last executing test programs: 8.695153273s ago: executing program 2 (id=2101): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x39}, @exit], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x110, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa0000000000109078"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.044236484s ago: executing program 4 (id=2108): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="390000001300034700bb65e1c3c6ffff01000000010000005600000025000000190004000400000047fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000300), 0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x9, 0x1, [0x4]}, 0xa) 6.92814194s ago: executing program 4 (id=2109): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x20000000000003da, &(0x7f0000000000)=[{}]}, 0x10) writev(r3, &(0x7f0000006840)=[{&(0x7f00000053c0)='+', 0xfdef}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000f9ff0000000000000000000000c4398ef4ae688c59d1064891016270347262808ec6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000200)=0xc5, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) 6.60582225s ago: executing program 2 (id=2112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090e000000000000000000000005000600000000000a00000000000000fc000000000000000000000000000000000000000000000005000500000000000a00000000000000060100000000000000000000000000aa01"], 0x70}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4140aecd, &(0x7f0000000040)) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x4, 0x0, 0x1, {0x5, 0x1, 'H.245\x00'}}]}, 0x74}}, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') fchdir(r5) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) syz_io_uring_setup(0x23ed, &(0x7f0000000200)={0x0, 0x37fc, 0x200, 0x0, 0x2ce, 0x0, r5}, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x27a8, &(0x7f0000000280)={0x0, 0xcdd0, 0x200, 0x1, 0x1a, 0x0, r6}, &(0x7f0000000300), &(0x7f0000000340)=0x0) connect$inet(r6, &(0x7f00000003c0)={0x2, 0x4e23, @local}, 0x10) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x1, 0x4, 0x0, 0x0, 0x2, 0x0, {0x3, r9}}) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') 4.777717193s ago: executing program 2 (id=2123): syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)={0x23c, 0x7d, 0x0, {{0x500, 0xfb, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x9000000, 0xfffffffffffffe46, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\n\xbc\x92+3iZ\xa3\xc2\xc4bmq\xfe\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\x00\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x02\x10\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\xf3\x13b@', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00@\x00\x00G\xec!\xca\x9e\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x23c) 4.000029019s ago: executing program 3 (id=2129): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) connect$can_j1939(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10000000) r3 = dup(0xffffffffffffffff) mmap(&(0x7f0000c2f000/0x2000)=nil, 0x2000, 0x1000007, 0x38011, 0xffffffffffffffff, 0xfc476000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f00000002c0)=0xc) tkill(r4, 0x29) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f000001a880)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0) ioprio_set$pid(0x3, r4, 0x4004) ioprio_get$pid(0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x45, 0xb, 0x1}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r6 = io_uring_setup(0x5027, &(0x7f0000000200)={0x0, 0xd874, 0x200, 0x3, 0x1d0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x80010, r6, 0x8000000) mbind(&(0x7f00004e2000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000ffb000/0x2000)=nil) 3.845813193s ago: executing program 4 (id=2130): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/108, 0x6c}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x28, 0x5, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r3, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="78a6d357", 0x4, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000002300)='asymmetric\x00', &(0x7f0000000540)=@chain={'key_or_keyring:', r6}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r5}) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="0100000006000000000001000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006127c608d3d7278667a6f952ce858ff0c60d66c3ec9585fac40941e8b92e6689fc4c359a3d46dafd3a62f8cd2e7237fc9b386eaec987e584c01a62ac1c345d1691fd17f4d413ef799e5408f9aa38210b8897b230490312b6fb026b807d83c99cac28d4e1a0d1583a1c3c37ae064b42", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002100)={'syztnl2\x00', &(0x7f0000002080)={'ip6gre0\x00', 0x0, 0x4, 0x6f, 0xd, 0x401, 0x7c, @private0, @mcast2, 0xf810, 0x8, 0x2bc, 0x7f}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000002040)=0x5) syz_mount_image$fuse(0x0, &(0x7f0000002240)='./file0\x00', 0x4, 0x0, 0x4, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) removexattr(0x0, 0x0) r9 = socket(0x1, 0x3, 0x0) bind$unix(r9, &(0x7f0000002280)=@file={0x1, './file0\x00'}, 0x6e) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) memfd_create(&(0x7f0000002140)='{-$:[:,{\x00', 0x5) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r10, &(0x7f0000002780)='./file1\x00', 0x0) 3.842014623s ago: executing program 2 (id=2131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000600)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cbd9f0fffff804a03264a890a52094cd1825eddc42c667fc68923d7df9f4c5843c5f11b63d2684fff43955079736fa4c80100487c31c1b706b6bf10900000000000000491bd6ab098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74aff7f00008bf98886eaac01b08aa753b8727f25773c98cd6a785c6b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2", 0xc0, r2) add_key$user(&(0x7f0000000100), &(0x7f0000001680)={'syz', 0x0}, &(0x7f00000002c0)='`', 0x1, 0xfffffffffffffffb) r3 = socket$rxrpc(0x21, 0x2, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x6b, 0x7b, 0xfb, 0x10, 0x1608, 0x303, 0xa1cb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x41, 0xb9, 0x6, 0x0, [], [{{0x9, 0x5, 0x6, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r3, 0x110, 0x4, &(0x7f0000001980)=0xffffffff, 0x4) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x101a, 0x0, &(0x7f0000000040)={0x0, 0x2, [0xca0, 0x176, 0x329, 0x307]}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[]) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000000c0)=0x1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="401044000000237c1a73"], 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007cc0)=[{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000240)="64c885f9d881", 0x6}], 0x1}], 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.592033016s ago: executing program 3 (id=2132): memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400, 0x0) mkdirat(r2, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x13) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0x0) rename(&(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r4, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) 3.480471755s ago: executing program 4 (id=2134): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @private0}}}, &(0x7f00000000c0)=0x98) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) syz_usb_connect(0x0, 0x5ce, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x1a, 0xe8, 0xb3, 0x8, 0x2c7c, 0x620, 0x81d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5bc, 0x3, 0xd, 0x9, 0x90, 0xfa, [{{0x9, 0x4, 0xc8, 0x10, 0x1, 0x3, 0x72, 0x2, 0x2c, [@uac_control={{0xa, 0x24, 0x1, 0x24b0, 0xa2}, [@extension_unit={0xd, 0x24, 0x8, 0x4, 0x6, 0x4, "5374f7ec7064"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x5, 0x2, "fd03"}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x0, "e5"}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x202, 0x3, 0x80, 0xb94d, 0x5, 0x80}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "b4e34f2bdcf8"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x1, 0xff, 0x81}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x8}, @mdlm={0x15, 0x24, 0x12, 0xbe6}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x80}, @mdlm={0x15, 0x24, 0x12, 0x8}]}], [{{0x9, 0x5, 0x2, 0x1, 0x3ff, 0xfc, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xfc, 0x8}]}}]}}, {{0x9, 0x4, 0x8e, 0x2, 0xa, 0xff, 0x5, 0x34, 0x80, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x1dd, 0xa, 0x9}, {0x6, 0x24, 0x1a, 0x3ff, 0xc}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x9, 0xd7}, @acm={0x4, 0x24, 0x2, 0xc}, @mdlm_detail={0xf2, 0x24, 0x13, 0xe, "756930f5730ea4defaf0d3898b9736a0777134c6d6b6e730178995914eb98754814429f5162c51e5d4148a06e760e196564422df2ee799350f98dc9c4d3023b2921d162309cf49418b6b5793b199e3198e22c0d55ba141f7c3db2568f593eba56ea4ddb0c89dab8a434afe9ec1afe93c22b3a9e04bdb49b2255ea6032c4975e7688081295ae12d86af1d85b691ccd62860b6ae85c344daf58ad2d229e34e7b960717b98265dcb6f4b5e25b0b1acdb1367c95b17aee4a685effb3127418a3a722ac6cbc2e48540fd80b06afaab4764ce8a729aa30b5af2454d9d5c1da04287949653984a16203508ab110f588095c"}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xc2}]}, @generic={0xb2, 0xe, "75b1d40b5400a9d69aebbdf4612064e806cefdf0e18edc72b1a704f4bb9439148f3d0966e7fe33c5edf55da2e648c301162a10fd394f3a0681761fa23fe0231ab7eda2e6608bcc076deb92343687a24e6ed00e2a6e7f18dfcd1f5eb49159724509eacc8a3ff06dd4bb46c9422f287b48dc6fe44addcccf7777dde2730eb116d7d880685dd7bee71f7864883b90261f3982dfd23bc33c007a17b4d3fe9acd837938ea3e24d4ff2eef8fa9c15eb7c3e391"}], [{{0x9, 0x5, 0xe, 0x10, 0x10, 0x3, 0x1, 0x7, [@generic={0xab, 0x0, "8a071f0f986b0e033783cbf23337d053d4c07cfab58d7eb3bbf8f73cde53dff82f99f8b1211d9f5fc174e12eab40c635cf24fb2fb5109f9672adf96f9ae8df7b9d2946f4b8ae13540b221c0776c46bae09eabf5659d71b5b9bdbe736b82838c1f04a03b42bb69f21f7b77442bec59df6594ef9ddea630d2f597b93603bb689dfe24f1b3e394661bbc2d27ab9fc0c7e63431ccf4c7a08b357aaf6ea32d1e37acfc083716f08f7694d94"}, @generic={0x5c, 0x10, "109cc3a0e4027dc54355a5075bf9b8ae50f70dcd7ffb15b1b85e43b93d4fa6e8a28404c76bd2ab666de1b45ba63a0e45df66ccc30a14f79e55495c32876e367bcaa2726ea913ee4534616804bcece60adb898d2ac9c555046e1d"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x3, 0x8, 0x7f}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0xc, 0x4, 0x6}}, {{0x9, 0x5, 0x7, 0xc, 0x10, 0xb, 0x81, 0x6}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x1, 0x4, 0xd0, [@generic={0x27, 0x4, "8c1cb646cb904fffc05eb0675eea3750c414d4311eaf24f3dfa103db7b5425aaabbf2bb0b8"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xa, 0x100}]}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0x1, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x143, 0x6, 0x2}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xc, 0xd, 0x3}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x7, 0xad, 0x55, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x54, 0x7}, @generic={0x36, 0x2, "c696ef2f15e201d18a0ec29542d474a13c7ef3435de0b4c4a1aee355ee570132847aeadd741ca5bdab059c6d9c0d825dfcec0a08"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x3, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x1, 0x2, 0x10, 0x7, 0x81, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x200}]}}]}}, {{0x9, 0x4, 0xe2, 0x4, 0x3, 0xad, 0x75, 0x4d, 0x8, [], [{{0x9, 0x5, 0x3, 0xc, 0x8, 0x2, 0x0, 0x8, [@generic={0xf2, 0xd97501df86de1fbf, "7a8aa3eea1630b70a0f381d130a4e42c84a7991904e0b7dbd4760ccf774faaffe08eff2203fab8a65915a5cd32840e75eb47970acd0b8b48c040d645b7d9cba321f239329b4a87c1877ad357989dc7c78c23d40b5cf852394c02567a5e63e5442890dc48e8c40a0cc124b016fbc2242d9fee2d2d2264b8cbcdc0d0fccfcda5daa14d4beff7c04f2cc6d1e731bfaed1da0913aa159e7527ac331cd0e610e7643835fa5a450669c7c3ea08fb42383020e25f8bd618b17f56b90181a3e2029c72c30f96a888633c7e62e93b94a65253a44340ea8cdf77244b63c85650399bb26f71f859f869f90baf29ceb8d2bc5e2c90d6"}]}}, {{0x9, 0x5, 0x3, 0x13, 0x77e, 0x5e, 0x7, 0x9, [@generic={0x2c, 0xb, "996ba38ce10b072118fc4e52279cdbeb677b38ebee8e67da4c1607a026f018394480a898f23d9787697b"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x1ff}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x31, 0xb}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x3, 0x1, 0x1e, 0x10, 0x7f}, 0xf, &(0x7f0000000fc0)=ANY=[@ANYBLOB="050f100002071002004effff03100b9d96d0c190ef2e45bf1a06cf87e8124116d9cf6ce0a4cd9457b29b90924415927b44b5219b1ac46e3c6b9500dceb7a4d2eaf50972a594e9bac732a9b930df2cc2e47c6ce2169165557cae1ddc776a9adbab7891c722354c065919be95da9c318ac59ba19530ee0ffc7cdfbdd312e09b300478c86cbb191d022235642798f69c0936cb7e796789d715a74e92d0cfc97b6122e19b0b4464a0ae9129bd8694d2a92f008bc0bc2724338844459c75dfb076e671a9f5ceb0e37b2cbd0712cb64b5f71316a19a313f827d58141fe166eceb665"], 0x7, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x814}}]}) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030601030000000046000002000000"], 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007, 0x30, r3, 0xaaf9c000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x10001, 0x7fff, 0x82, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2000002) ioctl$KVM_RUN(r8, 0xae80, 0x0) syz_usb_disconnect(r0) 3.280185739s ago: executing program 3 (id=2135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) 3.2643088s ago: executing program 3 (id=2136): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r0, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) (fail_nth: 1) 2.839554146s ago: executing program 3 (id=2137): syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000abbe6740e9174e8b089c000000010902"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="05003900000000009500000000000002"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_setup(0x110, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf9fffffffffffffffc010000000000000000000000000000fe8000000000000000000000000000aa0000000000109078"], 0x0) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000e00)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_a, @broadcast, @initial, {0x7, 0x6}}, @a_msdu=[{@broadcast, @device_b, 0x19, "255412212a4cb6082a361c60aecb9802d880ba31ed86995d4d"}, {@device_b, @device_a, 0x5d, "550af6a2cb5a5c1ab2b6de69226dc43195a0c20f26b0177dbcf52751ed7abdf694500e6bace4c5261388acf4e33b30ed1ff97e1eab1ee0e3d94b460b99a15d1b9142b3e7ab87d678dc38d40ae6d65eb680fc36d345cfc26789faf76fe8"}, {@device_b, @broadcast, 0x98, "208364503a6c1b3cbccabedc84eb83e4e1a5d40410d275e6dc8c37e8c5c6eb0c4a4656e8f24e7b892ba80db06aba976d0e1c1efb24e5c8d5a2bd84f2584e851dedaa6da62e8036e9cf582ab30ea1d9d5d34870fd876ec57f4e068ab4a13e6f9bdb7e3f347a94c5a4caf81be85ffd479179236d054fd1670171c64e55123d1d6fc2c446211bce6f6b0db3cbb329e1e9ebbb6c5b12ffd24d3a"}, {@broadcast, @device_b, 0xc9, "e2ec7d60c997d0506a0146d2fb9cb4e3b3fa47811c190e4906c6d27dda6b7af7b1f8a8d64d863e7c99be679073721c2c8998627eb53e24089d12a3ddb4077b05f1d2540cb5cb7c1334184b470f130f55862d88af678c1ee1a3ee5090ecd4924c8e7c6514bd36c4378cd242348c9f76cda545b9e11ead604aebf7cade98a81eccbf9217d7acfb4ab16ece49325164594142bb28ca835bec7f6708ca3ae56037207437eb39f816e7b4867e0805fbf2a48d07c024583c0dbc018c6d721fc0c89dcb0e0dfb55ebdd04ab7a"}, {@broadcast, @device_b, 0x12, "37c5c5e0bf652fd0604615ef8624dcc9fe3e"}, {@broadcast, @broadcast, 0x1000, "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"}, {@device_a, @broadcast, 0x84, "0f7b046f580a5c92ad2e201ef8d9530908a7816e05ee51686d2e1e29907965d3c32f9158f0380a3723217596d4b879d7582ebdf4c300a82e97451cdf5bbcb75a4108e38bc356858f3854e6b7d2fdc5900d5dcee5bba54737dd3883a06f99a38d14f119d5f97774a7c00f62271038823fcf97e67fa514f7df8b78e447983c6b276dff986a"}, {@device_a, @device_b, 0x88, "5b1c338d06eadc25bdcddbee777393d5323a293b6a9347c959c7aed609062bb13d96c2c071fac56ff8bce36d4ee48ff599a7107b43d2b5b883057777e3c5ed275cf6eb21d73f6fd0559c3463efa9823628dbdbf0567b8395e785b0163264b9ab3cf818644b8538216a5e19cfd57c309db7976ff6f707b09a3b81f8ddbaaeee3712fff133183894f3"}, {@device_a, @broadcast, 0xc1, "e7c186138dac7ec699d5442566dc62a3c7dbfaf31b796cf9cae2ade19d95a959ab84831809379ac63281c70c09c26a1d67fa62830719ae1f4084631b71a48bfc2b82e9bdcd102297fa3e80b35d3e5e3d340414198787bc83460284eb4fc0e1d9e2962a230fcf4d824e93d1f202fcd912669be9aa2c9cc63f31e7d5f72141f3495721812f3ffd26eacb454c7a1c4640a35b5821dc5b2c9eb917c3c80005489cdfc0fdd0734ebc76cce5478b85da5a1c6ab7bc1d0657490b3313b97d84b0dbcd82a1"}]}, 0x1458) socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xa}, 0x20) mmap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\a\x00'], 0x24}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cpuinfo\x00', 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_int(r3, 0x1, 0x2b, 0x0, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.323961426s ago: executing program 0 (id=2139): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@gettaction={0x114, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x200, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}]}, 0x114}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.139398556s ago: executing program 0 (id=2140): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000000)=0x7) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x8}}]}, 0x40}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4c, &(0x7f000002eff0)={0x20000000000003da, &(0x7f0000000000)=[{}]}, 0x10) writev(r3, &(0x7f0000006840)=[{&(0x7f00000053c0)='+', 0xfdef}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000f9ff0000000000000000000000c4398ef4ae688c59d1064891016270347262808ec6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x15, &(0x7f0000000680)={0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000200)=0xc5, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) 1.502994011s ago: executing program 4 (id=2141): prctl$PR_SCHED_CORE(0x3e, 0x9, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x4433, &(0x7f0000000300)={0x0, 0x200000, 0x200, 0xfffffffe, 0x361}, 0x0, &(0x7f00000001c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r6], 0x80}, 0x1, 0x0, 0x0, 0x40004}, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x1e, 0x5, 0x0) connect$tipc(r8, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) recvmmsg(r8, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)=""/228, 0xe4}], 0x1, &(0x7f0000000680)=""/3, 0x3}}], 0x1, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x279, 0x747201) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 1.028187377s ago: executing program 0 (id=2143): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x30, 0x3e, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x2f0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r1, 0x8b1b, &(0x7f0000000340)='ADfa]5w:') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000004002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x26e7, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x42, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x16}}}}}) close(r6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r4, 