last executing test programs: 23.97856926s ago: executing program 2 (id=2403): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) getsockopt$inet_buf(r3, 0x0, 0x26, &(0x7f00000001c0)=""/37, &(0x7f0000000240)=0x25) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f00000005c0), 0x4) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000000100)=0x40, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmsg$inet6(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}, 0x6b87bd76ddbcbbe) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 20.8976107s ago: executing program 2 (id=2408): sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x180, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x45, &(0x7f0000000240)=0xa118, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00221500a9a5002c9bdc3a379d431e5ecc1225845442ef0ea8a4999148ece50bbaa0fd7752b8f412aebf2da52aa52a854e14281429c5b79351e7f3ce980ea63143983ecb12e7100c6145d07e4a58d4fe85c37752824da70a017653ad930daf5a22a846e2c87d604c366844206cdaa404d4ec7a738a866fb24c19eca827dc733ce239fdd387f7cc248721d0c5210e6facefc74c74ab8ef9b459586ff245b6e3300f92ad50b671b4677aaf7234dfe7b1b8e37363b4fc49a878363c112c889dbd3002ded135c4bf0b07"], 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x100) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) set_mempolicy(0x3, &(0x7f0000000280)=0x5, 0x3) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r4, 0x0, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/358], 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000100001040000000000000000000000002d271a11e620e136426cbe3f479a1a0866b6e813eedc67ef72f4f0726d810db0b51d90", @ANYRES32=r8, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300040000000500060000000000"], 0x44}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f0000000080)={{{0x4, 0x1}}, 0x25, 0x4, &(0x7f0000000040)="4a2755aeb152301e949b36653863223513f682133f37a90b7f81af3f89bfc39c24efd24bbc"}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000000c0)={0x4, r1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x10, 0x5, 0x3, {{0xa, 0x4, 0x2, 0x20, 0x28, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @empty, {[@end, @generic={0x86, 0x12, "366f32ff12b986094a970e923167b8f0"}]}}}}}) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000018000000f50000ff030004000008000100ac30000105001b000000000008000f0003000000060015000100000008000400", @ANYRES32=r10, @ANYBLOB="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"/401], 0x44}, 0x1, 0x0, 0x0, 0xc880}, 0x20000080) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000100)) 18.301093277s ago: executing program 2 (id=2420): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00', 0x60}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr={{0x18, 0x29, 0x43, {0x0, 0x0, 0x2}}}], 0x18}, 0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_udp_int(r0, 0x6b, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x4000400) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, 0x0, 0x34004000) sendmsg$sock(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900), 0x200000000000024e, 0x0, 0xffffffffffffffc3}, 0x24040085) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp(0x2, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 18.056295599s ago: executing program 2 (id=2421): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e400)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000141bdb7989c08b32000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004140)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x147982, 0x40) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x12, r3, 0x0) syz_clone(0x41080, 0x0, 0x0, 0x0, 0x0, 0x0) 14.738003923s ago: executing program 2 (id=2435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="5c00000012006b039e3fe3d86e17aa31076b876c1d0000007ea60864160af3650400410038001d008fb32c5381e517d34460bc24eab556a705251e61", 0x3c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000206050000faffffff00000000000000"], 0x14}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001400)={'vcan0\x00'}) sendmmsg$inet(r2, &(0x7f0000001bc0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="24be649f255eab1ea63917eb4b3c825dbb007404869cd13280cf44895e34e7f475336607729c5f114724c5e27c7643034d5812d0022d8f2fd7b64834a156d79b2c2b7db18da9c7d3917b61", 0x4b}], 0x1}}], 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81e8943c, &(0x7f00000001c0)={0x0, ""/256, 0x0, 0x0}) r9 = socket$inet6(0xa, 0x80000, 0x200) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000980)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r9, 0xc0709411, &(0x7f0000000080)={{r10, 0x5, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x2, 0x2, 0x80000000, 0x7a1, 0x1, 0x101, 0x29d3, 0x0, 0xfff, 0x8, 0xf4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r7, 0xd000943e, &(0x7f0000000400)={r8, r10, "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", "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"}) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgsnd(0x0, &(0x7f0000000000)=ANY=[], 0x2000, 0x0) close(0x3) close(0x4) 14.644021924s ago: executing program 2 (id=2436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000040)=0x6, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @broadcast}, 0x10) accept4(r3, 0x0, 0x0, 0x0) 12.716437465s ago: executing program 4 (id=2440): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a001"], 0x1a0}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x25, 0x4, @val=@kprobe_multi=@syms={0x1, 0x8, &(0x7f0000000300)=[&(0x7f0000000080)='\xd5\x00', &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='-\xf8}\x7f.@\'-\xfd[\x00', &(0x7f00000002c0)='),^%#\x00']}}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f010000000000000000000905810320000000000905820208000000"], 0x0) getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000240000000c00018008000100", @ANYRES32=r8, @ANYBLOB="322d711b89f326efcdc8fd6a15f04537f9e28f5f780cb7ecfddc3a4fc4ec0a534777f7cd6656e2c86183c1bb2b48152301f8ffff150000000000000000000000000000803a573f9e87be6a40a4387a4777e865f1e74a30d5c9d276070fc94c2b71487478206951e58c21a9fd5c45c5fd5680ecb42bd540063f7e67e439732a68cac6dfeed54c68f4dc050000008dfed714d332dd00"/159], 0x20}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) 10.156426723s ago: executing program 0 (id=2443): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x4, 0x40, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f00000002c0)=""/4096, &(0x7f0000000000)=0x1000) 9.489209659s ago: executing program 4 (id=2445): r0 = syz_open_dev$video(&(0x7f0000000340), 0x2, 0x8340) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000100), 0x1, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0405619, &(0x7f0000000140)={0x0, 0x0, "57300b8a34f6e96eb9ffd70d3a24c4a1c0081f6a6064fc80"}) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="000f02000000cd11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000901000a000000034000030000000003", 0x1d) r4 = memfd_secret(0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@userptr={0xfffffff8, 0x4, 0x4, 0x71000, 0x8, {0x77359400}, {0x5, 0x8, 0x8, 0x4, 0x76, 0x7, "008000"}, 0x2, 0x2, {0x0}, 0x1}) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x0) 8.50842251s ago: executing program 0 (id=2449): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @dev, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7cb, &(0x7f0000000180)={{@local, 0x300}}) syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x1, 0x10400) r2 = openat$adsp1(0xffffff9c, &(0x7f00000001c0), 0xa0c3, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, &(0x7f0000000300)) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffb000/0x2000)=nil) r3 = syz_open_dev$hiddev(&(0x7f0000000100), 0x8, 0x0) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="15000000080000000400"/20, @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000003996079fcb527d321c437a622f0f60f1f81e64c4028964fa2bfb40a5dd4b9c121df748f7900c5cd850eefe8155f6d1c16b0016ba431096887b061a83398095884a774e5c6bcccf7d64f45baf13c3d16c5dfc6758d7143395ab527239f1493a2e0975ed208b5c5f5f7c9c75af1ebfae31407b6d9ebaa864e924eb543b67d625bb2fcd6256d6a124417e70e51c1afb81d6e5f3c32163c18ebd3c19970daf4b6c317d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x48) mlockall(0x2) 8.291272341s ago: executing program 0 (id=2450): sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x180, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x45, &(0x7f0000000240)=0xa118, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00221500a9a5002c9bdc3a379d431e5ecc1225845442ef0ea8a4999148ece50bbaa0fd7752b8f412aebf2da52aa52a854e14281429c5b79351e7f3ce980ea63143983ecb12e7100c6145d07e4a58d4fe85c37752824da70a017653ad930daf5a22a846e2c87d604c366844206cdaa404d4ec7a738a866fb24c19eca827dc733ce239fdd387f7cc248721d0c5210e6facefc74c74ab8ef9b459586ff245b6e3300f92ad50b671b4677aaf7234dfe7b1b8e37363b4fc49a878363c112c889dbd3002ded135c4bf0b07"], 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x100) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) set_mempolicy(0x3, &(0x7f0000000280)=0x5, 0x3) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r4, 0x0, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/358], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000100001040000000000000000000000002d271a11e620e136426cbe3f479a1a0866b6e813eedc67ef72f4f0726d810db0b51d90", @ANYRES32=r8, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300040000000500060000000000"], 0x44}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f0000000080)={{{0x4, 0x1}}, 0x25, 0x4, &(0x7f0000000040)="4a2755aeb152301e949b36653863223513f682133f37a90b7f81af3f89bfc39c24efd24bbc"}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000000c0)={0x4, r1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x10, 0x5, 0x3, {{0xa, 0x4, 0x2, 0x20, 0x28, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @empty, {[@end, @generic={0x86, 0x12, "366f32ff12b986094a970e923167b8f0"}]}}}}}) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000018000000f50000ff030004000008000100ac30000105001b000000000008000f0003000000060015000100000008000400", @ANYRES32=r10, @ANYBLOB="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"/401], 0x44}, 0x1, 0x0, 0x0, 0xc880}, 0x20000080) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000100)) 6.826206792s ago: executing program 1 (id=2451): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)={0x0, 0x114, "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"}, &(0x7f0000000500)=0x11c) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000100)=@generic={0x11, "00000100000000000874e4bf7fb3a6835b76e252922cb18f6e2e2aba0000040000003836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e156c5027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r7, &(0x7f0000000080)=[{0x21, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={'batadv0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) sendto$inet6(r8, &(0x7f0000000000)="7800000018001f07b9409b0dffff000d0216be0402030605060140034300080012000000fac8388827a685a168d0bf46d32345652b000000caaf6c26c291214549935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160012000a000000000000000000000040f6b0f8eca0faed", 0x78, 0x0, 0x0, 0x0) r9 = socket(0xa, 0x1, 0x0) ioctl(r9, 0x8916, &(0x7f0000000240)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000001400210100000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fac0e2ff00000000000000"], 0x40}}, 0x0) fsetxattr(r3, &(0x7f0000000280)=@random={'user.', 'H!#$$^$\'$@\x00'}, &(0x7f00000002c0)='.\x00', 0x2, 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000300010000004500000025000000190011000600ad000200000000000006040000000000000000", 0x39}], 0x1) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r10, 0x0, 0xc8, &(0x7f0000000300), 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000540)=@assoc_value={r1, 0x8001}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r12 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000080000000000000a00020000024e22fdffffff000000000000000040000000ffffffff000000004d00000000000000", @ANYRES32=0x0, @ANYRES16=r11], 0x54}}, 0xe9bb73711ee3bf56) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x24b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 6.25108113s ago: executing program 4 (id=2454): socket$nl_route(0x10, 0x3, 0x0) r0 = userfaultfd(0x801) unshare(0x0) syz_emit_vhci(&(0x7f00000028c0)=ANY=[@ANYRES64=r0], 0xd) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000190081054e81f782db44b904021d005c06007c09e8fe55a10a0005400100142603600e1208001e0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$FUSE_INIT(r4, &(0x7f0000000240)={0x50}, 0x50) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@multiplanar_fd={0x0, 0x7, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "56ebfce1"}, 0x0, 0x4, {0x0}}) 3.818443596s ago: executing program 0 (id=2455): io_uring_setup(0x2e34, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x3a}) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, 0x0, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x20}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 3.628749763s ago: executing program 4 (id=2456): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000340)='./file0\x00', 0x203) write$binfmt_misc(r3, &(0x7f0000000100), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x3001, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0x50, 0xc7, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x8dd}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xce, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x5, 0x40, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x2, 0x5, 0x20, 0x40}, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xff, "beb67533879301a25c7c61d98b0c0368"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40d}}, {0x12, &(0x7f0000000240)=@string={0x12, 0x3, "3e054838bb32106316dd56a10baf3042"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x3409}}]}) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) write$binfmt_misc(r1, &(0x7f0000000740), 0xfffffc8f) splice(r0, 0x0, r6, 0x0, 0x804, 0x8) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000100000200000000000000005c28024ab30b1e1800000000"], 0x48) 3.432901678s ago: executing program 0 (id=2457): r0 = socket$inet6(0xa, 0x6, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x2, &(0x7f0000000080)=[{0x6, 0x5, 0x4, 0x7ffffdbf}, {0x9, 0x0, 0x3, 0x6}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000380)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, r3}, 0xc) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d312"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0x4008af13, &(0x7f0000000200)) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000500)="66baa000ecc744240000000000c744240204000000c7442406000000000f011c2466ba400066ed0f3066baf80cc744240023000000c74424026edfcafdc7442406000000000f011c24c4c1c1dd820e00000066bafc0cec650f015bb066f30f1efcf30fbd3ab9800000c00f7b35000100000f300fc7ab1cdd2037", 0x7a}], 0x0, 0x42, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x5) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000007f000014001a80100005800c000380080001"], 0x34}}, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="4dc07f947163300c", 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="a1", 0x1}, {&(0x7f0000000280)="5991f1eb35b0cc", 0x7}], 0x2}}], 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvfrom$l2tp6(r0, &(0x7f0000000240)=""/6, 0x6, 0x2040, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}, 0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) brk(0x0) syz_usb_connect(0x0, 0x6ac, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x0) 3.092007699s ago: executing program 3 (id=2458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x2000, 0x2004c810, &(0x7f0000000040)={0xa, 0x4e22, 0x200003, @loopback, 0xfffffff7}, 0x1c) 2.842202812s ago: executing program 3 (id=2459): r0 = mq_open(&(0x7f0000000380)='$]\x00', 0x40, 0xc8, 0x0) readv(r0, &(0x7f0000002c40)=[{0x0, 0x3c}, {&(0x7f0000000100)=""/3, 0x3}], 0x2) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_FLAGS(r1, 0x118, &(0x7f0000000000), 0x0, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) mq_timedsend(r0, &(0x7f0000000140)="be0043ef672dc25054e3e86743ee5118d6e428ce98f3fc40ae17c52d1216bf17adf0b78e83b7f3986af794c03aeb03c2499aafed675c62daec12bbd5971725dcda6cd0d61906621663774f17e07dae755128ca32554c3551235f597e79ba0fba295bb82e6b876fb17f0c1f7127738f0a4cb5bdbbc315e8031c3949b0acba8c5170cea858be86cf00039d2e214a4b50d871ef087b4bd0654b4a90f41e4a5923ccaf28", 0xa2, 0x40, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}]}, 0x44}}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x7005e000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r7 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000001340)={{&(0x7f000040f000/0x2000)=nil, 0x2000}}) r8 = io_uring_setup(0x13fb, &(0x7f0000000200)={0x0, 0x7f38, 0x10, 0x0, 0xa2}) syz_io_uring_setup(0x3762, &(0x7f0000000280)={0x0, 0xd2a6, 0x1001, 0x3, 0x308, 0x0, r8}, &(0x7f0000000300), &(0x7f0000000340)) 2.817512175s ago: executing program 1 (id=2460): landlock_create_ruleset(&(0x7f00000000c0)={0x502}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000001c0)=""/15) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x0) fsopen(&(0x7f00000007c0)='minix\x00', 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socket(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_open_dev$loop(&(0x7f0000000000), 0xf5b, 0x4100) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x560, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x28) recvmsg(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40002000) syz_open_dev$vim2m(&(0x7f0000005f00), 0x7e5, 0x2) 2.572974849s ago: executing program 3 (id=2461): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000000206050000000000000000000000000009"], 0x20}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000000009040000010300000009210000000133070009058103"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000140)={@host, 