last executing test programs: 11.661054762s ago: executing program 0 (id=3482): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x36, &(0x7f0000000140)}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x771082) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, &(0x7f0000000080)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc1942, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 10.856966331s ago: executing program 4 (id=3486): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, 0x0) socket(0x11, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb0000060002000100000044000300000000000800", @ANYRES32], 0x64}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x14, 0x51b, 0x70bd28, 0x25dfdbff, {0x11}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "0405fa97d7a9f74823"}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) socket(0x10, 0x80002, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [0x0, 0x0, 0x0, 0x11], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r3, 0x8983, &(0x7f00000000c0)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x230201, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 10.742026266s ago: executing program 4 (id=3487): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x100000000, 0xa0000) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2000) splice(r0, &(0x7f0000000040)=0x46, r1, &(0x7f0000000100)=0x7, 0xfffffffffffffffc, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$audio(0xffffff9c, 0x0, 0x80, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x28000600) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x8, 0xfb9, 0x8000, 0x2, 0x31, 0x4, 0xfff, 0x7}, &(0x7f0000000200)=0x20) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000005e40)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0xed1, @empty, 0xfffffffe}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000000340)="07ee12d0ee3b081a1363559d970406e65333a49817964225fd7902366c501898470c6b47ba1f7260e5677dc8f20df4385cd54032659f77f845795a7fee6c5ca2a26017860b5c38d024b68b5e8a1150c5b99596b06c06908922b35738b827631edd6aa6d791135e34e6d14435ee3b26dfc90298d292145a76b1c3003e512e9680a485a6b79bba0d18539e0bcbe6c4703a1bfc10ad64cf231775fd04bd20277f050c2f2e66b5c485c806363ca49724b27f", 0xb0}, {&(0x7f0000000400)="54c68bc921499ec48ebdddf84d3cd676d49b4db5e2a22336e679efad79945e5d92ab79b810cc29fc084bfab8d0a51506b95a64ff65cee38fa8ffd549a23d08ac98f81a1468d3c9e3dce408e9d4557d023ef0b5a898350adc621c888d8ff127257aef1590bbf1ce674cc778c6457cc05f1c20f0", 0x73}, {&(0x7f0000000480)="9535f09992f0bd968394f197b9d1b8e4ace256871e9e46359d", 0x19}, {&(0x7f00000004c0)="432ad7dea6a3c16d85c9932fc407b0b0f9a3871ff66dc4582c99b67224a2a1d0d6d528382808768b5efbdb616badc6ebab32c64af350794c183f1e13761754bf6cd064f03dacc37daf66e62a21ce0522d14f8203b5519977458be5b729b4b1ac5b142316fddee4e44358e74f481f4e818b93f4b108f2119b74570d1d965114badce73db5c4d650873d1cb33093834bc277227233ad31966f4defdbdff4d8", 0x9e}, {&(0x7f0000000580)="da94cca9b76eceb47a602230cca2883ca954c3550b42d7c4a918eda591876dad7214e003ec37eedbbd41f368fa01fbad26d6baf7b4585010561812abb12126cf", 0x40}, {&(0x7f00000005c0)="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", 0x1000}], 0x6, &(0x7f0000001640)=[@init={0x18, 0x84, 0x0, {0x1, 0x2, 0xfff9, 0x3}}, @authinfo={0x18, 0x84, 0x6, {0x9}}], 0x30, 0x4000}, {&(0x7f0000001680)=@in={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002a00)=[{&(0x7f00000016c0)="7c7a589d5040e0", 0x7}, {&(0x7f0000001700)="3cdf30b6bed883972b85c0189afaa60098fc274965e8bbe1e487eda00cfa8d32db38dca7b0e953c253a266a746c843178d05911290faf8e5acd0dc49823b92b271aa212e39106d401b92dcfb68e1f25bbc97efbe2cb200bee260f6e431cb9d63f67ab0ce19969954c444f3bec55814d263ebb3c1b07bc75823789c466e8225a5975be8b8aa142fee4516661d61bf7f667f7f2452ced5f61529164f267d21906e2a485bc25bb86b3f823a18d71b43ce3ca46a3d993516046eb7746966f15bce3d3b6c2ab4eea63a9b51d671032af6e2f8c28b757ffa4d0abd1fca8b9029ddc15942918fe26b704043a43e4481596804be8fc11168a22b08f27ef45269482a4180b3c7e4ededf2b69fe9dc4480ea4580862d816548f518a02283c263f6327d5bbe11c63dc8d13865824805ac276f5944970667a135a68c1732a889a9adff2d7af8e3dba20415470ce385730e75cb104136f6ed983a159a593777570e0c0ea0aca753f1fc4e4f08099551647ee5d1a9156454fb5ccc9479cdecd056a2e4745c4b2eae67b9b892667f036d3027ecb0c9bdf10ce540d2e744ad7955727a7993afd03905dd210df72eed441882b59aa7beeefd875e58e5ceedbda3b249947fd9c3f9302753b43a6a3781e7770141468b0cf529d37ea7dda61768f71a3a6e997cd1500fea83b604cce013516c3dd84a1fcb921305a7581ff46a594ab556b4e3b727be134443e39bd5f710574a081c24a9a8c52bb56c6fead97d2356fa079698a3d5118fc900a3cc7a6b2fb2e9e103df4aa4ba6aaa8a2530fe6c2b9ebbd8e0c1a67a3604e400681609cd0383dd378e150a460a6d365aa4a90b91c16580d5b4ef70aeb27e1527a35613993184bc386fa806b5a144a47b3b62360beaee1d3e048bdf5edcf09c30a20db5e73b208f37fde9acb874d934407949b38a4c2bd34a79aa27437c2f9c2d1479e35484c90b326de35a850a8cd0f49b4dbff7edd0a40f66e6654422e577382c727c684282e8a60759d7ed955d1cda1464b6318fa45f1447b0c8b1b28d85bb3652f2d605ad0e8158d058fc38cf8f0fd584dac2f63c68bb64556caf39bc5b606ab3d85fa9db85ce2dcf268664637e82dc18b2d966c7cbb46f0d7f77e60197e0205e901318742c6c0ac08e85cdd41a3f809d1a85294e7d75722cbd0cfefcfc3a6c91a03fafd0dcff593a29ab39c6c6f6680b4211bf81772fa0d63f4bc7bd341b48919cc230aa41c5569f34f034dfff7a6f996fb3bcb447202fa2266173b30be1440c9b9b8d33f3ca6574e424f6e2583e66499acc1ae4aa38e4fd1726b157b5d6448e90bf6ed19fe1c045ba6879731c346829143c8cfb201a3e7c84072d5e7dcd42eb56c98d3e3423f437907ba876e1d404c0ec495512d98b8a7cb5231c44c4d593a7cb3534fdd58700f87986a3be72c58e1d96a04f5a1f89faeb8028353dadb11ccdb3c7060fbf1d550b145aadc11ab44639a096035c25194d069220b68bb732bc465034c0dec90dfafb1a75a1ba7f3fbdc675f90b32ae9b068792de95b757d1444c7e2dd7958c55c091f74f1f03a4555a60fbfa8a642690e31161e8be7d09a9923d0352680a8a93534a7f05767d2aa405210ebf192bb2d85df974467ffedfa347ea059e66a6964a007946e0cc1e3d31114378c63a480bd48b0cef1b29dae2c1556f169d4ff71c384eee442194e8b2597f50205125efa753d030f46ce68e9ac08b7bc345c0493490c24431264cd1dab93079f640b7aa7c38aed4966c6b45a784e1b9a8276ae44ad674373429fc50843d1f4632186007484f31273bf6b53fec863f71721a695a8d8d6c55708ab4063149fedbc5a197ab1e2604ba4f363f24f94727c2a2e218eb022d7324f4287dd366cc977278dfd81ff211bdc3accc022776b591b09c7ba619b4066c5e83caae25c62d561e0e756a3f50f0ab2c41300c7b630f0832bfa4d60f3253600a97c54b3dffe6c24416691a34bef9a1d3c265060e5d4a02963527344598bc98ec7f421a9a3d5f40616f2eede31b0976bd8644dcc958a9c2b28227971748650eb5b728e1efd04bcd9780d61ec726bd0e8e3a0bdfc803faeb1c1250fc66b4fdf30520294ce6090a59fb2f80fa07696332e9a6a5d957b31ec5cb158373aa74e2ad93f88c4fc4840dcd7b86c20c141d2fd48b5de681b126c9ccaf06a0e9ffe90895ec90b569d27454b053adfe168974cb0af15c9ee932d3743454a452dfcbce135e9436f8ad20f8fd07130cf8f5f1778daa2947106c42a9f97362a8acddaea6f2093749508b75ed04d22850ebd6c6a2aef2ec86b8075cd6e2fa09e61484295ca5fbc086eff22730a948a9c8c301fc297f5af22a4e50036fbc2c1279d747e441b9f4bc486420864d1b11788f4059e2e19e442acb15f9716b82acbf8f46c37939db9b6e0da547811eb209bdad0d8bbda72c766f9e76a6eb996389d0e9e9e0a85a7a078d93b088096d081cfadb2b7caf3e11f6674ba0272c8950f45e99952691526add78c972c31788c5613d9150cc7f7e00ef9cae22673285d97ce418d6b9284c6b1e18adf1ce330ba619ec012b8f9053ba3889587743049200d074996e474b1937103c17a970c3eb04ed2a955bfd5c047ce7f401a13e54a4d9b7af3b76dd40c8ebc4df534460f180c840a57a09b425fed819452dff8f78fc2c764443b94663540f0462773bbf39a5d5bebfab7dc0a34f60604bf7c613eb6e576ceb8ce0ae03299ca44e1ba821b7cf062fa4f251f639f5ff7da1894a8b963bdfcbadf336590ee94efcc7f47a3ac09ec2a0ba35f9851369e508dd9f1921ab9027e5c962831dbe1008360d34e9b3a6d15ba7a039041d9fa1fc4ec9f39abfe6546f9f51210f71146bd7fd76a9653a658ccab1638d8779429ac92763bda63b1cc04b78e465286715e48cb6a6c59011387d5370fcba369de0e55bf958248dbad12df6c22b3dfe92438d46bf59b2a55d4d0eecfb00f49476b1ae4c21b6e1f10023e1b1cf03ad0806713fb20fe0805066c36172553e72478bfa6f9c7722c5d4f587ba4c77464564099d2e93c4a9fa97d103cdac8024435a43bb2e5e016101606e93add92962118a498eb6adf59644a4e70ce9756a78e382d22690d4c5ec5e87eacab04369d851cf009d2cff37c7f115c0789b0e071c99cafdfcbcdb3b8380fcd611a398cc86cfb922e2b965a58fcc91405154d9d0ad8d637f463e6afa605b85ed2363fe6d207781e95f5996b9962d13200d0165e82f917bf253b2b002c88ca3d6a6e7388a40aa5000b31e36373509042859ceca0825f2f1e60f415bfb541c6b7baa9b06235ae69bdff85bece88d09ad9627da4af19e57b9add05484ae0bf9dad1e69d024b95951b26c81b8bc4ea29a50889e943ee60537a8884722e4ebe02e783ec9cdd566d142b70d7668eb525149307002ed4397871d5f55c57661c1d203e9b63039d211a928aa55cf33e9a180a71235a979b04bfbe0ee74e0a9da1f63882f98be6a125a6efc1c29b1155b31931bf786a92f0e8e4e105f5fe76464564c6808dbca511534bd5e02d510cc13eb2bf3f357be6615877048f5d71431ab09c55df7caea8c0c45d8e3b67a9e3e3b915097d3cbc2992a360726ebbde5fd63742e1b8aa5cedcd13db66eb89dca1af77f742c663756888f3bf3930646a982613d64e2ab0b881b3946ba80faff7177768303ed0124d0643a65c5f033a81f5a9b6dc27c893eb97799b12aec8ce19a852fb5870333f5db14f66d81c0f5dc19143ef819164c1c9d561285389ba8f6c1128d5134f1320003f0dda10a4b20c553260e6dab2ce6435f7f1007777031883a317bfcfc27e8ba950ff9d15af083b53a814f57c0a0b95050b669fb2c7c48027001a7d22479f465afd3bdf97ed7bbb3238897778ed264633b70a372e48eaa323913af03ffc97845a69263596a5189b5caf0d2240132dd3e35510c469014d1e131f38b1f5413ceb66241339a8e06061f77da9cf179df347edff936af430730be7de969e2857a131466af4e9ada563e846b7dd33f7f319d8070d340ec3795c121ecf3db5df688f7b0491526121ce2856ed6112d8c4b62bf3754b74641ede48639417ae40e3f048d695507fa92d8ea01c81c9aa1b87fb47da27963b8f11291cc27bf7c978f886b9be9094dd861a446fc9d0c70d7cf27fcabebb076267c0ab84aa67421bedf08749f63e7fe890573124d46d085122b8a9936429ac9b943330d5d157df6dfe1e2213957e49f9c7f22c4f49f3554ed97f0aca8be23854a9f4c35d5221c0edaf8b0bf5277507f183a8033e47fb8aae57117e98fb88f88a40c8214a758e9b4a252cb137876a7f59cf8378e99b29b1c12fea783ac8d20749b92969a2fb734d30c200d7165edadde8774bfa2571822d23fb64a9e45ed657be40bf8dd3b4f408f68ff2372994be6965ab1252d6ce553980da0bbee53e24c556afef5d35d13ad11b28e141f2e71d08eed4d68c9927c26b4ff0219c9aa4c362645b0f19177cbd3040a25e4e5fbd42af89fac9418d875aa20aa0c72336713f4429482f2af466e148303ebbc29117c5feaebfc6c4e6059f11f8f715b91b348eb81bfb3e20ff3d7dc003a993ece9f115781274b0438e96639aceef9083e4dd6adf724d50adbbbc5b1b2b6228932acbcaef13644da6cfb38582a7c7615a702b1e660768faac1cc1ea124a7d198f0a414b8795a0efd15c9d1ea290c73038473c92d11e0c9748f8109c442fe47789be95c60de6e1a7a425d533fdc4a9b0271d4915e41417c0369d4903bc1d63f7fc2d3ec7fc8d54e5d7282f63012a36a2200b0deace2ecfad6071eaed8eeb751b48aa4b6337feff8f50bf2d4fe3a032c5d589dfe7b072e3044a98810558097747c3cde00fb84c110172025e349b643895772667cb77be4c732653ab569857e908579f3b0392a54b175781e2c8f320f5f4e6b506633962cc9d0f287a1d4e51dce75e8fb1850e614989df3c800628db8ba5dbc610875107239dcd05098d2c13c7764941747147668c92c0778c8468981de1f352e5d32d57d410d25137f5a16f984fab50aeaa07f65e991e8189c93c350227adf433eee71bc9d1c5a2b47d8ca1aee943cdc6868c981138e792eb66eb1dafee4215a0ce1ab6daa405f7479621ac50b4a54e93500668bd1afe7d99d3b2132fe28ff7b536513d56752f4db7caae2757e8daa8758d449db14897fc9a9cafbdd5ed56107c52acf12769324b337b80a6a109db3364bdcf28bedd2abc1aaf29536e202c21a438cdf80b9ed526f6662b2a5770bf0ce5d03123d19f4af4a9e5d67363a8ed95c3005a4195a84d29bbb3e31b0236e7cdd30e510e39593736eae56c3e737882025214e96a7063a15cfab147ca39da049809bf104bd1652a5460ab97cddaebadbb81b99b9095b7862758d4b4a753df730b18e482ec1e99f6d7f148ee9985516bdfde66c602357e985bfe49cde6c9ef109f0aab005ccc0c5f5c064e4c7b3231ce2037a5f8d9e9bff4a3ed07914d4543190ddf90e17f048174b97cc93ee90eaa25d06dfa576e626937bf68ab1d302dbeecd1433cccf12d27d2cd6c5a5b75578f30163b47ab5034fa40a798decb93345fabebd78a398e99cc8f087f313f2956c927254948d2e6e8f57b74bfd6cc8d4b6a4d6be8a0c622dde3c7048af89161cd777bcdf6b3fe00d0311035e237d04b8eab5239f8fbff5ad1e5687b799f5416e1d8c0c6b48381351383f1b83c43eee486364663120b60fa6be265009095157f5fb1006b63817e5dbff7b8d6abf90381d6328ae8bf145fe6a8ec3968ef4cf5a99b3995796e51", 0x1000}, {&(0x7f0000002700)="2dc171f53f99ca81e3e01c64edc8108c14bb19622625598ba4b621265bb324f99a1268e9326114f27b7343927f0c856ca936802756a0ae2e3995fee10de7b68fd6d2abae1e39d639b9fbd37b75f1b60881ebc089a4e12057dbb21fbf2b5896c2f2c9874af8fc095f9b5df69dc7dfbd891b8c2c0e83fb7a8276744cb9f14114339fc3d69ea1de90defc", 0x89}, {&(0x7f00000027c0)="4fb18f01e672144771eafb6fdb6203a23add1c980c307ecf381fe94aa71ff15a3b51b048682daad191f5a539e5bccf8ca5ed27c304319bf6f945f520bc0b248484ac40123e3f0b6766975d05b358eb9bdf036c9941095b66bbc06cf01fbde53c94a44ffc0aec62bc816c6729c3c74de91a55f58ff5", 0x75}, {&(0x7f0000002840)="d367f8e082076888c0607fa8c064ac56617e0d4304e633304e5739", 0x1b}, {&(0x7f0000002880)="b5caa9f05f338f3dc0e137a7848924ef731481003cff9f37f5fc2d10a13df2d18f55dcfdf48ea244ade363f9054f85aec3f49cb8bf27a499da3a42772635a1dde90a578aaa10687abccbc08725a3214ecfd597742e3b2dbb949c95a1c87c7dbf7a349fd141bd9b8454dc9b704595a758", 0x70}, {&(0x7f0000002900)="8aec3b03cc86b5cdbe13f938a6dac065a118ba5caca6406f2b0b436bda9dd92aae77787abe5b38068b86ab890fc6889c252a05e4d09359c53486f3530cb1cd36239cbf48e1546d566a94358eb2ffe234f3e3c7531e418c6102e04f60469354f81d8de46becb4993b9575800d3fce998ccdfb127bfdc048e87427daf7708f9470ea48d0a149bcec0af574039979a0ef454605438a67f83f9148c31cd82d014ae029501034fba0415f95667c42fb9a6d1803d66e8987f6095c13b88d765bc1dc4b86992e231cb3ff29b2833311f7a3038e6739a208c1fdc70352033bf0ba", 0xdd}], 0x7, 0x0, 0x0, 0x80}, {&(0x7f0000002a80)=@in6={0xa, 0x4e20, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f0000003d00)=[{&(0x7f0000002ac0)="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", 0x1000}, {&(0x7f0000003ac0)="50a83bb234ac9116008ccbb7ec2788e28f042ba0a8620c908f88a5837684018110d708", 0x23}, {&(0x7f0000003b00)="b3797f9f9b7e8ea1faf8a62c92e1065c75c530de75158efe84fad9df33271c8a3c8ae2ec85968755ef16b9d8d995a1024679e2f71b3e556a3f2242257f5de614e9b5fa71fa52cb79d0abe8bcd6d69d67adbf3d5398e739c2c1fbb3271dddb466f228e51966582d0c7be9e8fbe53baca101b5ff8ab0100c7f743d7e89e5b005fe5e85c70bad69", 0x86}, {&(0x7f0000003bc0)="be3eeb42e2412648091d154b801ea3b3b9dcebbb768572d38fb98568689f3ff89089f1514a13f4b2fb4e2d419af99a03d0ac2661aab501c82c2b101c3cdc5ad3e7341264f973633b7f5ca365ce2bb732a44ab0323a658d9ea661afd9044ef2968547e9", 0x63}, {&(0x7f0000003c40)="280a3716e0ff14c75de67dfc63351c9a65b926ba628b27363060a2d482ab61278e9fd01205ab93defa81d11f05a42f2235b00bf72516064814a6d179bdb4bf8156568ce7f7abcc10872e7d70ce783a0af6a50e26c701b0894b233005f3b73c35345b0bcc1cc14c6b0fec01e09f435d03dfe32165f159e594f7057e83a9f28005b4e85256c7fd190d06e54dd395b14de0cfae32d219a787407987f2d15d85c8297b2dc87604084f", 0xa7}], 0x5, &(0x7f0000003d80)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010100}, @init={0x18, 0x84, 0x0, {0x1000, 0x2, 0x3, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x64010102}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9356410}}, @authinfo={0x18, 0x84, 0x6, {0x12}}, @init={0x18, 0x84, 0x0, {0xfff9, 0x9, 0x800}}, @init={0x18, 0x84, 0x0, {0x2, 0xb69b, 0x4, 0x152}}, @authinfo={0x18}], 0xd8, 0x4000004}, {&(0x7f0000003e80)=@in6={0xa, 0x4e23, 0xfffffffc, @private2, 0xa}, 0x1c, &(0x7f0000005240)=[{&(0x7f0000003ec0)="79b46fe86c126c5719b2af98f39869be819b6e219c17863497cc4b78358bcd33070eaa19c3e9addaaa689a50ee6508922d738049ba78a513ffdb07e7e319f2df5db6d00e0b423fcb3edb5e856efd1c9e25ac2a525027489029ee58fdf17f9bca1751ba6cdc133128397157d3c9953afb6a0e49b089e4588faa4e60f8ce7cfabf639905d3ea21015cfcba21a5d6791770fe633260947b7a14a0f842acbd97f8c8dde758bcd196f43d184f75be14fa840cb4c5a47925e410976908ffa1c4426d6bdec42a3ec4905e6e0b4567ce4b0f5e9de9f389b3f8767009db3c93c9e109cfb5d98fbbe031898b1cf7b2157e0811c8edec2d7d540b89", 0xf6}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="afd148f81bbc7264fee8030e67d94afc97e10e1d7394d74c61363517f93ea0b7ed43771cf36021d5e4074f33b6e7058cde8a8885af954d47dd60c2ac2a10c18a15f094b0d9fc5a404d9ad00a12786efacdb16ff785bea0ea8ef048a0cdc92e45c34f5a2b53abeb5a19e6295f11f59b6a7c66579412d086c004bf43cb036df6eb96bf4635d4db3c09bee99fece5e943477d9053c9e18d75befa7061ea14049e1a6e24eaaa75acd658dacec4594a9959dec9c12f271923db710cae182548ef2bccfea23fd3746a42dd31c8", 0xca}, {&(0x7f00000050c0)="76ad2b39b8319e3afe2f838e08e79c100e79bf20d9f205beeb6a7991acbcf5efa2e7c3fdccd50c2cb353b9bfb7260701030869968e0506a83aa0c354e850a3f9aa84890d1a0625dbe828556191838ad1d5156941b5c81b64db17296b694b8665f040a52140e9bf436a911d62b8e0d9ac21fe467524aecc09c04373f277a543d43609a1333651257c04d1e50b862c8cacd72a29317c6354ab63dae2e565327db673d9da3009858a551f86d5b4bafe8a1e83a27438b2b6e3f8134aa73e6cb523195659612fb203d616", 0xc8}, {&(0x7f00000051c0)="3febd00a65a5683dbcef067ae351d2cd4e0e2888cb2d5bdf19a401ecfdb4ba67c3374aca87c9d87be50778c3420d2385b93b8f90c7cc94cf19fbca3b30f891727713d4246c7e4e7534ed5d85650209f46e4da527f223cdd0065d906705bbe3a8ea4c7b1961975252fb2b9b822e354eb135feb07ea879e4c3", 0x78}], 0x5, &(0x7f0000005340)=[@sndrcv={0x30, 0x84, 0x1, {0x5e4, 0x6, 0xc, 0x2, 0xd9, 0x1, 0x10000, 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @dstaddrv6={0x20, 0x84, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x8}}, @sndrcv={0x30, 0x84, 0x1, {0x9bd1, 0x72, 0x7, 0x9, 0x7, 0x7, 0x7, 0xfffffffb}}, @init={0x18, 0x84, 0x0, {0x8, 0x6, 0x7fff, 0x4faf}}], 0xd0, 0x1}, {&(0x7f0000005440)=@in6={0xa, 0x4e21, 0xff, @local, 0x1}, 0x1c, &(0x7f0000005780)=[{&(0x7f0000005480)="54c7689ee44af0bc8f502a006d0ba8a7e465c148dc85af27b48b9df8f52af1c34a7afd5598de8b9ab2d8ce82a2176d8f91728417bbf5631fa98cc875ef27bb5cf6e17de54627dfeb04fa5ab5048b4e9db9767e50cc9658d7da3e336d966c0e596151c8cd5f85e78cdf1f80114a6a3742e0ee6a397b6be481be3c7c4bd07a27e230ddbc1021fe8b597dfa68b0fa1de86b70c8f3902bb2e3e4f9d233b5cd0463b4d9f05fe6812720b88c3350a720ee45f53eb33df6bb91d98c45197509cda312a6f909397687448ee62a2b61b0065ad5251f80af77d2e9eb129c9c9256d693df7ff3fe8a1a44295efc469f6fc488ee3b04a3284bd390", 0xf5}, {&(0x7f0000005580)="b5d61500d58ac8315fc1473a592547f037c767bb3a18019dfaaa39d1fe5fcf4c7cdbae2f8e014cbdc8ed861dbe4d3c7d3ad8c94bde50ca8150994219bf00830c01ce89775233abaec3227fde8b0feb45b82fbdbe24d0042cf2b28b9b0175f31e22d29af851f3dffc4dde4f735e335bdcf17ef47eba07f492cb80ee7c4023326956f38fee9432bab74d053d9e900f7019bd9c9411cd6f76dfc1e2de5e1114107e302d708087", 0xa5}, {&(0x7f0000005640)="f6bf5714280e0e72f7a0c2bd052dd53f187af75b04daf0626f35f582dfef620a6ffa0e9e283b2a6a139ac5a5c4a493b8081df83960a0704c4211329c3f723df7675b366f6858fcaef77ab33bdb5a00dd25d6158576e8b72372c9bbee596b74da73d1d0381999439887a834659bea84cbc7cf851ec6f687edfac95a676809f2a09c0970b845fc4e71c183e5849af1ea45478db51429db94959ec07bcd3d58df", 0x9f}, {&(0x7f0000005700)="7e0c6dc80d002e76d84daf659c3f4b7cee94220890be0be308431b15c659f35b516fe6f231836e4cd20803f99ac3610f262cf80e5b10688f76eaa9abcb3e0dc9d5875bcbbee4412575320602c14b29d11df894f42e19a68611833988cb6cc13fc72585f0ff15798a", 0x68}], 0x4, &(0x7f00000058c0)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x0, 0x8, 0x1}}, @authinfo={0x18, 0x84, 0x6, {0x2}}], 0x38, 0x10}, {&(0x7f0000005900)=@in6={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000005940), 0x0, &(0x7f0000005980)=[@authinfo={0x18, 0x84, 0x6, {0xfff}}], 0x18, 0x20000080}, {&(0x7f00000059c0)=@in6={0xa, 