0x0) mbind(&(0x7f0000725000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x101, 0x8, 0x3) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="020200070400008c04f4a56db24fba5c1f0025bd7000ffdbdf25020000"], 0x20}}, 0x4000800) sendfile(r3, r2, &(0x7f0000002080)=0x264, 0x23b) 900.532822ms ago: executing program 1 (id=2144): r0 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000180)=""/108, 0x6c}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002400)={0x2020}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket(0x28, 0x5, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$netlink(r3, 0x10e, 0x3, 0xfffffffffffffffe, &(0x7f0000000040)=0xff13) r4 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r4) r6 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="78a6d357", 0x4, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000002300)='asymmetric\x00', &(0x7f0000000540)=@chain={'key_or_keyring:', r6}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000100)=@keyring={'key_or_keyring:', r5}) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="0100000006000000000001000900000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006127c608d3d7278667a6f952ce858ff0c60d66c3ec9585fac40941e8b92e6689fc4c359a3d46dafd3a62f8cd2e7237fc9b386eaec987e584c01a62ac1c345d1691fd17f4d413ef799e5408f9aa38210b8897b230490312b6fb026b807d83c99cac28d4e1a0d1583a1c3c37ae064b42", @ANYRES32=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000002100)={'syztnl2\x00', &(0x7f0000002080)={'ip6gre0\x00', 0x0, 0x4, 0x6f, 0xd, 0x401, 0x7c, @private0, @mcast2, 0xf810, 0x8, 0x2bc, 0x7f}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000002080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000002040)=0x5) syz_mount_image$fuse(0x0, &(0x7f0000002240)='./file0\x00', 0x4, 0x0, 0x4, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) removexattr(0x0, 0x0) r9 = socket(0x1, 0x3, 0x0) bind$unix(r9, &(0x7f0000002280)=@file={0x1, './file0\x00'}, 0x6e) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) memfd_create(&(0x7f0000002140)='{-$:[:,{\x00', 0x5) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r10, &(0x7f0000002780)='./file1\x00', 0x0) 608.023578ms ago: executing program 2 (id=2145): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r4 = dup3(r2, r1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={r3, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x71, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x17) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={r5}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x5c, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e23, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @private=0xa010100}, @in6={0xa, 0x4e24, 0x7fff, @private2, 0x7}]}, &(0x7f00000000c0)=0xc) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) unshare(0x20000400) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r7, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x79, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x9e, 0x6, 0x0, 0x20000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xf1]}, 0x45c) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1e) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) splice(r9, 0x0, r11, 0x0, 0x81, 0x0) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) 492.087488ms ago: executing program 0 (id=2146): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x7, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x5, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x7fff, 0x0, 0x7, 0x2}]}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x0, 0xede8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x1) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) r2 = syz_open_dev$audion(&(0x7f00000004c0), 0x101, 0x1) io_uring_setup(0x3215, &(0x7f0000000180)={0x0, 0xfffffffc, 0x1000, 0x203, 0x0, 0x0, r2}) fcntl$lock(r0, 0x7, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x0, 0x0, 0xd4a4}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='2\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32, @ANYBLOB="e9fbc8ad83382d00592445be6fe27376cc53451944729aa0c403bd82df5644b59357735946b987c6250876d09f66b8b8fbc78aeef06fec0d05ba83975dddf645cce62535fb82ca1178c5d40ef78f20ceb301e0d11e5923cee65c31b3fc12d66dc760c6a9c50fe4b5fe035322bdc8ab641e58afd8b920b3323efcfa39d6c20fe7b98f754f84af40214d12c8467c01c44319", @ANYRES64=0x0], 0x20) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0xfc26) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000000000000000000006001d000000000005001b00110000000900000035ce49c39f00a74ccf"], 0x2c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002030102000000000000000000000010080001000100000016c798a7a8be429f266aaa9fc26d5d401e00572f6bbf0e38b11b74fb052adbead0994c7e8c6a24cc5be3479fc2117ee54cc3b0a38ad3b7f90b31dfae64b66dd684f56214dcdc8185e581b1c33f5ad671e8ac18454066395c8eec06f484df86911de70a9410dc9f2a63839212062db703bd9a386bb2ca210a712924631d3923da233f43ce65cff9022548853c33ff260bfd4ca4580f8a1c80d4548497e4b492b934d2052345915c29838b78932aa8abe8c36f053711e5dc0b6a0812"], 0x1c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f00000003c0)=0x8) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000140)={'wg1\x00', 0x2000}) syz_open_dev$vcsn(&(0x7f0000000000), 0x1ff, 0x800002) 491.393292ms ago: executing program 4 (id=2147): socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2480) syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = dup(0xffffffffffffffff) write$UHID_INPUT(r1, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000210000000000000000", @ANYRES32=0x0, @ANYBLOB="7dbf230d000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 482.307135ms ago: executing program 1 (id=2148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}, 0x1, 0x8000000}, 0x0) 402.665439ms ago: executing program 1 (id=2149): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x800}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x1, 0x40, 0x5, 0x8, {{0x23, 0x4, 0x1, 0x4, 0x8c, 0x65, 0x0, 0x2, 0x4, 0x0, @loopback, @multicast1, {[@lsrr={0x83, 0x1b, 0x7, [@multicast1, @local, @remote, @dev={0xac, 0x14, 0x14, 0x43}, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x75, 0x3, 0x8, [{@remote, 0xa521}]}, @end, @timestamp_addr={0x44, 0xc, 0xcf, 0x1, 0x7, [{@rand_addr=0x64010101, 0x4}]}, @ssrr={0x89, 0x27, 0xf6, [@multicast2, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x3a}, @loopback, @private=0xa010100, @broadcast, @dev={0xac, 0x14, 0x14, 0x42}, @multicast1]}, @cipso={0x86, 0x1c, 0x0, [{0x4, 0x6, "cef2673c"}, {0x5, 0x6, "8db8f683"}, {0x2, 0xa, "c8d184749a92d1b3"}]}]}}}}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r4, 0x0, 0xcc, &(0x7f0000000140)={@multicast1, @multicast2, 0x0, "b200a06a95c980a6154dfb1e5c22cc42e3c374637bf5d25333abb4ddbe47fa66"}, 0x3c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x83, &(0x7f0000000280)={r5, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000000c0)=0x9c) 300.062654ms ago: executing program 2 (id=2150): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x8, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000080), 0x8) sendmmsg$sock(r0, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@txtime={{0x14, 0x1, 0x3d, 0x1000}}], 0x14}}], 0x1, 0x800) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000b, &(0x7f0000000080)='\x00', 0x1) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000240)="ea00000100000000", 0x8) r2 = syz_usb_connect(0x5, 0x24, &(0x7f00000017c0)=ANY=[@ANYBLOB="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", @ANYRES64=r1], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) 235.009122ms ago: executing program 1 (id=2151): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec)\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="c00000001300010000000000fddbdf25fe800000200000000000000000000000fc0100000000000000000000000000010000000000000000020000002e000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000500000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000050000000000000000000000000000000300000008000000000000030c000800"], 0xc0}}, 0x0) 163.632911ms ago: executing program 0 (id=2152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000080003000000000008000200"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb98941381db6fb1c}, 0xc, 0x0}, 0x40000000) 101.84001ms ago: executing program 0 (id=2153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket(0x10, 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r8, 0x0, 0x0, 0x0, 0xbe6, 0x0, @dev, @dev, 0x0, 0x7800}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r9, 0x0, 0x0, 0x0, 0x7, 0x0, @dev, @rand_addr=' \x01\x00', 0x1, 0x0, 0xfffffffe}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x700, &(0x7f0000000b00)={&(0x7f0000002cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc741da9ed58b018d9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r11, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000100000000040004020000000900000003000000386ee54c"]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000002080006400000000208040840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) 100.784134ms ago: executing program 1 (id=2154): unshare(0x20000400) r0 = syz_io_uring_setup(0xfe4, &(0x7f0000000080)={0x0, 0x0, 0x13790}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001900)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) io_uring_enter(r0, 0x6256, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=2155): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@gettaction={0x114, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x200, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x4f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}]}, 0x114}}, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1000000) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): tooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 603.865444][ T2522] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.886088][ T5281] usb 2-1: Using ep0 maxpacket: 16 [ 603.893415][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.908381][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.918339][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 603.932728][ T5281] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 603.942008][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.958154][ T5281] usb 2-1: config 0 descriptor?? [ 604.006049][ T2522] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.215520][ T2522] bridge_slave_1: left allmulticast mode [ 604.227369][ T25] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 604.237333][ T2522] bridge_slave_1: left promiscuous mode [ 604.256277][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.259329][ T25] usb 5-1: Invalid ep0 maxpacket: 16 [ 604.277599][ T2522] bridge_slave_0: left allmulticast mode [ 604.283625][ T2522] bridge_slave_0: left promiscuous mode [ 604.297760][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.385589][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.413634][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.431036][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.445945][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.445991][ T25] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 604.460994][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.473314][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.482273][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.501596][ T25] usb 5-1: Invalid ep0 maxpacket: 16 [ 604.507667][ T25] usb usb5-port1: unable to enumerate USB device [ 604.516252][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.538313][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.545582][ T5281] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 604.639667][ T5281] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0010/input/input40 [ 604.681761][ T5281] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 604.884850][ T25] usb 2-1: USB disconnect, device number 116 [ 605.197298][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.210404][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.221629][ T2522] bond0 (unregistering): Released all slaves [ 605.431624][T14211] chnl_net:caif_netlink_parms(): no params data found [ 605.490192][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1827'. [ 605.668051][ T2522] hsr_slave_0: left promiscuous mode [ 605.684840][ T2522] hsr_slave_1: left promiscuous mode [ 605.692686][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.717366][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.741349][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.775772][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.857012][ T2522] veth1_macvtap: left promiscuous mode [ 605.873987][ T2522] veth0_macvtap: left promiscuous mode [ 605.883877][ T2522] veth1_vlan: left promiscuous mode [ 605.897322][T12447] Bluetooth: hci3: command tx timeout [ 605.907333][ T2522] veth0_vlan: left promiscuous mode [ 606.139294][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.155276][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.166117][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.190227][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.204318][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 606.212522][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 606.248990][ T5230] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 606.414221][ T5230] usb 5-1: config 0 has no interfaces? [ 606.445673][ T5230] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 606.459071][ T5230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.485943][ T5230] usb 5-1: config 0 descriptor?? [ 606.970055][ T5230] usb 5-1: USB disconnect, device number 94 [ 607.304888][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 607.374769][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 607.982055][T12447] Bluetooth: hci3: command tx timeout [ 608.105182][T14211] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.114975][T14211] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.123583][T14211] bridge_slave_0: entered allmulticast mode [ 608.132859][T14211] bridge_slave_0: entered promiscuous mode [ 608.151169][T14211] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.158852][T14211] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.166528][T14211] bridge_slave_1: entered allmulticast mode [ 608.174053][T14211] bridge_slave_1: entered promiscuous mode [ 608.200626][T14269] @: renamed from bond0 (while UP) [ 608.313998][T14211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.406281][T14211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.458256][T12447] Bluetooth: hci0: command tx timeout [ 608.585825][T14211] team0: Port device team_slave_0 added [ 608.707721][T14285] xt_CT: No such helper "netbios-ns" [ 608.729554][T14211] team0: Port device team_slave_1 added [ 608.912019][T14211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.942213][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.008411][T14211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.049072][T14211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.059577][T14211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.088789][T14211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.109010][T14264] chnl_net:caif_netlink_parms(): no params data found [ 609.137934][ T9] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 609.173473][T14211] hsr_slave_0: entered promiscuous mode [ 609.188671][T14211] hsr_slave_1: entered promiscuous mode [ 609.201692][T14211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 609.210072][T14211] Cannot create hsr debugfs directory [ 609.269996][ T2522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.299382][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 609.312361][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 609.336545][ T9] usb 5-1: config 0 has no interface number 0 [ 609.348275][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 609.358646][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.366716][ T9] usb 5-1: Product: syz [ 609.371180][ T9] usb 5-1: Manufacturer: syz [ 609.375838][ T9] usb 5-1: SerialNumber: syz [ 609.383030][ T9] usb 5-1: config 0 descriptor?? [ 609.391525][ T9] ims_pcu 5-1:0.41: Missing CDC union descriptor [ 609.398289][ T9] ims_pcu 5-1:0.41: probe with driver ims_pcu failed with error -22 [ 609.451645][ T2522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.467337][ T5230] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 609.540916][ T2522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.578198][T14264] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.589175][T14264] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.596491][T14264] bridge_slave_0: entered allmulticast mode [ 609.608051][T14264] bridge_slave_0: entered promiscuous mode [ 609.622353][ T5230] usb 2-1: config 0 has no interfaces? [ 609.629362][ T5230] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 609.640260][ T5230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 609.682220][ T5230] usb 2-1: config 0 descriptor?? [ 609.690526][ T2522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.724540][ T5230] usb 5-1: USB disconnect, device number 95 [ 609.738699][T14264] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.746129][T14264] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.755553][T14264] bridge_slave_1: entered allmulticast mode [ 609.768888][T14264] bridge_slave_1: entered promiscuous mode [ 609.821432][T14264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 609.863097][T14264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 610.038951][T14264] team0: Port device team_slave_0 added [ 610.067945][T12447] Bluetooth: hci3: command tx timeout [ 610.083655][ T5230] usb 2-1: USB disconnect, device number 117 [ 610.153319][T14264] team0: Port device team_slave_1 added [ 610.367817][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'. [ 610.437477][T14264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 610.465030][T14264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 610.503642][T14339] xt_hashlimit: max too large, truncated to 1048576 [ 610.527763][T14264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 610.539603][ T54] Bluetooth: hci0: command tx timeout [ 610.676558][ T2522] bridge_slave_1: left allmulticast mode [ 610.685851][ T2522] bridge_slave_1: left promiscuous mode [ 610.697045][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.712376][ T2522] bridge_slave_0: left allmulticast mode [ 610.727286][ T2522] bridge_slave_0: left promiscuous mode [ 610.739759][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.249213][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.264721][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.276586][ T2522] bond0 (unregistering): Released all slaves [ 611.291013][T14264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.299783][T14264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.326640][T14264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.567815][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 611.709340][T14264] hsr_slave_0: entered promiscuous mode [ 611.715959][T14264] hsr_slave_1: entered promiscuous mode [ 611.726238][T14264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 611.739695][T14264] Cannot create hsr debugfs directory [ 611.889849][ T2522] hsr_slave_0: left promiscuous mode [ 611.896028][ T2522] hsr_slave_1: left promiscuous mode [ 611.903124][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.912716][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.922900][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.930579][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.951590][ T2522] veth1_macvtap: left promiscuous mode [ 611.957548][ T2522] veth0_macvtap: left promiscuous mode [ 611.963345][ T2522] veth1_vlan: left promiscuous mode [ 611.969223][ T2522] veth0_vlan: left promiscuous mode [ 612.141486][T12447] Bluetooth: hci3: command tx timeout [ 612.430321][T14352] dccp_close: ABORT with 96 bytes unread [ 612.628670][T12447] Bluetooth: hci0: command tx timeout [ 612.675592][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 612.749022][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 613.016148][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 613.171090][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 613.203293][ T9] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 613.213512][ T9] usb 2-1: config 0 has no interface number 0 [ 613.221154][ T9] usb 2-1: config 0 interface 246 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 613.233437][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 613.243023][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.251433][ T9] usb 2-1: Product: syz [ 613.255837][ T9] usb 2-1: Manufacturer: syz [ 613.260912][ T9] usb 2-1: SerialNumber: syz [ 613.271966][ T9] usb 2-1: config 0 descriptor?? [ 613.379664][ T9] msi2500 2-1:0.246: Registered as swradio16 [ 613.385888][ T9] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 613.846796][T14211] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 613.881195][T14211] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 613.924370][T14211] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 613.943829][T14375] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.953198][T14375] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.966485][T14375] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.975473][T14375] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 613.985435][T14375] geneve2: entered promiscuous mode [ 613.991663][T14375] geneve2: entered allmulticast mode [ 613.997835][ T5294] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 614.017234][T14211] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 614.028381][ T9] usb 2-1: USB disconnect, device number 118 [ 614.191849][ T5294] usb 5-1: Using ep0 maxpacket: 32 [ 614.217043][ T5294] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 614.259147][ T5294] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 614.277785][ T5294] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 614.307333][ T5294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 614.340810][ T5294] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 614.372220][ T5294] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 614.396149][ T5294] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 614.406957][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.410050][T14381] bridge_slave_1: left allmulticast mode [ 614.422071][ T5294] usb 5-1: config 0 descriptor?? [ 614.430917][T14381] bridge_slave_1: left promiscuous mode [ 614.461609][T14381] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.483714][T14381] bridge_slave_0: left allmulticast mode [ 614.492299][T14381] bridge_slave_0: left promiscuous mode [ 614.502464][T14381] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.648153][T14373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.678869][T14373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.697909][T12447] Bluetooth: hci0: command tx timeout [ 614.734314][ T5294] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 614.755554][T14373] syz.4.1860 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 614.809793][ T29] audit: type=1326 audit(1727084426.248:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14372 comm="syz.4.1860" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ad579 code=0x0 [ 614.962505][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 614.992348][T14264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 615.004152][T14264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 615.025653][T14264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 615.037511][T14264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 615.060888][T14211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.124755][T14211] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.156099][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.163362][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.185869][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.193062][ T5423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.351405][T14211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.363115][T14264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.386864][T14264] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.407052][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.414377][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.435082][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.442249][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.510277][T14211] veth0_vlan: entered promiscuous mode [ 615.547945][T14211] veth1_vlan: entered promiscuous mode [ 615.622709][T14211] veth0_macvtap: entered promiscuous mode [ 615.635164][T14211] veth1_macvtap: entered promiscuous mode [ 615.655125][T14264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.711794][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.753955][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.779543][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.808376][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.841164][T14211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.881187][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.893432][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.904843][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.925889][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.937479][T14211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 615.954493][T14211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.969534][T14211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.002124][T14211] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.011634][T14211] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.024000][T14211] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.034221][T14211] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.087649][ T2634] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 616.103326][T14264] veth0_vlan: entered promiscuous mode [ 616.147931][T14264] veth1_vlan: entered promiscuous mode [ 616.201703][ T5418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.223700][ T5418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.254067][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.263357][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.271266][ T2634] usb 2-1: Using ep0 maxpacket: 16 [ 616.280744][ T2634] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 616.292049][ T2634] usb 2-1: can't read configurations, error -61 [ 616.318462][T14264] veth0_macvtap: entered promiscuous mode [ 616.339848][T14264] veth1_macvtap: entered promiscuous mode [ 616.383707][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.416369][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.437262][ T2634] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 616.444692][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.465760][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.475974][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.488059][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.499986][T14264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.528861][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.546090][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.556696][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.568945][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.579341][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.597854][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.601443][ T2634] usb 2-1: Using ep0 maxpacket: 16 [ 616.619676][T14264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.620697][ T2634] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 616.643786][ T2634] usb 2-1: can't read configurations, error -61 [ 616.650612][ T5230] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 616.651331][ T2634] usb usb2-port1: attempt power cycle [ 616.667372][T14264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.679929][T14264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.740155][T14264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.755583][T14264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.765984][T14264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.776701][T14264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.810309][ T46] usb 5-1: USB disconnect, device number 96 [ 616.840309][ T46] usblp0: removed [ 616.840960][ T5230] usb 3-1: Using ep0 maxpacket: 32 [ 616.891576][ T5230] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 616.914063][ T5230] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 616.938809][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.946719][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.963475][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 616.982647][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 616.997550][ T2634] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 617.011236][ T5230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 617.034284][ T5418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.043913][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 617.051355][ T2634] usb 2-1: Using ep0 maxpacket: 16 [ 617.059306][ T5418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.071489][ T5230] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 617.082659][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.107651][ T2634] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 617.130379][ T2634] usb 2-1: can't read configurations, error -61 [ 617.162117][ T5230] usb 3-1: config 0 descriptor?? [ 617.297728][ T2634] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 617.328211][ T2634] usb 2-1: Using ep0 maxpacket: 16 [ 617.339507][ T2634] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 617.355852][ T2634] usb 2-1: can't read configurations, error -61 [ 617.363104][ T2634] usb usb2-port1: unable to enumerate USB device [ 617.377409][ T46] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 617.393710][ T5230] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 617.457960][ T5230] usb 3-1: USB disconnect, device number 95 [ 617.470818][ T5230] usblp0: removed [ 617.550983][ T46] usb 5-1: config 0 has no interfaces? [ 617.567037][ T46] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 617.567382][ T5281] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 617.590933][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.605213][ T46] usb 5-1: config 0 descriptor?? [ 617.719510][ T5281] usb 1-1: config 0 has no interfaces? [ 617.737850][ T5281] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 617.767319][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.782869][ T5281] usb 1-1: config 0 descriptor?? [ 617.845349][T14434] bond_slave_0: entered promiscuous mode [ 617.851199][T14434] bond_slave_1: entered promiscuous mode [ 617.864904][T14434] macsec1: entered promiscuous mode [ 617.870324][T14434] bond0: entered promiscuous mode [ 617.876082][T14434] macsec1: entered allmulticast mode [ 617.885877][T14434] bond0: entered allmulticast mode [ 617.892547][T14434] bond_slave_0: entered allmulticast mode [ 617.899497][T14434] bond_slave_1: entered allmulticast mode [ 617.912458][T14434] bond0: left allmulticast mode [ 617.919082][T14434] bond_slave_0: left allmulticast mode [ 617.926093][T14434] bond_slave_1: left allmulticast mode [ 617.932584][T14434] bond0: left promiscuous mode [ 617.939409][T14434] bond_slave_0: left promiscuous mode [ 617.944929][T14434] bond_slave_1: left promiscuous mode [ 617.969651][ T5230] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 618.082115][ T46] usb 5-1: USB disconnect, device number 97 [ 618.127297][ T5230] usb 3-1: Using ep0 maxpacket: 32 [ 618.148958][ T5230] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 618.167879][ T5230] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 618.177259][ T5230] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 618.198680][ T5230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 618.215636][ T5230] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 618.230832][ T5230] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 618.244989][ T5230] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 618.260808][ T5230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.281856][ T5230] usb 3-1: config 0 descriptor?? [ 618.501216][T14419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.511574][T14419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.868320][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.876657][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.895818][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.905119][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.936258][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.952790][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.964250][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.979944][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 618.991703][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.005297][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.016925][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.036962][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.059164][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.080664][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.090363][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.102237][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.116690][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.136533][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.155635][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.168030][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.192963][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.210065][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.229598][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.245668][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.265340][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.287376][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.302153][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.318368][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.335240][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.361317][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.370569][T14494] KVM: debugfs: duplicate directory 14494-7 [ 619.388051][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.431866][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.450906][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.463321][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.472166][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.480146][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.488677][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.519199][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.538319][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.555178][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.578764][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.607911][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.632144][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.651908][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.672900][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.691276][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.707217][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.726885][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.746684][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.766999][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.797169][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.822264][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.845026][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.860723][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.871522][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.886855][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.932208][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.954130][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.971260][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.992968][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 619.997660][ T5230] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 96 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 620.002788][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.055322][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.067821][ T5230] usb 3-1: USB disconnect, device number 96 [ 620.079582][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.100364][ T5230] usblp0: removed [ 620.105862][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.127192][ T5281] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 620.129732][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.195963][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.226522][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.253866][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.276172][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.300344][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.318568][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.347423][ T5281] usb 2-1: Using ep0 maxpacket: 8 [ 620.355236][ T5281] usb 2-1: config 1 