0x73}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.515934545s ago: executing program 1 (id=2462): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e22, 0x80000, @rand_addr=' \x01\x00', 0x60}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=[@rthdr={{0x18, 0x29, 0x43, {0x0, 0x0, 0x2}}}], 0x18}, 0x8000) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_udp_int(r0, 0x6b, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_root(0xffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) unshare(0x4000400) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, 0x0, 0x34004000) sendmsg$sock(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000900), 0x200000000000024e, 0x0, 0xffffffffffffffc3}, 0x24040085) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) 1.990401315s ago: executing program 1 (id=2463): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x2001, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) clock_gettime(0x0, &(0x7f0000000680)) ppoll(&(0x7f0000000640)=[{r1, 0x4000}], 0x1, 0x0, 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 1.176094377s ago: executing program 0 (id=2464): sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="50fe2db973148de2f90ef914cdf8a423c995fa284864289ef8ed0e59d77304e5b1f25bc98404ec112404c50de6df87995cb35812767ae29846655dd9188b3e8891418a6498d93a08e2e525ae0c6e8377c2681a637086edc9110c087ffee6349f045f024c4493e407f95b5568769e747a7b6de46d4b7569f5093c850c50a98862df0072c3e609922c4a157407589f25523d8e591db4b40775a59f7767224684ad08b3f0ee25cddd87847c16b5d550b4ac03b62db172370321d4bcf330115d0fd82a033c35692d9ca437745620689d55ed544c1a81ac976d6207d06a757c3aa9be6912cef27cca6c9d0a82ef9b4420cd5e4d10a260add2074553e6abc71c9ac750b232455105aca91878c9ed0707ff793bf376d8a31bb9822bbd023a8979e2f04759fc99327a8026fc0a5a39fc2c76a292cf75337eda63d959d3029a0c72ba288b25ddc0d47fc0d36fd6296ab48f8607579c65c32da4c204c837b523229d6a2d68c8f23075a010a0c17da0dfbb926f9c4cacf08d78cf2d81587a154154d10984c1", 0x180, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x45, &(0x7f0000000240)=0xa118, 0x4) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00221500a9a5002c9bdc3a379d431e5ecc1225845442ef0ea8a4999148ece50bbaa0fd7752b8f412aebf2da52aa52a854e14281429c5b79351e7f3ce980ea63143983ecb12e7100c6145d07e4a58d4fe85c37752824da70a017653ad930daf5a22a846e2c87d604c366844206cdaa404d4ec7a738a866fb24c19eca827dc733ce239fdd387f7cc248721d0c5210e6facefc74c74ab8ef9b459586ff245b6e3300f92ad50b671b4677aaf7234dfe7b1b8e37363b4fc49a878363c112c889dbd3002ded135c4bf0b07"], 0x0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x100) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) set_mempolicy(0x3, &(0x7f0000000280)=0x5, 0x3) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) sendfile(r5, r4, 0x0, 0x6) syz_emit_ethernet(0x6a, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"/358], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000100001040000000000000000000000002d271a11e620e136426cbe3f479a1a0866b6e813eedc67ef72f4f0726d810db0b51d90", @ANYRES32=r8, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300040000000500060000000000"], 0x44}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f0000000080)={{{0x4, 0x1}}, 0x25, 0x4, &(0x7f0000000040)="4a2755aeb152301e949b36653863223513f682133f37a90b7f81af3f89bfc39c24efd24bbc"}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000000c0)={0x4, r1}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x20, 0x10, 0x5, 0x3, {{0xa, 0x4, 0x2, 0x20, 0x28, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @empty, {[@end, @generic={0x86, 0x12, "366f32ff12b986094a970e923167b8f0"}]}}}}}) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000703ac020580406709169000000010902120001000000000904"], 0x0) syz_usb_control_io(r11, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000018000000f50000ff030004000008000100ac30000105001b000000000008000f0003000000060015000100000008000400", @ANYRES32=r10, @ANYBLOB="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"/401], 0x44}, 0x1, 0x0, 0x0, 0xc880}, 0x20000080) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000100)) 1.054561805s ago: executing program 1 (id=2465): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0xf, 0x1, 0x2, "0d9a5c6dd40df16bd36cda90d17462b5c779ad2c2c1947c14fee1950dcf95c32", 0x38415262}) r1 = openat$vimc2(0xffffff9c, &(0x7f0000003d00), 0x2, 0x0) r2 = openat$binderfs_ctrl(0xffffff9c, &(0x7f0000003e40)='./binderfs/binder-control\x00', 0x2, 0x0) r3 = dup2(r1, r2) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000005480)={0x1, 0x101, 0x1, {0x80, 0x7c5, 0x10, 0xe}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="000000f5", @ANYRES16=r5, @ANYRES64=r5], 0xfdef) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) capget(&(0x7f0000002f00)={0x20071026}, 0x0) 850.667086ms ago: executing program 3 (id=2466): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, &(0x7f0000000100)) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="7f930832ee34b0150336e3db96be1030f2a6a5e2c9b768ae834b8349417d7b72e2dfe0002c4300001897d43052cae96064b55c8a04c6ad7f72cc5e3f5aba5b2320b7ca4d6498040000001d5bb298afeb3f41672fad4e35df84798463947e69102fbf7581b8eef9ffea68c80ae911c5cef286544566cff7e452e3f0c45fedeb36c6646f5c44aa585df450b5eebc5d6463fa", 0x91}, {&(0x7f0000000500)="0d58fa00a4a25557616d6ad626d271bcc615561efebc4402c75108000000a6cc871557ef079cfb94f1992cf5f8477c193de19ba52e949b73ff7cb3bb8b81dac1679408e377ed2ee99f8b90b9834cfbce090000000000000048e5303114822b01a9e91ea48e4c6dddfc5c7b1b15e38453ef5003eecd81b7ab2463cdf6afeabfb758b85d0b0e4a6393697faa7981612700b6bde099283468498cb826acfb102767224f523cd9dcc8ca28469a054bbec0763560a0d86c821a160e32363e8363c10ba7e6d9e4e5ba5ecccebf9359476ff46e0bed650e44fd6e5f70c18847a9c9877d7e58b6119575c17399daa8cfc1ede5072e7818f314cd5e3e6481974a590cb43a830661dd8779852fe2fdd197bfc6677c7054969349fd45e415ffb09cbd40a9ac936646e244caf5b12d201cfb339ff16c2d07c602f8474a0eb22d69db", 0x13c}], 0x2}, 0x4008094) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b80)=""/1, 0x1}, {&(0x7f0000000bc0)=""/26, 0x1a}, {&(0x7f0000000c00)=""/10, 0xa}], 0x3}}, {{0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000ec0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0xc0185500, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 546.291805ms ago: executing program 4 (id=2467): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) readv(r0, &(0x7f00000027c0)=[{&(0x7f0000000480)=""/86, 0x56}], 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff004000"}}) 358.546398ms ago: executing program 3 (id=2468): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async, rerun: 64) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) (rerun: 64) getpgid(r4) (async, rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x0, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x34}}, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 245.26799ms ago: executing program 3 (id=2469): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd(r0, &(0x7f0000000000)={[0x6, 0xb]}, 0x8) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x19, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x80}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0xf, "cf6af75d5cdcf048b19c939556"}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) 1.148035ms ago: executing program 1 (id=2470): connect$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @empty}, 0x10) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000000009040000010300000009210000000133070009058103"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000140)={@host, 0x73}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x0, 0x1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=2471): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c00020100800005260000000d240f0100000000000000f30006241a0000000905812300020000000904010000020d00000904010102020de4ff0805"], 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) r3 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r4, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) kernel console output (not intermixed with test programs): ialNumber=3 [ 993.297076][ T5309] usb 5-1: Product: syz [ 993.306149][ T5309] usb 5-1: Manufacturer: syz [ 993.310935][ T5309] usb 5-1: SerialNumber: syz [ 993.321131][ T5309] usb 5-1: config 0 descriptor?? [ 993.329720][ T5309] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 993.345294][T16712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.753179][T11266] usbhid 1-1:0.0: can't add hid device: -71 [ 993.759433][T11266] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 993.790786][T11266] usb 1-1: USB disconnect, device number 74 [ 993.802276][ T5215] usb 5-1: USB disconnect, device number 94 [ 994.498475][T13749] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 994.509205][T13749] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 994.549132][T13749] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 994.590678][T13749] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 994.598725][T13749] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 994.608641][T13749] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 994.827331][ T5215] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 995.407023][T11274] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 995.614599][T11274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 995.651672][T11274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.661861][T11274] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 995.671295][T11274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.698602][T11274] usb 1-1: config 0 descriptor?? [ 995.789285][ T5309] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 995.875198][T16738] chnl_net:caif_netlink_parms(): no params data found [ 995.967504][ T5309] usb 4-1: Using ep0 maxpacket: 32 [ 995.974982][ T5309] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 995.999760][ T5309] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 996.035761][ T5309] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 996.084478][ T5309] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 996.128089][ T5309] usb 4-1: Product: syz [ 996.182251][ T5309] usb 4-1: Manufacturer: syz [ 996.218691][ T5309] usb 4-1: SerialNumber: syz [ 996.270159][T16738] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.280959][T16738] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.285516][ T5309] appletouch 4-1:1.0: Could not find int-in endpoint [ 996.291404][T16738] bridge_slave_0: entered allmulticast mode [ 996.304441][T16738] bridge_slave_0: entered promiscuous mode [ 996.351194][ T5309] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 996.424449][ T5309] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 996.495643][T16764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.516685][T16749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.554195][T16764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.608723][T16749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.608743][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.648241][T16746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2222'. [ 996.659004][T16738] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.667725][T16738] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.676145][T16738] bridge_slave_1: entered allmulticast mode [ 996.683449][T16738] bridge_slave_1: entered promiscuous mode [ 996.697178][T13749] Bluetooth: hci7: command tx timeout [ 996.705118][T16761] netlink: 'syz.0.2222': attribute type 10 has an invalid length. [ 996.792351][T16749] fuse: Unknown parameter '' [ 996.818566][ T5255] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 996.832009][ T5255] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 996.832120][ T6085] usb 4-1: USB disconnect, device number 90 [ 996.848051][ T5255] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 996.862635][ T5255] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 996.873588][ T5255] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 996.883556][ T5255] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 996.956787][T16761] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.964413][T16761] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.986279][T16761] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.993541][T16761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 997.001116][T16761] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.008311][T16761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.032879][T16761] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 997.067913][T11274] usbhid 1-1:0.0: can't add hid device: -71 [ 997.074028][T11274] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 997.105985][T11274] usb 1-1: USB disconnect, device number 75 [ 997.126805][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.244395][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.280246][T16738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 997.344043][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.391608][T16738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 997.571374][T16738] team0: Port device team_slave_0 added [ 997.584109][T16738] team0: Port device team_slave_1 added [ 997.841658][T16738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 997.890375][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 997.958246][T16738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 997.976843][T16738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.016012][T16738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 998.080068][T16738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 998.181677][T16769] chnl_net:caif_netlink_parms(): no params data found [ 998.598457][ T62] bridge_slave_1: left allmulticast mode [ 998.614489][ T62] bridge_slave_1: left promiscuous mode [ 998.629110][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.709599][ T62] bridge_slave_0: left allmulticast mode [ 998.717018][ T6085] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 998.741300][ T62] bridge_slave_0: left promiscuous mode [ 998.777169][ T5255] Bluetooth: hci7: command tx timeout [ 998.792032][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.906256][ T6085] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 998.937401][ T5255] Bluetooth: hci4: command tx timeout [ 998.961652][ T6085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.994811][ T6085] usb 1-1: Product: syz [ 999.019750][ T6085] usb 1-1: Manufacturer: syz [ 999.024412][ T6085] usb 1-1: SerialNumber: syz [ 999.060098][ T6085] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 999.113866][T11274] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 999.467347][ T6085] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 999.637117][ T6085] usb 3-1: Using ep0 maxpacket: 8 [ 999.665798][ T6085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.677726][ T6085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.689848][ T6085] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 999.699114][ T6085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.712271][ T6085] usb 3-1: config 0 descriptor?? [ 999.743633][ T6085] usbhid 3-1:0.0: can't add hid device: -22 [ 999.750487][ T6085] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 999.876252][ T62] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1000.218648][T11274] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1000.226853][T11274] ath9k_htc: Failed to initialize the device [ 1000.256382][ T5309] usb 3-1: USB disconnect, device number 93 [ 1000.302856][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.319170][T11274] usb 1-1: ath9k_htc: USB layer deinitialized [ 1000.359589][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.390734][ T62] bond0 (unregistering): Released all slaves [ 1000.437256][T16792] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2235'. [ 1000.645832][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2234'. [ 1000.851632][T16738] hsr_slave_0: entered promiscuous mode [ 1000.860427][ T5255] Bluetooth: hci7: command tx timeout [ 1000.895492][T16738] hsr_slave_1: entered promiscuous mode [ 1000.962981][T16738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1000.982874][T16738] Cannot create hsr debugfs directory [ 1001.019440][ T5255] Bluetooth: hci4: command tx timeout [ 1001.663520][T16769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.858946][T16769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.890303][T16769] bridge_slave_0: entered allmulticast mode [ 1001.897975][T16769] bridge_slave_0: entered promiscuous mode [ 1001.957514][ T6085] usb 1-1: USB disconnect, device number 76 [ 1002.150141][ T62] hsr_slave_0: left promiscuous mode [ 1002.170184][ T62] hsr_slave_1: left promiscuous mode [ 1002.258368][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.298604][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.317796][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1002.347658][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.447866][ T62] veth1_macvtap: left promiscuous mode [ 1002.453470][ T62] veth0_macvtap: left promiscuous mode [ 1002.487038][ T5306] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1002.499034][ T62] veth1_vlan: left promiscuous mode [ 1002.504335][ T62] veth0_vlan: left promiscuous mode [ 1002.734494][ T5306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.746486][ T5306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.756361][ T5306] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1002.765574][ T5306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.775775][ T5306] usb 1-1: config 0 descriptor?? [ 1002.939325][ T5255] Bluetooth: hci7: command tx timeout [ 1003.098351][ T5255] Bluetooth: hci4: command tx timeout [ 1003.660968][T16853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.744646][T16853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.193700][ T5255] Bluetooth: hci4: command tx timeout [ 1005.310744][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1005.390696][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1005.517340][T11272] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1005.708220][T11272] usb 4-1: Using ep0 maxpacket: 16 [ 1005.729818][T11272] usb 4-1: config 8 has an invalid interface number: 249 but max is 0 [ 1005.740063][T11272] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.786250][T11272] usb 4-1: config 8 has no interface number 0 [ 1005.795021][T11272] usb 4-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1005.823658][T11272] usb 4-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1005.887098][T11272] usb 4-1: config 8 interface 249 has no altsetting 0 [ 1005.902724][T11272] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 1005.912172][T11272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.923004][T11272] usb 4-1: SerialNumber:   [ 1006.152516][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 1006.152537][ T29] audit: type=1326 audit(1728609866.219:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16854 comm="syz.3.2242" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 1007.165633][T16769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.173089][T16769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.181558][T16769] bridge_slave_1: entered allmulticast mode [ 1007.195440][T16769] bridge_slave_1: entered promiscuous mode [ 1007.364699][T16846] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2241'. [ 1007.401056][T16851] netlink: 'syz.0.2241': attribute type 10 has an invalid length. [ 1007.443703][T16851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.451074][T16851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.626731][T16769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1007.651842][ T5306] usbhid 1-1:0.0: can't add hid device: -71 [ 1007.672107][ T5306] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1007.703147][ T5306] usb 1-1: USB disconnect, device number 77 [ 1007.761008][T16769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.173174][T13749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.184376][T13749] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.192667][T13749] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1008.201207][T13749] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1008.210479][T13749] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1008.218645][T13749] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1008.312012][T11272] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 1008.369808][T11272] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1008.387611][T11272] dib0700: firmware download failed at 7 with -71 [ 1008.408431][T11272] usb 4-1: USB disconnect, device number 91 [ 1008.417887][T16769] team0: Port device team_slave_0 added [ 1008.441489][T16863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2245'. [ 1008.450635][T16863] netem: change failed [ 1008.546589][T16769] team0: Port device team_slave_1 added [ 1008.810040][T16738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.858093][T11272] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1009.038674][T11272] usb 4-1: Using ep0 maxpacket: 8 [ 1009.079451][T11272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.117625][T11272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.199625][T11272] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1009.235262][T16738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.247882][T11272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.262738][T11272] usb 4-1: config 0 descriptor?? [ 1009.272481][T11272] usbhid 4-1:0.0: can't add hid device: -22 [ 1009.283064][T11272] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1009.288597][T16769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.305707][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.334946][T16769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.354965][T16769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.367719][T16769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.393966][ T6085] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1009.403275][T16769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.493479][T16738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.587498][ T6085] usb 1-1: device descriptor read/64, error -71 [ 1009.664396][T16738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.680098][ T5215] usb 4-1: USB disconnect, device number 92 [ 1009.732714][T16769] hsr_slave_0: entered promiscuous mode [ 1009.747895][T16769] hsr_slave_1: entered promiscuous mode [ 1009.764590][T16769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.775471][T16769] Cannot create hsr debugfs directory [ 1009.838709][ T6085] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1009.997826][ T6085] usb 1-1: device descriptor read/64, error -71 [ 1010.089554][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.138641][ T6085] usb usb1-port1: attempt power cycle [ 1010.387366][T13749] Bluetooth: hci3: command tx timeout [ 1010.456257][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.487095][ T6085] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1010.548044][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 1010.611371][ T6085] usb 1-1: device descriptor read/8, error -71 [ 1010.723121][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.825080][T16738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1010.877087][ T6085] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1010.923901][ T6085] usb 1-1: device descriptor read/8, error -71 [ 1010.952808][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.997734][T16867] chnl_net:caif_netlink_parms(): no params data found [ 1011.009882][T16738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1011.039944][T16911] hsr0: entered promiscuous mode [ 1011.045376][T16911] macsec1: entered promiscuous mode [ 1011.059479][T16911] macsec1: entered allmulticast mode [ 1011.065253][ T6085] usb usb1-port1: unable to enumerate USB device [ 1011.067240][T16911] hsr0: entered allmulticast mode [ 1011.077542][T16911] hsr_slave_0: entered allmulticast mode [ 1011.083196][T16911] hsr_slave_1: entered allmulticast mode [ 1011.111684][T16911] hsr0: left allmulticast mode [ 1011.117269][T16911] hsr_slave_0: left allmulticast mode [ 1011.123469][T16911] hsr_slave_1: left allmulticast mode [ 1011.166606][T16738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1011.181540][T16738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1011.288052][T11274] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1011.439352][T11274] usb 4-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 1011.448420][T11274] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 1011.460357][T11274] usb 4-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 1011.476031][T11274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.492753][T11274] usb 4-1: Product: syz [ 1011.499545][T11274] usb 4-1: Manufacturer: syz [ 1011.505357][T11274] usb 4-1: SerialNumber: syz [ 1011.732305][T11274] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1011.828294][T11274] usb 4-1: USB disconnect, device number 93 [ 1012.144347][ T62] bridge_slave_1: left allmulticast mode [ 1012.179746][ T62] bridge_slave_1: left promiscuous mode [ 1012.200380][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.271947][ T62] bridge_slave_0: left allmulticast mode [ 1012.287238][ T62] bridge_slave_0: left promiscuous mode [ 1012.293046][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.458305][T13749] Bluetooth: hci3: command tx timeout [ 1013.007107][ T5306] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 1013.185602][ T5306] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.205256][ T5306] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1013.216048][ T5306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.238176][ T5306] usb 4-1: Product: syz [ 1013.242696][ T5306] usb 4-1: Manufacturer: syz [ 1013.255165][ T5306] usb 4-1: SerialNumber: syz [ 1013.276606][ T5306] usb 4-1: config 0 descriptor?? [ 1013.285353][ T5306] streamzap 4-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1013.295469][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1013.366272][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1013.382878][ T62] bond0 (unregistering): Released all slaves [ 1013.415732][T16867] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.423162][T16867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.431595][T16867] bridge_slave_0: entered allmulticast mode [ 1013.440712][T16867] bridge_slave_0: entered promiscuous mode [ 1013.761977][T11274] usb 4-1: USB disconnect, device number 94 [ 1013.807108][T16867] bridge0: port 2(bridge_slave_1) entered blocking state [ 1013.814262][T16867] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.844871][T16867] bridge_slave_1: entered allmulticast mode [ 1013.872073][T16867] bridge_slave_1: entered promiscuous mode [ 1013.999405][T16867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.117077][ T5309] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1014.180420][T16867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.281909][ T62] hsr_slave_0: left promiscuous mode [ 1014.299441][ T5309] usb 1-1: Using ep0 maxpacket: 8 [ 1014.318023][ T5309] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1014.338931][ T5309] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.352851][ T5309] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1014.368333][ T62] hsr_slave_1: left promiscuous mode [ 1014.370320][ T5309] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1014.394845][ T5309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.407683][ T5309] usb 1-1: Product: syz [ 1014.411885][ T5309] usb 1-1: Manufacturer: syz [ 1014.416649][ T5309] usb 1-1: SerialNumber: syz [ 1014.417124][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1014.429591][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1014.445830][ T5309] usb 1-1: config 0 descriptor?? [ 1014.467984][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.472436][ T5309] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1014.475415][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1014.518391][ T62] veth1_macvtap: left promiscuous mode [ 1014.523963][ T62] veth0_macvtap: left promiscuous mode [ 1014.531777][ T62] veth1_vlan: left promiscuous mode [ 1014.537365][ T62] veth0_vlan: left promiscuous mode [ 1014.537781][T13749] Bluetooth: hci3: command tx timeout [ 1014.592001][ T5309] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1014.629645][T12135] udevd[12135]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.737528][ T5309] usb 1-1: USB disconnect, device number 82 [ 1014.847090][ T6101] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1015.018122][ T6101] usb 4-1: Using ep0 maxpacket: 8 [ 1015.045712][ T6101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.089124][ T6101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.107682][ T6101] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1015.117965][ T6101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.130881][ T6101] usb 4-1: config 0 descriptor?? [ 1015.142187][ T6101] usbhid 4-1:0.0: can't add hid device: -22 [ 1015.192509][ T6101] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1015.314382][ T29] audit: type=1326 audit(1728609875.379:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16936 comm="syz.0.2256" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x0 [ 1015.565008][ T5306] usb 4-1: USB disconnect, device number 95 [ 1016.304964][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1016.411068][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1016.509105][ T5215] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1016.617861][T13749] Bluetooth: hci3: command tx timeout [ 1016.721035][ T5215] usb 4-1: Using ep0 maxpacket: 32 [ 1016.750696][ T5215] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1016.771122][ T5215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.781322][ T5215] usb 4-1: config 0 descriptor?? [ 1016.792251][ T5215] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1017.449421][T16769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1017.498098][T16769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1017.557270][T16867] team0: Port device team_slave_0 added [ 1017.623343][T16769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1017.686986][T16769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1017.697293][T16942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.751611][T16942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.762644][T16867] team0: Port device team_slave_1 added [ 1017.900471][T16738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1017.928417][ T5215] gspca_nw80x: reg_r err -71 [ 1017.938317][T16945] netlink: 'syz.0.2258': attribute type 29 has an invalid length. [ 1017.946359][ T5215] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1017.958153][ T5215] usb 4-1: USB disconnect, device number 96 [ 1017.986360][T16867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1018.004617][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.105796][T16867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1018.153786][T16867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1018.164446][T16867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1018.195091][T16867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.306111][T16738] 8021q: adding VLAN 0 to HW filter on device team0 [ 1018.396072][T16867] hsr_slave_0: entered promiscuous mode [ 1018.412522][T16867] hsr_slave_1: entered promiscuous mode [ 1018.428901][T16867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1018.461623][T16867] Cannot create hsr debugfs directory [ 1018.719549][ T5302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.726734][ T5302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1018.849698][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.856831][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1018.928382][T16958] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 1019.206219][T16769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.385331][T16769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.597009][T11266] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1019.682325][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.689467][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.837304][T11266] usb 4-1: Using ep0 maxpacket: 8 [ 1019.877283][T11266] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 1019.926868][T11266] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1019.934984][T11266] usb 4-1: can't read configurations, error -61 [ 1019.985895][ T5303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.993037][ T5303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.067595][T16738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1020.070086][T11266] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1020.247069][T11266] usb 4-1: Using ep0 maxpacket: 8 [ 1020.252967][T11266] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 1020.320233][T11266] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1020.328459][T11266] usb 4-1: can't read configurations, error -61 [ 1020.335035][T11266] usb usb4-port1: attempt power cycle [ 1020.452578][T16769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.483157][T16769] veth0_vlan: entered promiscuous mode [ 1020.493790][T16769] veth1_vlan: entered promiscuous mode [ 1020.514724][T16769] veth0_macvtap: entered promiscuous mode [ 1020.523252][T16769] veth1_macvtap: entered promiscuous mode [ 1020.541027][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.551812][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.561809][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.572357][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.582381][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.594216][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.604569][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.615438][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.626491][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.636991][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.646833][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1020.657472][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.669097][T16769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.704625][T16738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.710452][T11266] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1020.761950][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.799741][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.819807][T11266] usb 4-1: Using ep0 maxpacket: 8 [ 1020.826334][T11266] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 1020.836461][T11266] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1020.845585][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.868943][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.874203][T11266] usb 4-1: can't read configurations, error -61 [ 1020.894209][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.917938][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.928052][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.939336][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.949658][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1020.960889][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1020.994630][T16769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1021.012950][T16769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.028424][T11266] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1021.030248][T16769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.099904][T11266] usb 4-1: Using