0x4e24, 0xffff2b96, @empty, 0x101}, 0x1c, &(0x7f0000005a80)=[{&(0x7f0000005a00)="bc785c83", 0x4}, {&(0x7f0000005a40)="0f39f56ec3d64377add77897fc0193b647b969f9c886739e435b1cb2c1032d2c4fcfb53eae5e1d7b610950b763b1e72ce579358b95e831da553b732c", 0x3c}], 0x2, &(0x7f0000005b40)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x26}}, @sndrcv={0x30, 0x84, 0x1, {0x17, 0x8, 0x1, 0x5, 0x200, 0x800, 0x5, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x2, 0x9, 0x90c1, 0x6, 0x7fff, 0x10, 0xfa8}}], 0x78, 0x841}, {&(0x7f0000005bc0)=@in6={0xa, 0x4e21, 0xc3, @dev={0xfe, 0x80, '\x00', 0x17}, 0xfc}, 0x1c, &(0x7f0000005e00)=[{&(0x7f0000005c00)="ed0e01d8a1098044ef81b0c3e12c24409b718cce8e8ad02aba2862678e99d8734a862f537837939e6b7b0e98ff40f57fd42ffd01f496da4aa62dd6f779d1e75c00e50e2da158f6a6e1aae54e2741491282d899238516db53d13646962827f043aff80fcf3b8637466460444a342890120bc9da4b0b1c633d2e769f220fcde3b1f806444fa76d416707c88a8a8ceb9e0b61e775dcc5e32da60f06624b0c177fd7a083fe20ebbd26", 0xa7}, {&(0x7f0000005cc0)="edbc1c1c7d7537ad4a6541", 0xb}, {&(0x7f0000005d00)="582d1378aad99156c76b4114eeff2ca2c8ae58e3e7ea249e157d33af68d648ab0a56d10517c65989284881f3460a81affd335861dcbe1d3daafd23c537851dcd7bdfd4ccc0a5d0ef325f6b33db40e419d04a7322242171d2b85c63ee1f707d4bfd9625bd12ee2e50ceeaa62d6046822c3595e20e24f9aa73cec475ab9e3b357c91de656322fdd3b2eaf0431928f883", 0x8f}, {&(0x7f0000005dc0)="46776ec0dec0345661ebbfa6871f71f77ed88d067d41332e27fe", 0x1a}], 0x4}], 0x8, 0x4050) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xeb, {[@generic={0x8, 0xa, "09df168a00000000"}]}}}}}}}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) socket(0x80000000000000a, 0x2, 0x0) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001030000000904a800012d250c020905a102", @ANYRESHEX], 0x0) 7.728814838s ago: executing program 0 (id=3492): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1b8b0200000000001c0012800b00010067656e65766500000c000280632b0c226bb396"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x102000, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000300)=0x5ecdabe2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000240)=0x4, 0x62fb6d2c, 0x4) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) 7.156048308s ago: executing program 4 (id=3494): fstat(0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000239a74e409904101079270102030300022c0001040640e9090480020215305a04082402010502043a09050502ff0305040509050e030000050700"], &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0xfffffffffffffffc, 0x8, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024}) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = syz_io_uring_setup(0x121d, &(0x7f00000001c0)={0x0, 0x80007d10, 0x80, 0x3, 0x16c}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r8, 0x46bc, 0x3, 0x20, 0x0, 0x0) 5.617018812s ago: executing program 2 (id=3500): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d80e00000000000000010902900902000000000904"], 0x0) (async) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) (async) socket$inet(0x2, 0xa, 0x86) (async) fanotify_init(0x40, 0x8000) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x42, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0x7c4c, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f00000d3000/0x4000)=nil, 0x4000, 0x2, 0x40010, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1a, 0x2, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=""/208, 0xd0}, {&(0x7f0000000340)=""/72, 0x48}], 0x2}) (async) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc000000000000000000000000000000ff0200000000000000000000000000012420892f0000"], 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) (async) r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSKEYCODE(r9, 0x40084504, &(0x7f0000000140)=[0x16, 0x5]) 5.324967235s ago: executing program 0 (id=3501): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40142, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000480)={0x4, 0x5, 0x5}) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x20}, 0x60) (async) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x20}, 0x60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) (async) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000200)={{0x2, @addr=0x9}, "8f7eb5112f898f635de9626c9f2a4a0e8623b743095107729eae0b6d635827e0", 0x3}) r8 = socket$igmp(0x2, 0x3, 0x2) fgetxattr(r8, &(0x7f0000000000)=@random={'user.', '\x00'}, &(0x7f0000000040)=""/92, 0x5c) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.216941943s ago: executing program 2 (id=3502): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x36, &(0x7f0000000140)}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) socket$netlink(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x771082) ioctl$SNDRV_TIMER_IOCTL_TREAD64(0xffffffffffffffff, 0x400454a4, &(0x7f0000000080)=0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r1 = dup(r0) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc1942, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x80100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x5e, &(0x7f0000000300)=ANY=[@ANYRES8=r1], 0x0) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4) 4.41096504s ago: executing program 1 (id=3504): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0xb, 0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0xa4}}, 0x0) 3.978068184s ago: executing program 4 (id=3505): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x9}, {0x2, 0x3}, {0x3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x97}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x400c0d0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000040)={0x20, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @uid=0xee01}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYBLOB="00000000ff148001020d42540a00010076286c616e"], 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e22, 0xd0bc, @remote, 0xfffffffc}}}, 0x3a) syz_emit_ethernet(0x38, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @broadcast}, {0x0, 0x4e20, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x9e, 0x0, @void}, "1475026a143eea0125d4"}}}}}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) read$FUSE(0xffffffffffffffff, &(0x7f0000001b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x0, r7, {0x81}}, 0x18) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000100)=@req3={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r5}, 0x10) 3.768987697s ago: executing program 1 (id=3506): r0 = socket(0x10, 0x3, 0xffffffff) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x82040, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x5, 0x0, 0xd000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0x4000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x27) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="0000090400000000aaaaaaaaaaaa000008000f0001000000"], 0x30}}, 0x0) 3.599544879s ago: executing program 4 (id=3507): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) connect$rds(r3, 0x0, 0x0) r4 = syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f34, 0x400, 0x200001, 0x3a1}, &(0x7f0000000000), &(0x7f0000000140)) io_uring_enter(r4, 0x847ba, 0x79c, 0xe, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="0f20e035200000000f22e067660f38810ac4e2093c000f78d4c6c100ea0b0000000101c4e17d283c340fc75ac73ef20f06c4c2d9b82d33000000", 0x3a}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r2, 0x3309) syz_usb_connect(0x1, 0x5d, &(0x7f0000000140)=ANY=[@ANYRES32=0x0], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 3.574787936s ago: executing program 3 (id=3508): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCGETA(r2, 0x5405, &(0x7f00000001c0)) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0xf000, 0x3, &(0x7f0000009000/0xf000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x240001, 0x0) fcntl$setflags(r3, 0x2, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2a40da, &(0x7f00000010c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}]}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000800000/0x800000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') munmap(&(0x7f000000e000/0x3000)=nil, 0x3000) preadv(r4, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000980)=r0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) 2.936913163s ago: executing program 1 (id=3509): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x9]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000480)={0x2, 0x0, 0x1}) close(r2) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x2000, 0xb000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x3, 0x4}) sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) 2.925399694s ago: executing program 3 (id=3510): r0 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = fsopen(&(0x7f00000003c0)='proc\x00', 0x1) fstat(r1, &(0x7f0000000400)) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x20009, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001540)={0x2020}, 0x2020) 2.699094554s ago: executing program 3 (id=3511): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xd, 0xfa11, 0x6}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x4003, 0x11a72, 0x3325dc}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/5, 0xffffffffffffffc8}, {&(0x7f0000000040)=""/64, 0x40}], 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10001, 0x11}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5d9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000004}, 0x2000041) close(r4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) unshare(0xc040400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4000000, 0x20010, r5, 0x6) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x1, @time={0x10, 0x3}, {0x47}, {}, @raw32}, {0x3, 0x9, 0x0, 0x0, @time, {}, {0x0, 0x5}, @raw8={"272be5806cd46d7b9ff797a0"}}, {0x0, 0x0, 0x0, 0x0, @time={0x8000, 0x1}, {}, {0x7}, @result={0xbac, 0x28}}], 0x70) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000300)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/sockstat\x00') preadv(r7, &(0x7f00000003c0)=[{&(0x7f0000001640)=""/4108, 0x100c}], 0x1, 0x13, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10) 2.4617098s ago: executing program 0 (id=3512): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000001000000180900000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007100011800c000100636f756e74657200741500000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004815038020000080080003400000000214000b80100001800c000100636f756e746572"], 0x1608}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002000)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000007100011800c000100636f756e74657200741500000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000004815038020000080080003400000000214000b80100001800c000100636f756e746572"], 0x1608}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 2.117216641s ago: executing program 0 (id=3513): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r3, @ANYBLOB="000014000a000100000000000000000008000f0004"], 0x30}}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) socket(0x10, 0x80002, 0x0) (async) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) lseek(r6, 0xfffffffffffffff9, 0x2) read(r6, &(0x7f00000002c0)=""/22, 0x16) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.090946906s ago: executing program 1 (id=3514): r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x31, &(0x7f0000000340)=0x7e, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x1090, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r4}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x1038, 0x1, {{'sha512-neon\x00'}, 0x7f80, "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"}}]}, 0x1090}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096}, {&(0x7f0000000440)=""/128}], 0x0, &(0x7f00000004c0)=""/193}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35}, {&(0x7f0000000680)=""/127}], 0x0, &(0x7f0000000740)=""/23}, 0x3}], 0x400000000000054, 0x40012100, 0x0) sendto$inet6(r0, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cef7cff81d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1.49953232s ago: executing program 2 (id=3515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0xd6, "aa7816b7e38204d527c9c001e52d327b60521d1624943c7c565ca3487abdbd8362589ade38572245322f441a0d1ddb02b09cd1ab3e16e56f5344e94b3f21f31d4b3d97a45b07429c42aea382dd2b929b67f024846d1f15de6a2299158db7796a0cbf956d661adbb5cea65232bdfcc837e77659d0ca029b35110aea49dfcbdaaf1758b14d4fa381b87c24140f91facc4b8346a655fe586e0e35186fa0d54cdc4087f2469ae2d471ea9ef3b69df2381fd1027022398a35b73e3fc5bf4cfd3b5c5b3ea808679757d224d4d0ece1a554ce0fa3123ee70298"}, &(0x7f0000000140)=0xde) 1.044908925s ago: executing program 2 (id=3516): socket$pppl2tp(0x18, 0x1, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x0, 0x215}, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000480)=ANY=[], 0x10) r4 = syz_io_uring_setup(0x3280, &(0x7f0000000640)={0x0, 0x4e6a, 0x6020, 0x1, 0x40000333}, &(0x7f00000002c0)=0x0, &(0x7f00000000c0)=0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r7, &(0x7f0000000240)="021937b1dac62d545e8c118df600e5c48a853a2d0a00732f0c490f883722526b00c63dba4257107ad01a31c07f8a2ca35f12", 0x32) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f0000001200), 0x800000000000, 0x22ac65) 832.593835ms ago: executing program 3 (id=3517): r0 = socket(0x10, 0x803, 0x0) fcntl$setlease(r0, 0x400, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000004000a1", 0x12, 0x8044, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000000)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/185, 0xb9}}], 0x43, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 10) 324.900525ms ago: executing program 0 (id=3518): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000340)={0x0, 0x3fb88f66a48f5499}, 0x20) (async) mount_setattr(0xffffffffffffffff, 0x0, 0x8000, &(0x7f0000000340)={0x0, 0x3fb88f66a48f5499}, 0x20) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x8, {0x8, 0x7, "a7ea3163fd3b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 256.929354ms ago: executing program 3 (id=3519): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x1, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0xf4, "aa7816b7e38204d527c9c001e52d327b60521d1624943c7c565ca3487abdbd8362589ade38572245322f441a0d1ddb02b09cd1ab3e16e56f5344e94b3f21f31d4b3d97a45b07429c42aea382dd2b929b67f024846d1f15de6a2299158db7796a0cbf956d661adbb5cea65232bdfcc837e77659d0ca029b35110aea49dfcbdaaf1758b14d4fa381b87c24140f91facc4b8346a655fe586e0e35186fa0d54cdc4087f2469ae2d471ea9ef3b69df2381fd1027022398a35b73e3fc5bf4cfd3b5c5b3ea808679757d224d4d0ece1a554ce0fa3123ee702988753720566bb7eeebdf7cf3b4dc47fe10c594733c73acefab87e7a2dd1bf"}, &(0x7f0000000140)=0xfc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002700)={0x1, 0xd, 0x0, 0x5, r2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x6}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7}, 0x9c) 250.039167ms ago: executing program 2 (id=3520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000080)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x8000, 0x109100) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 174.778469ms ago: executing program 1 (id=3521): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async, rerun: 32) r4 = epoll_create1(0x0) (rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r3}) (async) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, 0x0, 0x7fff) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, 0x0) (async) ptrace(0x10, r5) (async) ptrace$setregs(0x1a, r5, 0xc, &(0x7f0000000000)) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491", 0x6) 120.798656ms ago: executing program 4 (id=3522): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x3}, 0x10) close(r3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(&(0x7f0000000100)=[{}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1020}, {r2, 0x1000}, {0xffffffffffffffff, 0x8050}], 0x5, 0x2) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000081) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0xffffffffffffff03) 119.455814ms ago: executing program 3 (id=3523): r0 = memfd_create(&(0x7f0000000400)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^\x17\x877%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xda\b\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\x00\x00\x00\x00\x00\x00\x00\x03\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x85\x1f\x01\x03\x9e\xc4\xe7\xd1ELhI\xd9\xf5\xcfk\x8a&~\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x3) ftruncate(r0, 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, 0x261, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4004}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa, 0x2011, r0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c00000c, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x34, 0x874fd42a7836ef68, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f00000002c0)={{0x2, 0x4e20, @loopback}, {0x60a, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, 0x40, {0x2, 0x4e24, @multicast2}, 'bridge_slave_1\x00'}) sendmmsg$sock(r3, &(0x7f00000003c0)=[{{&(0x7f0000000080)=@can, 0x80, 0x0}}], 0x1, 0x40001) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x4, 0x0, 0x4) sendfile(r0, r0, 0x0, 0x200001) 70.731ms ago: executing program 2 (id=3524): r0 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc02864cf, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file0\x00', 0x804, 0x0) lstat(&(0x7f0000000280)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x20040044}, 0x4050) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000380)="c0") readv(r3, &(0x7f0000000300)=[{&(0x7f00000019c0)=""/196, 0xc4}], 0x1) syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c9d1c40899040a50b7e70102030109024400020000000009049700010dd5ce0008240201000000000905000000000000000705a3f6d2"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f00000002c0)=0x49f9) 0s ago: executing program 1 (id=3525): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) (async) kernel console output (not intermixed with test programs): mber 28 using dummy_hcd [ 809.252108][T17550] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.265049][T17550] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.351764][T17550] bridge_slave_1: entered allmulticast mode [ 809.385753][T17550] bridge_slave_1: entered promiscuous mode [ 809.427299][ T983] usb 3-1: config 1 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 809.440443][ T983] usb 3-1: config 1 interface 0 has no altsetting 0 [ 809.447448][T15767] Bluetooth: hci3: command tx timeout [ 809.456787][ T983] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 