has an invalid interface number: 232 but max is 2 [ 620.357453][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.363914][ T5281] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.395431][ T5281] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.401232][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.415265][ T5281] usb 2-1: config 1 has no interface number 0 [ 620.442937][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.455142][ T5281] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 620.477237][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.480241][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.496577][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.508668][ T5281] usb 2-1: Manufacturer: ೵侻鬥䭬  [ 620.526049][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.552445][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.571578][ T5294] usb 1-1: USB disconnect, device number 125 [ 620.583681][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.612461][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.639238][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.682743][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.717264][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.739753][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.756570][T14508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.784603][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.798129][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.810974][T14508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.820172][T14529] fuse: Invalid rootmode [ 620.837244][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.855458][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.888391][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.922596][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.962994][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963036][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963068][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963098][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963128][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963159][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963189][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963216][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963245][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963275][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963305][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963335][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963366][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963402][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963433][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963463][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963494][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963524][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963555][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963586][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963617][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963647][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963677][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963709][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963739][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 620.963769][ T5279] hid-generic 0005:0005:0003.0011: unknown main item tag 0x0 [ 621.013091][ T5279] hid-generic 0005:0005:0003.0011: hidraw0: BLUETOOTH HID vffffff.fc Device [syz0] on syz1 [ 621.700883][ T5281] usb 2-1: skipping empty audio interface (v1) [ 621.732264][ T5281] snd-usb-audio 2-1:1.232: probe with driver snd-usb-audio failed with error -22 [ 621.759527][ T5281] usb 2-1: USB disconnect, device number 123 [ 621.816237][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.232/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.177048][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1890'. [ 622.260243][ T5294] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 622.293708][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 622.304586][T14571] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1891'. [ 622.323985][T14571] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 622.496789][ T5294] usb 5-1: config 0 has no interfaces? [ 622.503797][ T5294] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 622.515707][T14576] @: renamed from veth0_vlan (while UP) [ 622.519398][ T5294] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.531890][ T5294] usb 5-1: config 0 descriptor?? [ 622.569975][T14576] dummy0: entered promiscuous mode [ 622.576020][T14576] macsec1: entered promiscuous mode [ 622.582871][T14576] macsec1: entered allmulticast mode [ 622.588510][T14576] dummy0: entered allmulticast mode [ 622.596174][T14576] dummy0: left allmulticast mode [ 622.603126][T14576] dummy0: left promiscuous mode [ 622.631413][T14555] dccp_close: ABORT with 96 bytes unread [ 622.728754][T14581] usb usb5: usbfs: process 14581 (syz.0.1895) did not claim interface 0 before use [ 622.900392][ T29] audit: type=1326 audit(1727084434.328:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14575 comm="syz.2.1893" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 622.993647][ T5281] usb 5-1: USB disconnect, device number 98 [ 623.251334][T14600] geneve2: entered promiscuous mode [ 623.256720][T14600] geneve2: entered allmulticast mode [ 623.360111][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1903'. [ 623.388271][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1903'. [ 623.933045][ T29] audit: type=1326 audit(1727084435.398:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14627 comm="syz.2.1912" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 624.129027][T14635] input: syz1 as /devices/virtual/input/input41 [ 624.487678][ T46] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 624.619923][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.628482][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.670673][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.687765][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 624.707242][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.720940][ T46] usb 5-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 624.730737][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.749746][ T46] usb 5-1: config 0 descriptor?? [ 624.764824][T14637] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 624.802301][ T5294] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 624.965158][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 625.007282][ T5294] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 1228, setting to 64 [ 625.072885][ T5294] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 625.107898][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.141469][ T5294] usb 2-1: config 0 descriptor?? [ 625.149173][T14642] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 625.231357][T14637] syz_tun: entered promiscuous mode [ 625.266833][T14637] vlan2: entered promiscuous mode [ 625.290798][T14637] vlan2: entered allmulticast mode [ 625.334306][T14637] syz_tun: entered allmulticast mode [ 625.367695][ T5293] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 625.404430][T14637] syz_tun: left allmulticast mode [ 625.417171][T14637] syz_tun: left promiscuous mode [ 625.523073][ T5294] ath6kl: Failed to submit usb control message: -71 [ 625.533707][ T5294] ath6kl: unable to send the bmi data to the device: -71 [ 625.565642][ T5294] ath6kl: Unable to send get target info: -71 [ 625.574531][ T5293] usb 3-1: config 0 has no interfaces? [ 625.587903][ T5293] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 625.598490][ T46] usb 5-1: string descriptor 0 read error: -71 [ 625.630784][ T5293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.639923][ T5294] ath6kl: Failed to init ath6kl core: -71 [ 625.646296][ T5294] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 625.656139][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 625.662739][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 625.679633][ T5293] usb 3-1: config 0 descriptor?? [ 625.704969][ T5294] usb 2-1: USB disconnect, device number 124 [ 625.712071][ T46] usb 5-1: USB disconnect, device number 99 [ 626.084291][ T46] usb 3-1: USB disconnect, device number 97 [ 626.138311][T14658] netlink: 'syz.0.1922': attribute type 29 has an invalid length. [ 626.188164][T14661] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1923'. [ 626.581738][T14680] macsec1: entered promiscuous mode [ 626.587412][T14680] macvlan0: entered promiscuous mode [ 626.595819][T14680] macvlan0: left promiscuous mode [ 626.601221][ T46] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 626.757466][ T46] usb 2-1: device descriptor read/64, error -71 [ 626.862705][T14688] loop2: detected capacity change from 0 to 7 [ 626.871053][T14688] Dev loop2: unable to read RDB block 7 [ 626.888915][T14688] loop2: unable to read partition table [ 626.897677][T14688] loop2: partition table beyond EOD, truncated [ 626.904218][T14688] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 626.918226][ T4681] Dev loop2: unable to read RDB block 7 [ 626.923925][ T4681] loop2: unable to read partition table [ 626.934126][ T4681] loop2: partition table beyond EOD, truncated [ 627.023010][ T46] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 627.174369][ T46] usb 2-1: device descriptor read/64, error -71 [ 627.238657][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1941'. [ 627.287755][ T46] usb usb2-port1: attempt power cycle [ 627.630584][ T46] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 627.655466][ T5423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.699239][ T46] usb 2-1: device descriptor read/8, error -71 [ 627.834786][ T5423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.857919][T14710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1945'. [ 627.924233][ T5423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.952164][ T46] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 627.988379][ T46] usb 2-1: device descriptor read/8, error -71 [ 628.042195][ T5423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.063373][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 628.074721][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 628.084428][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 628.097709][ T46] usb usb2-port1: unable to enumerate USB device [ 628.105847][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 628.122497][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 628.131306][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 628.540599][ T5423] bridge_slave_1: left allmulticast mode [ 628.546327][ T5423] bridge_slave_1: left promiscuous mode [ 628.559281][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.584639][ T5423] bridge_slave_0: left allmulticast mode [ 628.597538][ T5423] bridge_slave_0: left promiscuous mode [ 628.603367][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.866767][ T5230] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 629.046685][ T5230] usb 1-1: Using ep0 maxpacket: 16 [ 629.054062][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 629.065522][ T5230] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 629.077953][ T5230] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 629.087907][ T5230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.111940][ T5230] usb 1-1: config 0 descriptor?? [ 629.175602][ T5423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.190453][ T5423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.202844][ T5423] bond0 (unregistering): Released all slaves [ 629.294074][T14717] chnl_net:caif_netlink_parms(): no params data found [ 629.608782][T14744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.653548][T14744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.708546][T14744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.775580][T14744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.923750][T14717] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.957637][T14717] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.982325][T14717] bridge_slave_0: entered allmulticast mode [ 630.026804][T14717] bridge_slave_0: entered promiscuous mode [ 630.036312][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1953'. [ 630.118747][T14744] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1953'. [ 630.178712][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1953'. [ 630.218742][ T54] Bluetooth: hci3: command tx timeout [ 630.226960][T14717] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.285229][T14717] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.297934][T14717] bridge_slave_1: entered allmulticast mode [ 630.315581][T14717] bridge_slave_1: entered promiscuous mode [ 630.424743][ T5230] usbhid 1-1:0.0: can't add hid device: -71 [ 630.448072][ T5230] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 630.475888][ T5230] usb 1-1: USB disconnect, device number 126 [ 630.483060][ T5423] hsr_slave_0: left promiscuous mode [ 630.499405][ T5423] hsr_slave_1: left promiscuous mode [ 630.519746][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.537301][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 630.548886][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 630.567506][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.609925][ T5423] veth1_macvtap: left promiscuous mode [ 630.615651][ T5423] veth0_macvtap: left promiscuous mode [ 630.631879][ T5423] veth1_vlan: left promiscuous mode [ 630.642022][ T5423] veth0_vlan: left promiscuous mode [ 630.691495][T12447] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 630.702389][T12447] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 630.722522][T12447] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 630.738057][T12447] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 630.747801][T12447] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 630.758080][T12447] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 631.475664][ T5423] team0 (unregistering): Port device team_slave_1 removed [ 631.548180][ T5423] team0 (unregistering): Port device team_slave_0 removed [ 632.206919][T14717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.226451][T14717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.255842][T14770] team0: Port device macvlan1 added [ 632.307607][T12447] Bluetooth: hci3: command tx timeout [ 632.441421][T14717] team0: Port device team_slave_0 added [ 632.500055][T14717] team0: Port device team_slave_1 added [ 632.610339][T14717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.630789][T14788] xt_cgroup: path and classid specified [ 632.639002][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.687187][ T5294] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 632.756269][T14717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.851818][T14717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.867646][T12447] Bluetooth: hci2: command tx timeout [ 632.877719][ T5294] usb 1-1: Using ep0 maxpacket: 32 [ 632.888829][T14717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.923346][ T5294] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 632.935001][ T5294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 632.952146][T14717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.969772][ T5294] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 632.987791][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 632.996115][ T5294] usb 1-1: Product: syz [ 633.001719][ T5294] usb 1-1: Manufacturer: syz [ 633.009135][T14803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 633.025262][ T5294] usb 1-1: SerialNumber: syz [ 633.040713][ T5294] usb 1-1: config 0 descriptor?? [ 633.114901][T14717] hsr_slave_0: entered promiscuous mode [ 633.126401][T14717] hsr_slave_1: entered promiscuous mode [ 633.136239][T14717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.148651][T14717] Cannot create hsr debugfs directory [ 633.246341][T14768] chnl_net:caif_netlink_parms(): no params data found [ 633.274911][ T5230] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 633.309073][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.327273][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.373425][ T9] usb 1-1: USB disconnect, device number 127 [ 633.477242][ T5230] usb 5-1: Using ep0 maxpacket: 32 [ 633.489709][ T5230] usb 5-1: config 0 has an invalid interface number: 64 but max is 1 [ 633.502708][ T5423] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.515812][ T5230] usb 5-1: config 0 has no interface number 1 [ 633.536422][ T5230] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 633.568469][ T5230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=18 [ 633.576684][ T5230] usb 5-1: Product: syz [ 633.627272][ T5230] usb 5-1: Manufacturer: syz [ 633.631955][ T5230] usb 5-1: SerialNumber: syz [ 633.684339][ T5230] usb 5-1: config 0 descriptor?? [ 633.694927][ T5230] usb 5-1: bad CDC descriptors [ 633.750237][ T5423] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.940190][T14799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.951212][T14799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.951817][ T5423] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.983156][T14768] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.003786][T14768] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.018111][T14768] bridge_slave_0: entered allmulticast mode [ 634.025107][T14768] bridge_slave_0: entered promiscuous mode [ 634.046264][T14835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1972'. [ 634.158344][ T5423] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.180084][T14768] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.195673][T14768] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.203800][T14768] bridge_slave_1: entered allmulticast mode [ 634.213008][T14768] bridge_slave_1: entered promiscuous mode [ 634.313361][T14799] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 634.341730][T14768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 634.360702][T14768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 634.377639][T12447] Bluetooth: hci3: command tx timeout [ 634.535096][T14768] team0: Port device team_slave_0 added [ 634.621113][T14768] team0: Port device team_slave_1 added [ 634.672767][T14768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.679995][T14768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.710185][T14768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.724016][T14768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.731233][T14768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.757978][T14768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.937589][T12447] Bluetooth: hci2: command tx timeout [ 635.541182][ T5423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.555668][ T5423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.572326][ T5423] bond0 (unregistering): Released all slaves [ 635.598470][T14853] @: renamed from bond0 (while UP) [ 635.666003][T14768] hsr_slave_0: entered promiscuous mode [ 635.688494][T14768] hsr_slave_1: entered promiscuous mode [ 635.701237][T14768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.711195][T14768] Cannot create hsr debugfs directory [ 635.864714][T14717] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 635.916256][T14717] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 635.924030][ T5294] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 635.993109][T14717] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 636.033321][ T5279] usb 5-1: USB disconnect, device number 100 [ 636.053279][T14717] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 636.099464][ T5294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.135692][ T5423] hsr_slave_0: left promiscuous mode [ 636.139389][ T5294] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 636.153446][ T5423] hsr_slave_1: left promiscuous mode [ 636.158489][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.172403][ T5294] usb 1-1: config 0 descriptor?? [ 636.182867][ T5294] pwc: Askey VC010 type 2 USB webcam detected. [ 636.242335][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.251406][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.263816][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 636.272092][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.296029][ T5423] veth1_macvtap: left promiscuous mode [ 636.306542][ T5423] veth0_macvtap: left promiscuous mode [ 636.316194][ T5423] veth1_vlan: left promiscuous mode [ 636.322029][ T5423] @: left promiscuous mode [ 636.403507][T14855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.418875][T14855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.457227][T12447] Bluetooth: hci3: command tx timeout [ 636.520715][T14869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'. [ 636.641052][ T5294] pwc: send_video_command error -71 [ 636.660996][ T5294] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 636.670684][ T5294] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 636.725605][ T5294] usb 1-1: USB disconnect, device number 2 [ 637.027408][T12447] Bluetooth: hci2: command tx timeout [ 637.207435][ T5423] team0 (unregistering): Port device team_slave_1 removed [ 637.276342][ T5423] team0 (unregistering): Port device team_slave_0 removed [ 638.108909][T14872] sctp: [Deprecated]: syz.3.1984 (pid 14872) Use of int in max_burst socket option deprecated. [ 638.108909][T14872] Use struct sctp_assoc_value instead [ 638.381501][T14717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.493653][T14717] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.551890][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.559141][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.608440][T14880] fuse: Bad value for 'fd' [ 638.654326][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.664526][ T5418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.723494][T14884] fuse: Bad value for 'fd' [ 638.866190][ T5423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.919143][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 638.935183][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 638.946944][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 638.956015][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 638.976338][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 638.985376][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 638.990056][T14768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 639.017368][ T5279] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 639.046703][T14768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 639.097654][T12447] Bluetooth: hci2: command tx timeout [ 639.107806][ T5423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.143039][T14768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 639.157384][ T5279] usb 1-1: device descriptor read/64, error -71 [ 639.211191][ T5423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.241452][T14768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.330918][ T5423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.398330][ T5279] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 639.536368][T14717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.548477][ T5279] usb 1-1: device descriptor read/64, error -71 [ 639.668340][ T5279] usb usb1-port1: attempt power cycle [ 639.767670][ T5423] bridge_slave_1: left allmulticast mode [ 639.773426][ T5423] bridge_slave_1: left promiscuous mode [ 639.798011][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.816009][ T5423] bridge_slave_0: left allmulticast mode [ 639.824285][ T5423] bridge_slave_0: left promiscuous mode [ 639.831111][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.058386][ T5279] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 640.093569][ T5279] usb 1-1: device descriptor read/8, error -71 [ 640.337367][ T5279] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 640.369210][ T5279] usb 1-1: device descriptor read/8, error -71 [ 640.442911][ T5423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.455896][ T5423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.467792][ T5423] bond0 (unregistering): Released all slaves [ 640.478761][ T5279] usb usb1-port1: unable to enumerate USB device [ 640.514708][T14893] chnl_net:caif_netlink_parms(): no params data found [ 640.548892][ T5423] tipc: Left network mode [ 640.549374][T14717] veth0_vlan: entered promiscuous mode [ 640.634110][T14717] veth1_vlan: entered promiscuous mode [ 640.737654][ T5423] hsr_slave_0: left promiscuous mode [ 640.746336][ T5423] hsr_slave_1: left promiscuous mode [ 640.762909][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.772158][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.785957][ T5423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.796884][ T5423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.821059][ T5423] veth1_macvtap: left promiscuous mode [ 640.827403][ T5423] veth0_macvtap: left promiscuous mode [ 640.833168][ T5423] veth1_vlan: left promiscuous mode [ 640.841398][ T5423] veth0_vlan: left promiscuous mode [ 641.019550][T12447] Bluetooth: hci1: command tx timeout [ 641.194993][ T5423] team0 (unregistering): Port device macvlan1 removed [ 641.670904][ T5423] team0 (unregistering): Port device team_slave_1 removed [ 641.766910][ T5423] team0 (unregistering): Port device team_slave_0 removed [ 642.584974][T14893] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.613749][T14893] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.621471][T14893] bridge_slave_0: entered allmulticast mode [ 642.628938][T14893] bridge_slave_0: entered promiscuous mode [ 642.644595][T14768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.658161][T14893] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.665674][T14893] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.673504][T14893] bridge_slave_1: entered allmulticast mode [ 642.682750][T14893] bridge_slave_1: entered promiscuous mode [ 642.764505][T14893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.815660][T14893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.828264][ T5281] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 642.902032][T14717] veth0_macvtap: entered promiscuous mode [ 642.935229][T14893] team0: Port device team_slave_0 added [ 642.950296][T14768] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.966587][T14893] team0: Port device team_slave_1 added [ 642.997543][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 643.010664][T14717] veth1_macvtap: entered promiscuous mode [ 643.023422][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.047777][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.062609][ T5281] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 643.074467][T14893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.087889][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.102790][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.117348][T12447] Bluetooth: hci1: command tx timeout [ 643.136738][ T5281] usb 1-1: config 0 descriptor?? [ 643.155572][T14893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.193204][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.200495][ T5418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.231622][T14893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.239256][T14893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.275474][T14893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.293340][ T2522] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.300534][ T2522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.346320][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.367994][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.386254][T14717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.424733][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.447016][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.463123][T14717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.473689][T14717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.493294][T14717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.568820][ T5281] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0 [ 643.581833][ T5281] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0 [ 643.591066][T14893] hsr_slave_0: entered promiscuous mode [ 643.591554][ T5281] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0 [ 643.604882][T14893] hsr_slave_1: entered promiscuous mode [ 643.610218][ T5281] waterforce 0003:1044:7A4D.0012: unknown main item tag 0x0 [ 643.630517][ T5281] waterforce 0003:1044:7A4D.0012: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 643.664625][T14717] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.675513][T14717] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.686213][T14717] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.698956][T14717] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.718159][ T5281] waterforce 0003:1044:7A4D.0012: fw version request failed with -38 [ 643.723276][T14768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 643.788797][ T5279] usb 1-1: USB disconnect, device number 7 [ 643.945185][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.955571][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.960948][T14768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.069913][ T5418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.088763][ T5418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.189078][T14768] veth0_vlan: entered promiscuous mode [ 644.266315][T14768] veth1_vlan: entered promiscuous mode [ 644.440711][ T29] audit: type=1326 audit(1727084455.908:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.2.1944" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 644.541110][T14768] veth0_macvtap: entered promiscuous mode [ 644.585646][T14768] veth1_macvtap: entered promiscuous mode [ 644.642267][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.677123][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.687040][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 644.717129][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.739786][T14768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 644.834635][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.865504][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.885772][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.907880][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.920830][T14768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 644.942156][T14768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 644.964949][T14768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.009697][T14768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.037154][T14768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.046204][T14768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.055248][T14768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.071266][T14893] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 645.141327][T14893] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 645.167976][T14893] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 645.177509][T12447] Bluetooth: hci1: command tx timeout [ 645.216821][T14893] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 645.437613][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.462397][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.470964][T15012] fuse: Bad value for 'fd' [ 645.523227][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.545629][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 645.638884][T14893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.693550][T14893] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.730557][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.737887][ T5423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.764540][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.772088][ T5423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.780226][ T25] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 645.881789][T14893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.926669][T15024] input: syz1 as /devices/virtual/input/input42 [ 645.934724][ T25] usb 3-1: device descriptor read/64, error -71 [ 645.951527][T14893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.053508][T14893] veth0_vlan: entered promiscuous mode [ 646.089500][T14893] veth1_vlan: entered promiscuous mode [ 646.155823][T14893] veth0_macvtap: entered promiscuous mode [ 646.178168][ T25] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 646.184307][T14893] veth1_macvtap: entered promiscuous mode [ 646.218467][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.236980][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.254419][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.265461][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.283108][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.294685][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.313772][T14893] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.327244][ T25] usb 3-1: device descriptor read/64, error -71 [ 646.330718][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.355599][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.366791][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.379057][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.389781][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.403364][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.413975][T14893] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.425529][T14893] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.437832][T14893] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.438356][ T5294] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 646.453569][ T25] usb usb3-port1: attempt power cycle [ 646.495508][T14893] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.505618][T14893] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.516147][T14893] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.525198][T14893] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.627412][ T5294] usb 2-1: Using ep0 maxpacket: 16 [ 646.636481][ T2522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.649095][ T5294] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.661099][ T2522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.679589][ T5294] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 646.700966][ T5294] usb 2-1: config 0 interface 0 has no altsetting 0 [ 646.709928][ T5294] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 646.719925][ T5294] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.730197][ T5423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.738807][ T5423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.747938][ T5294] usb 2-1: config 0 descriptor?? [ 646.766256][ T5294] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 646.817498][ T25] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 646.852596][ T25] usb 3-1: device descriptor read/8, error -71 [ 646.898169][T15046] loop2: detected capacity change from 0 to 4 [ 646.905092][T15046] Dev loop2: unable to read RDB block 4 [ 646.913548][T15046] loop2: unable to read partition table [ 646.919950][T15046] loop2: partition table beyond EOD, truncated [ 646.926637][T15046] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 647.004648][T15048] FAULT_INJECTION: forcing a failure. [ 647.004648][T15048] name failslab, interval 1, probability 0, space 0, times 0 [ 647.021902][T15048] CPU: 1 UID: 0 PID: 15048 Comm: syz.4.2002 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 647.029159][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 647.032370][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 647.032391][T15048] Call Trace: [ 647.032401][T15048] [ 647.032412][T15048] dump_stack_lvl+0x241/0x360 [ 647.032453][T15048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.032483][T15048] ? __pfx__printk+0x10/0x10 [ 647.032512][T15048] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 647.032542][T15048] ? __pfx___might_resched+0x10/0x10 [ 647.032578][T15048] should_fail_ex+0x3b0/0x4e0 [ 647.032619][T15048] ? mas_alloc_nodes+0x26c/0x840 [ 647.032646][T15048] should_failslab+0xac/0x100 [ 647.032675][T15048] ? mas_alloc_nodes+0x26c/0x840 [ 647.101856][T15048] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 647.107284][T15048] mas_alloc_nodes+0x26c/0x840 [ 647.112115][T15048] mas_preallocate+0x554/0x8c0 [ 647.116943][T15048] ? __pfx_mas_preallocate+0x10/0x10 [ 647.122283][T15048] ? __mas_set_range+0x133/0x3c0 [ 647.127382][T15048] __split_vma+0x302/0xc50 [ 647.131877][T15048] ? __pfx___split_vma+0x10/0x10 [ 647.136891][T15048] ? mas_find+0x950/0xbb0 [ 647.141323][T15048] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 647.146877][T15048] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 647.152842][T15048] ? mas_find+0x8c0/0xbb0 [ 647.157232][T15048] mmap_region+0x817/0x2990 [ 647.161812][T15048] ? __pfx_validate_chain+0x10/0x10 [ 647.167182][T15048] ? __pfx_mmap_region+0x10/0x10 [ 647.172227][T15048] ? get_pid_task+0x23/0x1f0 [ 647.176873][T15048] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 647.182861][T15048] do_mmap+0x8f0/0x1000 [ 