last executing test programs: 7m16.755885094s ago: executing program 4 (id=279): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7m15.635856279s ago: executing program 4 (id=283): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) connect$bt_rfcomm(r0, 0x0, 0x0) close(r0) 7m15.354843744s ago: executing program 4 (id=284): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500194003"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4004e24}, 0x6e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 7m12.576676774s ago: executing program 4 (id=295): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e26, 0x5cf, @ipv4={'\x00', '\xff\xff', @loopback}, 0xd}, 0x1c) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) vmsplice(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7m11.936649323s ago: executing program 4 (id=302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r1, &(0x7f0000005e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0xc}}, @ip_retopts={{0x10, 0x0, 0x7, {[@end]}}}, @ip_tos_int={{0x10, 0x0, 0x1, 0x4}}, @ip_retopts={{0xc}}], 0x38}}], 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x20040084) sendmsg$xdp(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x2c, 0x9, r4, 0x1e}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000340)="9f96998598af33c0a1562da66dc4f3c3f1ff5d1e86687c87375e2724e67a03f1d660745c438e4dfbcab9c76d41326fbdd81beb75898f962dedaf01b814ef2ffca8eb060eacd9276a1436b35529f02d73f6d3a8e37131fdd4165775e37659e38bbc53ed4f9ce8749fb347dbb8ba8e82329507cca0e2109084e24b3f9370f6", 0x7e}, {&(0x7f00000003c0)="9c7c25beef19075adb6bbb806f6ed3f9389914c1602961da06c592b385873f0724d87320a7357f7edd790b88e289caf1bc2d434914098678c15bc3efb5f3f5e05e172c98ff880fde8a0def7f8cdc564e36a2a83b8f3b0787a7f45e2a5b5b2d7d82780656e82d01da29f92764c6ebd8aba8968e708cf3fb430db44480e97ee26ccc67a9a3eb6d28415c49b0cd401aab3d9ab11b824f63a1d83f0706b6b9999fda429dd74339b362942b69265c9e7af251c62e2daec6098e2dbd49a1b8b891f67b5a71966cb139dc39905e8cecf4207d562615467d2108984cc3db093f6fcef3be5f9775be5f36bf1c168ad1a92bf4", 0xee}, {&(0x7f0000000180)="27f56a348da91b4b603d01c9e5a20a6d9d592d9d58324e67160d557172000b7587351e1bfbc239d931297e59eaaafb255cba4849d6f5", 0x36}, {&(0x7f00000004c0)="e8ba6f8e66a2774bb311c3edb2f01cd80ba8083f5959462a24959c3a6897f053a48f165dff46003e1ee36a66eb989bc7772b043dab1912d5491ad0825259beabb573", 0x42}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)="6f24f0ea6bce41bda55103b8f0d3854429c9f47c08c6cb1c5de9ccfa9e1d6399bd7b9d6f09a759f6dfd583dcff69bf1aeb1e513ed0e94c988af0a91ec2b56746468dfa0d8e1032355b131e73ea48d6666c62965d17ea5e8147c40b846c45f157827de9abd35de9b05bc50b2efe5952b9e9f680210167d30c0291f3c257929d7b98886a960ec69f6e91195d41308e465e15ac84715a026703182f8c4fd8229f04d540dd0c201d02c4420259025518dfd2d4d4f66ec9e89f8a40151ac72c22053a03d75307fa3628b681e085311d292f7eec5a", 0xd2}], 0x6, 0x0, 0x0, 0x20000011}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000020000090900010073797a31000000007c000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006408000a40000000020b00070066696c7465720000"], 0xc4}, 0x1, 0x0, 0x0, 0x24004900}, 0x2000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20008000) 7m10.71695295s ago: executing program 4 (id=305): socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @empty}}}}}}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}, 0x6c}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet(0x2, 0xa, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x9, 0x7, 0x6, 0x7, 0xa3, 0x9, 0x9}, 0x1c) 6m55.535656326s ago: executing program 32 (id=305): socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c30010", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @empty}}}}}}, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x6c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffffe}]}, 0x6c}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet(0x2, 0xa, 0x7) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x9, 0x7, 0x6, 0x7, 0xa3, 0x9, 0x9}, 0x1c) 4m41.720983913s ago: executing program 3 (id=983): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4m41.147365705s ago: executing program 5 (id=988): socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_io_uring_setup(0x9d2, &(0x7f00000000c0)={0x0, 0x1, 0x800, 0x3, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 4m40.378290209s ago: executing program 5 (id=991): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000000), 0x20003, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010000040000000a0000000000000001000000010000000200000000000000f2ffffffffffffff00000000000000000000000000000000000000000000000001000000ff010000020000000000000006000000000000000100000000000000e706000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001200"/576]) capget(&(0x7f0000000100)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000280)={0x80000001, 0xfffffff7, 0x2, 0x4, 0x2, 0x22c}) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x4000000, 0x1a3c80) syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000480)={0x1000, 0x80a0000, 0x8, 0x1, 0x4}) socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=""/37, 0x25}, 0x80013360) getdents64(0xffffffffffffffff, 0x0, 0x18) r4 = getpgrp(0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x34020000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "f1ff5ef2fe010017", "9e8ecc7bb5352776725e1047711330ff2bb17b5508000000000000009bc400", "c9063700", "46b0dc72b7b1d30e"}, 0x38) r6 = socket$inet6(0x10, 