ep0 maxpacket: 8 [ 1021.111192][T11266] usb 4-1: too many configurations: 161, using maximum allowed: 8 [ 1021.122262][T11266] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1021.130334][T11266] usb 4-1: can't read configurations, error -61 [ 1021.138908][T11266] usb usb4-port1: unable to enumerate USB device [ 1021.161524][T16769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.172655][T16769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.183454][T16769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.193619][T16769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.438275][T16738] veth0_vlan: entered promiscuous mode [ 1021.486026][T16738] veth1_vlan: entered promiscuous mode [ 1021.627033][ T6101] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 1021.704630][T16867] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1021.739869][T16867] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1021.819882][ T6101] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.841093][ T6101] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1021.852616][T16867] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1021.853591][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.869865][ T6101] usb 1-1: Product: syz [ 1021.874096][ T6101] usb 1-1: Manufacturer: syz [ 1021.879173][ T6101] usb 1-1: SerialNumber: syz [ 1021.896046][T16867] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1021.903479][ T6101] usb 1-1: config 0 descriptor?? [ 1021.944219][ T6101] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1021.958483][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.997040][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.118844][T16738] veth0_macvtap: entered promiscuous mode [ 1022.136447][ T5303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1022.189744][T16738] veth1_macvtap: entered promiscuous mode [ 1022.228149][ T5303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1022.291630][T11266] usb 1-1: USB disconnect, device number 83 [ 1022.356839][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.369790][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.381219][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.417099][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.443939][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.501009][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.520911][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.552518][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.581316][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.593547][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.605262][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.619519][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.632281][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1022.644188][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.660516][T16738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1022.728595][T16867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1022.775556][T16867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1022.784207][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.796237][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.806160][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.816851][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.826762][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.838280][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.896974][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1022.942966][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1022.991787][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.043273][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.066623][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.086551][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.097522][T16738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1023.116473][T16738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1023.130638][T16738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.194554][T16738] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.220035][T16738] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.236615][T16738] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.246577][T16738] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.267517][ T937] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1023.287024][ T6101] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1023.319715][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.326865][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.400251][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.407458][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.451999][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 1023.459572][ T937] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1023.487083][ T937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1023.497257][ T6101] usb 1-1: Using ep0 maxpacket: 16 [ 1023.509228][ T937] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1023.526093][ T937] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.544364][ T937] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1023.550421][ T6101] usb 1-1: config 8 has an invalid interface number: 249 but max is 0 [ 1023.554545][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.638332][ T6101] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.702016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1023.710008][ T6101] usb 1-1: config 8 has no interface number 0 [ 1023.716152][ T6101] usb 1-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1023.750578][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1023.758362][ T6101] usb 1-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1023.780122][ T6101] usb 1-1: config 8 interface 249 has no altsetting 0 [ 1023.806236][ T6101] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 1023.819073][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.827229][ T6101] usb 1-1: SerialNumber:   [ 1023.838884][ T937] usb 5-1: GET_CAPABILITIES returned 0 [ 1023.857022][ T937] usbtmc 5-1:16.0: can't read capabilities [ 1024.029878][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.061113][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.097644][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.107351][T11266] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1024.133810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.150869][ T29] audit: type=1326 audit(1728609884.219:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17018 comm="syz.0.2264" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x0 [ 1024.266331][T16867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.277305][T11266] usb 4-1: Using ep0 maxpacket: 16 [ 1024.300946][T11266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.322470][T11266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.357102][T11266] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1024.392819][T11266] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1024.405719][T11266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.443342][T11266] usb 4-1: config 0 descriptor?? [ 1024.655754][T16867] veth0_vlan: entered promiscuous mode [ 1024.693955][T16867] veth1_vlan: entered promiscuous mode [ 1024.810956][T16867] veth0_macvtap: entered promiscuous mode [ 1024.875231][T16867] veth1_macvtap: entered promiscuous mode [ 1024.963357][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1024.965843][T11266] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1024.985573][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.009584][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.020606][T11266] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1025.020685][T11266] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1025.021137][T11266] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1025.045633][T11266] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1025.056302][T11266] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1025.065589][T11266] microsoft 0003:045E:07DA.004F: unknown main item tag 0x0 [ 1025.096172][T11266] microsoft 0003:045E:07DA.004F: No inputs registered, leaving [ 1025.112771][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.123199][T11266] microsoft 0003:045E:07DA.004F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1025.134828][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.145616][T11266] microsoft 0003:045E:07DA.004F: no inputs found [ 1025.153309][T11266] microsoft 0003:045E:07DA.004F: could not initialize ff, continuing anyway [ 1025.172686][T11266] usb 4-1: USB disconnect, device number 101 [ 1025.199398][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.214300][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.225811][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.259916][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.275289][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.286005][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.296857][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.307321][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.318365][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.328643][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.339389][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.363340][T16867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.428076][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.445161][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.456152][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.467216][ T5215] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1025.475092][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.485819][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.499474][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.509616][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.522193][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.533146][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.545047][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.556456][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.592608][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.635690][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.651136][ T5215] usb 2-1: Using ep0 maxpacket: 8 [ 1025.658099][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.735292][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.765777][T16867] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.790462][T16867] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.804030][T16867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.854274][ T5215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.868430][T16867] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.878591][ T5215] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1025.889293][T16867] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.899291][ T5215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.908826][T16867] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1025.921064][ T5215] usb 2-1: config 0 descriptor?? [ 1025.977892][T16867] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.024623][ T5215] usbhid 2-1:0.0: can't add hid device: -22 [ 1026.031877][ T5215] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1026.046825][ T5306] usb 5-1: USB disconnect, device number 96 [ 1026.313249][ T6101] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 1026.358428][ T6101] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1026.397866][ T6101] dib0700: firmware download failed at 7 with -71 [ 1026.424146][ T6101] usb 1-1: USB disconnect, device number 84 [ 1026.583776][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.592109][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.692962][ T5215] usb 2-1: USB disconnect, device number 79 [ 1026.775005][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.793793][T17073] hsr0: entered promiscuous mode [ 1026.799589][T17073] macsec1: entered promiscuous mode [ 1026.804923][T17073] macsec1: entered allmulticast mode [ 1026.812164][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.887377][T17073] hsr0: entered allmulticast mode [ 1026.909541][T17073] hsr_slave_0: entered allmulticast mode [ 1026.915251][T17073] hsr_slave_1: entered allmulticast mode [ 1026.940804][T17073] hsr0: left allmulticast mode [ 1026.945615][T17073] hsr_slave_0: left allmulticast mode [ 1026.954337][T17073] hsr_slave_1: left allmulticast mode [ 1027.308659][ T5215] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1027.478594][ T5215] usb 1-1: config 4 has too many interfaces: 196, using maximum allowed: 32 [ 1027.487580][ T5215] usb 1-1: config 4 has 1 interface, different from the descriptor's value: 196 [ 1027.516280][ T5215] usb 1-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=92.9f [ 1027.539573][ T5215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.573532][ T5215] usb 1-1: Product: syz [ 1027.587023][ T5215] usb 1-1: Manufacturer: syz [ 1027.597252][ T5215] usb 1-1: SerialNumber: syz [ 1028.014155][ T5215] usb 1-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1028.027597][ T5215] usb 1-1: USB disconnect, device number 85 [ 1028.087092][T11274] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1028.227137][ T6101] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1028.243925][T11274] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.258564][T11274] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1028.267707][T11274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.275720][T11274] usb 2-1: Product: syz [ 1028.281306][T11274] usb 2-1: Manufacturer: syz [ 1028.286821][T11274] usb 2-1: SerialNumber: syz [ 1028.302869][T11274] usb 2-1: config 0 descriptor?? [ 1028.322396][T11274] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1028.377646][ T6101] usb 3-1: Using ep0 maxpacket: 16 [ 1028.408879][ T6101] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1028.423478][ T6101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.431966][ T6101] usb 3-1: Product: syz [ 1028.436139][ T6101] usb 3-1: Manufacturer: syz [ 1028.440800][ T6101] usb 3-1: SerialNumber: syz [ 1028.447344][ T6101] usb 3-1: config 0 descriptor?? [ 1028.454393][ T6101] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1028.523127][ T29] audit: type=1326 audit(1728609888.589:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17111 comm="syz.4.2281" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fd6579 code=0x0 [ 1028.655913][ T6101] gp8psk: usb in 128 operation failed. [ 1028.824264][ T5216] usb 2-1: USB disconnect, device number 80 [ 1029.259002][ T6101] gp8psk: usb in 137 operation failed. [ 1029.275244][ T6101] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1029.408365][ T6101] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1029.430120][ T6101] usb 3-1: media controller created [ 1029.447428][ T6101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1029.492544][ T6101] gp8psk_fe: Frontend revision 1 attached [ 1029.499792][ T6101] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1029.513639][ T6101] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1029.569770][ T6101] gp8psk: usb in 138 operation failed. [ 1029.575284][ T6101] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1029.593204][ T6101] gp8psk: found Genpix USB device pID = 201 (hex) [ 1029.604717][ T6101] usb 3-1: USB disconnect, device number 94 [ 1029.638552][T17145] IPVS: length: 68 != 24 [ 1029.657732][ T6085] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1029.709978][T17145] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2287'. [ 1029.723259][ T6101] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1029.960455][ T29] audit: type=1326 audit(1728609890.029:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17151 comm="syz.3.2291" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 1029.983504][ T5306] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1030.026990][ T6085] usb 5-1: Using ep0 maxpacket: 8 [ 1030.028514][ T6085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.028547][ T6085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.028582][ T6085] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1030.028608][ T6085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.031842][ T6085] usb 5-1: config 0 descriptor?? [ 1030.035156][ T6085] usbhid 5-1:0.0: can't add hid device: -22 [ 1030.035241][ T6085] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 1030.130478][ T5306] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.130523][ T5306] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1030.132072][ T5306] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1030.132103][ T5306] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1030.132128][ T5306] usb 1-1: Manufacturer: syz [ 1030.132152][ T5306] usb 1-1: SerialNumber: syz [ 1030.345276][T17165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2292'. [ 1030.581355][ T5309] usb 5-1: USB disconnect, device number 97 [ 1031.348668][ T29] audit: type=1326 audit(1728609891.409:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17185 comm="syz.3.2295" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ed579 code=0x0 [ 1031.807694][ T5309] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1031.847044][ T5215] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1032.083459][ T5215] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1032.106566][ T5215] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1032.177310][ T5215] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1032.196695][ T5215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.220966][ T5215] usb 2-1: Product: syz [ 1032.225817][ T5215] usb 2-1: Manufacturer: syz [ 1032.232345][ T5215] usb 2-1: SerialNumber: syz [ 1032.241918][ T5215] usb 2-1: config 0 descriptor?? [ 