809.468661][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.495866][ T983] usb 3-1: Product: syz [ 809.515852][ T983] usb 3-1: Manufacturer: syz [ 809.540887][ T983] usb 3-1: SerialNumber: syz [ 809.554397][T17550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 809.575671][T16016] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 809.587583][T17550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 809.622006][ T8430] hsr_slave_0: left promiscuous mode [ 809.628621][ T8430] hsr_slave_1: left promiscuous mode [ 809.635463][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.643544][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.659371][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 809.668331][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 809.712183][ T8430] batman_adv: batadv0: Interface deactivated: dummy0 [ 809.719478][ T8430] batman_adv: batadv0: Removing interface: dummy0 [ 809.751253][ T8430] veth1_macvtap: left promiscuous mode [ 809.757151][ T8430] veth0_macvtap: left promiscuous mode [ 809.787780][T16016] usb 4-1: Using ep0 maxpacket: 32 [ 809.900081][T16016] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 809.918163][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.944801][T16016] usb 4-1: config 0 descriptor?? [ 809.945457][ T983] usb 3-1: USB disconnect, device number 28 [ 810.381177][T16016] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 810.434920][T16016] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 810.459378][ T983] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 810.469654][T16016] dib0700: firmware download failed at 7 with -22 [ 810.639146][ T983] usb 3-1: Using ep0 maxpacket: 8 [ 810.657065][ T983] usb 3-1: config 6 has an invalid interface number: 25 but max is 2 [ 810.665274][ T983] usb 3-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 810.674333][ T983] usb 3-1: config 6 has an invalid interface number: 57 but max is 2 [ 810.683222][ T983] usb 3-1: config 6 has 2 interfaces, different from the descriptor's value: 3 [ 810.693492][ T983] usb 3-1: config 6 has no interface number 0 [ 810.699960][ T983] usb 3-1: config 6 has no interface number 1 [ 810.706416][ T983] usb 3-1: config 6 interface 25 altsetting 15 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 810.724963][ T983] usb 3-1: config 6 interface 25 altsetting 15 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 810.737533][ T983] usb 3-1: config 6 interface 25 altsetting 15 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 810.749850][ T983] usb 3-1: config 6 interface 25 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 810.761140][ T983] usb 3-1: config 6 interface 25 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 810.772307][ T983] usb 3-1: config 6 interface 25 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 810.783841][ T983] usb 3-1: config 6 interface 25 altsetting 15 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 810.796059][ T983] usb 3-1: config 6 interface 25 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 810.807712][ T983] usb 3-1: config 6 interface 57 altsetting 128 endpoint 0x6 has an invalid bInterval 38, changing to 7 [ 810.819415][ T983] usb 3-1: config 6 interface 57 altsetting 128 endpoint 0x6 has invalid maxpacket 10120, setting to 1024 [ 810.832299][ T983] usb 3-1: config 6 interface 57 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 810.846101][ T983] usb 3-1: config 6 interface 57 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 810.858170][ T983] usb 3-1: config 6 interface 57 altsetting 128 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 810.870134][ T983] usb 3-1: config 6 interface 57 altsetting 128 has 14 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.883984][ T983] usb 3-1: config 6 interface 25 has no altsetting 0 [ 810.891528][ T983] usb 3-1: config 6 interface 57 has no altsetting 0 [ 810.911796][ T983] usb 3-1: New USB device found, idVendor=045e, idProduct=04c8, bcdDevice=9d.7a [ 810.929947][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.942070][ T983] usb 3-1: Product: ÑŒ [ 810.950032][ T983] usb 3-1: Manufacturer: ꫼湈溺뎚핧ꗙ袄ᚩ团â¸åœ¹áº»ë†µé¦ä±œè¦¸à»Œé¤“⯷봤ãŒè‰‹ï¾®ç•»ç³¸è‚⦖ᄌ絪䧯ã­ç¨»ç ›ìŸžåƒŠã±½éŠ·ïªˆæ„›æ¯œâ«—峣ᦆ㢌㋦ꩊṔ倎쫅䜤ä¿è³‹ê¡âÑ¶ï©²ì¢ˆæž¿è¥ [ 810.985114][ T983] usb 3-1: SerialNumber: 챔럶ä­âœ°è«¢â³›ç˜ƒâ³¦ê±µçµè³Šì±†ì‡¥î€…陰亄魯ì ïšŒè¾ à¡¼Ô†ì †îƒç™§á›„ᕨ構ï§â«‡è¾’ᅡ䃿ë᭖힘ꅴ暩ṅ훤í‡ï ±ê­©ëŽšâ˜«ç¦–缦巒ì㬡낧æ¶á‡»å°ï†‹ï¿±ë¸ˆåŽˆí„¹ì€¤é² î‘¯ã˜ê¡¢â¢°é‘µä¥•ë»â¢ºâ¤£ä²¶å®¿á†Žê¼Œç€‘넡☧䴆욑䑙ꚺ榞噒⡙짹㣔ẽ䃗⃖ì½é¤‚Չ懂饡ïµîº”㵬᷅셴羌↥麈㲬䦻꼊䀘惇ᮘ [ 811.294465][ T8430] team0 (unregistering): Port device team_slave_1 removed [ 811.374332][ T8430] team0 (unregistering): Port device team_slave_0 removed [ 811.472580][ T983] uvcvideo 3-1:6.57: Found Unit with invalid ID 0 [ 811.481122][ T983] uvcvideo 3-1:6.57: probe with driver uvcvideo failed with error -22 [ 811.500758][ T983] usb 3-1: USB disconnect, device number 29 [ 811.525742][T15767] Bluetooth: hci3: command tx timeout [ 811.935757][T17550] team0: Port device team_slave_0 added [ 811.971922][T17550] team0: Port device team_slave_1 added [ 812.004325][T17676] FAULT_INJECTION: forcing a failure. [ 812.004325][T17676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.024264][T17676] CPU: 1 UID: 0 PID: 17676 Comm: syz.2.3103 Not tainted syzkaller #0 PREEMPT(full) [ 812.024287][T17676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 812.024298][T17676] Call Trace: [ 812.024305][T17676] [ 812.024314][T17676] dump_stack_lvl+0x189/0x250 [ 812.024341][T17676] ? __pfx____ratelimit+0x10/0x10 [ 812.024363][T17676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 812.024385][T17676] ? __pfx__printk+0x10/0x10 [ 812.024415][T17676] should_fail_ex+0x414/0x560 [ 812.024448][T17676] _copy_to_user+0x31/0xb0 [ 812.024474][T17676] simple_read_from_buffer+0xe1/0x170 [ 812.024502][T17676] proc_fail_nth_read+0x1b3/0x220 [ 812.024525][T17676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.024548][T17676] ? rw_verify_area+0x2a6/0x4d0 [ 812.024569][T17676] ? __lock_acquire+0xab9/0xd20 [ 812.024585][T17676] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 812.024606][T17676] vfs_read+0x200/0xa30 [ 812.024626][T17676] ? fdget_pos+0x247/0x320 [ 812.024647][T17676] ? __pfx___mutex_lock+0x10/0x10 [ 812.024671][T17676] ? __pfx_vfs_read+0x10/0x10 [ 812.024693][T17676] ? __fget_files+0x2a/0x420 [ 812.024712][T17676] ? __fget_files+0x3a0/0x420 [ 812.024727][T17676] ? __fget_files+0x2a/0x420 [ 812.024753][T17676] ksys_read+0x145/0x250 [ 812.024777][T17676] ? __pfx_ksys_read+0x10/0x10 [ 812.024803][T17676] ? do_syscall_64+0xbe/0xfa0 [ 812.024829][T17676] do_syscall_64+0xfa/0xfa0 [ 812.024849][T17676] ? lockdep_hardirqs_on+0x9c/0x150 [ 812.024877][T17676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.024895][T17676] ? clear_bhb_loop+0x60/0xb0 [ 812.024916][T17676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.024933][T17676] RIP: 0033:0x7f44f998d9dc [ 812.024950][T17676] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 812.024965][T17676] RSP: 002b:00007f44fa823030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 812.024984][T17676] RAX: ffffffffffffffda RBX: 00007f44f9be5fa0 RCX: 00007f44f998d9dc [ 812.024997][T17676] RDX: 000000000000000f RSI: 00007f44fa8230a0 RDI: 0000000000000004 [ 812.025009][T17676] RBP: 00007f44fa823090 R08: 0000000000000000 R09: 0000000000000000 [ 812.025021][T17676] R10: 0000000024000010 R11: 0000000000000246 R12: 0000000000000001 [ 812.025032][T17676] R13: 00007f44f9be6038 R14: 00007f44f9be5fa0 R15: 00007f44f9d0fa28 [ 812.025064][T17676] [ 812.358042][T17550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.371768][T17550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.406602][T17550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.458825][T17550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.465927][T17550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.500316][T17550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.637237][ T9] usb 4-1: USB disconnect, device number 29 [ 812.691574][T17550] hsr_slave_0: entered promiscuous mode [ 812.728323][T17550] hsr_slave_1: entered promiscuous mode [ 812.754947][T17550] debugfs: 'hsr0' already exists in 'hsr' [ 812.761129][T17550] Cannot create hsr debugfs directory [ 812.921875][T17697] ptrace attach of "./syz-executor exec"[15772] was attempted by ""[17697] [ 813.007113][T17702] input: syz1 as /devices/virtual/input/input124 [ 813.118723][T17702] netlink: 'syz.3.3108': attribute type 1 has an invalid length. [ 813.233223][T17703] gretap1: entered allmulticast mode [ 813.451832][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 813.451849][ T30] audit: type=1326 audit(1762145101.872:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17709 comm="syz.4.3109" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3fd98efc9 code=0x0 [ 813.610737][T15767] Bluetooth: hci3: command tx timeout [ 814.259264][T17550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 814.299578][T17550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 814.335040][T17550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 814.369676][T17550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 814.703450][T17550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.784393][T17550] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.833278][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.840427][ T8430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.879296][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.886524][ T8430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.009558][T17751] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3115'. [ 815.109931][T17550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.313086][T17550] veth0_vlan: entered promiscuous mode [ 815.344566][T17550] veth1_vlan: entered promiscuous mode [ 815.668957][T17550] veth0_macvtap: entered promiscuous mode [ 815.723341][T17550] veth1_macvtap: entered promiscuous mode [ 815.748894][T17550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.804917][T17550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.862025][ T8427] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.862061][ T8427] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.862082][ T8427] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.862102][ T8427] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 816.083404][ T8430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.083419][ T8430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.196154][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.196176][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.664599][T17790] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3122'. [ 817.678300][T17790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 818.003036][ T30] audit: type=1326 audit(1762145106.412:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 818.041135][T17811] loop6: detected capacity change from 0 to 7 [ 818.067843][T17811] Dev loop6: unable to read RDB block 7 [ 818.140264][T17811] loop6: unable to read partition table [ 818.179645][ T30] audit: type=1326 audit(1762145106.412:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 818.202401][T17811] loop6: partition table beyond EOD, truncated [ 818.232578][T17811] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 818.270318][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.297947][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.307181][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.316922][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.324596][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.388413][ T30] audit: type=1326 audit(1762145106.412:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 818.410643][ C0] vkms_vblank_simulate: vblank timer overrun [ 818.558371][ T30] audit: type=1326 audit(1762145106.412:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 818.664670][ T30] audit: type=1326 audit(1762145106.412:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 818.787221][ T30] audit: type=1326 audit(1762145106.412:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 818.843825][ T30] audit: type=1326 audit(1762145106.422:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 818.940307][ T30] audit: type=1326 audit(1762145106.422:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 819.224510][ T8430] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.246075][ T30] audit: type=1326 audit(1762145106.422:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 819.319364][T17836] veth0: entered promiscuous mode [ 819.326453][T17827] veth0: left promiscuous mode [ 819.339618][ T30] audit: type=1326 audit(1762145106.422:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 819.468578][ T30] audit: type=1326 audit(1762145106.422:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 819.756316][ T30] audit: type=1326 audit(1762145106.422:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 819.800923][ T30] audit: type=1326 audit(1762145106.432:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17812 comm="syz.1.3127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc1a3f8efc9 code=0x7ffc0000 [ 819.839315][ T8430] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.975936][T17844] syz_tun: entered allmulticast mode [ 820.061786][ T8430] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 820.410697][T15767] Bluetooth: hci4: command tx timeout [ 820.463238][T17843] syz_tun: left allmulticast mode [ 820.556881][ T8430] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 821.055163][T17822] chnl_net:caif_netlink_parms(): no params data found [ 821.194552][ T8430] bridge_slave_1: left allmulticast mode [ 821.200892][ T8430] bridge_slave_1: left promiscuous mode [ 821.206915][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.216731][ T8430] bridge_slave_0: left allmulticast mode [ 821.222384][ T8430] bridge_slave_0: left promiscuous mode [ 821.228831][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.248272][ T8430] tipc: Resetting bearer [ 821.482241][ T8430] bond4 (unregistering): (slave gretap1): Releasing active interface [ 821.535339][T17865] delete_channel: no stack [ 821.628867][T17865] delete_channel: no stack [ 821.648386][T17865] delete_channel: no stack [ 821.669338][T17865] delete_channel: no stack [ 821.674242][T17865] delete_channel: no stack [ 821.678876][T17865] delete_channel: no stack [ 821.683437][T17865] delete_channel: no stack [ 821.688222][T17865] delete_channel: no stack [ 821.708199][T17865] delete_channel: no stack [ 821.712950][T17865] delete_channel: no stack [ 821.717666][T17865] delete_channel: no stack [ 821.722594][T17865] delete_channel: no stack [ 821.771866][T17873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.794599][T17873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.904376][ T8430] tipc: Disabling bearer [ 821.993180][T17882] input: syz1 as /devices/virtual/input/input125 [ 822.010143][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 822.034723][T17882] netlink: 'syz.4.3138': attribute type 1 has an invalid length. [ 822.222256][ T8430] bond2 (unregistering): (slave bridge1): Removing an active aggregator [ 822.240881][ T8430] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 822.346608][ T8430] bridge1 (unregistering): left promiscuous mode [ 822.358945][ T8430] bridge1 (unregistering): left allmulticast mode [ 822.485811][T15767] Bluetooth: hci4: command tx timeout [ 822.927140][T17889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3140'. [ 823.023854][T17892] fuse: Invalid uid '00000000000000000007' [ 823.469537][T17890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 823.821824][ T8430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 823.860070][ T8430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.885240][ T8430] bond0 (unregistering): (slave team0): Releasing backup interface [ 823.937468][ T8430] bond0 (unregistering): Released all slaves [ 824.149211][ T8430] bond1 (unregistering): Released all slaves [ 824.322471][ T8430] bond2 (unregistering): Released all slaves [ 824.344461][ T8430] bond3 (unregistering): (slave batadv1): Releasing active interface [ 824.357100][ T8430] bond3 (unregistering): Released all slaves [ 824.391621][ T8430] bond4 (unregistering): Released all slaves [ 824.409112][ T8430] bond5 (unregistering): Released all slaves [ 824.423247][T17822] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.432152][T17822] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.440604][T17822] bridge_slave_0: entered allmulticast mode [ 824.450686][T17822] bridge_slave_0: entered promiscuous mode [ 824.460767][T17822] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.468446][T17822] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.476123][T17822] bridge_slave_1: entered allmulticast mode [ 824.484457][T17822] bridge_slave_1: entered promiscuous mode [ 824.502472][T17882] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 824.566662][T15767] Bluetooth: hci4: command tx timeout [ 824.642357][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 824.675835][ T8430] tipc: Left network mode [ 824.683708][T17822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.718250][T17822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.807618][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.849789][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.879301][ T24] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 824.906305][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.927392][ T24] usb 3-1: config 0 descriptor?? [ 824.947731][T17920] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3147'. [ 824.969860][T17822] team0: Port device team_slave_0 added [ 824.996031][T17822] team0: Port device team_slave_1 added [ 825.036313][T17912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.081579][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.120512][T17924] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3146'. [ 825.160457][T17912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.248391][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.272229][T17924] netlink: 'syz.3.3146': attribute type 21 has an invalid length. [ 825.348582][ T24] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 825.364327][ T24] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 825.382328][ T24] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 825.402818][ T24] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 825.416581][ T24] playstation 0003:054C:0DF2.0027: unknown main item tag 0x0 [ 825.456061][ T9] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 