 (unregistering): Port device team_slave_0 removed [ 803.975559][ T5244] Bluetooth: hci3: command tx timeout [ 804.548784][T14808] veth1_macvtap: entered promiscuous mode [ 804.694077][ T46] usb 3-1: USB disconnect, device number 120 [ 805.476939][T14982] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.493968][T14982] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.523961][T14982] bridge_slave_0: entered allmulticast mode [ 805.558533][T14982] bridge_slave_0: entered promiscuous mode [ 805.639835][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.710296][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.729197][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.745465][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.755490][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.768136][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.778215][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.825222][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.868089][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.045136][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.055941][ T5244] Bluetooth: hci3: command tx timeout [ 806.075893][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.157515][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.245115][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.367109][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.378678][T14808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.446112][T14808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.508351][T14808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.570057][T14972] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.622307][T14972] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.634769][T14972] bridge_slave_0: entered allmulticast mode [ 806.661614][T14972] bridge_slave_0: entered promiscuous mode [ 806.676964][T14972] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.684156][T14972] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.695499][T14972] bridge_slave_1: entered allmulticast mode [ 806.704532][T14972] bridge_slave_1: entered promiscuous mode [ 806.742234][T14972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.787817][T14972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.829932][T14982] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.870656][T14982] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.879480][T14982] bridge_slave_1: entered allmulticast mode [ 806.890291][T14982] bridge_slave_1: entered promiscuous mode [ 807.255507][ T30] INFO: task syz.2.1526:13563 blocked for more than 143 seconds. [ 807.263331][ T30] Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 807.463600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 807.532043][ T30] task:syz.2.1526 state:D stack:25488 pid:13563 tgid:13563 ppid:13119 flags:0x00000004 [ 807.546334][ T30] Call Trace: [ 807.549680][ T30] [ 807.552640][ T30] __schedule+0x1800/0x4a60 [ 807.560971][ T30] ? __pfx___schedule+0x10/0x10 [ 807.566633][ T30] ? __pfx_lock_release+0x10/0x10 [ 807.572138][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 807.585169][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 807.592071][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 807.598916][ T30] ? schedule+0x90/0x320 [ 807.605496][ T30] schedule+0x14b/0x320 [ 807.609852][ T30] ? down_read+0x6a5/0xa40 [ 807.614308][ T30] schedule_preempt_disabled+0x13/0x30 [ 807.620544][ T30] down_read+0x705/0xa40 [ 807.624982][ T30] ? __pfx_down_read+0x10/0x10 [ 807.635176][ T30] ? __filemap_get_folio+0x984/0xc10 [ 807.642954][ T30] filemap_fault+0xb5b/0x1760 [ 807.648828][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 807.656433][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 807.667559][ T30] ? pte_alloc_one+0x443/0x5d0 [ 807.672400][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 807.685176][ T30] ? __pfx_validate_chain+0x10/0x10 [ 807.690941][ T30] ? __pfx_validate_chain+0x10/0x10 [ 807.696708][ T30] __do_fault+0x135/0x460 [ 807.701565][ T30] handle_pte_fault+0x1176/0x6fc0 [ 807.715203][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 807.721642][ T30] ? mark_lock+0x9a/0x350 [ 807.726153][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 807.731575][ T30] ? __lock_acquire+0x137a/0x2040 [ 807.737213][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 807.744777][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 807.750201][ T30] ? __thp_vma_allowable_orders+0x326/0xa20 [ 807.756388][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 807.762566][ T30] handle_mm_fault+0x1109/0x1bc0 [ 807.777203][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 807.782569][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 807.788497][ T30] ? exc_page_fault+0x113/0x8c0 [ 807.793448][ T30] exc_page_fault+0x459/0x8c0 [ 807.798612][ T30] asm_exc_page_fault+0x26/0x30 [ 807.803914][ T30] RIP: 0033:0x7ffb12a44063 [ 807.815161][ T30] RSP: 002b:00007ffb12e5fb50 EFLAGS: 00010246 [ 807.821725][ T30] RAX: 0000000020000040 RBX: 0000000000000008 RCX: 0000000000000000 [ 807.830377][ T30] RDX: 0000000000010001 RSI: 0000000000000000 RDI: 0000555560d813c8 [ 807.838833][ T30] RBP: 00007ffb12e5fc68 R08: 0000000000000000 R09: 0000000000000000 [ 807.848827][ T30] R10: 0000000000000000 R11: 0000000000000002 R12: 00000000000a026d [ 807.857185][ T30] R13: 00007ffb12e5fc90 R14: 0000000000000032 R15: fffffffffffffffe [ 807.865480][ T30] [ 807.868662][ T30] [ 807.868662][ T30] Showing all locks held in the system: [ 807.892486][ T30] 1 lock held by pool_workqueue_/3: [ 807.903650][ T30] #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 807.915269][ T30] 1 lock held by khungtaskd/30: [ 807.925120][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 807.935545][ T30] 4 locks held by kworker/u8:3/52: [ 807.940744][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 807.953920][ T30] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 807.965198][ T30] #2: ffffffff8fc7f8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 807.975665][ T30] #3: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: mpls_net_exit+0x7d/0x2a0 [ 808.007990][ T30] 2 locks held by dhcpcd/4900: [ 808.012843][ T30] #0: ffff888011c8f678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: netlink_dump+0xcb/0xd80 [ 808.086411][ T30] #1: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 808.116630][ T30] 2 locks held by getty/4989: [ 808.121381][ T30] #0: ffff888030e560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 808.146025][ T5244] Bluetooth: hci3: command tx timeout [ 808.159590][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 808.175129][ T30] 3 locks held by kworker/0:8/5298: [ 808.180386][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 808.192155][ T30] #1: ffffc90004487d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 808.203990][ T30] #2: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 808.215635][ T30] 2 locks held by kworker/u8:11/5729: [ 808.246576][ T30] 3 locks held by kworker/u8:12/5730: [ 808.265230][ T30] #0: ffff888030469948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 808.277061][ T30] #1: ffffc9000d2cfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 808.290064][ T30] #2: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 808.305109][ T30] 3 locks held by kworker/u8:13/5731: [ 808.315128][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 808.335125][ T30] #1: ffffc90016087d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 808.346790][ T30] #2: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 808.357929][ T30] 3 locks held by kworker/u8:14/5732: [ 808.363774][ T30] #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 808.375649][ T30] #1: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 808.387796][ T30] #2: ffff88804d918768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xd9/0x490 [ 808.398255][ T30] 1 lock held by syz.4.1404/12860: [ 808.403416][ T30] 2 locks held by syz.2.1526/13563: [ 808.408763][ T30] #0: ffff888030861658 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 808.419389][ T30] #1: ffff8880230afc40 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xb5b/0x1760 [ 808.430142][ T30] 1 lock held by syz.1.1705/14454: [ 808.436090][ T30] #0: ffff8880230afc40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 808.447412][ T30] 1 lock held by syz.1.1705/14456: [ 808.453000][ T30] #0: ffff8880230afc40 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0 [ 808.475147][ T30] 2 locks held by syz.0.1729/14589: [ 808.480409][ T30] 3 locks held by syz-executor/14694: [ 808.495146][ T30] #0: ffff888034e58d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 808.505768][ T30] #1: ffff888034e58078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 808.515665][ T30] #2: ffffffff8fdf7fa8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 808.535948][ T30] 1 lock held by syz-executor/14808: [ 808.541740][ T30] #0: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 808.551747][ T30] 2 locks held by syz-executor/14972: [ 808.557677][ T30] #0: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 808.568707][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 808.580133][ T30] 1 lock held by syz-executor/14982: [ 808.585611][ T30] #0: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 808.596790][ T30] 2 locks held by syz-executor/15008: [ 808.605103][ T30] #0: ffffffff8fc7f8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 808.614592][ T30] #1: ffffffff8fc8c488 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 808.624867][ T30] [ 808.629626][ T30] ============================================= [ 808.629626][ T30] [ 808.645220][ T30] NMI backtrace for cpu 0 [ 808.649610][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 808.660132][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 808.670214][ T30] Call Trace: [ 808.673527][ T30] [ 808.676482][ T30] dump_stack_lvl+0x241/0x360 [ 808.681200][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.686429][ T30] ? __pfx__printk+0x10/0x10 [ 808.691043][ T30] ? vprintk_emit+0x667/0x7c0 [ 808.695741][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 808.700787][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 808.705752][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 808.711248][ T30] ? _printk+0xd5/0x120 [ 808.715430][ T30] ? __pfx__printk+0x10/0x10 [ 808.720034][ T30] ? __wake_up_klogd+0xcc/0x110 [ 808.724921][ T30] ? __pfx__printk+0x10/0x10 [ 808.729555][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 808.734695][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 808.740707][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 808.746722][ T30] watchdog+0xff4/0x1040 [ 808.750983][ T30] ? watchdog+0x1ea/0x1040 [ 808.755523][ T30] ? __pfx_watchdog+0x10/0x10 [ 808.760239][ T30] kthread+0x2f0/0x390 [ 808.764345][ T30] ? __pfx_watchdog+0x10/0x10 [ 808.769073][ T30] ? __pfx_kthread+0x10/0x10 [ 808.773684][ T30] ret_from_fork+0x4b/0x80 [ 808.778133][ T30] ? __pfx_kthread+0x10/0x10 [ 808.782734][ T30] ret_from_fork_asm+0x1a/0x30 [ 808.787530][ T30] [ 808.791940][ T30] Sending NMI from CPU 0 to CPUs 1: [ 808.797775][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x21/0x30 [ 808.848694][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 808.855604][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00308-gb31c44928842 #0 [ 808.866124][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 808.876200][ T30] Call Trace: [ 808.879493][ T30] [ 808.882433][ T30] dump_stack_lvl+0x241/0x360 [ 808.887118][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.892318][ T30] ? __pfx__printk+0x10/0x10 [ 808.896914][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 808.902913][ T30] ? vscnprintf+0x5d/0x90 [ 808.907263][ T30] panic+0x349/0x860 [ 808.911185][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 808.917379][ T30] ? __pfx_panic+0x10/0x10 [ 808.921790][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 808.927163][ T30] ? __irq_work_queue_local+0x137/0x410 [ 808.932727][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 808.938096][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 808.944252][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 808.950434][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 808.956639][ T30] watchdog+0x1033/0x1040 [ 808.961092][ T30] ? watchdog+0x1ea/0x1040 [ 808.965538][ T30] ? __pfx_watchdog+0x10/0x10 [ 808.970244][ T30] kthread+0x2f0/0x390 [ 808.974354][ T30] ? __pfx_watchdog+0x10/0x10 [ 808.979063][ T30] ? __pfx_kthread+0x10/0x10 [ 808.983656][ T30] ret_from_fork+0x4b/0x80 [ 808.988082][ T30] ? __pfx_kthread+0x10/0x10 [ 808.992681][ T30] ret_from_fork_asm+0x1a/0x30 [ 808.997463][ T30] [ 809.000774][ T30] Kernel Offset: disabled [ 809.005145][ T30] Rebooting in 86400 seconds..