0x2, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYBLOB="b5b7bf002cc835550344719ef8a95b00c7d80662e5f736bf39e222d19d7d870e679151e50b8fd0401ed6e21eae7724db1e7ce83bf42005312575bfb67aa7acce800d8d706bab8fdd391eeeba0480785aa2c7002bf98339f73a417f2e60122d7f742d64559481927490c2ecfcdeede70bf787e0c3f29a4d5acc13697418ea137c80ac64c80f2d5ddb14d52b6cb1cbf891980e472a78e5039ad99598a8d94e72b6425f450493569b9eab23a623c47ef10d48e0ad0686b2c5baca4ceed330b9598eefa8f1a8d3278e77d1"], 0xc7) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x20000000, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 4m40.292581502s ago: executing program 5 (id=992): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x5, 0x3, 0x9, 0x1000, 0x64}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f0000000040)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x0, 0x0, {}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x1, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) 4m39.901435025s ago: executing program 3 (id=995): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x20048843) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={0x0, 0xfff6, 0x7, 0x5, 0x7, 0x9}, 0x14) 4m39.745193106s ago: executing program 3 (id=996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 4m39.632395348s ago: executing program 3 (id=997): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 4m39.56334614s ago: executing program 1 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002400010122bd7000fcffffff0800000008000300470000001f5d5a58f03b"], 0x1c}}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000001340)={'vxcan0\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, 0x0, 0x0) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x10000000000, {0x0, 0x1, 0x1}}, 0x18) sendmmsg$sock(r2, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000340), 0x4) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001380)=0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000013c0)='cgro\fp\x00()\x98\xda8M!\xf2x\xca\x87\xd0\f\xad\xb5\x17)\xa7\a\xf1<'}, 0xfffffffffffffd0d) socket$inet6(0xa, 0x80803, 0x83) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x8800) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='-7'], 0x9) 4m39.496667406s ago: executing program 3 (id=999): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4040) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="ead22d73d8d1eea890d93be7fc82666c2b19124dd2c0582f9b262da993e051f5f4e21c518ec8b90f2a3ec2ac5269bd33133a481cc602ff8b7413540da7b90cb9e3c499f4fd1efca3d316e86cb0e77e8ed505ed0328c83f2a5a5be08b39dda25aee3d119816a1c557390dd90bc11f458e494d84b734964e76b7ca9e9b7bbf14af639966d094ad98", 0x87, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 4m39.378045893s ago: executing program 3 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 4m39.223293658s ago: executing program 5 (id=1001): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000b40)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000c00)={0x60, 0x2, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x6, &(0x7f0000000b80)=[{0x3, 0xcaa, 0xfffffffffffffffc}, {0x1, 0xe7d, 0x9}, {0x1, 0x9, 0x3}, {0x6, 0x0, 0x988d}, {0xbb30000000000000, 0x0, 0x8}], 0x5, 0x6, 0x20, 0x54, 0x20, 0x41}) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc4d4, 0x100}, 0x8) sendto$inet6(r1, &(0x7f0000000580)="81", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ftruncate(r3, 0xc17a) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000004280)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x1, 0x2, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, 0xffffffffffffffff, 0x1c, 0x0, @val=@netfilter={0xa, 0x1, 0x1}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r3, 0x2000, 0x4) 4m37.988495266s ago: executing program 5 (id=1005): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r1) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7=\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 4m37.681212213s ago: executing program 5 (id=1007): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x674081, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x8040480) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x44, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x4, r6, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x2, r6, 0x1}) fcntl$notify(r4, 0x402, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x6, 0x4, 0x2, r6}) unshare(0x2a020480) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000010140)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0xfffffffa, {0x0, 0x1}, 0x1b300000, 0x0, 0x0, 0x8000, 0x1f, '\x04nodev{cvf\x8ex%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\v\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'gre0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000140)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) 4m37.496721428s ago: executing program 1 (id=1009): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 4m37.331102325s ago: executing program 1 (id=1010): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x4040) sendto$packet(0xffffffffffffffff, &(0x7f0000000300)="ead22d73d8d1eea890d93be7fc82666c2b19124dd2c0582f9b262da993e051f5f4e21c518ec8b90f2a3ec2ac5269bd33133a481cc602ff8b7413540da7b90cb9e3c499f4fd1efca3d316e86cb0e77e8ed505ed0328c83f2a5a5be08b39dda25aee3d119816a1c557390dd90bc11f458e494d84b734964e76b7ca9e9b7bbf14af639966d094ad98", 0x87, 0x2, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 4m37.037152098s ago: executing program 1 (id=1011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303, 0x36}, "1a88ef816c4b42ed", "a5fdeb69298b01e49419567b443803cf578f00", "6d02cd81", "066580bf1e00"}, 0x38) writev(r0, &(0x7f0000001580)=[{&(0x7f0000000080)}], 0x1) 4m36.752478738s ago: executing program 1 (id=1013): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x5, 0x0, 0xa, 0x1004, 0x6, 0xc595, 0x7, 0x8c, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x1c], 0x80a0000, 0x13287}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m36.286474842s ago: executing program 1 (id=1016): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 4m23.731745764s ago: executing program 33 (id=1000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 4m22.179373436s ago: executing program 34 (id=1007): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x674081, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x8040480) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x44, 0x1) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x6, 0x0, 0x4, r6, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x2, r6, 0x1}) fcntl$notify(r4, 0x402, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x6, 0x4, 0x2, r6}) unshare(0x2a020480) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000010140)={0x237, 0x7d, 0x0, {{0x500, 0xf6, 0x0, 0xfffffffa, {0x0, 0x1}, 0x1b300000, 0x0, 0x0, 0x8000, 0x1f, '\x04nodev{cvf\x8ex%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\v\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x17, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x0fX\x05\x02\xb6n\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x05\x00\x00\x00\x00\x00\x00\x00\xc2g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x237) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x2000000000000000, &(0x7f00000005c0)=@base={0x5, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0xffffffffffffffff, 0x20, 0x2}, 0x50) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'gre0\x00', 0x2}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x339) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xfffffffffffffeea) r7 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000140)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) 4m21.132336039s ago: executing program 35 (id=1016): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 28.385106879s ago: executing program 6 (id=3217): socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 27.432381655s ago: executing program 6 (id=3229): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_disconnect(r0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 23.833601764s ago: executing program 6 (id=3249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYBLOB="0f0700000000fcffffff0c000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 22.770099322s ago: executing program 6 (id=3253): openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x7, &(0x7f0000004200)) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r1 = socket$inet(0x2, 0x801, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 22.411847915s ago: executing program 6 (id=3258): socket$packet(0x11, 0x2, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000007140)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40010000, &(0x7f0000007300)={0x0, 0x989680}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) close(0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) 20.736298867s ago: executing program 6 (id=3268): creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000200000011000300686173683a6e65742c6e657400000000050004"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\r\x00\x00\x00\x00A'], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 9.637186061s ago: executing program 7 (id=3308): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, 0x0, 0x0, 0x0) 9.510842982s ago: executing program 7 (id=3310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_setup(0x8, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x8000, 0x0) syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000003c0)={0x2, 0x0, [{0x8b, 0x0, 0x8}, {0x0, 0x0, 0x7}]}) r5 = syz_open_dev$video4linux(&(0x7f0000000180), 0x10, 0x101000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44010) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x50}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x5, "01735021d56c75ef3be5c9fa05eb17db7946612f8fd17306e22a4b493d5f30f8", 0x8, 0x1bb, 0x3ff, 0x7, 0x8001, 0x3, 0x0, 0x0, [0x10001, 0x7, 0x401000a, 0x7]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0x2b, 0x7a, 0x10, 0x54c, 0x2e1, 0xe2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x1, 0x16, 0xfa, 0x1f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000640), 0x183180, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 8.973919853s ago: executing program 0 (id=3313): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000010400000000", @ANYRES16=r1, @ANYRESHEX=r1], 0x20}}, 0x4000040) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmmsg$unix(r2, &(0x7f0000001e40)=[{{0x0, 0x0, &(0x7f0000001e00)}}], 0x1, 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendto$packet(r2, &(0x7f00000000c0)="0e030ecd44f3120006001e0089", 0xd, 0x0, 0x0, 0xffffffffffffffd7) ptrace(0x10, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0x7f, 0x7ff}) ptrace$getregset(0x4205, 0x0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) fchdir(r1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002180)={0x3, &(0x7f00000003c0)=[{0x7c, 0x7, 0x4, 