825.464108][ T24] playstation 0003:054C:0DF2.0027: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 825.505097][T17822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 825.513428][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.530755][T17911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.581553][T17911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.607999][ T24] playstation 0003:054C:0DF2.0027: Invalid reportID received, expected 9 got 169 [ 825.613452][T17822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 825.638292][ T24] playstation 0003:054C:0DF2.0027: Failed to retrieve DualSense pairing info: -22 [ 825.678886][ T24] playstation 0003:054C:0DF2.0027: Failed to get MAC address from DualSense [ 825.701373][T17822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 825.717549][T17822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 825.777911][ T24] playstation 0003:054C:0DF2.0027: Failed to create dualsense. [ 825.802468][ T24] playstation 0003:054C:0DF2.0027: probe with driver playstation failed with error -22 [ 825.825085][T17822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.863117][ T24] usb 3-1: USB disconnect, device number 30 [ 826.018037][ T8430] hsr_slave_0: left promiscuous mode [ 826.030260][ T8430] hsr_slave_1: left promiscuous mode [ 826.046736][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.066559][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.080973][ T8430] batman_adv: batadv0: Removing interface: dummy0 [ 826.433252][T17955] usb usb8: usbfs: process 17955 (syz.3.3151) did not claim interface 0 before use [ 826.447696][T17955] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 826.646474][T15767] Bluetooth: hci4: command tx timeout [ 827.190161][T17964] input: syz1 as /devices/virtual/input/input126 [ 827.228303][T17964] netlink: 'syz.4.3153': attribute type 1 has an invalid length. [ 827.669540][ T8430] team0 (unregistering): Port device team_slave_1 removed [ 828.201009][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 828.361532][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 828.368338][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 828.377089][ T24] usb 4-1: config 0 has no interface number 0 [ 828.387788][ T24] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=72.08 [ 828.397115][ T24] usb 4-1: New USB device strings: Mfr=198, Product=120, SerialNumber=3 [ 828.413865][ T24] usb 4-1: Product: syz [ 828.418286][ T24] usb 4-1: Manufacturer: syz [ 828.422926][ T24] usb 4-1: SerialNumber: syz [ 828.440155][ T24] usb 4-1: config 0 descriptor?? [ 828.448449][ T24] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 828.458281][ T24] usb 4-1: selecting invalid altsetting 1 [ 828.464037][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 828.481564][ T24] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 828.492733][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 828.501382][ T24] usb 4-1: media controller created [ 828.524376][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 828.626222][T17822] hsr_slave_0: entered promiscuous mode [ 828.632915][T17822] hsr_slave_1: entered promiscuous mode [ 828.640235][T17822] debugfs: 'hsr0' already exists in 'hsr' [ 828.648487][T17822] Cannot create hsr debugfs directory [ 828.670020][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3152'. [ 828.699750][T17964] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 829.021498][T17977] netlink: 'syz.2.3157': attribute type 9 has an invalid length. [ 829.096971][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3157'. [ 829.502008][T17994] lo: Caught tx_queue_len zero misconfig [ 829.617182][ T24] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 829.635079][ T24] zl10353_read_register: readreg error (reg=127, ret==-110) [ 829.648730][T17967] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 829.667925][ T24] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 829.840991][ T24] usb 4-1: USB disconnect, device number 30 [ 829.894701][T17822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 829.966634][T17822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 830.007198][T17822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 830.042164][T17822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 830.165942][T12254] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 830.352905][T12254] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 830.375073][T12254] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 830.415859][T17822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.458523][T18022] usb usb8: usbfs: process 18022 (syz.3.3163) did not claim interface 0 before use [ 830.468249][T18022] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 830.525786][T12254] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 830.557984][T12254] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 830.570704][T12254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.581814][T17822] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.591113][T12254] usb 3-1: Product: syz [ 830.600744][T12254] usb 3-1: Manufacturer: syz [ 830.610189][T12254] usb 3-1: SerialNumber: syz [ 830.668861][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.669060][ T8430] IPVS: stop unused estimator thread 0... [ 830.676098][ T8425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.714697][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.721908][ T8425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.756210][T18024] loop6: detected capacity change from 0 to 7 [ 830.800086][ T6089] Dev loop6: unable to read RDB block 7 [ 830.813179][ T6089] loop6: unable to read partition table [ 830.823441][ T6089] loop6: partition table beyond EOD, truncated [ 830.831430][T18024] Dev loop6: unable to read RDB block 7 [ 830.851856][T12254] usb 3-1: 0:2 : does not exist [ 830.885774][T18024] loop6: unable to read partition table [ 830.894716][T18024] loop6: partition table beyond EOD, truncated [ 830.901700][T12254] usb 3-1: USB disconnect, device number 31 [ 830.925347][T18024] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 831.212061][T17822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.413981][T17822] veth0_vlan: entered promiscuous mode [ 831.445657][T12254] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 831.487458][T17822] veth1_vlan: entered promiscuous mode [ 831.767607][T17822] veth0_macvtap: entered promiscuous mode [ 831.779398][T12254] usb 2-1: unable to get BOS descriptor or descriptor too short [ 831.849627][T12254] usb 2-1: not running at top speed; connect to a high speed hub [ 831.861836][T17822] veth1_macvtap: entered promiscuous mode [ 831.886529][T12254] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 831.903678][T12254] usb 2-1: config 1 interface 0 has no altsetting 0 [ 831.914347][T12254] usb 2-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 832.034287][T12254] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.055766][T12254] usb 2-1: Product: syz [ 832.060035][T12254] usb 2-1: Manufacturer: syz [ 832.064759][T12254] usb 2-1: SerialNumber: syz [ 832.083165][T18027] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 832.108744][T17822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.154688][T17822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.193644][ T8427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.220582][ T8427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.251343][ T8427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.355877][T12254] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input127 [ 832.359125][ T8427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.398492][ T5188] bcm5974 2-1:1.0: could not read from device [ 832.426291][ T5188] bcm5974 2-1:1.0: could not read from device [ 832.436626][ T5188] bcm5974 2-1:1.0: could not read from device [ 832.495184][T12254] usb 2-1: USB disconnect, device number 23 [ 832.520501][ T5188] bcm5974 2-1:1.0: could not read from device [ 832.584082][ T8427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.656353][ T8427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.719191][ T8430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.732696][ T8430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 833.298002][T18067] netlink: 'syz.1.3170': attribute type 10 has an invalid length. [ 833.423998][T18069] netlink: 'syz.1.3170': attribute type 10 has an invalid length. [ 833.591883][T18067] team0: Port device netdevsim0 added [ 833.838622][T18069] team0: Port device netdevsim0 removed [ 833.859092][T18069] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 834.215630][T12254] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 834.397053][T12254] usb 3-1: device descriptor read/64, error -71 [ 834.494676][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 834.507790][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 834.518844][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 834.531833][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 834.539822][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 834.696979][T12254] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 834.819891][T18098] loop6: detected capacity change from 0 to 7 [ 834.836102][T12254] usb 3-1: device descriptor read/64, error -71 [ 834.854237][T18098] Dev loop6: unable to read RDB block 7 [ 834.866468][T18098] loop6: unable to read partition table [ 834.884907][T18098] loop6: partition table beyond EOD, truncated [ 834.901877][T18098] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 834.932712][ T8430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 834.967471][T12254] usb usb3-port1: attempt power cycle [ 834.981867][ T8430] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.195995][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 835.317729][ T8430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.346822][T12254] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 835.353530][ T8430] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.366474][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 835.382635][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8 [ 835.396385][T12254] usb 3-1: device descriptor read/8, error -71 [ 835.408638][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.460267][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.0/input/input128 [ 835.463541][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3179'. [ 835.578136][ T8430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.607656][ T8430] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.692296][T12254] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 836.071840][T12254] usb 3-1: device descriptor read/8, error -71 [ 836.117670][T18101] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3176'. [ 836.181572][T18121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.195151][T18121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.206314][T12254] usb usb3-port1: unable to enumerate USB device [ 836.366883][ T8430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.398378][ T8430] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.524433][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3176'. [ 836.573054][ T5188] bcm5974 2-1:16.0: could not read from device [ 836.573478][ T5925] usb 2-1: USB disconnect, device number 24 [ 836.628182][ T5188] bcm5974 2-1:16.0: could not read from device [ 836.650911][T15767] Bluetooth: hci2: command tx timeout [ 836.692297][ T6088] bcm5974 2-1:16.0: could not read from device [ 836.779603][ T5188] bcm5974 2-1:16.0: could not read from device [ 836.933011][T18094] chnl_net:caif_netlink_parms(): no params data found [ 837.486747][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 837.547638][ T8430] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 837.684820][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 837.696776][T18164] netlink: 'syz.2.3186': attribute type 1 has an invalid length. [ 837.708369][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 837.723280][ T10] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 837.745959][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.811341][ T10] usb 2-1: Product: syz [ 837.817264][ T10] usb 2-1: Manufacturer: syz [ 837.822440][ T10] usb 2-1: SerialNumber: syz [ 837.915236][ T10] usb 2-1: config 0 descriptor?? [ 837.942956][ T10] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22 [ 837.952450][ T10] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22 [ 838.097586][ T8430] bond3 (unregistering): (slave gretap1): Releasing active interface [ 838.690308][ T8430] tipc: Disabling bearer [ 838.760916][T15767] Bluetooth: hci2: command tx timeout [ 838.801763][ T8430] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 838.813150][ T8430] bridge1 (unregistering): left promiscuous mode [ 838.826198][ T8430] bridge1 (unregistering): left allmulticast mode [ 838.949356][ T8430] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.977558][ T8430] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 839.010132][ T8430] bond0 (unregistering): Released all slaves [ 839.051451][ T8430] bond1 (unregistering): Released all slaves [ 839.532672][ T8430] bond2 (unregistering): Released all slaves [ 839.547940][ T8430] bond3 (unregistering): Released all slaves [ 839.568340][T18164] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 839.658859][ T8430] tipc: Left network mode [ 839.782551][T18094] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.807442][T18094] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.824788][T18094] bridge_slave_0: entered allmulticast mode [ 839.833798][T18094] bridge_slave_0: entered promiscuous mode [ 839.863448][T18094] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.877939][T18094] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.885743][T18094] bridge_slave_1: entered allmulticast mode [ 839.894035][T18094] bridge_slave_1: entered promiscuous mode [ 840.117816][T18094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.130736][T18195] binder: BINDER_SET_CONTEXT_MGR already set [ 840.140978][T18195] binder: 18194:18195 ioctl 4018620d 2000000004c0 returned -16 [ 840.157559][T18094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.183481][ T8430] hsr_slave_0: left promiscuous mode [ 840.190807][ T8430] hsr_slave_1: left promiscuous mode [ 840.197905][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 840.206007][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 840.216845][ T8430] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 840.224416][ T8430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 840.236014][ T8430] batman_adv: batadv0: Interface deactivated: dummy0 [ 840.242856][ T8430] batman_adv: batadv0: Removing interface: dummy0 [ 840.273626][ T8430] veth1_macvtap: left promiscuous mode [ 840.285153][ T8430] veth0_macvtap: left promiscuous mode [ 840.413054][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 840.472769][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 840.472789][ T30] audit: type=1804 audit(1762145128.872:821): pid=18205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3193" name="/newroot/7/file1" dev="fuse" ino=1 res=1 errno=0 [ 840.504269][ T8430] team0 (unregistering): Port device batadv2 removed [ 840.544717][ T8430] pim6reg (unregistering): left allmulticast mode [ 840.557623][ T10] usb 4-1: device descriptor read/64, error -71 [ 840.677505][ T8430] team0 (unregistering): Port device batadv1 removed [ 840.805748][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 840.813532][T15767] Bluetooth: hci2: command tx timeout [ 840.955831][ T983] usb 2-1: USB disconnect, device number 25 [ 840.965889][ T10] usb 4-1: device descriptor read/64, error -71 [ 841.081591][ T10] usb usb4-port1: attempt power cycle [ 841.475933][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 841.506944][ T10] usb 4-1: device descriptor read/8, error -71 [ 841.776418][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 841.806435][ T10] usb 4-1: device descriptor read/8, error -71 [ 841.835298][ T8430] team0 (unregistering): Port device team_slave_1 removed [ 841.896065][ T8430] team0 (unregistering): Port device team_slave_0 removed [ 841.926376][ T10] usb usb4-port1: unable to enumerate USB device [ 842.850450][T18094] team0: Port device team_slave_0 added [ 842.897891][T15767] Bluetooth: hci2: command tx timeout [ 842.960941][T18094] team0: Port device team_slave_1 added [ 843.074258][T18094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.084393][T18094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.195918][T18094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.224211][T18094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.240739][T18094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.282310][T18094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 843.510587][T18094] hsr_slave_0: entered promiscuous mode [ 843.538833][T18094] hsr_slave_1: entered promiscuous mode [ 843.641390][ T8430] IPVS: stop unused estimator thread 0... [ 843.740496][T18245] syz_tun: entered allmulticast mode [ 843.796147][T12254] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 843.919775][T18244] syz_tun: left allmulticast mode [ 843.997599][T12254] usb 4-1: Using ep0 maxpacket: 32 [ 844.006398][T12254] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 844.176683][T12254] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 844.205112][T12254] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 30, changing to 8 [ 844.232163][T12254] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 844.257596][T12254] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 844.267007][T12254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.275205][T12254] usb 4-1: Product: syz [ 844.279890][T12254] usb 4-1: Manufacturer: syz [ 844.289045][T12254] usb 4-1: SerialNumber: syz [ 844.318805][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 844.361834][T12254] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input130 [ 844.528538][T12254] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 844.536958][T12254] (id 0x00) [ 844.776606][T12254] rc_core: IR keymap rc-imon-pad not found [ 844.787148][T12254] Registered IR keymap rc-empty [ 844.848066][T18270] usb usb8: usbfs: process 18270 (syz.1.3204) did not claim interface 0 before use [ 844.858278][T18270] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 844.874080][T12254] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 844.897339][T12254] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 844.946595][T12254] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 