647.187098][T15048] ? __pfx_do_mmap+0x10/0x10 [ 647.191747][T15048] ? __pfx_down_write_killable+0x10/0x10 [ 647.197438][T15048] ? apparmor_mmap_file+0xc3/0xe0 [ 647.202512][T15048] vm_mmap_pgoff+0x1dd/0x3d0 [ 647.207227][T15048] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 647.212672][T15048] ? ksys_mmap_pgoff+0xdf/0x720 [ 647.217680][T15048] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 647.224413][T15048] ? __ia32_sys_mmap_pgoff+0x21/0xf0 [ 647.229758][T15048] __do_fast_syscall_32+0xb4/0x110 [ 647.234932][T15048] ? exc_page_fault+0x590/0x8c0 [ 647.239842][T15048] do_fast_syscall_32+0x34/0x80 [ 647.244816][T15048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 647.251297][T15048] RIP: 0023:0xf7fc3579 [ 647.255427][T15048] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 647.275109][T15048] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 647.283828][T15048] RAX: ffffffffffffffda RBX: 0000000020000000 RCX: 000000000000a000 [ 647.291894][T15048] RDX: 000000000300000e RSI: 0000000000002172 RDI: 00000000ffffffff [ 647.299933][T15048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 647.308142][T15048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 647.316423][T15048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 647.324455][T15048] [ 647.341196][T12447] Bluetooth: hci1: command tx timeout [ 647.394806][T15051] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2003'. [ 647.407876][ T25] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 647.427938][ T25] usb 3-1: device descriptor read/8, error -71 [ 647.499669][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 647.509952][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 647.537910][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 647.537988][ T25] usb usb3-port1: unable to enumerate USB device [ 647.548340][ T9] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 647.573197][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 647.592759][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 647.605490][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.625480][ T9] usb 1-1: config 0 descriptor?? [ 647.702727][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1999'. [ 647.841666][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 647.854298][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 647.885355][ T9] usb 1-1: USB disconnect, device number 8 [ 648.134639][ T29] audit: type=1326 audit(1727084459.598:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15062 comm="syz.3.2007" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x0 [ 648.869613][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 649.039226][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 649.052687][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.072207][ T9] usb 3-1: config 0 descriptor?? [ 649.183063][ T5230] usb 2-1: USB disconnect, device number 3 [ 649.267479][ T8] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 649.429575][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 649.447193][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.468152][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 649.487127][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 649.495268][ T8] usb 1-1: SerialNumber: syz [ 649.920639][ T9] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 649.957621][ T9] hackrf 3-1:0.0: Could not detect board [ 649.963618][ T9] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 649.999168][ T9] usb 3-1: USB disconnect, device number 102 [ 650.119716][ T2522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.290650][ T2522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.376789][ T8] usb 1-1: 0:2 : does not exist [ 650.449645][ T8] usb 1-1: USB disconnect, device number 9 [ 650.525414][ T5240] udevd[5240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 650.554567][ T2522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.594908][ T29] audit: type=1326 audit(1727084462.058:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15114 comm="syz.1.2026" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x0 [ 650.716067][ T2522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.807458][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 650.820119][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 650.830697][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 650.844406][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 650.857395][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 650.870474][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 650.907295][T15040] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 651.013518][ T2522] bridge_slave_1: left allmulticast mode [ 651.034801][ T2522] bridge_slave_1: left promiscuous mode [ 651.043990][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.074599][ T2522] bridge_slave_0: left allmulticast mode [ 651.089449][T15040] usb 3-1: Using ep0 maxpacket: 32 [ 651.093198][ T2522] bridge_slave_0: left promiscuous mode [ 651.100133][T15040] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 651.110325][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.119653][T15040] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 651.134674][T15040] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 651.148051][T15040] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.157713][T15040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.166084][T15040] usb 3-1: Product: 笠띖㮿⋄ꂮ郐䶕ꔤ鋟⾫㲿梑௳ꏟ’鱊ᚒ뾙ퟺᷦધю⾉쏝ꝰ궂屢⅔Მᨓ緝鏴妱醍預䬸拒陦䉷萩⦿∑㮪︁臢跢醏཭䵱譼ꧽ웈ⅎ䶜㋝큰숱䙊⮿韝 [ 651.189844][T15040] usb 3-1: Manufacturer: 㰁 [ 651.194709][T15040] usb 3-1: SerialNumber: П [ 651.514370][T15040] usb 3-1: 0:2 : does not exist [ 651.594909][T15040] usb 3-1: USB disconnect, device number 103 [ 651.717436][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 651.872785][ T2522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.885662][ T2522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.905058][ T8] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 651.905111][ T2522] bond0 (unregistering): Released all slaves [ 651.917322][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.936645][ T8] usb 2-1: Product: syz [ 651.941334][ T8] usb 2-1: Manufacturer: syz [ 651.946408][ T8] usb 2-1: SerialNumber: syz [ 651.968838][ T8] usb 2-1: config 0 descriptor?? [ 652.164598][T15147] sctp: [Deprecated]: syz.2.2038 (pid 15147) Use of int in max_burst socket option deprecated. [ 652.164598][T15147] Use struct sctp_assoc_value instead [ 652.257861][ T8] usb 2-1: ignoring: probably an ADSL modem [ 652.330472][ T25] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 652.414591][T15152] netlink: 'syz.2.2039': attribute type 4 has an invalid length. [ 652.500187][ T29] audit: type=1326 audit(1727084463.968:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15151 comm="syz.2.2039" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 652.529966][ T25] usb 1-1: config 0 has no interfaces? [ 652.535726][ T25] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 652.564069][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.582771][ T25] usb 1-1: config 0 descriptor?? [ 652.668514][T15140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.702644][T15140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.725964][T15140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.758571][T15140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.797206][T15040] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 652.832964][ T2522] hsr_slave_0: left promiscuous mode [ 652.862129][ T2522] hsr_slave_1: left promiscuous mode [ 652.896263][T15166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2035'. [ 652.916073][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.939373][T12447] Bluetooth: hci1: command tx timeout [ 652.956086][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.980000][ T2522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.998294][T15040] usb 3-1: unable to get BOS descriptor or descriptor too short [ 653.008004][T15040] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 653.021260][ T9] usb 1-1: USB disconnect, device number 10 [ 653.027208][T15040] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 653.041749][ T2522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.059980][T15040] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 653.078946][T15040] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.093780][T15040] usb 3-1: Product: syz [ 653.104849][T15040] usb 3-1: Manufacturer: 訲4 [ 653.117976][T15040] usb 3-1: SerialNumber: syz [ 653.136194][ T2522] veth1_macvtap: left promiscuous mode [ 653.148575][ T2522] veth0_macvtap: left promiscuous mode [ 653.162449][ T2522] veth1_vlan: left promiscuous mode [ 653.178695][ T2522] veth0_vlan: left promiscuous mode [ 653.321422][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 653.343879][T15157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.363602][T15157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.712521][ T29] audit: type=1326 audit(1727084465.178:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15176 comm="syz.3.2042" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f35579 code=0x0 [ 654.516248][ T2522] team0 (unregistering): Port device team_slave_1 removed [ 654.651765][ T2522] team0 (unregistering): Port device team_slave_0 removed [ 655.022349][T12447] Bluetooth: hci1: command tx timeout [ 655.408180][T15040] cdc_ncm 3-1:1.0: bind() failure [ 655.433404][T15040] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 655.441376][T15040] cdc_ncm 3-1:1.1: bind() failure [ 655.453974][T15040] usb 3-1: USB disconnect, device number 104 [ 655.605995][T15194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2047'. [ 655.798672][T15183] netlink: 'syz.0.2043': attribute type 14 has an invalid length. [ 655.828072][T15183] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2043'. [ 655.869923][ T8] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 655.966440][ T8] usb 2-1: USB disconnect, device number 4 [ 656.035262][T15128] chnl_net:caif_netlink_parms(): no params data found [ 656.357257][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 656.415696][T15128] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.449402][T15128] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.458424][T15128] bridge_slave_0: entered allmulticast mode [ 656.466175][T15128] bridge_slave_0: entered promiscuous mode [ 656.484639][T15128] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.492940][T15128] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.500949][T15128] bridge_slave_1: entered allmulticast mode [ 656.508978][T15128] bridge_slave_1: entered promiscuous mode [ 656.531647][ T9] usb 1-1: config 0 has no interfaces? [ 656.545893][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 656.556792][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.590506][ T9] usb 1-1: config 0 descriptor?? [ 656.598147][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 656.630450][T15128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.656777][T15128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.726731][T15128] team0: Port device team_slave_0 added [ 656.754759][T15128] team0: Port device team_slave_1 added [ 656.768874][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.791391][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.817515][ T25] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 656.836509][T15128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.838697][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.852353][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 656.878636][ T25] usb 2-1: config 0 descriptor?? [ 656.907257][T15128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.930256][T15128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.945424][T15128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.007541][T15128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 657.049508][ T5281] usb 1-1: USB disconnect, device number 11 [ 657.097488][T12447] Bluetooth: hci1: command tx timeout [ 657.098675][T15218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.154093][T15218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.172716][T15128] hsr_slave_0: entered promiscuous mode [ 657.196648][T15128] hsr_slave_1: entered promiscuous mode [ 657.222568][T15218] batadv0: entered promiscuous mode [ 657.228356][T15218] vlan2: entered promiscuous mode [ 657.233654][T15218] vlan2: entered allmulticast mode [ 657.242026][T15218] batadv0: entered allmulticast mode [ 657.274705][T15218] batadv0: left allmulticast mode [ 657.288346][T15218] batadv0: left promiscuous mode [ 657.424857][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 657.432710][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 657.464470][ T25] usb 2-1: USB disconnect, device number 5 [ 657.697357][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 657.901153][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 657.914009][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 657.925179][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.942844][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.963084][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 657.972649][ T9] usb 3-1: SerialNumber: syz [ 657.983802][ T9] usb-storage 3-1:1.0: USB Mass Storage device detected [ 658.319785][T15128] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 658.340685][T15128] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 658.364689][T15128] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 658.395732][T15128] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 658.601407][T15128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.669309][T15128] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.722204][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.729497][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.739121][ T5281] usb 3-1: USB disconnect, device number 105 [ 658.766837][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.774110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.036267][T15128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.144435][T15128] veth0_vlan: entered promiscuous mode [ 659.178032][T12447] Bluetooth: hci1: command tx timeout [ 659.183978][T15128] veth1_vlan: entered promiscuous mode [ 659.267873][ T5281] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 659.301744][T15128] veth0_macvtap: entered promiscuous mode [ 659.343469][T15128] veth1_macvtap: entered promiscuous mode [ 659.432454][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.454065][ T5281] usb 3-1: config 0 has no interfaces? [ 659.467169][ T5281] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 659.491239][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.505742][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.529342][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.552413][ T5281] usb 3-1: config 0 descriptor?? [ 659.566123][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.617608][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 659.652955][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.681200][T15128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.700097][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.760139][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.800427][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.836602][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.866713][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.884612][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.905142][T15128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 659.926354][T15128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 659.949276][T15128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 660.009511][T15304] bridge0: port 3(team0) entered blocking state [ 660.047021][T15304] bridge0: port 3(team0) entered disabled state [ 660.054277][T15304] team0: entered allmulticast mode [ 660.077993][T15304] team_slave_0: entered allmulticast mode [ 660.084400][T15304] team_slave_1: entered allmulticast mode [ 660.101842][T15040] usb 3-1: USB disconnect, device number 106 [ 660.158443][T15304] team0: entered promiscuous mode [ 660.173386][T15304] team_slave_0: entered promiscuous mode [ 660.196847][T15304] team_slave_1: entered promiscuous mode [ 660.267426][T15304] bridge0: port 3(team0) entered blocking state [ 660.275857][T15304] bridge0: port 3(team0) entered forwarding state [ 660.346276][T15128] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.375461][T15128] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.400529][T15128] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.437198][ T5281] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 660.445335][T15128] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.648481][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 660.677762][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.699124][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.718591][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.746636][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.791745][ T5281] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 660.835878][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.846890][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.858334][ T5281] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 660.871315][T15341] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 660.897593][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.906047][T15341] netlink: 'syz.2.2071': attribute type 21 has an invalid length. [ 660.925947][ T5281] usb 1-1: config 0 descriptor?? [ 661.158530][T15320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.178489][T15320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.337401][ T5279] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 661.392956][ T5281] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 661.419898][ T5281] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 661.444792][ T5281] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 661.475130][ T5281] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 661.500474][ T5281] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 661.509367][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.520169][ T5281] HID 045e:07da: Invalid code 65791 type 1 [ 661.525354][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 661.552421][ T5279] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 661.580920][ T5281] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0013/input/input43 [ 661.584660][ T5279] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 