0x2}, {0x8000, 0x40, 0x2, 0x9b04}, {0x0, 0x7, 0x10}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000440)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000024c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30}, 0x6e, 0x0}}], 0x2, 0xe0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000000000000000000000000200082b0cfc4337965941538be020000000000a5f40000000000fdf70000000063000000000000e3b5ce3a8d3f59a656f78a9eff3a0906f928acacefa416b40102402b03b267f49bbeab379b53013ca70aadebbd9a2b2372ac3920931d09c9b5239d57e2c713709e62c98e26d985b6204a9c1b5928ae84041bc27fcb"], 0x40) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, r5}}, 0x30) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000180)={0xf, 0x8, 0xfa00, {r5, 0x2}}, 0x10) 8.593229163s ago: executing program 0 (id=3314): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)='\v', 0x1, 0xd8d94c8c679ec55d, &(0x7f0000000400)={0x11, 0x5, r1, 0x1, 0xff}, 0x14) 7.372612654s ago: executing program 2 (id=3318): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 7.353798067s ago: executing program 0 (id=3319): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="2011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_disconnect(r0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x0, 0x0}], 0x1}) syz_usb_control_io(r0, 0x0, 0x0) 7.011757048s ago: executing program 2 (id=3322): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b00010000000109040000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 6.297118855s ago: executing program 8 (id=3325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 5.191883448s ago: executing program 8 (id=3326): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x500, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 5.009598138s ago: executing program 36 (id=3268): creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000030000000900020073797a31000000000500010007000000050005000200000011000300686173683a6e65742c6e657400000000050004"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='/\r\x00\x00\x00\x00A'], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000090601040000000000000000050000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1e00010c00168008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4.993405515s ago: executing program 7 (id=3328): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x18, 0x14, 0x609, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x8040) 4.849239832s ago: executing program 0 (id=3329): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)='\v', 0x1, 0xd8d94c8c679ec55d, &(0x7f0000000400)={0x11, 0x5, r1, 0x1, 0xff}, 0x14) 3.492206778s ago: executing program 7 (id=3330): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x6) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20001000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fb, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.414247924s ago: executing program 2 (id=3331): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x40000001c5402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1c1, 0x40, 0x0, 0x0, 0x27}) 3.333121552s ago: executing program 0 (id=3332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000028c0)={0xffffffff, 0x1}) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 3.008688846s ago: executing program 8 (id=3333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000002dc0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.84906742s ago: executing program 0 (id=3334): syz_usb_connect(0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.711836178s ago: executing program 2 (id=3335): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x38}}, 0x10) 1.654369676s ago: executing program 7 (id=3336): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}, {&(0x7f0000000200)="5c4a13e1cffc296006ebd8ef36278d2a796da21881fa32e4f11ff20663f7c6886bcc446cdd169d0ac3d9abfa2d65f79f403287ec1fe733415895774e6febf5ca3b4c", 0x42}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 1.554859956s ago: executing program 7 (id=3337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) io_setup(0x8, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480)) syz_open_dev$dri(0x0, 0x1ff, 0x0) r3 = getpid() openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, 0x0, 0x0, 0x8000, 0x0) syz_pidfd_open(r3, 0x0) setns(r4, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f00000003c0)={0x2, 0x0, [{0x8b, 0x0, 0x8}, {0x0, 0x0, 0x7}]}) r5 = syz_open_dev$video4linux(&(0x7f0000000180), 0x10, 0x101000) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x44010) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x50}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x5, "01735021d56c75ef3be5c9fa05eb17db7946612f8fd17306e22a4b493d5f30f8", 0x8, 0x1bb, 0x3ff, 0x7, 0x8001, 0x3, 0x0, 0x0, [0x10001, 0x7, 0x401000a, 0x7]}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0x2b, 0x7a, 0x10, 0x54c, 0x2e1, 0xe2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x1, 0x16, 0xfa, 0x1f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}]}}]}}]}}, 0x0) openat$iommufd(0xffffff9c, &(0x7f0000000640), 0x183180, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.487606068s ago: executing program 2 (id=3338): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x24c, 0x128, 0x11, 0x148, 0x128, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@unspec=@devgroup={{0x34}, {0xc, 0x8, 0x4b, 0x4, 0x3}}, @common=@ttl={{0x24}, {0x1, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x4, 