845.016965][T12254] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input131 [ 845.107863][T12254] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:35> initialized [ 845.160289][T12254] usb 4-1: USB disconnect, device number 35 [ 845.467771][T18094] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 845.483704][T18094] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 845.520197][T18094] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 845.562058][T18094] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 845.791202][T18293] kvm: apic: phys broadcast and lowest prio [ 845.967884][T18094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.043160][T18094] 8021q: adding VLAN 0 to HW filter on device team0 [ 846.113803][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.121045][ T8425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 846.179539][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.186789][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 846.194830][ T5950] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 846.274934][T18307] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3210'. [ 846.345326][T18094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 846.360385][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 846.373883][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 846.389872][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 846.411576][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 846.432979][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.463772][T18311] syz_tun: entered allmulticast mode [ 846.490977][T18310] syz_tun: left allmulticast mode [ 846.500272][ T5950] usb 4-1: config 0 descriptor?? [ 846.510057][ T5950] hub 4-1:0.0: USB hub found [ 846.572356][T18094] veth0_vlan: entered promiscuous mode [ 846.596963][T18094] veth1_vlan: entered promiscuous mode [ 846.660869][T18094] veth0_macvtap: entered promiscuous mode [ 846.692930][T18094] veth1_macvtap: entered promiscuous mode [ 846.707712][ T5950] hub 4-1:0.0: 1 port detected [ 846.752876][T18094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.796441][T18094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.829301][ T8427] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.848822][ T8427] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.883804][ T8427] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.901982][ T8427] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.989066][ T8427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.008169][ T8427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.046353][T12254] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 847.051038][ T8427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.067807][ T8427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 847.207081][T12254] usb 3-1: Using ep0 maxpacket: 8 [ 847.219158][T18339] netlink: 'syz.4.3171': attribute type 9 has an invalid length. [ 847.219704][T12254] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=31.1f [ 847.227084][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3171'. [ 847.245814][T12254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.264174][T12254] usb 3-1: Product: syz [ 847.274354][T12254] usb 3-1: Manufacturer: syz [ 847.284524][T12254] usb 3-1: SerialNumber: syz [ 847.309723][ T5950] hub 4-1:0.0: activate --> -90 [ 847.317238][T12254] usb 3-1: config 0 descriptor?? [ 847.339717][T12254] (null): radio-mr800 - initialization failed [ 847.356359][T12254] radio-mr800 3-1:0.0: probe with driver radio-mr800 failed with error -22 [ 847.365472][T12254] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 847.538621][T12254] usb 3-1: USB disconnect, device number 36 [ 847.996749][T18359] binder_alloc: binder_alloc_mmap_handler: 18358 200000ffd000-200001000000 already mapped failed -16 [ 848.023036][T18362] binder: BINDER_SET_CONTEXT_MGR already set [ 848.029207][T18362] binder: 18358:18362 ioctl 4018620d 200000000040 returned -16 [ 848.084991][T18359] binder_alloc: 18358: binder_alloc_buf, no vma [ 848.093965][T18360] binder_alloc: 18358: binder_alloc_buf, no vma [ 848.123113][T18296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.142039][T18296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.268187][T18371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 848.306259][T18371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 848.319556][T18359] tap0: tun_chr_ioctl cmd 1074025675 [ 848.324910][T18359] tap0: persist enabled [ 848.340028][T18359] tap0: tun_chr_ioctl cmd 1074025675 [ 848.345380][T18359] tap0: persist disabled [ 848.381890][ T5950] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 848.385264][ T10] usb 4-1: USB disconnect, device number 36 [ 848.416684][ T5950] usb 4-1-port1: attempt power cycle [ 848.426939][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 848.549850][T18375] loop6: detected capacity change from 0 to 7 [ 848.559115][T18375] Dev loop6: unable to read RDB block 7 [ 848.564747][T18375] loop6: unable to read partition table [ 848.586099][T18375] loop6: partition table beyond EOD, truncated [ 848.602929][T18375] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 848.696785][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 848.722488][ T24] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 848.741742][ T24] usb 3-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 848.755027][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 848.764592][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 848.792669][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.850849][ T24] usb 3-1: Product: 譋꿾⼳힣䭠畆虧풆䵸曗疅௡绽ݮ㴪魻ᕉ烔ᷦ䳣ê€æ£¶ê© ï…¢ä†¥ê†ŠèºŸà±Ÿâ»¬åº„ãŽ°ä¿¯ê™¾å‹²çªµåº•æ±£æ”†ä– î¦˜ì¹•á½µç“†ë–­çˆ»êº [ 848.901226][T18379] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3223'. [ 848.910439][ T24] usb 3-1: Manufacturer: à Š [ 848.915048][ T24] usb 3-1: SerialNumber: 皆쓥ꉨ쌻鰟뫻Ếî³î¼Šä¡œëŠ‰äš½ì‹˜âžê â® æ§£ÙŒç¨íºåŽ¶æ «ì³¶Ú çš«î…£ç– î·±ï«ƒë¥ŠæˆˆÌ‚엉羥瘲ï„ä£î‡±ì¿²ã¹ë¬¡é’íŸ½î£¬è¿¾ãµžå•Šæ’¹î¦§ë€ [ 848.997488][T18368] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 849.244447][T18345] syz.4.3217 (18345): drop_caches: 2 [ 849.254661][T18391] binder: 18390:18391 ioctl c0306201 200000000080 returned -14 [ 849.271890][T18391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3229'. [ 849.501915][ T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 849.566355][ T24] usb 3-1: USB disconnect, device number 37 [ 850.130758][T18396] fuse: Bad value for 'rootmode' [ 850.139167][T18409] loop9: detected capacity change from 0 to 7 [ 850.226016][T18409] Dev loop9: unable to read RDB block 7 [ 850.241922][T18409] loop9: unable to read partition table [ 850.269223][T18409] loop9: partition table beyond EOD, truncated [ 850.305696][T18409] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 850.307917][T18413] loop6: detected capacity change from 0 to 7 [ 850.367108][T18413] Dev loop6: unable to read RDB block 7 [ 850.372863][T18413] loop6: unable to read partition table [ 850.385802][T18413] loop6: partition table beyond EOD, truncated [ 850.403222][T18413] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 850.935629][T12254] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 851.079127][T18428] ip6gretap1: entered promiscuous mode [ 851.087791][T12254] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 851.093358][T18429] input: syz1 as /devices/virtual/input/input132 [ 851.102575][T12254] usb 4-1: config 0 has no interface number 0 [ 851.120136][T18428] ip6gretap1: entered allmulticast mode [ 851.135461][T12254] usb 4-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 851.153952][T12254] usb 4-1: config 0 interface 11 has no altsetting 0 [ 851.164434][T12254] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 851.174610][T12254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.198985][T12254] usb 4-1: config 0 descriptor?? [ 851.205113][T18420] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 851.235230][T12254] keyspan 4-1:0.11: Keyspan 2 port adapter converter detected [ 851.246855][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 87 [ 851.258663][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 81 [ 851.266647][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 82 [ 851.274844][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 1 [ 851.290113][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 2 [ 851.298400][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 85 [ 851.316007][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 5 [ 851.336216][T12254] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 851.358840][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 83 [ 851.484555][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 84 [ 851.500534][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 3 [ 851.508759][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 4 [ 851.517860][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 86 [ 851.532780][T12254] keyspan 4-1:0.11: found no endpoint descriptor for endpoint 6 [ 851.544133][T12254] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 851.577919][T12254] usb 4-1: USB disconnect, device number 41 [ 851.603190][T12254] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 851.639118][T12254] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 851.675136][T12254] keyspan 4-1:0.11: device disconnected [ 852.065693][ T5925] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 852.132109][T18450] loop6: detected capacity change from 0 to 7 [ 852.141730][ T6089] Dev loop6: unable to read RDB block 7 [ 852.148452][ T6089] loop6: unable to read partition table [ 852.154627][ T6089] loop6: partition table beyond EOD, truncated [ 852.164702][T18450] Dev loop6: unable to read RDB block 7 [ 852.175939][T18450] loop6: unable to read partition table [ 852.181812][T18450] loop6: partition table beyond EOD, truncated [ 852.195782][T18450] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 852.209335][ T10] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 852.230793][ T5925] usb 2-1: config 0 interface 0 has no altsetting 0 [ 852.251383][ T5925] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 852.281872][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.305859][ T5925] usb 2-1: config 0 descriptor?? [ 852.368361][ T10] usb 3-1: config 0 has an invalid interface number: 167 but max is 0 [ 852.377897][ T10] usb 3-1: config 0 has no interface number 0 [ 852.384345][ T10] usb 3-1: config 0 interface 167 altsetting 0 endpoint 0x8A has invalid maxpacket 512, setting to 64 [ 852.405201][ T10] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0104, bcdDevice=f1.04 [ 852.418189][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.427019][ T10] usb 3-1: Product: syz [ 852.431602][ T10] usb 3-1: Manufacturer: syz [ 852.448222][ T10] usb 3-1: SerialNumber: syz [ 852.462094][ T10] usb 3-1: config 0 descriptor?? [ 852.469331][T18446] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 852.484325][ T10] kvaser_usb 3-1:0.167: error -ENODEV: Cannot get usb endpoint(s) [ 852.679473][T18446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.726963][ T10] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 852.747977][ T5925] elo 0003:04E7:0009.0028: unknown main item tag 0x0 [ 852.755166][T18446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 852.787472][ T57] usb 3-1: USB disconnect, device number 38 [ 852.825028][ T5925] elo 0003:04E7:0009.0028: unknown main item tag 0x0 [ 852.900021][ T5925] elo 0003:04E7:0009.0028: hidraw0: USB HID v80.00 Device [HID 04e7:0009] on usb-dummy_hcd.1-1/input0 [ 852.966630][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 853.002809][ T10] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 853.036499][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.068586][ T10] usb 4-1: config 0 descriptor?? [ 853.573311][T18466] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3250'. [ 853.613967][ T10] kye 0003:0458:5016.0029: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 853.630539][ T10] kye 0003:0458:5016.0029: hidraw1: USB HID v1.05 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 853.652546][ T10] kye 0003:0458:5016.0029: tablet-enabling feature report not found [ 853.681415][ T10] kye 0003:0458:5016.0029: tablet enabling failed [ 854.609740][T12254] usb 2-1: USB disconnect, device number 26 [ 855.085695][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 855.432229][T18488] loop6: detected capacity change from 0 to 7 [ 855.463284][T12254] usb 4-1: USB disconnect, device number 42 [ 855.473027][T18488] Dev loop6: unable to read RDB block 7 [ 855.597266][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 855.603147][T18488] loop6: unable to read partition table [ 855.606507][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.625094][ T10] usb 2-1: config 0 descriptor?? [ 855.655928][T18488] loop6: partition table beyond EOD, truncated [ 855.735872][T18488] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 856.281325][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 856.685777][T18514] netlink: 'syz.2.3264': attribute type 1 has an invalid length. [ 856.700310][ T10] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 856.878948][ T57] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 857.058413][ T57] usb 4-1: config 0 has no interfaces? [ 857.064180][ T57] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 857.074229][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.095203][ T57] usb 4-1: config 0 descriptor?? [ 857.323359][ T57] usb 4-1: USB disconnect, device number 43 [ 857.919972][T18521] netlink: 'syz.2.3265': attribute type 1 has an invalid length. [ 858.101901][ T9] usb 2-1: USB disconnect, device number 27 [ 858.876722][T18532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3268'. [ 859.485734][T18545] netlink: 'syz.3.3272': attribute type 1 has an invalid length. [ 859.775978][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 859.939389][T18557] netlink: 'syz.1.3275': attribute type 1 has an invalid length. [ 860.101661][T18559] gretap1: entered allmulticast mode [ 860.115656][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 860.123260][T18559] bond1: (slave gretap1): making interface the new active one [ 860.134461][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 860.144810][ T10] usb 5-1: config 120 has an invalid interface number: 243 but max is 0 [ 860.157876][ T10] usb 5-1: config 120 has an invalid descriptor of length 230, skipping remainder of the config [ 860.163614][T18559] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 860.177364][ T10] usb 5-1: config 120 has no interface number 0 [ 860.185677][ T10] usb 5-1: config 120 interface 243 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 860.210893][ T10] usb 5-1: New USB device found, idVendor=2304, idProduct=0243, bcdDevice=66.1c [ 860.229694][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.254628][ T10] usb 5-1: Product: syz [ 860.259287][ T10] usb 5-1: Manufacturer: syz [ 860.264229][ T10] usb 5-1: SerialNumber: syz [ 860.518453][ T10] dvb-usb: found a 'Pinnacle PCTV 73A' in cold state, will try to load a firmware [ 860.649122][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 860.679756][ T10] dib0700: firmware download failed at 7 with -22 [ 860.709248][ T10] usb 5-1: USB disconnect, device number 36 [ 860.727052][T18569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 861.126093][T18582] loop6: detected capacity change from 0 to 7 [ 861.749814][T18595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 861.966101][T18604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.983643][T18604] bridge0: port 3(bond1) entered blocking state [ 861.991776][T18604] bridge0: port 3(bond1) entered disabled state [ 861.998769][T18604] bond1: entered allmulticast mode [ 862.010335][T18604] bond1: entered promiscuous mode [ 862.022026][T18604] bridge0: port 3(bond1) entered blocking state [ 862.028493][T18604] bridge0: port 3(bond1) entered forwarding state [ 862.041442][T11602] bridge0: port 3(bond1) entered disabled state [ 862.166572][ T57] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 862.307358][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3289'. [ 862.347341][ T57] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 862.355465][ T57] usb 4-1: config 0 has no interface number 0 [ 862.371962][ T57] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 862.461573][ T57] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 862.488541][ T57] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 862.540915][ T57] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 862.567864][ T57] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 862.590623][ T57] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 862.617518][ T57] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 862.636589][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.666283][ T57] usb 4-1: config 0 descriptor?? [ 862.676081][T18602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 862.683376][T18602] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 862.747635][ T57] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 862.922114][T18602] ldusb 4-1:0.55: Write buffer overflow, 5 bytes dropped [ 862.939146][ T5925] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 863.117245][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3287'. [ 863.175627][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 863.202626][T18630] block device autoloading is deprecated and will be removed. [ 863.214285][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.245604][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.266736][T18633] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3297'. [ 863.282752][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 863.330749][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 863.367530][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.403617][ T5925] usb 5-1: config 0 descriptor?? [ 863.552086][T18645] netlink: 'syz.2.3301': attribute type 9 has an invalid length. [ 863.577392][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3301'. [ 863.715445][T18647] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3299'. [ 864.190553][ T5925] usbhid 5-1:0.0: can't add hid device: -71 [ 864.204012][ T5925] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 864.249444][ T5925] usb 5-1: USB disconnect, device number 37 [ 865.323429][ T10] usb 4-1: USB disconnect, device number 44 [ 865.350234][ T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 865.377895][T18672] fuse: Unknown parameter '0x00002000000014000000000100000000001200000000000000000000000004qcfr¤Úõ[Ý"%@Kõ[ïR7«¹ÎŸ·Gä3ˆÁÒ´kPµ:u¯cÕ奋gÄŒl' [ 865.555226][T18661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 866.043503][T18677] netlink: 'syz.3.3307': attribute type 22 has an invalid length. [ 866.070438][T18677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3307'. [ 866.121715][ T3014] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.121830][T18677] netlink: 'syz.3.3307': attribute type 22 has an invalid length. [ 866.163697][T18677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3307'. [ 866.216728][ T3014] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.247707][ T3014] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.272240][ T3014] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 866.748180][T18685] binder: 18682:18685 ioctl 4018620d 0 returned -22 [ 866.935024][T18696] netlink: 'syz.0.3313': attribute type 9 has an invalid length. [ 866.949817][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3313'. [ 867.417237][T18704] fuse: Bad value for 'fd' [ 867.568409][T18712] pim6reg: entered allmulticast mode [ 867.584062][T18712] pim6reg: left allmulticast mode [ 867.785635][ T5950] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 867.957370][ T5950] usb 5-1: config 6 has an invalid interface number: 2 but max is 0 [ 867.965387][ T5950] usb 5-1: config 6 has no interface number 0 [ 867.971665][ T5950] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 867.981737][ T5950] usb 5-1: config 6 interface 2 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 868.660932][T18726] usb usb8: usbfs: process 18726 (syz.1.3323) did not claim interface 0 before use [ 868.671269][T18726] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 868.756111][ T5950] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 868.765690][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.776243][ T5950] usb 5-1: Product: syz [ 868.780604][ T5950] usb 5-1: Manufacturer: syz [ 868.790962][ T5950] usb 5-1: SerialNumber: syz [ 868.982348][ T5950] hso 5-1:6.2: Failed to find INT IN ep [ 869.187941][ T5950] usb 5-1: USB disconnect, device number 38 [ 870.273977][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.280317][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.105665][ T57] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 872.259984][ T57] usb 3-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 872.273671][ T57] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.293803][ T57] usb 3-1: Product: syz [ 872.306151][ T57] usb 3-1: Manufacturer: syz [ 872.314833][ T57] usb 3-1: SerialNumber: syz [ 872.361353][ T57] usb 3-1: config 0 descriptor?? [ 872.373820][ T57] f81232 3-1:0.0: f81232 converter detected [ 872.389371][ T57] usb 3-1: f81232 converter now attached to ttyUSB0 [ 872.535623][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 872.576053][ T57] usb 3-1: USB disconnect, device number 39 [ 872.587205][ T57] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 872.595433][ T57] f81232 3-1:0.0: device disconnected [ 872.695606][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 872.702587][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 872.717669][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 872.740418][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 872.753923][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 872.767598][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 872.777156][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 872.787372][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 872.800844][ T10] usb 4-1: Product: syz [ 872.805062][ T10] usb 4-1: Manufacturer: syz [ 872.810890][ T10] usb 4-1: SerialNumber: syz [ 872.818892][ T10] usb 4-1: config 0 descriptor?? [ 872.829182][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 872.850166][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 873.207127][ T57] usb 4-1: USB disconnect, device number 45 [ 873.207211][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 873.265757][T18770] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 873.390516][ T57] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 873.860670][T18782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 874.900972][ T5955] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 875.089751][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.102956][ T5955] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 875.112919][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.141783][ T5955] usb 4-1: config 0 descriptor?? [ 875.428153][T18824] netlink: 'syz.4.3353': attribute type 1 has an invalid length. [ 875.570438][T18827] loop2: detected capacity change from 0 to 7 [ 875.582965][ T6089] Dev loop2: unable to read RDB block 7 [ 875.588938][ T6089] loop2: unable to read partition table [ 875.594843][ T6089] loop2: partition table beyond EOD, truncated [ 875.617651][T18827] Dev loop2: unable to read RDB block 7 [ 875.623256][T18827] loop2: unable to read partition table [ 875.639437][T18827] loop2: partition table beyond EOD, truncated [ 875.661396][ T5955] waltop 0003:172F:0037.002A: item fetching failed at offset 0/3 [ 875.675673][T18827] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 875.690397][ T5955] waltop 0003:172F:0037.002A: probe with driver waltop failed with error -22 [ 875.882599][T18809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.913524][T18809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.002002][T18824] bond2: entered promiscuous mode [ 876.052419][T18824] bond2: entered allmulticast mode [ 876.170266][ T57] usb 4-1: USB disconnect, device number 46 [ 876.219663][T18829] bridge1: entered promiscuous mode [ 876.262010][ T5203] Dev loop2: unable to read RDB block 7 [ 876.272517][T18829] bridge1: entered allmulticast mode [ 876.283019][ T5203] loop2: unable to read partition table [ 876.289122][ T5203] loop2: partition table beyond EOD, truncated [ 876.295960][T18829] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 876.826462][ T57] hid-generic 0000:0003:0001.002B: unknown main item tag 0x0 [ 876.841968][ T57] hid-generic 0000:0003:0001.002B: unknown main item tag 0x0 [ 876.883162][ T57] hid-generic 0000:0003:0001.002B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 877.004545][T18845] fido_id[18845]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 877.155646][T12254] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 877.485622][T12254] usb 4-1: device descriptor read/64, error -71 [ 877.766011][T12254] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 877.906967][T12254] usb 4-1: device descriptor read/64, error -71 [ 878.032393][T12254] usb usb4-port1: attempt power cycle [ 878.355671][ T57] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 878.386582][T12254] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 878.419044][T12254] usb 4-1: device descriptor read/8, error -71 [ 878.589690][ T57] usb 2-1: Using ep0 maxpacket: 16 [ 878.601944][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.613283][ T57] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.643917][ T57] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 878.658675][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.685627][T12254] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 878.732084][ T57] usb 2-1: config 0 descriptor?? [ 878.743011][T12254] usb 4-1: device descriptor read/8, error -71 [ 878.773068][T18856] batadv_slave_1: entered promiscuous mode [ 878.888445][T12254] usb usb4-port1: unable to enumerate USB device [ 878.901380][T18856] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3361'. [ 879.179298][ T57] kye 0003:0458:5016.002C: control desc unexpectedly large [ 879.197331][ T57] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.002C/input/input134 [ 879.424801][ T57] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.002C/input/input135 [ 879.497927][ T57] kye 0003:0458:5016.002C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 880.496417][ C0] kye 0003:0458:5016.002C: usb_submit_urb(ctrl) failed: -1 [ 880.635688][T12254] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 880.776158][T12254] usb 2-1: device descriptor read/64, error -32 [ 880.989753][T18866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.004697][T16016] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 881.015645][T12254] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 881.217770][T16016] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 881.229080][T16016] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.249285][T16016] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 881.268830][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.380457][T16016] hub 4-1:4.0: USB hub found [ 881.691010][T16016] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 881.806922][ T57] usb 2-1: USB disconnect, device number 28 [ 881.826770][T16016] usb 4-1: USB disconnect, device number 51 [ 882.801448][ T30] audit: type=1326 audit(1762145171.222:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 882.999407][ T30] audit: type=1326 audit(1762145171.222:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.445755][ T30] audit: type=1326 audit(1762145171.402:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.515750][ T30] audit: type=1326 audit(1762145171.402:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.543378][ T30] audit: type=1326 audit(1762145171.402:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.568001][ T30] audit: type=1326 audit(1762145171.452:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.591872][ T30] audit: type=1326 audit(1762145171.452:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.615936][ T30] audit: type=1326 audit(1762145171.452:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.638426][ T30] audit: type=1326 audit(1762145171.452:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 883.662313][ T30] audit: type=1326 audit(1762145171.452:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18896 comm="syz.4.3369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bf578efc9 code=0x7ffc0000 [ 884.056169][T18857] batadv_slave_1: left promiscuous mode [ 884.665659][ T5950] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 885.295629][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 885.303020][ T5950] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 885.312494][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.467593][ T5950] usb 3-1: config 0 descriptor?? [ 885.696878][ T5950] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 885.709808][ T5950] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 885.732919][ T5950] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 885.740661][ T5950] usb 3-1: media controller created [ 885.849541][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 886.526981][T18945] netlink: 'syz.3.3382': attribute type 4 has an invalid length. [ 886.712684][T18949] netlink: 'syz.3.3382': attribute type 4 has an invalid length. [ 886.976747][ T5950] stb0899_attach: Driver disabled by Kconfig [ 886.983341][ T5950] az6027: no front-end attached [ 886.983341][ T5950] [ 887.009047][ T5950] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 887.028158][ T5950] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input136 [ 887.045985][ T5950] dvb-usb: schedule remote query interval to 400 msecs. [ 887.053256][ T5950] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 887.105684][T16016] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 887.216314][ T10] usb 3-1: USB disconnect, device number 40 [ 887.495616][T16016] usb 4-1: Using ep0 maxpacket: 32 [ 887.529113][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 887.549354][T16016] usb 4-1: config index 0 descriptor too short (expected 2304, got 36) [ 887.557692][T16016] usb 4-1: config 129 has an invalid descriptor of length 0, skipping remainder of the config [ 887.567978][T16016] usb 4-1: config 129 has 0 interfaces, different from the descriptor's value: 5 [ 887.578820][T16016] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 887.588011][T16016] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.115599][T12254] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 888.265594][T12254] usb 5-1: Using ep0 maxpacket: 16 [ 888.275296][T12254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.286954][T12254] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.297655][T12254] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 888.312501][T12254] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 888.327373][T12254] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.345011][T12254] usb 5-1: config 0 descriptor?? [ 888.782046][T12254] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.002D/input/input137 [ 888.899680][T12254] appleir 0003:05AC:8241.002D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 888.999695][ T10] usb 5-1: USB disconnect, device number 39 [ 889.048135][T18966] fido_id[18966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 889.657048][T16016] usb 4-1: string descriptor 0 read error: -71 [ 889.683044][T16016] usb 4-1: USB disconnect, device number 52 [ 891.255587][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 891.640689][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 891.651825][ T10] usb 2-1: config 211 has an invalid interface number: 98 but max is 0 [ 891.695606][ T10] usb 2-1: config 211 has no interface number 0 [ 891.718409][ T10] usb 2-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 8 [ 891.838663][ T10] usb 2-1: config 211 interface 98 has no altsetting 0 [ 891.891149][ T10] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 891.907016][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.928135][ T10] usb 2-1: Product: syz [ 891.935357][ T10] usb 2-1: Manufacturer: syz [ 891.953363][ T10] usb 2-1: SerialNumber: syz [ 891.992852][T19008] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 892.205407][ T10] mct_u232 2-1:211.98: MCT U232 converter detected [ 892.217842][ T10] mct_u232 ttyUSB0: expected endpoint missing [ 892.251835][ T10] usb 2-1: USB disconnect, device number 29 [ 892.315362][ T10] mct_u232 2-1:211.98: device disconnected [ 893.080336][T19023] TCP: TCP_TX_DELAY enabled [ 893.150359][T19023] bond7: entered promiscuous mode [ 893.155435][T19023] bond7: entered allmulticast mode [ 893.215193][T19023] 8021q: adding VLAN 0 to HW filter on device bond7 [ 893.218815][T19031] CUSE: DEVNAME unspecified [ 894.025841][ T10] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 894.186566][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 894.194705][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 894.214783][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 894.245900][ T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.259967][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 894.270134][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.288968][ T10] usb 5-1: Product: syz [ 894.299429][ T10] usb 5-1: Manufacturer: syz [ 894.308322][ T10] usb 5-1: SerialNumber: syz [ 894.401117][T19059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.785361][T19047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 894.798769][T19047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 894.819469][T19047] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3408'. [ 895.167976][ T10] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 895.181792][ T10] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 895.270601][ T10] usb 5-1: USB disconnect, device number 40 [ 896.214956][T19078] erspan0: entered promiscuous mode [ 896.415209][T19085] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3417'. [ 896.475605][T12254] IPVS: starting estimator thread 0... [ 896.575916][T19086] IPVS: using max 29 ests per chain, 69600 per kthread [ 896.719457][T19092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3419'. [ 897.346399][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 897.587898][ T10] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 897.596393][ T10] usb 5-1: config 0 has no interface number 0 [ 897.615318][ T10] usb 5-1: config 0 interface 101 has no altsetting 0 [ 897.638596][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 897.711393][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.746571][ T10] usb 5-1: config 0 descriptor?? [ 897.782936][ T10] cp210x 5-1:0.101: cp210x converter detected [ 898.155638][ T10] cp210x 5-1:0.101: failed to get vendor val 0x000e size 3: -32 [ 898.314593][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 898.322058][ T30] audit: type=1326 audit(1762145186.732:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 898.349324][ T30] audit: type=1326 audit(1762145186.732:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 898.373880][ T10] cp210x 5-1:0.101: GPIO initialisation failed: -19 [ 898.393888][ T30] audit: type=1326 audit(1762145186.802:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 898.418687][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 898.463494][ T30] audit: type=1326 audit(1762145186.802:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 898.630773][T12254] usb 5-1: USB disconnect, device number 41 [ 898.854270][ T30] audit: type=1326 audit(1762145187.082:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 898.876502][T12254] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 898.878400][ T30] audit: type=1326 audit(1762145187.082:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 898.932313][T12254] cp210x 5-1:0.101: device disconnected [ 899.002328][ T30] audit: type=1326 audit(1762145187.082:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 899.056566][ T983] hid-generic 0000:0003:0001.002E: unknown main item tag 0x0 [ 899.074859][ T983] hid-generic 0000:0003:0001.002E: unknown main item tag 0x0 [ 899.113363][ T30] audit: type=1326 audit(1762145187.082:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 899.135718][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.164182][ T30] audit: type=1326 audit(1762145187.082:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 899.186593][ C0] vkms_vblank_simulate: vblank timer overrun [ 899.200740][ T983] hid-generic 0000:0003:0001.002E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 899.436747][ T30] audit: type=1326 audit(1762145187.082:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19104 comm="syz.2.