1032.258667][T17198] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1032.282475][T17198] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1032.649292][ T5306] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 1032.677310][ T5306] usb 1-1: USB disconnect, device number 86 [ 1032.978057][ T6085] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1033.201823][ T6085] usb 3-1: New USB device found, idVendor=8420, idProduct=157a, bcdDevice=77.64 [ 1033.213342][ T6085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.248035][ T5306] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1033.256160][ T6085] usb 3-1: Product: syz [ 1033.273565][ T6085] usb 3-1: Manufacturer: syz [ 1033.284197][ T6085] usb 3-1: SerialNumber: syz [ 1033.289355][ T5215] dm9601 2-1:0.0: probe with driver dm9601 failed with error -71 [ 1033.297459][ T5309] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1033.326035][ T6085] usb 3-1: config 0 descriptor?? [ 1033.366396][T17230] trusted_key: encrypted_key: key trusted:syz not found [ 1033.381997][ T5215] usb 2-1: USB disconnect, device number 81 [ 1033.445704][ T5306] usb 1-1: Using ep0 maxpacket: 8 [ 1033.451000][ T5309] usb 4-1: Using ep0 maxpacket: 16 [ 1033.472526][ T5309] usb 4-1: config 0 has no interfaces? [ 1033.479188][ T5309] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 1033.488771][ T5309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.506232][ T5306] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.519641][ T5306] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1033.531048][ T5309] usb 4-1: config 0 descriptor?? [ 1033.566722][ T5306] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1033.578697][ T5306] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.591835][ T5306] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1033.601266][ T5306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.730276][T17219] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 1033.737054][T17219] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1033.743798][T17228] loop2: detected capacity change from 0 to 7 [ 1033.754519][T17228] Dev loop2: unable to read RDB block 7 [ 1033.760294][T17228] loop2: AHDI p2 p3 [ 1033.764502][T17228] loop2: partition table partially beyond EOD, truncated [ 1033.780078][ T5309] usb 4-1: string descriptor 0 read error: -71 [ 1033.788456][ T5309] usb 4-1: USB disconnect, device number 102 [ 1033.836112][T17219] vhci_hcd vhci_hcd.0: Device attached [ 1033.897824][T17232] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 1033.901811][ T5306] usb 1-1: GET_CAPABILITIES returned 0 [ 1033.901859][ T5306] usbtmc 1-1:16.0: can't read capabilities [ 1033.939002][T17233] vhci_hcd: connection closed [ 1033.939470][ T5302] vhci_hcd: stop threads [ 1033.939494][ T5302] vhci_hcd: release socket [ 1033.941048][ T5302] vhci_hcd: disconnect device [ 1033.952047][ T5306] usb 3-1: USB disconnect, device number 95 [ 1034.009867][ T5215] vhci_hcd: vhci_device speed not set [ 1034.187738][T17226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.237542][T17226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.285436][ T5302] bridge_slave_1: left allmulticast mode [ 1034.294012][ T5302] bridge_slave_1: left promiscuous mode [ 1034.300323][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.329061][ T5302] bridge_slave_0: left allmulticast mode [ 1034.334878][ T5302] bridge_slave_0: left promiscuous mode [ 1034.340965][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.913824][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1035.585579][ T5302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1035.615743][ T5302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1035.630702][ T5302] bond0 (unregistering): Released all slaves [ 1035.832278][T17241] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1035.881739][T17241] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1035.889261][T17253] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2318'. [ 1035.956301][ T5309] usb 1-1: USB disconnect, device number 87 [ 1035.979173][T17241] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1036.072527][T17241] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1036.082016][T17241] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1036.233266][ T5302] hsr_slave_0: left promiscuous mode [ 1036.245178][ T5302] hsr_slave_1: left promiscuous mode [ 1036.259719][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.276465][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.284454][T17241] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1036.296340][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1036.305046][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.319583][T17241] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1036.325584][T17241] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1036.330757][T17261] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1036.360806][T17261] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1036.387815][T17241] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1036.392246][ T5302] veth1_macvtap: left promiscuous mode [ 1036.400082][ T5302] veth0_macvtap: left promiscuous mode [ 1036.406014][ T5302] veth1_vlan: left promiscuous mode [ 1036.417943][T17241] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1036.425528][T17241] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1036.435141][T17241] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1036.454068][T17241] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1036.461528][ T5302] veth0_vlan: left promiscuous mode [ 1036.465903][T17241] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1036.484531][T17241] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1036.504269][T17241] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1036.558232][T17241] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1036.587434][T17241] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1036.858596][ T6085] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1037.051164][ T6085] usb 2-1: Using ep0 maxpacket: 16 [ 1037.077056][ T6085] usb 2-1: config 8 has an invalid interface number: 249 but max is 0 [ 1037.107549][ T6085] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.174134][ T6085] usb 2-1: config 8 has no interface number 0 [ 1037.227876][ T6085] usb 2-1: config 8 interface 249 altsetting 4 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1037.249208][ T6085] usb 2-1: config 8 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1037.262607][ T6085] usb 2-1: config 8 interface 249 has no altsetting 0 [ 1037.314107][ T6085] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0078, bcdDevice=5d.c9 [ 1037.323364][ T6085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.331545][ T6085] usb 2-1: SerialNumber:   [ 1037.706699][ T29] audit: type=1326 audit(1728609897.769:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17245 comm="syz.1.2314" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 1037.897162][T13749] Bluetooth: hci5: command 0x0c1a tx timeout [ 1038.137268][T13749] Bluetooth: hci6: command 0x0c1a tx timeout [ 1038.242484][T11272] usb 4-1: new full-speed USB device number 103 using dummy_hcd [ 1038.377522][T13749] Bluetooth: hci2: command 0x0c1a tx timeout [ 1038.464176][T13749] Bluetooth: hci7: command 0x0c1a tx timeout [ 1038.473347][T11272] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1038.527193][T11272] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1038.537050][T13749] Bluetooth: hci3: command 0x0c1a tx timeout [ 1038.543298][T13749] Bluetooth: hci4: command 0x0c1a tx timeout [ 1038.564260][ T5302] team0 (unregistering): Port device team_slave_1 removed [ 1038.584155][T11272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.650947][ T5302] team0 (unregistering): Port device team_slave_0 removed [ 1038.986482][T17280] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 1039.017398][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 1039.077244][T17280] netlink: 'syz.3.2323': attribute type 1 has an invalid length. [ 1039.128607][T11272] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 1039.165728][T11272] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input62 [ 1039.212587][T11272] usb 4-1: USB disconnect, device number 103 [ 1039.218675][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1039.977163][T13749] Bluetooth: hci5: command 0x0c1a tx timeout [ 1040.109741][ T6085] dvb-usb: found a 'Terratec Cinergy T USB XXS (HD)/ T3' in cold state, will try to load a firmware [ 1040.122728][ T6085] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1040.131267][ T6085] dib0700: firmware download failed at 7 with -71 [ 1040.144661][ T6085] usb 2-1: USB disconnect, device number 82 [ 1040.224018][T13749] Bluetooth: hci6: command 0x0c1a tx timeout [ 1040.458051][T13749] Bluetooth: hci2: command 0x0c1a tx timeout [ 1040.540555][T13749] Bluetooth: hci7: command 0x0c1a tx timeout [ 1040.568198][T11274] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1040.617122][T13749] Bluetooth: hci3: command 0x0c1a tx timeout [ 1040.623349][T13749] Bluetooth: hci4: command 0x0c1a tx timeout [ 1040.788821][T11274] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1040.798074][T11274] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1040.817352][T11274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.893512][T11274] usb 1-1: config 0 descriptor?? [ 1040.897382][ T5309] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1041.054095][T17263] netlink: 'syz.2.2320': attribute type 2 has an invalid length. [ 1041.090415][ T5309] usb 4-1: Using ep0 maxpacket: 8 [ 1041.132485][ T5309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.170802][T11274] usb 1-1: USB disconnect, device number 88 [ 1041.191454][ T5309] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 5.f6 [ 1041.214084][ T5309] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.225105][ T5309] usb 4-1: Product: syz [ 1041.237854][ T5309] usb 4-1: Manufacturer: syz [ 1041.246666][ T5309] usb 4-1: SerialNumber: syz [ 1041.310870][ T5309] usb 4-1: config 0 descriptor?? [ 1041.371387][ T5309] gspca_main: t613-2.14.0 probing 17a1:0128 [ 1041.708785][ T5309] gspca_t613: unknown sensor 0000 [ 1041.728638][ T5309] t613 4-1:0.0: probe with driver t613 failed with error -22 [ 1041.744059][ T5309] usb 4-1: USB disconnect, device number 104 [ 1041.894409][T17309] atomic_op ffff88804d9a2198 conn xmit_atomic 0000000000000000 [ 1042.048683][T17316] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2336'. [ 1042.058631][T13749] Bluetooth: hci5: command 0x0c1a tx timeout [ 1042.087106][ T5306] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1042.239222][ T5306] usb 3-1: Using ep0 maxpacket: 8 [ 1042.245981][ T5306] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1042.256042][ T5306] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1042.266354][ T5306] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1042.277794][ T5306] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1042.292459][ T5306] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1042.303148][T13749] Bluetooth: hci6: command 0x0c1a tx timeout [ 1042.321894][ T5306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.481586][ T6085] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1042.538188][T13749] Bluetooth: hci2: command 0x0c1a tx timeout [ 1042.556050][ T5306] usb 3-1: GET_CAPABILITIES returned 0 [ 1042.571225][ T5306] usbtmc 3-1:16.0: can't read capabilities [ 1042.617205][T13749] Bluetooth: hci7: command 0x0c1a tx timeout [ 1042.651561][ T6085] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1042.688033][ T6085] usb 1-1: config 1 has no interface number 0 [ 1042.694225][ T6085] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1042.697362][T13749] Bluetooth: hci4: command 0x0c1a tx timeout [ 1042.705273][ T5255] Bluetooth: hci3: command 0x0c1a tx timeout [ 1042.721899][ T6085] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1042.734752][ T6085] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1042.747210][ T6085] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1042.756522][ T6085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.766109][ T6085] usb 1-1: Product: syz [ 1042.770554][ T6085] usb 1-1: Manufacturer: syz [ 1042.775188][ T6085] usb 1-1: SerialNumber: syz [ 1042.813650][T17305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.857337][T11272] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1042.888393][T17305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.050846][T11272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1043.079457][T11272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1043.091498][T11272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1043.105475][T11272] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1043.116099][T11272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.131826][T11272] usb 2-1: config 0 descriptor?? [ 1043.188522][T17320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.216637][T17320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.362665][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.659470][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.851703][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.900630][ T6085] cdc_ncm 1-1:1.1: bind() failure [ 1043.996316][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.121520][ T5309] usb 1-1: USB disconnect, device number 89 [ 1044.156798][T11272] usbhid 2-1:0.0: can't add hid device: -71 [ 1044.168200][T11272] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1044.182568][T13749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1044.183157][T11272] usb 2-1: USB disconnect, device number 83 [ 1044.198871][T13749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1044.209364][T13749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1044.223501][T13749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1044.232566][T13749] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1044.240305][T13749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1044.668360][ T62] bridge_slave_1: left allmulticast mode [ 1044.674085][ T62] bridge_slave_1: left promiscuous mode [ 1044.732352][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.799911][ T6085] usb 3-1: USB disconnect, device number 96 [ 1044.834447][ T62] bridge_slave_0: left allmulticast mode [ 1044.886682][ T62] bridge_slave_0: left promiscuous mode [ 1044.900365][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.308079][ T5255] Bluetooth: hci4: command tx timeout [ 1046.808413][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.910033][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.935211][ T62] bond0 (unregistering): Released all slaves [ 1047.819559][T17333] chnl_net:caif_netlink_parms(): no params data found [ 1047.914037][ T62] hsr_slave_0: left promiscuous mode [ 1047.948761][ T62] hsr_slave_1: left promiscuous mode [ 1047.959261][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1047.968677][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1047.988481][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1047.996399][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.096601][ T62] veth1_macvtap: left promiscuous mode [ 1048.160108][ T62] veth0_macvtap: left promiscuous mode [ 1048.165760][ T62] veth1_vlan: left promiscuous mode [ 1048.230508][ T62] veth0_vlan: left promiscuous mode [ 1048.377499][ T5255] Bluetooth: hci4: command tx timeout [ 1048.587526][ T5306] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1048.918369][ T5306] usb 2-1: Using ep0 maxpacket: 8 [ 1049.062064][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1049.417444][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.428125][ T5306] usb 2-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1049.437530][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.448207][ T5306] usb 2-1: config 0 descriptor?? [ 1049.992841][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x0 [ 1050.000499][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x6 [ 1050.027975][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x5 [ 1050.035319][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x4 [ 1050.043942][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x0 [ 1050.051222][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x0 [ 1050.058753][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x0 [ 1050.066045][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x0 [ 1050.076991][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x0 [ 1050.084105][ T5306] cherry 0003:046A:0027.0050: unknown main item tag 0x0 [ 1050.098584][ T5306] cherry 0003:046A:0027.0050: unknown global tag 0xd [ 1050.105636][ T5306] cherry 0003:046A:0027.0050: item 0 4 1 13 parsing failed [ 1050.113932][ T5306] cherry 0003:046A:0027.0050: probe with driver cherry failed with error -22 [ 1050.458030][ T5255] Bluetooth: hci4: command tx timeout [ 1050.638436][ T62] team0 (unregistering): Port device team_slave_1 removed [ 1050.738831][ T5306] usb 2-1: USB disconnect, device number 84 [ 1050.902513][ T62] team0 (unregistering): Port device team_slave_0 removed [ 1052.537370][ T5255] Bluetooth: hci4: command tx timeout [ 1053.129595][T17333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.136730][T17333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.265987][T17333] bridge_slave_0: entered allmulticast mode [ 1053.283974][T17333] bridge_slave_0: entered promiscuous mode [ 1053.329297][T17333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.367198][T17333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.374508][T17333] bridge_slave_1: entered allmulticast mode [ 1053.382498][T17333] bridge_slave_1: entered promiscuous mode [ 