661.602963][T15320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.640811][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.650907][T15320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.667577][ T5281] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 661.668654][ T5279] usb 5-1: config 0 descriptor?? [ 661.889734][ T5281] usb 1-1: USB disconnect, device number 12 [ 662.184430][T15348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.202804][T15348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.229789][T15348] program syz.4.2025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.257697][T15348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.270155][T15348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.327235][ T25] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 662.345064][ T5279] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 662.362142][ T5279] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 662.377907][ T5294] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 662.395033][ T5279] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 662.505760][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.518466][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.536565][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 662.558765][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 662.582503][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 662.605690][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 662.627411][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.649322][ T5294] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 662.661055][ T25] usb 2-1: config 0 descriptor?? [ 662.666244][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.690947][ T5294] usb 3-1: Product: syz [ 662.695245][ T5294] usb 3-1: Manufacturer: syz [ 662.712056][ T5294] usb 3-1: SerialNumber: syz [ 662.736648][ T5294] usb 3-1: config 0 descriptor?? [ 662.761756][T15384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.773720][ T5281] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 662.801858][ T5281] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 662.812290][ T5281] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 662.821180][T15384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.838371][ T5281] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 662.856734][ T5281] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [syz0] on syz1 [ 663.112382][T15372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.129392][T15372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.161176][T15372] program syz.1.2075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.192267][T15372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.215931][T15372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.323934][ T25] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 663.332675][ T25] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 663.347264][ T25] plantronics 0003:047F:FFFF.0016: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 663.742338][ T5294] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 663.749913][T15402] geneve2: entered promiscuous mode [ 663.755725][T15402] geneve2: entered allmulticast mode [ 663.791194][ T5294] usb 3-1: USB disconnect, device number 107 [ 663.866019][T15404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.882710][T15384] usb 5-1: string descriptor 0 read error: -71 [ 663.920802][ T8008] udevd[8008]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.943919][T15404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.963982][ T5279] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 663.980527][ T9] usb 5-1: reset high-speed USB device number 101 using dummy_hcd [ 663.992644][ T5279] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 664.022544][ T5279] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 664.035084][ T5279] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 664.062389][ T5279] hid-generic 0000:0000:0000.0017: hidraw2: HID v0.00 Device [syz0] on syz1 [ 664.112528][ T8] usb 2-1: USB disconnect, device number 6 [ 664.418590][ T5278] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 664.580327][ T5278] usb 1-1: config 0 has no interfaces? [ 664.586232][ T5278] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 664.595654][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.608126][ T5278] usb 1-1: config 0 descriptor?? [ 664.726292][ T29] audit: type=1326 audit(1727084476.188:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15421 comm="syz.2.2082" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f82579 code=0x0 [ 664.790210][ T5281] usb 5-1: USB disconnect, device number 101 [ 665.401240][ T29] audit: type=1326 audit(1727084476.868:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.446826][ T29] audit: type=1326 audit(1727084476.888:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.505549][ T29] audit: type=1326 audit(1727084476.888:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.534621][ T29] audit: type=1326 audit(1727084476.888:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.557489][ T5281] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 665.574761][ T29] audit: type=1326 audit(1727084476.888:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.610244][ T29] audit: type=1326 audit(1727084476.888:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.640534][ T29] audit: type=1326 audit(1727084476.888:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.674801][ T29] audit: type=1326 audit(1727084476.888:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.703527][ T29] audit: type=1326 audit(1727084476.888:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.1.2088" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff0579 code=0x7ffc0000 [ 665.747292][ T5281] usb 5-1: Using ep0 maxpacket: 8 [ 665.766706][ T5281] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 665.777147][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.786103][ T5281] usb 5-1: Product: syz [ 665.791515][ T5281] usb 5-1: Manufacturer: syz [ 665.796265][ T5281] usb 5-1: SerialNumber: syz [ 665.806477][ T5281] usb 5-1: config 0 descriptor?? [ 665.819249][ T5281] hub 5-1:0.0: bad descriptor, ignoring hub [ 665.826283][ T5281] hub 5-1:0.0: probe with driver hub failed with error -5 [ 665.837607][ T5281] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 666.007801][ T5294] usb 1-1: USB disconnect, device number 13 [ 666.036622][T15438] tipc: Started in network mode [ 666.052075][T15438] tipc: Node identity 101, cluster identity 4711 [ 666.067974][T15438] tipc: Node number set to 257 [ 666.084979][ T5281] usb 5-1: USB disconnect, device number 102 [ 666.537654][ T5281] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 666.998586][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 667.020052][T15469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2097'. [ 667.069922][ T5294] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 667.217182][ T5294] usb 1-1: device descriptor read/64, error -71 [ 667.427426][ T5281] usb 2-1: device descriptor read/64, error -71 [ 667.457256][ T5294] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 667.592234][ T5294] usb 1-1: device descriptor read/64, error -71 [ 667.687278][ T5281] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 667.717748][ T5294] usb usb1-port1: attempt power cycle [ 667.842504][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.854531][ T5281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.865187][ T5281] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 667.887524][ T5281] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 667.905420][ T5281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.916798][ T5281] usb 2-1: config 0 descriptor?? [ 667.942627][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.957781][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.987364][ T25] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 668.068109][ T5294] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 668.097774][ T5294] usb 1-1: device descriptor read/8, error -71 [ 668.148956][ T25] usb 3-1: config 0 has no interfaces? [ 668.154540][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 668.177203][T15040] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 668.185249][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.203963][ T25] usb 3-1: config 0 descriptor?? [ 668.331016][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.337276][ T5294] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 668.347329][T15040] usb 5-1: Using ep0 maxpacket: 8 [ 668.354296][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.355569][T15040] usb 5-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 668.375143][T15040] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.385051][ T5294] usb 1-1: device descriptor read/8, error -71 [ 668.396266][T15040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 668.405363][T15040] usb 5-1: SerialNumber: syz [ 668.415373][T15472] program syz.1.2098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 668.442512][T15040] cdc_ether 5-1:1.0: skipping garbage [ 668.459641][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.470737][T15040] usb 5-1: bad CDC descriptors [ 668.485140][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.501889][ T5294] usb usb1-port1: unable to enumerate USB device [ 668.595177][ T5281] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 668.623858][ T5281] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 668.643436][T15484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.648585][ T5281] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 668.675092][T15484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.699704][ T5294] usb 5-1: USB disconnect, device number 103 [ 668.867334][T15040] usb 2-1: USB disconnect, device number 8 [ 669.249021][ T9] usb 3-1: USB disconnect, device number 108 [ 669.381080][T15497] netlink: 'syz.4.2108': attribute type 4 has an invalid length. [ 670.147888][ T9] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 670.230272][T15520] team0: Port device macvlan1 added [ 670.317196][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 670.324317][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 670.341109][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 670.352790][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.374239][ T9] usb 3-1: config 0 descriptor?? [ 670.596392][ T9] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 670.647569][T15040] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 670.801280][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 670.811523][ T5294] usb 3-1: USB disconnect, device number 109 [ 670.820360][T15040] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 670.829905][T15040] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.842582][ T5294] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 670.855064][T15040] usb 2-1: config 0 descriptor?? [ 670.868573][T15040] cp210x 2-1:0.0: cp210x converter detected [ 671.074569][T15527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.087689][T15527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.300680][T15527] xt_policy: output policy not valid in PREROUTING and INPUT [ 671.324047][T15040] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 671.368785][T15040] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 671.376708][T15040] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 671.390310][T15040] usb 2-1: cp210x converter now attached to ttyUSB0 [ 671.399017][T15040] usb 2-1: USB disconnect, device number 9 [ 671.418821][T15040] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 671.429070][T15040] cp210x 2-1:0.0: device disconnected [ 671.467853][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 671.641758][ T9] usb 1-1: config 0 has no interfaces? [ 671.652886][ T9] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 671.666789][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.678104][ T9] usb 1-1: config 0 descriptor?? [ 672.109147][T15547] netlink: 'syz.3.2126': attribute type 14 has an invalid length. [ 672.126825][T15547] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2126'. [ 672.417296][ T25] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 672.579642][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.603418][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.632728][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.666018][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.685389][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.704682][ T25] usb 2-1: config 0 descriptor?? [ 672.920638][ T5294] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 673.112440][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 673.135841][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 673.141549][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.162193][T15040] usb 1-1: USB disconnect, device number 18 [ 673.173148][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.176593][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 673.202037][T15549] program syz.1.2128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.212780][ T5294] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 673.218661][T15567] FAULT_INJECTION: forcing a failure. [ 673.218661][T15567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.238279][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.242540][ T8] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 673.256594][T15567] CPU: 0 UID: 0 PID: 15567 Comm: syz.3.2136 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 673.261002][ T5294] usb 3-1: config 0 descriptor?? [ 673.267052][T15567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 673.267075][T15567] Call Trace: [ 673.267086][T15567] [ 673.267097][T15567] dump_stack_lvl+0x241/0x360 [ 673.267136][T15567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 673.267168][T15567] ? __pfx__printk+0x10/0x10 [ 673.267200][T15567] ? __pfx_lock_release+0x10/0x10 [ 673.267242][T15567] should_fail_ex+0x3b0/0x4e0 [ 673.267282][T15567] _copy_to_user+0x2f/0xb0 [ 673.267315][T15567] netlink_getsockopt+0x4cd/0x5f0 [ 673.267354][T15567] ? __pfx_netlink_getsockopt+0x10/0x10 [ 673.267386][T15567] ? __fget_files+0x29/0x470 [ 673.267410][T15567] ? aa_sock_opt_perm+0x79/0x120 [ 673.267439][T15567] ? __pfx_netlink_getsockopt+0x10/0x10 [ 673.267473][T15567] do_sock_getsockopt+0x3c4/0x7e0 [ 673.267513][T15567] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 673.267548][T15567] ? __fget_files+0x3f3/0x470 [ 673.267571][T15567] ? __fget_files+0x29/0x470 [ 673.267604][T15567] __sys_getsockopt+0x26b/0x330 [ 673.267641][T15567] ? __pfx___sys_getsockopt+0x10/0x10 [ 673.374620][T15567] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 673.381135][T15567] __ia32_sys_getsockopt+0xb5/0xd0 [ 673.386301][T15567] __do_fast_syscall_32+0xb4/0x110 [ 673.391566][T15567] ? exc_page_fault+0x590/0x8c0 [ 673.396458][T15567] do_fast_syscall_32+0x34/0x80 [ 673.401356][T15567] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.407857][T15567] RIP: 0023:0xf7f35579 [ 673.412067][T15567] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 673.432241][T15567] RSP: 002b:00000000f56b656c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 673.440883][T15567] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000010e [ 673.448977][T15567] RDX: 0000000000000003 RSI: 0000000099999999 RDI: 0000000020000040 [ 673.456994][T15567] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.464988][T15567] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 673.473013][T15567] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.481212][T15567] [ 673.511026][T15549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.525884][T15549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.593227][ T25] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 673.615915][ T25] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 673.641564][ T25] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 673.683014][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.693769][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 673.704092][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.715361][ T8] usb 5-1: config 0 descriptor?? [ 673.724761][T15556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.740304][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 673.749148][T15556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.773528][T15556] program syz.2.2131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 673.788042][T15556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.801157][T15556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.881491][ T5294] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 673.888487][ T9] usb 2-1: USB disconnect, device number 10 [ 673.893874][ T5294] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 673.926304][ T5294] plantronics 0003:047F:FFFF.001A: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 673.974486][T15561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.015636][T15561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.093662][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2134'. [ 674.133598][ T8] pwc: send_video_command error -71 [ 674.148129][ T8] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 674.156812][ T5294] usb 3-1: USB disconnect, device number 110 [ 674.162386][ T8] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 674.204086][ T8] usb 5-1: USB disconnect, device number 104 [ 674.365727][ T29] kauditd_printk_skb: 1842 callbacks suppressed [ 674.365748][ T29] audit: type=1326 audit(1727084485.828:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15577 comm="syz.0.2140" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc7579 code=0x0 [ 675.472711][T15587] netlink: zone id is out of range [ 675.499700][T15587] netlink: del zone limit has 8 unknown bytes [ 675.919936][T15594] input: syz0 as /devices/virtual/input/input44 [ 676.217707][ T5279] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 676.357831][ C0] ------------[ cut here ]------------ [ 676.363962][ C0] WARNING: CPU: 0 PID: 15613 at net/mptcp/protocol.c:695 __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 676.375059][ C0] Modules linked in: [ 676.379058][ C0] CPU: 0 UID: 0 PID: 15613 Comm: syz.0.2153 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 676.389588][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 676.393079][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.399746][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 676.399866][ C0] Code: 0f b6 dc 31 ff 89 de e8 b5 dd ea f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 98 da ea f5 