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 899.967374][T19129] fido_id[19129]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 899.996454][T19127] netlink: 'syz.0.3432': attribute type 9 has an invalid length. [ 900.004501][T19127] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3432'. [ 900.545641][T12254] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 900.708061][T12254] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.720551][T12254] usb 4-1: config 1 interface 1 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 900.771718][T12254] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 900.781092][T12254] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.794549][T12254] usb 4-1: Product: syz [ 900.801857][T12254] usb 4-1: Manufacturer: syz [ 900.810710][T12254] usb 4-1: SerialNumber: syz [ 900.838589][T12254] usb 4-1: selecting invalid altsetting 1 [ 901.269040][T12254] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 901.317948][T12254] cdc_ncm 4-1:1.0: bind() failure [ 901.385103][T12254] cdc_ncm 4-1:1.1: skipping garbage [ 901.400245][T12254] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 901.425232][T12254] cdc_ncm 4-1:1.1: bind() failure [ 901.442249][T12254] usb 4-1: USB disconnect, device number 53 [ 901.518593][T19159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3440'. [ 901.529510][T19159] Cannot find add_set index 0 as target [ 902.485013][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 902.656883][ T10] usb 4-1: config 0 has an invalid descriptor of length 29, skipping remainder of the config [ 902.761728][ T10] usb 4-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 902.794251][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 902.843416][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00 [ 903.086628][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.125813][ T10] usb 4-1: config 0 descriptor?? [ 903.168336][ T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 903.441311][T19179] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 903.498183][T19187] FAULT_INJECTION: forcing a failure. [ 903.498183][T19187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.556185][T19187] CPU: 1 UID: 0 PID: 19187 Comm: syz.0.3449 Not tainted syzkaller #0 PREEMPT(full) [ 903.556210][T19187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 903.556222][T19187] Call Trace: [ 903.556230][T19187] [ 903.556239][T19187] dump_stack_lvl+0x189/0x250 [ 903.556269][T19187] ? __pfx____ratelimit+0x10/0x10 [ 903.556291][T19187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.556314][T19187] ? __pfx__printk+0x10/0x10 [ 903.556333][T19187] ? __might_fault+0xb0/0x130 [ 903.556367][T19187] should_fail_ex+0x414/0x560 [ 903.556404][T19187] _copy_to_iter+0x589/0x1790 [ 903.556438][T19187] ? __pfx__copy_to_iter+0x10/0x10 [ 903.556457][T19187] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 903.556484][T19187] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 903.556510][T19187] __skb_datagram_iter+0xf8/0x990 [ 903.556532][T19187] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 903.556561][T19187] skb_copy_datagram_iter+0xc5/0x230 [ 903.556585][T19187] netlink_recvmsg+0x2ab/0xa30 [ 903.556613][T19187] ? __pfx_netlink_recvmsg+0x10/0x10 [ 903.556629][T19187] ? __lock_acquire+0xab9/0xd20 [ 903.556650][T19187] ? aa_sock_msg_perm+0xf1/0x1d0 [ 903.556677][T19187] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 903.556694][T19187] ? security_socket_recvmsg+0x7e/0x2e0 [ 903.556713][T19187] ? __pfx_netlink_recvmsg+0x10/0x10 [ 903.556731][T19187] sock_recvmsg+0x22c/0x270 [ 903.556757][T19187] ____sys_recvmsg+0x1c9/0x460 [ 903.556785][T19187] ? __pfx_____sys_recvmsg+0x10/0x10 [ 903.556820][T19187] ? import_iovec+0x74/0xa0 [ 903.556844][T19187] ___sys_recvmsg+0x1b5/0x510 [ 903.556870][T19187] ? __pfx____sys_recvmsg+0x10/0x10 [ 903.556913][T19187] ? __fget_files+0x3a0/0x420 [ 903.556941][T19187] do_recvmmsg+0x307/0x770 [ 903.556968][T19187] ? __pfx_do_recvmmsg+0x10/0x10 [ 903.557000][T19187] ? _copy_from_user+0x94/0xb0 [ 903.557037][T19187] __x64_sys_recvmmsg+0x1af/0x240 [ 903.557059][T19187] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 903.557083][T19187] ? do_syscall_64+0xbe/0xfa0 [ 903.557109][T19187] do_syscall_64+0xfa/0xfa0 [ 903.557130][T19187] ? lockdep_hardirqs_on+0x9c/0x150 [ 903.557152][T19187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.557170][T19187] ? clear_bhb_loop+0x60/0xb0 [ 903.557191][T19187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.557208][T19187] RIP: 0033:0x7f505ab8efc9 [ 903.557225][T19187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 903.557240][T19187] RSP: 002b:00007f505bb0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 903.557260][T19187] RAX: ffffffffffffffda RBX: 00007f505ade5fa0 RCX: 00007f505ab8efc9 [ 903.557273][T19187] RDX: 0000000000000043 RSI: 00002000000037c0 RDI: 0000000000000003 [ 903.557285][T19187] RBP: 00007f505bb0b090 R08: 0000200000003700 R09: 0000000000000000 [ 903.557297][T19187] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 903.557308][T19187] R13: 00007f505ade6038 R14: 00007f505ade5fa0 R15: 00007f505af0fa28 [ 903.557339][T19187] [ 903.562443][T12254] usb 4-1: USB disconnect, device number 54 [ 903.793483][T19196] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3452'. [ 904.167085][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 904.347316][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 904.366254][ T9] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52 [ 904.375651][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.392053][ T9] usb 3-1: Product: syz [ 904.423477][ T9] usb 3-1: Manufacturer: syz [ 904.431438][ T9] usb 3-1: SerialNumber: syz [ 904.645901][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 904.656180][T19197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.668432][T19197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.694204][ T9] usb_ehset_test 3-1:84.0: probe with driver usb_ehset_test failed with error -32 [ 904.720661][ T9] usb 3-1: USB disconnect, device number 41 [ 904.845832][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 904.865167][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.880809][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.924478][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 904.951488][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.999491][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 905.021069][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3460'. [ 905.063849][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.525379][T19237] FAULT_INJECTION: forcing a failure. [ 905.525379][T19237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.539310][T19237] CPU: 1 UID: 0 PID: 19237 Comm: syz.4.3464 Not tainted syzkaller #0 PREEMPT(full) [ 905.539335][T19237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 905.539346][T19237] Call Trace: [ 905.539355][T19237] [ 905.539364][T19237] dump_stack_lvl+0x189/0x250 [ 905.539392][T19237] ? __pfx____ratelimit+0x10/0x10 [ 905.539414][T19237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 905.539436][T19237] ? __pfx__printk+0x10/0x10 [ 905.539454][T19237] ? __might_fault+0xb0/0x130 [ 905.539487][T19237] should_fail_ex+0x414/0x560 [ 905.539515][T19237] _copy_to_iter+0x589/0x1790 [ 905.539549][T19237] ? __pfx__copy_to_iter+0x10/0x10 [ 905.539566][T19237] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 905.539594][T19237] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 905.539621][T19237] __skb_datagram_iter+0xf8/0x990 [ 905.539642][T19237] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 905.539672][T19237] skb_copy_datagram_iter+0xc5/0x230 [ 905.539696][T19237] netlink_recvmsg+0x2ab/0xa30 [ 905.539725][T19237] ? __pfx_netlink_recvmsg+0x10/0x10 [ 905.539740][T19237] ? __lock_acquire+0xab9/0xd20 [ 905.539763][T19237] ? aa_sock_msg_perm+0xf1/0x1d0 [ 905.539792][T19237] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 905.539809][T19237] ? security_socket_recvmsg+0x7e/0x2e0 [ 905.539828][T19237] ? __pfx_netlink_recvmsg+0x10/0x10 [ 905.539846][T19237] sock_recvmsg+0x22c/0x270 [ 905.539872][T19237] ____sys_recvmsg+0x1c9/0x460 [ 905.539899][T19237] ? __pfx_____sys_recvmsg+0x10/0x10 [ 905.539934][T19237] ? import_iovec+0x74/0xa0 [ 905.539958][T19237] ___sys_recvmsg+0x1b5/0x510 [ 905.539983][T19237] ? __pfx____sys_recvmsg+0x10/0x10 [ 905.540027][T19237] ? __fget_files+0x3a0/0x420 [ 905.540055][T19237] do_recvmmsg+0x307/0x770 [ 905.540084][T19237] ? __pfx_do_recvmmsg+0x10/0x10 [ 905.540115][T19237] ? _copy_from_user+0x94/0xb0 [ 905.540152][T19237] __x64_sys_recvmmsg+0x1af/0x240 [ 905.540183][T19237] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 905.540207][T19237] ? do_syscall_64+0xbe/0xfa0 [ 905.540233][T19237] do_syscall_64+0xfa/0xfa0 [ 905.540254][T19237] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.540276][T19237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.540293][T19237] ? clear_bhb_loop+0x60/0xb0 [ 905.540314][T19237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.540332][T19237] RIP: 0033:0x7f9bf578efc9 [ 905.540349][T19237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 905.540364][T19237] RSP: 002b:00007f9bf65f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 905.540383][T19237] RAX: ffffffffffffffda RBX: 00007f9bf59e5fa0 RCX: 00007f9bf578efc9 [ 905.540397][T19237] RDX: 0000000000000043 RSI: 00002000000037c0 RDI: 0000000000000003 [ 905.540409][T19237] RBP: 00007f9bf65f7090 R08: 0000200000003700 R09: 0000000000000000 [ 905.540422][T19237] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 905.540433][T19237] R13: 00007f9bf59e6038 R14: 00007f9bf59e5fa0 R15: 00007f9bf5b0fa28 [ 905.540463][T19237] [ 905.838026][ C1] vkms_vblank_simulate: vblank timer overrun [ 905.907896][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 905.938770][T19241] netlink: 'syz.4.3466': attribute type 1 has an invalid length. [ 905.994707][T19241] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 906.006619][T19241] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 906.043616][T19245] bond3: (slave bridge2): Enslaving as an active interface with a down link [ 906.071239][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 906.084574][ T9] usb 3-1: config 1 has no interface number 0 [ 906.087238][T19245] bond3: (slave gretap1): making interface the new active one [ 906.099014][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 906.099850][T19245] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 906.133312][ T9] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 906.145413][ T9] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.169919][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 906.169948][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 906.169989][ T9] usb 3-1: Product: syz [ 906.170004][ T9] usb 3-1: Manufacturer: syz [ 906.170019][ T9] usb 3-1: SerialNumber: syz [ 906.204083][ T10] usb 2-1: usb_control_msg returned -71 [ 906.245041][T19232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 906.281861][ T10] usbtmc 2-1:16.0: can't read capabilities [ 906.318661][ T10] usb 2-1: USB disconnect, device number 30 [ 906.481140][T19232] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 906.645784][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 906.706639][T19232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.717827][T19232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 906.795643][ T10] usb 2-1: device descriptor read/64, error -71 [ 907.035613][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 907.045719][ T5925] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 907.165697][ T10] usb 2-1: device descriptor read/64, error -71 [ 907.205693][ T5925] usb 5-1: Using ep0 maxpacket: 32 [ 907.220944][ T5925] usb 5-1: config 0 has an invalid interface number: 79 but max is 0 [ 907.235787][ T5925] usb 5-1: config 0 has no interface number 0 [ 907.247974][ T5925] usb 5-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 907.265749][ T9] usb 3-1: Incompatible driver and firmware versions [ 907.278886][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.296719][ T10] usb usb2-port1: attempt power cycle [ 907.303235][ T9] usb 3-1: USB disconnect, device number 42 [ 907.313016][ T5925] usb 5-1: Product: syz [ 907.318780][ T5925] usb 5-1: Manufacturer: syz [ 907.323660][ T5925] usb 5-1: SerialNumber: syz [ 907.333685][T19264] program syz.3.3473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 907.364758][ T5925] usb 5-1: config 0 descriptor?? [ 907.386584][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 907.386601][ T30] audit: type=1326 audit(1762145195.802:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.421567][ T30] audit: type=1326 audit(1762145195.812:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.446524][ T30] audit: type=1326 audit(1762145195.812:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.470469][ T30] audit: type=1326 audit(1762145195.812:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.493394][ T30] audit: type=1326 audit(1762145195.812:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.517186][ T30] audit: type=1326 audit(1762145195.812:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.540610][ T30] audit: type=1326 audit(1762145195.812:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.568463][ T30] audit: type=1326 audit(1762145195.812:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.600304][ T30] audit: type=1326 audit(1762145196.022:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.600340][ T30] audit: type=1326 audit(1762145196.022:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19265 comm="syz.2.3474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f998efc9 code=0x7ffc0000 [ 907.627453][ T5925] cp210x 5-1:0.79: cp210x converter detected [ 907.627914][ T5925] cp210x 5-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 907.627938][ T5925] cp210x 5-1:0.79: querying part number failed [ 907.651434][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 907.654219][ T5925] usb 5-1: cp210x converter now attached to ttyUSB0 [ 907.657339][ T5925] usb 5-1: USB disconnect, device number 42 [ 907.668827][ T5925] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 907.669380][ T5925] cp210x 5-1:0.79: device disconnected [ 907.675340][ T10] usb 2-1: device descriptor read/8, error -71 [ 907.768173][T19264] ip6gre1: entered promiscuous mode [ 907.773627][T19264] ip6gre1: entered allmulticast mode [ 907.905669][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 907.931027][ T10] usb 2-1: device descriptor read/8, error -71 [ 908.066233][ T10] usb usb2-port1: unable to enumerate USB device [ 908.410102][ T983] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 908.417816][T12254] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 908.615600][ T983] usb 5-1: Using ep0 maxpacket: 32 [ 908.622925][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 908.635159][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 908.645570][T12254] usb 3-1: Using ep0 maxpacket: 8 [ 908.694683][T12254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 908.710761][T12254] usb 3-1: config 8 has an invalid interface number: 24 but max is 0 [ 908.750438][T12254] usb 3-1: config 8 has no interface number 0 [ 908.764833][T12254] usb 3-1: config 8 interface 24 altsetting 2 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 908.778853][ T983] usb 5-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 908.797336][T12254] usb 3-1: config 8 interface 24 has no altsetting 0 [ 908.807347][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.816752][ T57] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 908.844023][ T983] usb 5-1: config 0 descriptor?? [ 908.865210][T12254] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 908.885691][T12254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.941654][T12254] usb 3-1: Product: syz [ 908.951765][T12254] usb 3-1: Manufacturer: syz [ 908.961918][T12254] usb 3-1: SerialNumber: syz [ 909.025658][ T57] usb 4-1: Using ep0 maxpacket: 8 [ 909.041386][ T57] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 909.056430][ T57] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 909.076169][ T57] usb 4-1: config 179 has no interface number 0 [ 909.090885][ T57] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 909.110420][ T57] usb 4-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 909.138131][ T57] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 909.156087][ T57] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.312865][ T983] smartjoyplus 0003:0925:8866.002F: unknown main item tag 0x6 [ 909.481599][ T983] smartjoyplus 0003:0925:8866.002F: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.4-1/input0 [ 909.514900][ T983] smartjoyplus 0003:0925:8866.002F: no output reports found [ 909.690740][ T983] usb 5-1: USB disconnect, device number 43 [ 910.003212][T19299] fido_id[19299]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 910.170302][T19306] netlink: 'syz.4.3486': attribute type 9 has an invalid length. [ 910.178662][ T57] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 910.186797][T19306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 910.365116][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.379840][ T57] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 910.506221][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.572711][ T57] usb 2-1: config 0 descriptor?? [ 910.586318][ T57] pwc: Askey VC010 type 2 USB webcam detected. [ 910.817045][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 910.997823][T12254] vmk80xx 3-1:8.24: driver 'vmk80xx' failed to auto-configure device. [ 911.006833][ T57] pwc: recv_control_msg error -32 req 02 val 2b00 [ 911.015315][ T57] pwc: recv_control_msg error -32 req 02 val 2700 [ 911.022876][ T57] pwc: recv_control_msg error -32 req 02 val 2c00 [ 911.032380][ T57] pwc: recv_control_msg error -32 req 04 val 1000 [ 911.044894][ T57] pwc: recv_control_msg error -32 req 04 val 1300 [ 911.055864][ T57] pwc: recv_control_msg error -32 req 04 val 1400 [ 911.095152][ T24] usb 5-1: config 3 has an invalid interface number: 168 but max is 0 [ 911.107755][ T24] usb 5-1: config 3 has no interface number 0 [ 911.120429][ T24] usb 5-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 911.143319][ T57] pwc: recv_control_msg error -32 req 02 val 2000 [ 911.340330][T12254] usb 3-1: USB disconnect, device number 43 [ 911.346597][ T24] usb 5-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 911.366162][ T57] pwc: recv_control_msg error -32 req 04 val 1500 [ 911.444992][ T57] pwc: recv_control_msg error -32 req 02 val 2500 [ 911.463734][ T24] usb 5-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 911.474445][ T57] pwc: recv_control_msg error -32 req 02 val 2400 [ 