1053.649687][T17333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.661929][T17333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.771518][T13749] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1053.783453][T13749] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1053.793844][T13749] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1053.804138][T13749] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1053.817890][T13749] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1053.825621][T13749] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1053.930423][T17333] team0: Port device team_slave_0 added [ 1053.939352][T17333] team0: Port device team_slave_1 added [ 1054.306380][T17333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.355330][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.412641][T17333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.518816][T17333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.543429][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.618453][T17333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.633828][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.650887][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.917145][T17333] hsr_slave_0: entered promiscuous mode [ 1054.964239][T17333] hsr_slave_1: entered promiscuous mode [ 1055.027789][T17333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.066969][T17333] Cannot create hsr debugfs directory [ 1055.741894][T17450] chnl_net:caif_netlink_parms(): no params data found [ 1055.899251][T13749] Bluetooth: hci8: command tx timeout [ 1056.014079][T17481] binder: 17480:17481 ioctl c0306201 0 returned -14 [ 1056.919246][T17450] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.926389][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.967251][T17450] bridge_slave_0: entered allmulticast mode [ 1056.974444][T17450] bridge_slave_0: entered promiscuous mode [ 1057.093215][T17501] binder_alloc: binder_alloc_mmap_handler: 17500 20ffc000-20ffd000 already mapped failed -16 [ 1057.128716][T17450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.135793][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.143388][T17450] bridge_slave_1: entered allmulticast mode [ 1057.150682][T17450] bridge_slave_1: entered promiscuous mode [ 1057.300851][T17450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.398250][T17450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.634323][T17450] team0: Port device team_slave_0 added [ 1057.692984][T17450] team0: Port device team_slave_1 added [ 1057.733679][T17333] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1057.766667][T17333] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1057.824365][T17333] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1057.835425][T17333] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1057.863774][T17450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.889761][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.956985][T17450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.978630][T13749] Bluetooth: hci8: command tx timeout [ 1057.986395][T17450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.997194][T17450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1058.043487][T17450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1058.192401][T17450] hsr_slave_0: entered promiscuous mode [ 1058.199111][T17450] hsr_slave_1: entered promiscuous mode [ 1058.205220][T17450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1058.222303][T17450] Cannot create hsr debugfs directory [ 1058.856269][T17450] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.890258][T17333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.931976][T17333] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.934747][ T29] audit: type=1326 audit(1728609918.979:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 1058.997244][ T29] audit: type=1326 audit(1728609918.979:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 1059.024945][ T29] audit: type=1326 audit(1728609918.979:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 1059.029283][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.047642][ T29] audit: type=1326 audit(1728609918.979:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17533 comm="syz.0.2381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f40579 code=0x7ffc0000 [ 1059.054044][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.274901][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.282113][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.440260][T17450] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.644953][T17450] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.716686][T17333] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1059.789818][T17333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.824193][T17333] veth0_vlan: entered promiscuous mode [ 1059.840352][T17333] veth1_vlan: entered promiscuous mode [ 1059.860784][T17333] veth0_macvtap: entered promiscuous mode [ 1059.870409][T17333] veth1_macvtap: entered promiscuous mode [ 1059.928107][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1059.977106][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.035269][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.057055][T13749] Bluetooth: hci8: command tx timeout [ 1060.077801][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.087744][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.099568][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.109940][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.136922][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.152324][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.235665][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.293837][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.306390][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.357070][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1060.415141][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.482103][T17333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.682846][T17450] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.726577][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.771631][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.822040][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.848478][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.866411][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.887285][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.967652][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1060.979643][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1060.991884][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.002872][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.013157][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.031896][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.052822][T17333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1061.076357][T17333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1061.142003][T17333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1061.188610][T17333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.197819][T17333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.206575][T17333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.218005][T17333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.491263][T17450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1061.519864][T17450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1061.566743][T17450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1061.633872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.656914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.697310][T17450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1061.769880][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.794732][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.087013][T17450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1062.111757][T17450] 8021q: adding VLAN 0 to HW filter on device team0 [ 1062.148841][T17450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1062.159659][T17450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1062.186990][T13749] Bluetooth: hci8: command tx timeout [ 1062.202407][T17450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.233883][T17450] veth0_vlan: entered promiscuous mode [ 1062.245733][T17450] veth1_vlan: entered promiscuous mode [ 1062.270446][T17450] veth0_macvtap: entered promiscuous mode [ 1062.287866][T17450] veth1_macvtap: entered promiscuous mode [ 1062.322203][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.329507][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.477204][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.484389][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.700313][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.757459][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.795887][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1062.848785][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1062.919796][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.021635][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.055396][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.198509][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.231007][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.249066][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.260218][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.270816][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.286953][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.307007][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.346342][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1063.438017][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.479734][T17450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.539925][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.587386][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.597354][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.610400][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.624758][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.637041][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.647807][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.677886][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.757036][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.776994][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.796992][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.817362][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.834859][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.865571][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1063.906250][T17450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1063.970538][T17450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.030471][T17450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.214231][T17450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.289774][T17450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.306350][T17450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.316993][T17450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.721271][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.732073][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.740167][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.748071][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1065.227418][T17637] binder: 17636:17637 ioctl c0306201 0 returned -14 [ 1070.816410][ T6085] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1071.011899][ T6085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1071.011937][ T6085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.011973][ T6085] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1071.011999][ T6085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.014063][ T6085] usb 3-1: config 0 descriptor?? [ 1071.477225][T11272] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1071.622634][T17706] netlink: 'syz.2.2408': attribute type 10 has an invalid length. [ 1071.652256][T17706] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.660039][T17706] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.669378][T11272] usb 1-1: Using ep0 maxpacket: 8 [ 1071.686766][T11272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1071.730287][T17706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.737476][T17706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.744941][T17706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1071.752124][T17706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1071.764886][T17706] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1071.824201][T11272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1071.828659][T17706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1071.834467][T11272] usb 1-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1071.856428][T11272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.868076][T11272] usb 1-1: config 0 descriptor?? [ 1072.127508][T17706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.182857][ T6085] usbhid 3-1:0.0: can't add hid device: -71 [ 1072.197018][ T6085] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1072.258611][ T6085] usb 3-1: USB disconnect, device number 97 [ 1072.493527][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x0 [ 1072.500859][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x6 [ 1072.508116][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x5 [ 1072.517037][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x4 [ 1072.524539][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x0 [ 1072.533174][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x0 [ 1072.542335][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x0 [ 1072.549753][T11274] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 1072.558271][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x0 [ 1072.586092][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x0 [ 1072.620874][T11272] cherry 0003:046A:0027.0051: unknown main item tag 0x0 [ 1072.646295][T11272] cherry 0003:046A:0027.0051: unknown global tag 0xd [ 1072.670232][T11272] cherry 0003:046A:0027.0051: item 0 4 1 13 parsing failed [ 1072.698698][ T5306] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1072.717846][T11272] cherry 0003:046A:0027.0051: probe with driver cherry failed with error -22 [ 1072.736979][T11274] usb 4-1: Using ep0 maxpacket: 32 [ 1072.763073][T11274] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 1072.815551][T11274] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.40 [ 1072.867009][ T5306] usb 5-1: Using ep0 maxpacket: 8 [ 1072.870880][T11274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1072.889502][T11274] usb 4-1: Product: Ծ㡈㊻挐ꅖ꼋䈰 [ 1072.895865][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.905943][T11274] usb 4-1: Manufacturer: Ѝ [ 1072.914849][T11274] usb 4-1: SerialNumber: ࠐ [ 1072.951948][ T5306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.971707][ T5306] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1072.980881][ T5306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.993818][ T5306] usb 5-1: config 0 descriptor?? [ 1073.010319][ T5306] usbhid 5-1:0.0: can't add hid device: -22 [ 1073.016363][ T5306] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 1073.382276][ T5216] usb 5-1: USB disconnect, device number 99 [ 1073.389901][ T29] audit: type=1800 audit(1728609933.449:377): pid=17748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2421" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1073.659700][ T5216] usb 1-1: USB disconnect, device number 90 [ 1074.427339][T13749] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1074.447622][T17754] netlink: 'syz.0.2423': attribute type 5 has an invalid length. [ 1074.490925][T17754] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 1074.497522][T17754] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1074.535833][T17754] vhci_hcd vhci_hcd.0: Device attached [ 1074.553740][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'. [ 1074.578722][T17754] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.599676][T17754] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.638442][T17754] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.657699][T17754] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1074.698555][T17755] vhci_hcd: connection closed [ 1074.699623][ T11] vhci_hcd: stop threads [ 1074.708922][ T5216] vhci_hcd: vhci_device speed not set [ 1074.732193][ T11] vhci_hcd: release socket [ 1074.775786][ T11] vhci_hcd: disconnect device [ 1074.787165][ T5216] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 1074.794703][ T5216] usb 9-1: enqueue for inactive port 0 [ 1074.898422][ T5216] vhci_hcd: vhci_device speed not set [ 1075.119792][T11274] usbhid 4-1:1.0: can't add hid device: -71 [ 1075.125932][T11274] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 1075.142965][T11274] usb 4-1: USB disconnect, device number 105 [ 1075.296335][T17769] FAULT_INJECTION: forcing a failure. [ 1075.296335][T17769] name failslab, interval 1, probability 0, space 0, times 0 [ 1075.313040][T17769] CPU: 1 UID: 0 PID: 17769 Comm: syz.0.2428 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1075.323868][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1075.333985][T17769] Call Trace: [ 1075.337271][T17769] [ 1075.340203][T17769] dump_stack_lvl+0x241/0x360 [ 1075.344922][T17769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1075.350127][T17769] ? __pfx__printk+0x10/0x10 [ 1075.355082][T17769] should_fail_ex+0x3b0/0x4e0 [ 1075.359789][T17769] ? dst_alloc+0x12b/0x190 [ 1075.364227][T17769] should_failslab+0xac/0x100 [ 1075.368932][T17769] ? dst_alloc+0x12b/0x190 [ 1075.373369][T17769] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1075.378794][T17769] dst_alloc+0x12b/0x190 [ 1075.383077][T17769] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 1075.389190][T17769] ip_route_output_key_hash+0x193/0x2b0 [ 1075.394759][T17769] ? ip_route_output_key_hash+0xdf/0x2b0 [ 1075.400417][T17769] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1075.406509][T17769] ? __pfx___inet_hash_connect+0x10/0x10 [ 1075.412172][T17769] ip_route_output_flow+0x29/0x140 [ 1075.417308][T17769] tcp_v4_connect+0xdd7/0x1ba0 [ 1075.422126][T17769] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1075.427367][T17769] __inet_stream_connect+0x262/0xf30 [ 1075.432694][T17769] ? __pfx___inet_stream_connect+0x10/0x10 [ 1075.438530][T17769] ? __kasan_kmalloc+0x98/0xb0 [ 1075.443315][T17769] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 1075.448721][T17769] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1075.454298][T17769] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 1075.459519][T17769] tcp_sendmsg_locked+0x4a23/0x50a0 [ 1075.464735][T17769] ? __lock_acquire+0x1384/0x2050 [ 1075.469797][T17769] ? mark_lock+0x9a/0x360 [ 1075.474147][T17769] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1075.480148][T17769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1075.486521][T17769] ? lockdep_hardirqs_on+0x99/0x150 [ 1075.491776][T17769] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1075.497337][T17769] ? __local_bh_enable_ip+0x168/0x200 [ 1075.502735][T17769] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1075.507960][T17769] tcp_sendmsg+0x30/0x50 [ 1075.512231][T17769] __sock_sendmsg+0x1a6/0x270 [ 1075.516937][T17769] __sys_sendto+0x39b/0x4f0 [ 1075.521462][T17769] ? __pfx___sys_sendto+0x10/0x10 [ 1075.526494][T17769] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1075.532187][T17769] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1075.538556][T17769] __ia32_sys_sendto+0xdd/0x100 [ 1075.543436][T17769] __do_fast_syscall_32+0xb4/0x110 [ 1075.548567][T17769] ? exc_page_fault+0x590/0x8c0 [ 1075.553445][T17769] do_fast_syscall_32+0x34/0x80 [ 1075.558306][T17769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1075.564645][T17769] RIP: 0023:0xf7f40579 [ 1075.568725][T17769] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1075.588347][T17769] RSP: 002b:00000000f56c656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1075.596785][T17769] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 1075.604763][T17769] RDX: 0000000000000000 RSI: 0000000020004890 RDI: 0000000020e68000 [ 1075.612744][T17769] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1075.620728][T17769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1075.628709][T17769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1075.636699][T17769] [ 1075.639934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1076.167126][ T5215] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1076.329930][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.387841][ T5215] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.437156][ T5216] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1076.448362][ T5215] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1076.457943][ T5215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.476843][ T5215] usb 5-1: config 0 descriptor?? [ 1076.618221][ T5216] usb 2-1: Using ep0 maxpacket: 8 [ 1076.690650][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1076.774707][ T5216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1076.800559][ T5216] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1076.898058][ T5216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.909560][ T5216] usb 2-1: config 0 descriptor?? [ 1076.929588][ T5216] usbhid 2-1:0.0: can't add hid device: -22 [ 1076.935645][ T5216] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1076.956734][ T5302] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.235982][T17776] netlink: 'syz.4.2431': attribute type 10 has an invalid length. [ 1077.398194][T17776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.405741][T17776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.473736][T17776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.481064][T17776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.488626][T17776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.495814][T17776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.505962][T17793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.526056][T17793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.537590][ T5255] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1077.553009][ T5255] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1077.566336][ T5255] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1077.575020][T17776] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1077.575176][ T5255] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1077.592060][ T5255] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1077.604076][ T5255] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1077.751385][ T5216] usb 2-1: USB disconnect, device number 85 [ 1077.811481][ T5302] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.850055][ T5215] usbhid 5-1:0.0: can't add hid device: -71 [ 1077.856152][ T5215] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1077.873320][ T5215] usb 5-1: USB disconnect, device number 100 [ 1078.002632][ T5302] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.171740][ T5302] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.503313][T17794] chnl_net:caif_netlink_parms(): no params data found [ 1078.633380][ T5255] Bluetooth: hci8: Received unexpected HCI Event 0x00 [ 1078.713088][T17799] netlink: 'syz.3.2439': attribute type 5 has an invalid length. [ 1078.739922][T17808] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1078.746452][T17808] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1078.780498][T17808] vhci_hcd vhci_hcd.0: Device attached [ 1078.819163][ T5302] bridge_slave_1: left allmulticast mode [ 1078.824858][ T5302] bridge_slave_1: left promiscuous mode [ 1078.841442][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.850412][T11274] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1078.878414][ T5302] bridge_slave_0: left allmulticast mode [ 1078.889544][ T5302] bridge_slave_0: left promiscuous mode [ 1078.927137][T11272] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1078.957684][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1078.969554][ T937] vhci_hcd: vhci_device speed not set [ 1079.020634][T11274] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.038925][ T937] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 1079.048003][T11274] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1079.059966][T11274] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1079.076498][T11274] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1079.086279][T11272] usb 2-1: Using ep0 maxpacket: 32 [ 1079.092151][T11274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1079.104729][T11272] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 1079.122218][T11274] usb 5-1: SerialNumber: syz [ 1079.138737][T11272] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.40 [ 1079.162179][T11274] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1079.174540][T11272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.183255][T11274] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1079.190283][T11272] usb 2-1: Product: Ծ㡈㊻挐ꅖ꼋䈰 [ 1079.196644][T11272] usb 2-1: Manufacturer: Ѝ [ 1079.205729][T11274] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1079.215492][T11272] usb 2-1: SerialNumber: ࠐ [ 1079.380446][T17809] vhci_hcd: connection reset by peer [ 1079.412845][ T7340] vhci_hcd: stop threads [ 1079.427488][ T7340] vhci_hcd: release socket [ 1079.431993][ T7340] vhci_hcd: disconnect device [ 1079.658893][ T5255] Bluetooth: hci3: command tx timeout [ 1079.723217][ T6085] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1079.877537][ T6085] usb 1-1: Using ep0 maxpacket: 8 [ 1079.900289][ T6085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1079.913504][ T5302] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1079.915155][ T6085] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1079.935965][ T6085] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1079.950717][ T6085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.967504][ T6085] usb 1-1: config 0 descriptor?? [ 1079.988767][ T6085] usbhid 1-1:0.0: can't add hid device: -22 [ 1079.996503][ T6085] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 1080.419760][ T6085] usb 1-1: USB disconnect, device number 91 [ 1080.623972][ T5302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1080.651477][ T5302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1080.678206][ T5302] bond0 (unregistering): Released all slaves [ 1080.741108][T17799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2439'. [ 1080.793705][T17799] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1080.833820][T17799] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1080.844421][T17799] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1080.855221][T17799] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1080.889328][T17794] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.896475][T17794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1080.992513][T17794] bridge_slave_0: entered allmulticast mode [ 1081.024888][ T5306] usb 5-1: USB disconnect, device number 101 [ 1081.057098][T17794] bridge_slave_0: entered promiscuous mode [ 1081.153493][T17827] usb usb8: usbfs: process 17827 (syz.0.2443) did not claim interface 0 before use [ 1081.163938][T17827] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1081.306362][T17794] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.318000][T17794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.338218][T17794] bridge_slave_1: entered allmulticast mode [ 1081.345136][T17794] bridge_slave_1: entered promiscuous mode [ 1081.444598][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2444'. [ 1081.453923][ T5216] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1081.627036][ T5216] usb 1-1: Using ep0 maxpacket: 32 [ 1081.635043][T11272] usbhid 2-1:1.0: can't add hid device: -71 [ 1081.644077][ T5216] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1081.648234][T11272] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1081.664596][T17839] netlink: 'syz.3.2444': attribute type 1 has an invalid length. [ 1081.670943][T11272] usb 2-1: USB disconnect, device number 86 [ 1081.694709][T17794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.706407][ T5216] usb 1-1: config 0 has no interface number 0 [ 1081.733817][ T5216] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1081.743789][ T5255] Bluetooth: hci3: command tx timeout [ 1081.777021][ T5216] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.785076][ T5216] usb 1-1: Product: syz [ 1081.796972][ T5216] usb 1-1: Manufacturer: syz [ 1081.801625][ T5216] usb 1-1: SerialNumber: syz [ 1081.818590][T17794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.838830][ T5216] usb 1-1: config 0 descriptor?? [ 1081.859488][ T5216] smsc95xx v2.0.0 [ 1082.034770][ T5302] hsr_slave_0: left promiscuous mode [ 1082.068396][ T5302] hsr_slave_1: left promiscuous mode [ 1082.069109][ T5216] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1082.097171][ T5215] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1082.097183][ T5216] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1082.106007][ T5216] usb 1-1: USB disconnect, device number 92 [ 1082.186040][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.197156][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.205382][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.217264][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.267346][ T5215] usb 5-1: Using ep0 maxpacket: 16 [ 1082.299637][ T5302] veth1_macvtap: left promiscuous mode [ 1082.308643][ T5215] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1082.325830][ T5215] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.325855][ T5302] veth0_macvtap: left promiscuous mode [ 1082.348002][ T5215] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.361307][ T5215] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1082.370721][ T5215] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.379169][ T5215] usb 5-1: Product: syz [ 1082.383365][ T5215] usb 5-1: Manufacturer: syz [ 1082.411973][ T5215] usb 5-1: SerialNumber: syz [ 1082.441625][ T5302] veth1_vlan: left promiscuous mode [ 1082.486821][ T5302] veth0_vlan: left promiscuous mode [ 1082.667188][ T5306] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1082.966935][ T5306] usb 2-1: Using ep0 maxpacket: 8 [ 1082.982620][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1082.993751][ T5306] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.003691][ T5306] usb 2-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1083.013699][ T5306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.027730][ T5306] usb 2-1: config 0 descriptor?? [ 1083.040723][ T5306] usbhid 2-1:0.0: can't add hid device: -22 [ 1083.062892][ T5306] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 1083.284052][ T6101] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1083.469823][ T6101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.482522][ T6101] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.492428][ T6101] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1083.507067][ T6101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.517801][ T6101] usb 1-1: config 0 descriptor?? [ 1083.636176][ T6085] usb 2-1: USB disconnect, device number 87 [ 1083.817057][ T5255] Bluetooth: hci3: command tx timeout [ 1084.218870][ T937] vhci_hcd: vhci_device speed not set [ 1084.291736][T17864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.340364][T17864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.867371][ T5306] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 1084.890495][ T5215] usb 5-1: 0:2 : does not exist [ 1084.908487][ T5215] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 1084.999156][ T5215] usb 5-1: USB disconnect, device number 102 [ 1085.036338][ T5255] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1085.063563][ T9030] udevd[9030]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.091678][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.148671][ T5306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1085.210194][ T5306] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1085.225796][ T5306] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1085.235675][ T5306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.248497][ T5306] usb 4-1: config 0 descriptor?? [ 1085.346229][ T5302] team0 (unregistering): Port device team_slave_1 removed [ 1085.357329][ T937] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1085.482692][ T5302] team0 (unregistering): Port device team_slave_0 removed [ 1085.519031][ T937] usb 2-1: Using ep0 maxpacket: 8 [ 1085.529944][ T937] usb 2-1: config 0 has an invalid interface number: 211 but max is 0 [ 1085.542039][ T937] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.577591][ T937] usb 2-1: config 0 has no interface number 0 [ 1085.608093][ T937] usb 2-1: config 0 interface 211 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1085.620117][ T937] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 1085.643973][ T937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.692054][ T937] usb 2-1: config 0 descriptor?? [ 1085.715653][ T937] usb 2-1: bad CDC descriptors [ 1085.900559][ T5255] Bluetooth: hci3: command tx timeout [ 1087.165904][T17857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2450'. [ 1087.190524][T17870] netlink: 'syz.1.2451': attribute type 4 has an invalid length. [ 1087.225741][T17876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2451'. [ 1087.238809][T17877] netlink: 'syz.1.2451': attribute type 17 has an invalid length. [ 1087.269258][ T6101] usbhid 1-1:0.0: can't add hid device: -71 [ 1087.275514][ T6101] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1087.306027][ T6101] usb 1-1: USB disconnect, device number 93 [ 1087.330873][ T6085] usb 2-1: USB disconnect, device number 88 [ 1087.332334][T17880] netlink: 'syz.4.2454': attribute type 5 has an invalid length. [ 1087.365433][T17794] team0: Port device team_slave_0 added [ 1087.501205][T17794] team0: Port device team_slave_1 added [ 1087.659719][T17794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1087.718451][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.766574][T17794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1087.814476][ T5306] usbhid 4-1:0.0: can't add hid device: -71 [ 1087.825647][ T5306] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1087.834175][T17794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1087.843911][ T5306] usb 4-1: USB disconnect, device number 106 [ 1087.877053][ T6101] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1087.919185][T17794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1087.945688][T17794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1088.057817][ T6101] usb 5-1: Using ep0 maxpacket: 32 [ 1088.069261][ T6101] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 206, changing to 11 [ 1088.119207][ T6101] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.40 [ 1088.135845][ T6101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.153380][ T6101] usb 5-1: Product: Ծ㡈㊻挐ꅖ꼋䈰 [ 1088.166638][ T6101] usb 5-1: Manufacturer: Ѝ [ 1088.176971][ T6101] usb 5-1: SerialNumber: ࠐ [ 1088.205394][T17794] hsr_slave_0: entered promiscuous mode [ 1088.293585][T17794] hsr_slave_1: entered promiscuous mode [ 1088.308628][ T6085] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1088.367001][T17794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1088.374672][T17794] Cannot create hsr debugfs directory [ 1088.498873][ T6085] usb 1-1: Using ep0 maxpacket: 16 [ 1088.509035][ T6085] usb 1-1: config 5 has an invalid interface number: 