90 <0f> 0b 90 e9 47 ff ff ff e8 8a da ea f5 90 0f 0b 90 e9 99 e0 ff ff [ 676.399891][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 676.399920][ C0] RAX: ffffffff8ba9df18 RBX: 00000000000055f0 RCX: ffff88802a983c00 [ 676.399942][ C0] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 676.399961][ C0] RBP: 1ffff1100e28c33e R08: ffffffff8ba9cf12 R09: 1ffff1100e28c348 [ 676.399982][ C0] R10: dffffc0000000000 R11: ffffed100e28c349 R12: 0000000000000000 [ 676.400003][ C0] R13: dffffc0000000000 R14: 0000000012601cbc R15: 00000000000081e5 [ 676.400022][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f5746b40 [ 676.400046][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 676.443264][ T5279] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.444452][ C0] CR2: 0000000020287000 CR3: 0000000059444000 CR4: 00000000003506f0 [ 676.444481][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 676.461074][ T5279] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 676.469067][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 676.469096][ C0] Call Trace: [ 676.469110][ C0] [ 676.469124][ C0] ? __warn+0x168/0x4e0 [ 676.469155][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 676.469192][ C0] ? report_bug+0x2b3/0x500 [ 676.489478][ T5279] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.494744][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 676.549015][ T5279] usb 5-1: config 0 descriptor?? [ 676.550760][ C0] ? handle_bug+0x60/0x90 [ 676.590064][ C0] ? exc_invalid_op+0x1a/0x50 [ 676.594807][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 676.599970][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 676.606601][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 676.613509][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 676.620130][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 676.627002][ C0] mptcp_data_ready+0x29c/0xa90 [ 676.632063][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 676.638151][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 676.643594][ C0] subflow_data_ready+0x34a/0x920 [ 676.648828][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 676.654632][ C0] ? tcp_grow_window+0x171/0xb00 [ 676.659792][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 676.664839][ C0] tcp_data_queue+0x20fd/0x76c0 [ 676.669986][ C0] ? tcp_urg+0x100/0x450 [ 676.674313][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 676.679640][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 676.684400][ C0] ? ktime_get+0x9b/0xb0 [ 676.688771][ C0] tcp_rcv_established+0xfba/0x2020 [ 676.694279][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 676.700045][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 676.705164][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 676.709907][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 676.714604][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 676.719628][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 676.724710][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 676.729733][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 676.735285][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 676.741131][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 676.746815][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 676.752928][ C0] NF_HOOK+0x3a4/0x450 [ 676.757133][ C0] ? NF_HOOK+0x9a/0x450 [ 676.761363][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 676.766028][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 676.772218][ C0] ? ip_rcv_finish+0x406/0x560 [ 676.775688][T15600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 676.777172][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 676.777218][ C0] NF_HOOK+0x3a4/0x450 [ 676.777253][ C0] ? __lock_acquire+0x1384/0x2050 [ 676.777293][ C0] ? NF_HOOK+0x9a/0x450 [ 676.777327][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 676.777360][ C0] ? ip_rcv_core+0x801/0xd10 [ 676.777398][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 676.777442][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 676.777480][ C0] __netif_receive_skb+0x2bf/0x650 [ 676.777511][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 676.833796][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 676.839647][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.845834][ C0] ? __pfx_lock_release+0x10/0x10 [ 676.850976][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 676.856271][ C0] process_backlog+0x662/0x15b0 [ 676.861243][ C0] ? process_backlog+0x33b/0x15b0 [ 676.866344][ C0] ? __pfx_process_backlog+0x10/0x10 [ 676.871832][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 676.877927][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 676.884426][ C0] __napi_poll+0xcb/0x490 [ 676.888970][ C0] net_rx_action+0x89b/0x1240 [ 676.893728][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 676.898951][ C0] ? sched_clock+0x4a/0x70 [ 676.903516][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 676.910218][ C0] handle_softirqs+0x2c5/0x980 [ 676.915147][ C0] ? do_softirq+0x11b/0x1e0 [ 676.919778][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 676.925133][ C0] do_softirq+0x11b/0x1e0 [ 676.929666][ C0] [ 676.932627][ C0] [ 676.935646][ C0] ? __pfx_do_softirq+0x10/0x10 [ 676.940636][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 676.946340][ C0] ? rcu_is_watching+0x15/0xb0 [ 676.951213][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 676.956483][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 676.961888][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 676.967190][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 676.973076][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 676.978308][ C0] __dev_queue_xmit+0x1764/0x3e80 [ 676.983417][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 676.988660][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 676.994131][ C0] ? mark_lock+0x9a/0x360 [ 676.999085][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.005238][ C0] ? ip_finish_output2+0xa14/0x1390 [ 677.010559][ C0] ? ip_finish_output2+0x45f/0x1390 [ 677.015906][ C0] ip_finish_output2+0xd41/0x1390 [ 677.021033][ C0] ? ip_finish_output2+0x45f/0x1390 [ 677.026296][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 677.031847][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 677.036883][ C0] ? __ip_finish_output+0x349/0x400 [ 677.042197][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 677.047238][ C0] ? __pfx_mptcp_write_options+0x10/0x10 [ 677.052940][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 677.057980][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 677.063206][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 677.068539][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 677.074153][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.080256][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.086682][ C0] ? tcp_init_tso_segs+0xde/0x1a0 [ 677.091814][ C0] tcp_write_xmit+0x641d/0x6bf0 [ 677.096741][ C0] ? ipv4_mtu+0x2bc/0x3d0 [ 677.101181][ C0] ? tcp_current_mss+0x29b/0x4d0 [ 677.106198][ C0] ? __pfx_tcp_current_mss+0x10/0x10 [ 677.111611][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 677.116881][ C0] __tcp_push_pending_frames+0x9b/0x360 [ 677.122618][ C0] ? ktime_get+0x9b/0xb0 [ 677.126930][ C0] tcp_rcv_established+0x1026/0x2020 [ 677.132641][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.139163][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 677.144878][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 677.149676][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 677.154951][ C0] __release_sock+0x214/0x350 [ 677.159732][ C0] release_sock+0x61/0x1f0 [ 677.164259][ C0] __mptcp_push_pending+0x6b5/0x9f0 [ 677.169660][ C0] ? __mptcp_push_pending+0x2e1/0x9f0 [ 677.175101][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 677.180946][ C0] ? __virt_addr_valid+0x183/0x530 [ 677.186112][ C0] ? __virt_addr_valid+0x183/0x530 [ 677.191319][ C0] ? __virt_addr_valid+0x45f/0x530 [ 677.196548][ C0] ? __check_object_size+0x48e/0x900 [ 677.202015][ C0] mptcp_sendmsg+0x10bb/0x1b10 [ 677.206949][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 677.212166][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 677.217565][ C0] ? inet_sendmsg+0x330/0x390 [ 677.222299][ C0] __sock_sendmsg+0x1a6/0x270 [ 677.227034][ C0] __sys_sendto+0x398/0x4f0 [ 677.231657][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 677.236749][ C0] ? do_futex+0x33b/0x560 [ 677.241211][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.247656][ C0] __ia32_sys_sendto+0xdd/0x100 [ 677.252584][ C0] __do_fast_syscall_32+0xb4/0x110 [ 677.257800][ C0] ? exc_page_fault+0x590/0x8c0 [ 677.262732][ C0] do_fast_syscall_32+0x34/0x80 [ 677.267694][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 677.274349][ C0] RIP: 0023:0xf7fc7579 [ 677.278548][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 677.298335][ C0] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 677.306820][ C0] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000040 [ 677.314916][ C0] RDX: 00000000ffffff4c RSI: 0000000000000000 RDI: 0000000000000000 [ 677.324304][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 677.332398][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 677.340469][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 677.348573][ C0] [ 677.351747][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 677.359073][ C0] CPU: 0 UID: 0 PID: 15613 Comm: syz.0.2153 Not tainted 6.11.0-syzkaller-08829-gaf9c191ac2a0 #0 [ 677.369542][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 677.379634][ C0] Call Trace: [ 677.382964][ C0] [ 677.385849][ C0] dump_stack_lvl+0x241/0x360 [ 677.390679][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.395935][ C0] ? __pfx__printk+0x10/0x10 [ 677.400587][ C0] ? _printk+0xd5/0x120 [ 677.404798][ C0] ? __init_begin+0x41000/0x41000 [ 677.409874][ C0] ? vscnprintf+0x5d/0x90 [ 677.414270][ C0] panic+0x349/0x880 [ 677.418244][ C0] ? __warn+0x177/0x4e0 [ 677.422546][ C0] ? __pfx_panic+0x10/0x10 [ 677.427030][ C0] ? show_trace_log_lvl+0x3b2/0x410 [ 677.432286][ C0] __warn+0x34b/0x4e0 [ 677.436503][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 677.442952][ C0] report_bug+0x2b3/0x500 [ 677.447308][ C0] ? __mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 677.453848][ C0] handle_bug+0x60/0x90 [ 677.458027][ C0] exc_invalid_op+0x1a/0x50 [ 677.462548][ C0] asm_exc_invalid_op+0x1a/0x20 [ 677.467514][ C0] RIP: 0010:__mptcp_move_skbs_from_subflow+0x20a9/0x21f0 [ 677.474558][ C0] Code: 0f b6 dc 31 ff 89 de e8 b5 dd ea f5 89 d8 48 81 c4 50 01 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 98 da ea f5 90 <0f> 0b 90 e9 47 ff ff ff e8 8a da ea f5 90 0f 0b 90 e9 99 e0 ff ff [ 677.494185][ C0] RSP: 0018:ffffc90000006db8 EFLAGS: 00010246 [ 677.500291][ C0] RAX: ffffffff8ba9df18 RBX: 00000000000055f0 RCX: ffff88802a983c00 [ 677.508321][ C0] RDX: 0000000000000100 RSI: 00000000000081e5 RDI: 00000000000055f0 [ 677.516422][ C0] RBP: 1ffff1100e28c33e R08: ffffffff8ba9cf12 R09: 1ffff1100e28c348 [ 677.524503][ C0] R10: dffffc0000000000 R11: ffffed100e28c349 R12: 0000000000000000 [ 677.532583][ C0] R13: dffffc0000000000 R14: 0000000012601cbc R15: 00000000000081e5 [ 677.540592][ C0] ? __mptcp_move_skbs_from_subflow+0x10a2/0x21f0 [ 677.547041][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 677.553604][ C0] ? __mptcp_move_skbs_from_subflow+0x20a8/0x21f0 [ 677.560115][ C0] mptcp_data_ready+0x29c/0xa90 [ 677.565009][ C0] ? __sk_mem_raise_allocated+0x2be/0x1140 [ 677.570959][ C0] ? __pfx_mptcp_data_ready+0x10/0x10 [ 677.576387][ C0] subflow_data_ready+0x34a/0x920 [ 677.581490][ C0] ? __pfx_subflow_data_ready+0x10/0x10 [ 677.587065][ C0] ? tcp_grow_window+0x171/0xb00 [ 677.592038][ C0] ? tcp_data_ready+0x15b/0x4e0 [ 677.597008][ C0] tcp_data_queue+0x20fd/0x76c0 [ 677.601905][ C0] ? tcp_urg+0x100/0x450 [ 677.606178][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 677.611399][ C0] ? __pfx_tcp_urg+0x10/0x10 [ 677.616216][ C0] ? ktime_get+0x9b/0xb0 [ 677.620514][ C0] tcp_rcv_established+0xfba/0x2020 [ 677.625844][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 677.631526][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 677.636675][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 677.641757][ C0] tcp_v4_rcv+0x2dc0/0x37f0 [ 677.646413][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 677.651303][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 677.656182][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 677.661066][ C0] ip_protocol_deliver_rcu+0x22e/0x440 [ 677.666660][ C0] ? ip_local_deliver_finish+0x230/0x5f0 [ 677.672325][ C0] ip_local_deliver_finish+0x341/0x5f0 [ 677.677824][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 677.683825][ C0] NF_HOOK+0x3a4/0x450 [ 677.688011][ C0] ? NF_HOOK+0x9a/0x450 [ 677.692203][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 677.696827][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 677.702862][ C0] ? ip_rcv_finish+0x406/0x560 [ 677.707682][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 677.712820][ C0] NF_HOOK+0x3a4/0x450 [ 677.716923][ C0] ? __lock_acquire+0x1384/0x2050 [ 677.721978][ C0] ? NF_HOOK+0x9a/0x450 [ 677.726339][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 677.730959][ C0] ? ip_rcv_core+0x801/0xd10 [ 677.735692][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 677.740864][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 677.745397][ C0] __netif_receive_skb+0x2bf/0x650 [ 677.750530][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 677.755749][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 677.761400][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.767838][ C0] ? __pfx_lock_release+0x10/0x10 [ 677.772902][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 677.778053][ C0] process_backlog+0x662/0x15b0 [ 677.782930][ C0] ? process_backlog+0x33b/0x15b0 [ 677.787988][ C0] ? __pfx_process_backlog+0x10/0x10 [ 677.793294][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.799302][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.805676][ C0] __napi_poll+0xcb/0x490 [ 677.810117][ C0] net_rx_action+0x89b/0x1240 [ 677.814822][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 677.819968][ C0] ? sched_clock+0x4a/0x70 [ 677.824423][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 677.830793][ C0] handle_softirqs+0x2c5/0x980 [ 677.835586][ C0] ? do_softirq+0x11b/0x1e0 [ 677.840159][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 677.845498][ C0] do_softirq+0x11b/0x1e0 [ 677.849976][ C0] [ 677.852925][ C0] [ 677.855869][ C0] ? __pfx_do_softirq+0x10/0x10 [ 677.860768][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 677.866431][ C0] ? rcu_is_watching+0x15/0xb0 [ 677.871214][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 677.876553][ C0] ? dev_hard_start_xmit+0x773/0x7e0 [ 677.881956][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 677.887183][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 677.893015][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 677.898165][ C0] __dev_queue_xmit+0x1764/0x3e80 [ 677.903220][ C0] ? __dev_queue_xmit+0x2da/0x3e80 [ 677.908355][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 677.913854][ C0] ? mark_lock+0x9a/0x360 [ 677.918205][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.924226][ C0] ? ip_finish_output2+0xa14/0x1390 [ 677.929533][ C0] ? ip_finish_output2+0x45f/0x1390 [ 677.934931][ C0] ip_finish_output2+0xd41/0x1390 [ 677.940009][ C0] ? ip_finish_output2+0x45f/0x1390 [ 677.945257][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 677.950755][ C0] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 677.955623][ C0] ? __ip_finish_output+0x349/0x400 [ 677.960857][ C0] __ip_queue_xmit+0x118c/0x1b80 [ 677.965839][ C0] ? __pfx_mptcp_write_options+0x10/0x10 [ 677.971501][ C0] ? __ip_queue_xmit+0x5f/0x1b80 [ 677.976513][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 677.981655][ C0] __tcp_transmit_skb+0x2544/0x3b30 [ 677.986898][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 677.992469][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 677.998475][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 678.004874][ C0] ? tcp_init_tso_segs+0xde/0x1a0 [ 678.009918][ C0] tcp_write_xmit+0x641d/0x6bf0 [ 678.014811][ C0] ? ipv4_mtu+0x2bc/0x3d0 [ 678.019166][ C0] ? tcp_current_mss+0x29b/0x4d0 [ 678.024123][ C0] ? __pfx_tcp_current_mss+0x10/0x10 [ 678.029428][ C0] ? __pfx_tcp_data_queue+0x10/0x10 [ 678.034652][ C0] __tcp_push_pending_frames+0x9b/0x360 [ 678.040237][ C0] ? ktime_get+0x9b/0xb0 [ 678.044615][ C0] tcp_rcv_established+0x1026/0x2020 [ 678.049935][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 678.056310][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 678.061976][ C0] tcp_v4_do_rcv+0x96d/0xc70 [ 678.066599][ C0] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 678.071907][ C0] __release_sock+0x214/0x350 [ 678.076950][ C0] release_sock+0x61/0x1f0 [ 678.081392][ C0] __mptcp_push_pending+0x6b5/0x9f0 [ 678.086617][ C0] ? __mptcp_push_pending+0x2e1/0x9f0 [ 678.092023][ C0] ? __pfx___mptcp_push_pending+0x10/0x10 [ 678.097790][ C0] ? __virt_addr_valid+0x183/0x530 [ 678.102921][ C0] ? __virt_addr_valid+0x183/0x530 [ 678.108133][ C0] ? __virt_addr_valid+0x45f/0x530 [ 678.113789][ C0] ? __check_object_size+0x48e/0x900 [ 678.119111][ C0] mptcp_sendmsg+0x10bb/0x1b10 [ 678.124116][ C0] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 678.129279][ C0] ? sock_rps_record_flow+0x1a/0x400 [ 678.134584][ C0] ? inet_sendmsg+0x330/0x390 [ 678.139296][ C0] __sock_sendmsg+0x1a6/0x270 [ 678.143996][ C0] __sys_sendto+0x398/0x4f0 [ 678.148537][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 678.153582][ C0] ? do_futex+0x33b/0x560 [ 678.157960][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 678.164582][ C0] __ia32_sys_sendto+0xdd/0x100 [ 678.169491][ C0] __do_fast_syscall_32+0xb4/0x110 [ 678.174635][ C0] ? exc_page_fault+0x590/0x8c0 [ 678.179505][ C0] do_fast_syscall_32+0x34/0x80 [ 678.184392][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.190758][ C0] RIP: 0023:0xf7fc7579 [ 678.194850][ C0] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 678.214478][ C0] RSP: 002b:00000000f574656c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 678.222920][ C0] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000020000040 [ 678.230911][ C0] RDX: 00000000ffffff4c RSI: 0000000000000000 RDI: 0000000000000000 [ 678.238904][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.247257][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 678.255258][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.263265][ C0] [ 678.266843][ C0] Kernel Offset: disabled [ 678.271377][ C0] Rebooting in 86400 seconds..