911.481482][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 911.491410][ T57] pwc: recv_control_msg error -32 req 02 val 2600 [ 911.498284][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.506949][ T57] pwc: recv_control_msg error -32 req 02 val 2900 [ 911.514017][ T57] pwc: recv_control_msg error -32 req 02 val 2800 [ 911.521547][ T57] pwc: recv_control_msg error -32 req 04 val 1100 [ 911.531176][ T57] pwc: Registered as video103. [ 911.537430][ T57] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input138 [ 911.553778][T19311] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 911.749939][ T10] usb 4-1: USB disconnect, device number 55 [ 911.780785][T12254] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 911.794338][ T57] usb 2-1: USB disconnect, device number 35 [ 911.955839][T12254] usb 3-1: Using ep0 maxpacket: 32 [ 911.964755][T12254] usb 3-1: config 0 has an invalid interface number: 79 but max is 0 [ 911.982692][T12254] usb 3-1: config 0 has no interface number 0 [ 912.066411][T12254] usb 3-1: New USB device found, idVendor=16dc, idProduct=0015, bcdDevice=84.53 [ 912.122280][T12254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.141383][T12254] usb 3-1: Product: syz [ 912.148600][T12254] usb 3-1: Manufacturer: syz [ 912.153578][T12254] usb 3-1: SerialNumber: syz [ 912.262799][T12254] usb 3-1: config 0 descriptor?? [ 912.842095][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 912.915873][T12254] cp210x 3-1:0.79: cp210x converter detected [ 912.930066][T12254] cp210x 3-1:0.79: failed to get vendor val 0x370b size 1: -71 [ 912.954959][T12254] cp210x 3-1:0.79: querying part number failed [ 913.035702][ T10] usb 4-1: device descriptor read/64, error -71 [ 913.035778][T12254] usb 3-1: cp210x converter now attached to ttyUSB0 [ 913.143331][T12254] usb 3-1: USB disconnect, device number 44 [ 913.222815][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 913.306213][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 913.336668][T12254] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 913.344826][T12254] cp210x 3-1:0.79: device disconnected [ 913.356382][ T24] usb 5-1: string descriptor 0 read error: -71 [ 913.363389][ T24] keyspan 5-1:3.168: Keyspan 2 port adapter converter detected [ 913.374650][ T24] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 1 [ 913.385648][ T24] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 84 [ 913.394147][ T24] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 2 [ 913.404802][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 913.442550][ T24] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 88 [ 913.451360][ T24] keyspan 5-1:3.168: found no endpoint descriptor for endpoint 6 [ 913.461692][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 913.469829][ T10] usb 4-1: device descriptor read/64, error -71 [ 913.479803][ T24] usb 5-1: USB disconnect, device number 44 [ 913.558744][T19330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3493'. [ 913.606411][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 913.606627][ T10] usb usb4-port1: attempt power cycle [ 913.635027][T19332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3493'. [ 913.654908][T19328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 913.699189][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 913.729896][ T24] keyspan 5-1:3.168: device disconnected [ 913.833981][T19327] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.841750][T19327] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.112716][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.115743][ T10] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 914.130568][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3496'. [ 914.159076][ T10] usb 4-1: device descriptor read/8, error -71 [ 914.180388][T19327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.225608][ T24] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 914.396659][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 914.410895][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 914.419650][ T24] usb 5-1: can't read configurations, error -22 [ 914.427182][ T10] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 914.478084][ T10] usb 4-1: device descriptor read/8, error -71 [ 914.525601][ T5950] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 914.536398][T19330] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 914.546659][T19332] bond0: ARP target 170.170.170.170 is already present [ 914.565739][ T24] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 914.576241][T19332] bond0: option arp_ip_target: invalid value (2863311530) [ 914.680790][ T10] usb usb4-port1: unable to enumerate USB device [ 914.708790][T19328] geneve2: entered promiscuous mode [ 914.732096][T19328] geneve2: entered allmulticast mode [ 914.782224][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 914.793970][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 914.809158][ T24] usb 5-1: can't read configurations, error -22 [ 914.835652][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 914.841888][ T24] usb usb5-port1: attempt power cycle [ 915.023276][T19343] vlan3: entered promiscuous mode [ 915.027250][T19351] netlink: 'syz.2.3497': attribute type 9 has an invalid length. [ 915.042092][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3497'. [ 915.044058][T19343] bond0: entered promiscuous mode [ 915.071905][T19343] bond_slave_0: entered promiscuous mode [ 915.102690][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.113086][ T5950] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 915.122336][T19343] bond_slave_1: entered promiscuous mode [ 915.128386][T19343] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 915.209352][T19354] delete_channel: no stack [ 915.217801][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.265700][ T24] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 915.273644][ T5950] usb 2-1: config 0 descriptor?? [ 915.335259][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 915.387264][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 915.407616][ T5950] gspca_main: spca501-2.14.0 probing 0000:0000 [ 915.427159][ T24] usb 5-1: can't read configurations, error -22 [ 915.576027][ T24] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 915.624114][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 915.641195][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 915.665964][ T24] usb 5-1: can't read configurations, error -22 [ 915.689171][ T24] usb usb5-port1: unable to enumerate USB device [ 915.825625][ T5925] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 915.876525][T19342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3496'. [ 915.908151][ T5950] gspca_spca501: reg write: error -71 [ 915.913567][ T5950] spca501 2-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 915.945101][ T5950] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 915.999230][T19376] usb usb8: usbfs: process 19376 (syz.3.3503) did not claim interface 0 before use [ 916.009494][T19376] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 916.216993][ T5950] usb 2-1: USB disconnect, device number 36 [ 918.195709][ T5925] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 918.209253][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 918.209270][ T30] audit: type=1326 audit(1762145206.632:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 918.293221][ T30] audit: type=1326 audit(1762145206.632:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 918.355813][ T5925] usb 5-1: device descriptor read/64, error -71 [ 918.509923][T19405] dlm: no locking on control device [ 918.645998][ T30] audit: type=1326 audit(1762145206.632:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 918.669454][T19407] netlink: 'syz.0.3512': attribute type 4 has an invalid length. [ 918.751930][T19407] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3512'. [ 918.794513][ T30] audit: type=1326 audit(1762145206.632:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 918.820661][T19407] .`: renamed from bond0 [ 918.899685][ T5925] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 918.928575][ T30] audit: type=1326 audit(1762145206.632:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 919.125006][ T30] audit: type=1326 audit(1762145206.662:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 919.157294][T19416] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3514'. [ 919.185804][ T5925] usb 5-1: device descriptor read/64, error -71 [ 919.199959][ T30] audit: type=1326 audit(1762145206.662:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 919.405717][ T5925] usb usb5-port1: attempt power cycle [ 919.412233][ T30] audit: type=1326 audit(1762145206.662:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 919.453219][ T30] audit: type=1326 audit(1762145206.662:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 919.537054][ T30] audit: type=1326 audit(1762145206.662:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19398 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f995218efc9 code=0x7ffc0000 [ 919.745683][ T5925] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 919.786325][ T5925] usb 5-1: device descriptor read/8, error -71 [ 920.055619][ T5925] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 920.087918][ T5925] usb 5-1: device descriptor read/8, error -71 [ 920.199831][ T5925] usb usb5-port1: unable to enumerate USB device [ 920.236694][T19427] FAULT_INJECTION: forcing a failure. [ 920.236694][T19427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 920.312052][T19427] CPU: 1 UID: 0 PID: 19427 Comm: syz.3.3517 Not tainted syzkaller #0 PREEMPT(full) [ 920.312076][T19427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 920.312087][T19427] Call Trace: [ 920.312094][T19427] [ 920.312102][T19427] dump_stack_lvl+0x189/0x250 [ 920.312129][T19427] ? __pfx____ratelimit+0x10/0x10 [ 920.312151][T19427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 920.312173][T19427] ? __pfx__printk+0x10/0x10 [ 920.312203][T19427] should_fail_ex+0x414/0x560 [ 920.312234][T19427] _copy_to_user+0x31/0xb0 [ 920.312258][T19427] move_addr_to_user+0x119/0x1f0 [ 920.312285][T19427] ____sys_recvmsg+0x228/0x460 [ 920.312312][T19427] ? __pfx_____sys_recvmsg+0x10/0x10 [ 920.312353][T19427] ? import_iovec+0x74/0xa0 [ 920.312377][T19427] ___sys_recvmsg+0x1b5/0x510 [ 920.312403][T19427] ? __pfx____sys_recvmsg+0x10/0x10 [ 920.312446][T19427] ? __fget_files+0x3a0/0x420 [ 920.312472][T19427] do_recvmmsg+0x307/0x770 [ 920.312500][T19427] ? __pfx_do_recvmmsg+0x10/0x10 [ 920.312532][T19427] ? _copy_from_user+0x94/0xb0 [ 920.312574][T19427] __x64_sys_recvmmsg+0x1af/0x240 [ 920.312598][T19427] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 920.312623][T19427] ? do_syscall_64+0xbe/0xfa0 [ 920.312648][T19427] do_syscall_64+0xfa/0xfa0 [ 920.312669][T19427] ? lockdep_hardirqs_on+0x9c/0x150 [ 920.312690][T19427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.312708][T19427] ? clear_bhb_loop+0x60/0xb0 [ 920.312730][T19427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.312746][T19427] RIP: 0033:0x7f995218efc9 [ 920.312762][T19427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.312776][T19427] RSP: 002b:00007f9952fc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 920.312796][T19427] RAX: ffffffffffffffda RBX: 00007f99523e5fa0 RCX: 00007f995218efc9 [ 920.312809][T19427] RDX: 0000000000000043 RSI: 00002000000037c0 RDI: 0000000000000003 [ 920.312821][T19427] RBP: 00007f9952fc7090 R08: 0000200000003700 R09: 0000000000000000 [ 920.312834][T19427] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 920.312845][T19427] R13: 00007f99523e6038 R14: 00007f99523e5fa0 R15: 00007f995250fa28 [ 920.312876][T19427] [ 921.024446][T19446] [ 921.026906][T19446] ============================================ [ 921.033247][T19446] WARNING: possible recursive locking detected [ 921.039420][T19446] syzkaller #0 Not tainted [ 921.043842][T19446] -------------------------------------------- [ 921.049999][T19446] syz.1.3525/19446 is trying to acquire lock: [ 921.056069][T19446] ffff888070d30d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 921.067199][T19446] [ 921.067199][T19446] but task is already holding lock: [ 921.074555][T19446] ffff888070d30d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 921.084416][T19446] and the lock comparison function returns 0: [ 921.090469][T19446] [ 921.090469][T19446] other info that might help us debug this: [ 921.098533][T19446] Possible unsafe locking scenario: [ 921.098533][T19446] [ 921.106093][T19446] CPU0 [ 921.109385][T19446] ---- [ 921.112659][T19446] lock(&dev_instance_lock_key#20); [ 921.117935][T19446] lock(&dev_instance_lock_key#20); [ 921.123204][T19446] [ 921.123204][T19446] *** DEADLOCK *** [ 921.123204][T19446] [ 921.131422][T19446] May be due to missing lock nesting notation [ 921.131422][T19446] [ 921.139747][T19446] 2 locks held by syz.1.3525/19446: [ 921.145044][T19446] #0: ffffffff8f2cb648 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 921.154038][T19446] #1: ffff888070d30d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 921.164340][T19446] [ 921.164340][T19446] stack backtrace: [ 921.170261][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.1.3525 Not tainted syzkaller #0 PREEMPT(full) [ 921.170286][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 921.170296][T19446] Call Trace: [ 921.170304][T19446] [ 921.170312][T19446] dump_stack_lvl+0x189/0x250 [ 921.170338][T19446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.170360][T19446] ? __pfx__printk+0x10/0x10 [ 921.170379][T19446] ? print_lock_name+0xde/0x100 [ 921.170397][T19446] print_deadlock_bug+0x28b/0x2a0 [ 921.170418][T19446] validate_chain+0x1a3f/0x2140 [ 921.170447][T19446] __lock_acquire+0xab9/0xd20 [ 921.170466][T19446] ? __netdev_update_features+0xcb1/0x1be0 [ 921.170486][T19446] lock_acquire+0x120/0x360 [ 921.170502][T19446] ? __netdev_update_features+0xcb1/0x1be0 [ 921.170534][T19446] __mutex_lock+0x187/0x1350 [ 921.170556][T19446] ? __netdev_update_features+0xcb1/0x1be0 [ 921.170575][T19446] ? stack_trace_save+0x9c/0xe0 [ 921.170596][T19446] ? __pfx_stack_trace_save+0x10/0x10 [ 921.170617][T19446] ? stack_depot_save_flags+0x40/0x860 [ 921.170642][T19446] ? __netdev_update_features+0xcb1/0x1be0 [ 921.170663][T19446] ? __pfx___mutex_lock+0x10/0x10 [ 921.170685][T19446] ? bond_fix_features+0x191/0x1d0 [ 921.170712][T19446] __netdev_update_features+0xcb1/0x1be0 [ 921.170737][T19446] ? __pfx___netdev_update_features+0x10/0x10 [ 921.170757][T19446] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 921.170777][T19446] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 921.170800][T19446] ? cfg80211_netdev_notifier_call+0x1e5/0x1440 [ 921.170826][T19446] ? __wake_up_common_lock+0x190/0x1f0 [ 921.170850][T19446] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 921.170873][T19446] ? consume_skb+0xce/0xf0 [ 921.170889][T19446] ? netlink_broadcast_filtered+0xf55/0x1000 [ 921.170917][T19446] netdev_change_features+0x72/0xd0 [ 921.170936][T19446] ? __pfx_netdev_change_features+0x10/0x10 [ 921.170957][T19446] ? netif_set_tso_max_size+0x10e/0x1d0 [ 921.170975][T19446] bond_compute_features+0x615/0x680 [ 921.171004][T19446] ? __pfx_bond_compute_features+0x10/0x10 [ 921.171030][T19446] bond_netdev_event+0x72e/0xe80 [ 921.171053][T19446] ? __pfx_bond_netdev_event+0x10/0x10 [ 921.171073][T19446] ? inetdev_event+0x464/0x15b0 [ 921.171098][T19446] ? igmp_netdev_event+0x7c/0x770 [ 921.171123][T19446] notifier_call_chain+0x1b6/0x3e0 [ 921.171146][T19446] netdev_features_change+0x85/0xc0 [ 921.171169][T19446] ? __pfx_netdev_features_change+0x10/0x10 [ 921.171191][T19446] ? security_capable+0x7e/0x2e0 [ 921.171215][T19446] dev_ethtool+0x1541/0x19c0 [ 921.171240][T19446] ? __pfx_dev_ethtool+0x10/0x10 [ 921.171263][T19446] ? dev_load+0x21/0x1f0 [ 921.171285][T19446] dev_ioctl+0x392/0x1150 [ 921.171310][T19446] sock_do_ioctl+0x22c/0x300 [ 921.171332][T19446] ? __pfx_sock_do_ioctl+0x10/0x10 [ 921.171358][T19446] sock_ioctl+0x576/0x790 [ 921.171378][T19446] ? __pfx_sock_ioctl+0x10/0x10 [ 921.171399][T19446] ? __fget_files+0x3a0/0x420 [ 921.171415][T19446] ? __fget_files+0x2a/0x420 [ 921.171433][T19446] ? bpf_lsm_file_ioctl+0x9/0x20 [ 921.171452][T19446] ? __pfx_sock_ioctl+0x10/0x10 [ 921.171471][T19446] __se_sys_ioctl+0xfc/0x170 [ 921.171493][T19446] do_syscall_64+0xfa/0xfa0 [ 921.171513][T19446] ? lockdep_hardirqs_on+0x9c/0x150 [ 921.171540][T19446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.171556][T19446] ? clear_bhb_loop+0x60/0xb0 [ 921.171575][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.171592][T19446] RIP: 0033:0x7fc1a3f8efc9 [ 921.171608][T19446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.171622][T19446] RSP: 002b:00007fc1a4e6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 921.171642][T19446] RAX: ffffffffffffffda RBX: 00007fc1a41e5fa0 RCX: 00007fc1a3f8efc9 [ 921.171656][T19446] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000004 [ 921.171667][T19446] RBP: 00007fc1a4011f91 R08: 0000000000000000 R09: 0000000000000000 [ 921.171678][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.171689][T19446] R13: 00007fc1a41e6038 R14: 00007fc1a41e5fa0 R15: 00007fc1a430fa28 [ 921.171710][T19446] [ 921.377150][ T5950] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 921.736870][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 921.747995][ T5950] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 921.757068][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.766919][ T5950] usb 3-1: config 0 descriptor?? [ 921.977044][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 921.983121][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 921.993055][ T5950] usb 3-1: USB disconnect, device number 46 [ 922.415605][ T5955] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 922.565566][ T5955] usb 3-1: Using ep0 maxpacket: 32 [ 922.572001][ T5955] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.582999][ T5955] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 922.592341][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.602286][ T5955] usb 3-1: config 0 descriptor?? [ 922.609408][ T5955] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 922.619580][ T5955] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 923.012456][T19444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.021183][T19444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 923.032940][ T5950] usb 3-1: USB disconnect, device number 47 [ 923.040536][ T5950] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 928.575679][T15767] Bluetooth: hci3: command 0x0406 tx timeout