20 but max is 2 [ 1088.522048][ T6085] usb 1-1: config 5 has an invalid interface number: 180 but max is 2 [ 1088.542933][ T6085] usb 1-1: config 5 has an invalid interface number: 156 but max is 2 [ 1088.560969][ T6085] usb 1-1: config 5 has an invalid interface descriptor of length 5, skipping [ 1088.599973][ T6085] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 1088.664039][ T6085] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.700834][ T6085] usb 1-1: config 5 has no interface number 0 [ 1088.717268][ T6085] usb 1-1: config 5 has no interface number 1 [ 1088.723579][ T6085] usb 1-1: config 5 has no interface number 2 [ 1088.730250][ T6085] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1088.741637][ T6085] usb 1-1: config 5 interface 20 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1088.753935][ T6085] usb 1-1: config 5 interface 180 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1088.765569][ T6085] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1088.777247][ T6085] usb 1-1: config 5 interface 180 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 1088.788607][ T6085] usb 1-1: config 5 interface 180 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 1088.801025][ T6085] usb 1-1: config 5 interface 156 altsetting 4 has a duplicate endpoint with address 0x9, skipping [ 1088.821767][ T6085] usb 1-1: config 5 interface 156 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 1088.836311][ T6085] usb 1-1: config 5 interface 20 has no altsetting 0 [ 1088.844057][ T6085] usb 1-1: config 5 interface 180 has no altsetting 0 [ 1088.851324][ T6085] usb 1-1: config 5 interface 156 has no altsetting 0 [ 1088.861059][ T6085] usb 1-1: New USB device found, idVendor=eb1a, idProduct=2863, bcdDevice=8b.dd [ 1088.870748][ T6085] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.890649][ T6085] usb 1-1: Product: syz [ 1088.897813][ T6085] usb 1-1: Manufacturer: syz [ 1088.920148][ T6085] usb 1-1: SerialNumber: syz [ 1089.053280][ T5216] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 1089.209630][ T5216] usb 4-1: Using ep0 maxpacket: 8 [ 1089.217733][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.228945][ T5216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1089.238942][ T5216] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 1089.255419][ T5216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.284620][ T5216] usb 4-1: config 0 descriptor?? [ 1089.295721][ T5216] usbhid 4-1:0.0: can't add hid device: -22 [ 1089.302206][ T5216] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 1089.341429][ T6085] usb 1-1: USB disconnect, device number 94 [ 1089.722696][ T5306] usb 4-1: USB disconnect, device number 107 [ 1090.016358][T17794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1090.064072][T17794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1090.115418][T17794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1090.179095][T17794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1090.337221][ T5306] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1090.371227][T17794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.410154][T17794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.472597][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.479859][ T7340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1090.552620][ T5306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.578014][ T5306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.594133][ T6101] usbhid 5-1:1.0: can't add hid device: -71 [ 1090.601909][ T6101] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1090.609994][ T5306] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 1090.623560][ T6101] usb 5-1: USB disconnect, device number 103 [ 1090.632544][ T5306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.652148][ T5306] usb 1-1: config 0 descriptor?? [ 1090.663035][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.670239][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1091.098395][ T30] INFO: task syz.0.2086:16090 blocked for more than 143 seconds. [ 1091.111696][ T30] Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1091.129081][T17794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1091.148024][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1091.209595][ T30] task:syz.0.2086 state:D stack:23776 pid:16090 tgid:16090 ppid:15246 flags:0x20000004 [ 1091.299855][ T30] Call Trace: [ 1091.303214][ T30] [ 1091.306190][ T30] __schedule+0x1895/0x4b30 [ 1091.309205][T17934] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2464'. [ 1091.381155][ T30] ? __pfx___schedule+0x10/0x10 [ 1091.386188][ T30] ? __pfx_lock_release+0x10/0x10 [ 1091.430438][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1091.436974][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1091.443832][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 1091.454265][ T30] ? schedule+0x90/0x320 [ 1091.460717][ T30] schedule+0x14b/0x320 [ 1091.464954][ T30] ? down_read+0x6a5/0xa40 [ 1091.470401][ T30] schedule_preempt_disabled+0x13/0x30 [ 1091.475954][ T30] down_read+0x705/0xa40 [ 1091.481137][ T30] ? __pfx_down_read+0x10/0x10 [ 1091.487068][ T30] ? __filemap_get_folio+0x949/0xbd0 [ 1091.493498][ T30] filemap_fault+0xd54/0x1950 [ 1091.499557][ T30] ? pte_alloc_one+0x3b2/0x5d0 [ 1091.504520][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 1091.509814][ T30] ? pte_alloc_one+0x442/0x5d0 [ 1091.514680][ T30] ? __pfx_pte_alloc_one+0x10/0x10 [ 1091.520078][ T30] ? __pfx_validate_chain+0x10/0x10 [ 1091.525409][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1091.530752][ T30] __do_fault+0x135/0x460 [ 1091.535156][ T30] handle_pte_fault+0x1105/0x6800 [ 1091.540302][ T30] ? mark_lock+0x9a/0x360 [ 1091.544879][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 1091.550414][ T30] ? __lock_acquire+0x1384/0x2050 [ 1091.555535][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 1091.558060][T17965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.561034][ T30] ? lock_vma_under_rcu+0x34b/0x790 [ 1091.574861][ T30] ? __thp_vma_allowable_orders+0x39e/0x9f0 [ 1091.581158][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1091.587124][ T30] handle_mm_fault+0x1106/0x1bb0 [ 1091.592277][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 1091.597194][ T25] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1091.597661][ T30] ? lock_vma_under_rcu+0x602/0x790 [ 1091.610584][ T30] ? lock_vma_under_rcu+0x1dd/0x790 [ 1091.616085][ T30] ? exc_page_fault+0x113/0x8c0 [ 1091.621073][ T30] exc_page_fault+0x459/0x8c0 [ 1091.625845][ T30] asm_exc_page_fault+0x26/0x30 [ 1091.631012][ T30] RIP: 0023:0xf70cc3a5 [ 1091.635213][ T30] RSP: 002b:00000000f74ffb50 EFLAGS: 00010246 [ 1091.641513][ T30] RAX: 00000000000000c0 RBX: 00000000f739bff4 RCX: 000000006d5e8a7a [ 1091.649655][ T30] RDX: 0000000000000000 RSI: 00000000f70cbc6f RDI: 0000000000000000 [ 1091.657777][ T30] RBP: 00000000f74ffdb8 R08: 0000000000000000 R09: 0000000000000000 [ 1091.666420][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1091.674674][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1091.682771][ T30] [ 1091.685913][ T30] [ 1091.685913][ T30] Showing all locks held in the system: [ 1091.693940][ T30] 3 locks held by kworker/u8:0/11: [ 1091.699413][ T30] 5 locks held by kworker/1:0/25: [ 1091.704507][ T30] #0: ffff888144e92d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1091.716927][ T30] #1: ffffc900001f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1091.729167][ T30] #2: ffff888028361190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1091.739098][ T30] #3: ffff888028364510 (&port_dev->status_lock){+.+.}-{3:3}, at: hub_event+0x25b9/0x5150 [ 1091.749912][ T30] #4: ffff8880280afb68 (hcd->address0_mutex){+.+.}-{3:3}, at: hub_event+0x25f7/0x5150 [ 1091.759995][ T30] 1 lock held by khungtaskd/30: [ 1091.764884][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1091.775416][ T30] 2 locks held by getty/4995: [ 1091.780780][ T30] #0: ffff88802e97e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1091.790995][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1091.801520][ T30] 3 locks held by kworker/0:3/5216: [ 1091.806758][ T30] 5 locks held by kworker/0:5/5306: [ 1091.812297][ T30] #0: ffff888144e92d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1091.823993][ T30] #1: ffffc900044f7d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1091.836297][ T30] #2: ffff888028187190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 1091.845643][ T30] #3: ffff88807e7fe190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1091.855440][ T30] #4: ffff888054ee3160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 1091.865075][ T30] 2 locks held by kworker/1:6/6085: [ 1091.870957][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1091.883190][ T30] #1: ffffc900037afd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1091.893881][ T30] 1 lock held by syz.1.2030/15869: [ 1091.899351][ T30] #0: ffff8880234c8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: blkdev_fallocate+0x20e/0x490 [ 1091.910225][ T30] 2 locks held by syz.0.2086/16090: [ 1091.915499][ T30] #0: ffff8880213ffd18 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x34b/0x790 [ 1091.926030][ T30] #1: ffff8880234c8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: filemap_fault+0xd54/0x1950 [ 1091.936728][ T30] 1 lock held by syz.1.2197/16643: [ 1091.941930][ T30] #0: ffff8880234c8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1091.954730][ T30] 1 lock held by syz.3.2340/17329: [ 1091.959979][ T30] #0: ffff8880234c8940 (mapping.invalidate_lock#2){++++}-{3:3}, at: page_cache_ra_unbounded+0x135/0x8a0 [ 1091.986981][ T30] 1 lock held by syz-executor/17450: [ 1091.992370][ T30] #0: ffffffff8e93d378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1092.005263][ T30] 1 lock held by syz-executor/17794: [ 1092.010688][ T30] 1 lock held by sed/17968: [ 1092.015294][ T30] [ 1092.018000][ T30] ============================================= [ 1092.018000][ T30] [ 1092.026448][ T30] NMI backtrace for cpu 0 [ 1092.030808][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1092.041339][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1092.051430][ T30] Call Trace: [ 1092.054744][ T30] [ 1092.057700][ T30] dump_stack_lvl+0x241/0x360 [ 1092.062403][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.067620][ T30] ? __pfx__printk+0x10/0x10 [ 1092.072258][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1092.077225][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1092.082711][ T30] ? _printk+0xd5/0x120 [ 1092.086895][ T30] ? __pfx__printk+0x10/0x10 [ 1092.091517][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1092.096398][ T30] ? __pfx__printk+0x10/0x10 [ 1092.101044][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1092.106086][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1092.112085][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1092.118084][ T30] watchdog+0xff4/0x1040 [ 1092.122349][ T30] ? watchdog+0x1ea/0x1040 [ 1092.126803][ T30] ? __pfx_watchdog+0x10/0x10 [ 1092.131502][ T30] kthread+0x2f0/0x390 [ 1092.135587][ T30] ? __pfx_watchdog+0x10/0x10 [ 1092.140281][ T30] ? __pfx_kthread+0x10/0x10 [ 1092.144883][ T30] ret_from_fork+0x4b/0x80 [ 1092.149330][ T30] ? __pfx_kthread+0x10/0x10 [ 1092.153932][ T30] ret_from_fork_asm+0x1a/0x30 [ 1092.158722][ T30] [ 1092.162335][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1092.168647][ C1] NMI backtrace for cpu 1 [ 1092.168660][ C1] CPU: 1 UID: 0 PID: 17959 Comm: syz.4.2471 Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1092.168681][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1092.168691][ C1] RIP: 0010:mark_lock+0x151/0x360 [ 1092.168714][ C1] Code: 42 80 3c 28 00 74 08 48 89 df e8 0a c9 8d 00 41 bc 01 00 00 00 44 85 33 74 16 44 89 e0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f <5d> c3 cc cc cc cc e8 14 37 ff ff 85 c0 0f 84 3d 01 00 00 45 89 f6 [ 1092.168729][ C1] RSP: 0018:ffffc900090575c0 EFLAGS: 00000082 [ 1092.168746][ C1] RAX: 0000000000000001 RBX: ffff88802cb564c0 RCX: ffffffff8170ce6a [ 1092.168777][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942c5800 [ 1092.168789][ C1] RBP: 0000000000000006 R08: ffffffff942c5807 R09: 1ffffffff2858b00 [ 1092.168803][ C1] R10: dffffc0000000000 R11: fffffbfff2858b01 R12: ffff88802cb55a00 [ 1092.168817][ C1] R13: ffff88802cb564d8 R14: 0000000000000000 R15: ffff88802cb56500 [ 1092.168830][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1092.168846][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1092.168859][ C1] CR2: 00007feaa0e36440 CR3: 000000000e734000 CR4: 00000000003526f0 [ 1092.168875][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1092.168887][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1092.168899][ C1] Call Trace: [ 1092.168906][ C1] [ 1092.168913][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1092.168935][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1092.168964][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1092.168991][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1092.169016][ C1] ? nmi_handle+0x14f/0x5a0 [ 1092.169034][ C1] ? nmi_handle+0x2a/0x5a0 [ 1092.169053][ C1] ? mark_lock+0x151/0x360 [ 1092.169070][ C1] ? default_do_nmi+0x63/0x160 [ 1092.169103][ C1] ? exc_nmi+0x123/0x1f0 [ 1092.169122][ C1] ? end_repeat_nmi+0xf/0x53 [ 1092.169141][ C1] ? mark_lock+0x9a/0x360 [ 1092.169158][ C1] ? mark_lock+0x151/0x360 [ 1092.169174][ C1] ? mark_lock+0x151/0x360 [ 1092.169191][ C1] ? mark_lock+0x151/0x360 [ 1092.169207][ C1] [ 1092.169214][ C1] [ 1092.169220][ C1] __lock_acquire+0x11b0/0x2050 [ 1092.169251][ C1] lock_acquire+0x1ed/0x550 [ 1092.169275][ C1] ? free_unref_page+0x67f/0xf20 [ 1092.169308][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1092.169335][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 1092.169356][ C1] ? __pfx_do_raw_spin_trylock+0x10/0x10 [ 1092.169378][ C1] ? page_ext_get+0x20/0x2a0 [ 1092.169399][ C1] _raw_spin_trylock+0x46/0x80 [ 1092.169422][ C1] ? free_unref_page+0x67f/0xf20 [ 1092.169447][ C1] free_unref_page+0x67f/0xf20 [ 1092.169475][ C1] vfree+0x186/0x2e0 [ 1092.169500][ C1] kcov_close+0x28/0x50 [ 1092.169521][ C1] ? __pfx_kcov_close+0x10/0x10 [ 1092.169560][ C1] __fput+0x23f/0x880 [ 1092.169588][ C1] task_work_run+0x24f/0x310 [ 1092.169620][ C1] ? kasan_quarantine_put+0xdc/0x230 [ 1092.169639][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1092.169658][ C1] ? do_exit+0xa2a/0x28e0 [ 1092.169674][ C1] ? kmem_cache_free+0x1a2/0x420 [ 1092.169697][ C1] ? do_exit+0xa2a/0x28e0 [ 1092.169714][ C1] do_exit+0xa2f/0x28e0 [ 1092.169734][ C1] ? __pfx_do_exit+0x10/0x10 [ 1092.169750][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1092.169774][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1092.169800][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1092.169844][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1092.169870][ C1] do_group_exit+0x207/0x2c0 [ 1092.169888][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1092.169912][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1092.169939][ C1] get_signal+0x16a3/0x1740 [ 1092.169966][ C1] ? __pfx_get_signal+0x10/0x10 [ 1092.169987][ C1] ? do_futex+0x33b/0x560 [ 1092.170010][ C1] arch_do_signal_or_restart+0x96/0x860 [ 1092.170036][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1092.170066][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 1092.170095][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 1092.170124][ C1] __do_fast_syscall_32+0xc4/0x110 [ 1092.170142][ C1] ? exc_page_fault+0x590/0x8c0 [ 1092.170169][ C1] do_fast_syscall_32+0x34/0x80 [ 1092.170187][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1092.170206][ C1] RIP: 0023:0xf748d579 [ 1092.170221][ C1] Code: Unable to access opcode bytes at 0xf748d54f. [ 1092.170230][ C1] RSP: 002b:00000000f75dfb0c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 1092.170248][ C1] RAX: fffffffffffffdfc RBX: 00000000f74b4f8c RCX: 0000000000000080 [ 1092.170261][ C1] RDX: 0000000000000000 RSI: 00000000f75dfcd8 RDI: 0000000000000bea [ 1092.170273][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1092.170297][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1092.170309][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1092.170326][ C1] [ 1092.170653][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1092.650767][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00074-gd3d1556696c1 #0 [ 1092.661294][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1092.671353][ T30] Call Trace: [ 1092.674634][ T30] [ 1092.677569][ T30] dump_stack_lvl+0x241/0x360 [ 1092.682283][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.687489][ T30] ? __pfx__printk+0x10/0x10 [ 1092.692111][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1092.698155][ T30] ? vscnprintf+0x5d/0x90 [ 1092.702521][ T30] panic+0x349/0x880 [ 1092.706451][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1092.712619][ T30] ? __pfx_panic+0x10/0x10 [ 1092.717068][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1092.722473][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1092.728056][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1092.733453][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1092.739631][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1092.745808][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1092.751988][ T30] watchdog+0x1033/0x1040 [ 1092.756343][ T30] ? watchdog+0x1ea/0x1040 [ 1092.760785][ T30] ? __pfx_watchdog+0x10/0x10 [ 1092.765481][ T30] kthread+0x2f0/0x390 [ 1092.769562][ T30] ? __pfx_watchdog+0x10/0x10 [ 1092.774259][ T30] ? __pfx_kthread+0x10/0x10 [ 1092.778867][ T30] ret_from_fork+0x4b/0x80 [ 1092.783310][ T30] ? __pfx_kthread+0x10/0x10 [ 1092.787918][ T30] ret_from_fork_asm+0x1a/0x30 [ 1092.792715][ T30] [ 1092.796068][ T30] Kernel Offset: disabled [ 1092.800422][ T30] Rebooting in 86400 seconds..