0x2, 0x3, 0x2], 0x1, 0x4}, {0xfffd, [0x4, 0x0, 0x0, 0x7, 0x1, 0x2], 0x4, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00', {}, {}, 0x6}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2a8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) io_setup(0x4, &(0x7f00000014c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3fb, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.367170679s ago: executing program 8 (id=3339): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES64], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 246.115364ms ago: executing program 2 (id=3340): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) 36.920151ms ago: executing program 8 (id=3341): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) sendto$packet(r0, &(0x7f0000000180)='\v', 0x1, 0xd8d94c8c679ec55d, &(0x7f0000000400)={0x11, 0x5, r1, 0x1, 0xff}, 0x14) 0s ago: executing program 8 (id=3342): sched_setscheduler(0x0, 0x1, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xc, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) kernel console output (not intermixed with test programs): ] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.299741][ T9035] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.356324][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.356527][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.471394][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.471541][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.566971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.567116][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.127711][ T1976] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 431.353304][ T1976] usb 3-1: Using ep0 maxpacket: 8 [ 431.359751][ T1976] usb 3-1: config 1 has an invalid descriptor of length 207, skipping remainder of the config [ 431.359808][ T1976] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 51264, setting to 1024 [ 431.359833][ T1976] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 431.359855][ T1976] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 431.376584][ T1976] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 431.376614][ T1976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.376631][ T1976] usb 3-1: Product: syz [ 431.376643][ T1976] usb 3-1: Manufacturer: syz [ 431.376656][ T1976] usb 3-1: SerialNumber: syz [ 431.414363][T10130] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.417749][ T1976] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 431.419608][ T1976] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 431.419689][ T1976] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 433.448845][ T1213] hsr_slave_0: left promiscuous mode [ 433.485735][ T1213] hsr_slave_1: left promiscuous mode [ 433.486722][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.486740][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.537739][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.537770][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.743959][ T1213] hsr_slave_0: left promiscuous mode [ 433.783336][ T1213] hsr_slave_1: left promiscuous mode [ 433.784315][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.784338][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.834357][ T1213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.834384][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.880937][ T10] usb 3-1: USB disconnect, device number 18 [ 434.058468][ T1213] veth1_macvtap: left promiscuous mode [ 434.058580][ T1213] veth0_macvtap: left promiscuous mode [ 434.058880][ T1213] veth1_vlan: left promiscuous mode [ 434.059064][ T1213] veth0_vlan: left promiscuous mode [ 434.273625][ T1213] veth1_macvtap: left promiscuous mode [ 434.273735][ T1213] veth0_macvtap: left promiscuous mode [ 434.273999][ T1213] veth1_vlan: left promiscuous mode [ 434.277308][ T1213] veth0_vlan: left promiscuous mode [ 437.366571][ T1976] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 437.514636][ T1976] usb 3-1: Using ep0 maxpacket: 16 [ 437.530222][ T1976] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 437.530249][ T1976] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 437.530266][ T1976] usb 3-1: Product: syz [ 437.530279][ T1976] usb 3-1: Manufacturer: syz [ 437.530290][ T1976] usb 3-1: SerialNumber: syz [ 437.570155][ T1976] usb 3-1: config 0 descriptor?? [ 437.836844][ T9] usb 3-1: USB disconnect, device number 19 [ 438.743290][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 438.913977][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 438.953614][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 438.955814][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 438.955839][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.955856][ T10] usb 3-1: config 0 has no interface number 0 [ 438.955903][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.955939][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 438.955960][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.971451][ T10] usb 3-1: config 0 descriptor?? [ 438.997623][ T10] ldusb 3-1:0.55: Interrupt in endpoint not found [ 439.197483][ T10] usb 3-1: USB disconnect, device number 20 [ 439.314146][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 440.101242][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.101314][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.858772][T10430] loop6: detected capacity change from 0 to 7 [ 440.862854][T10430] Dev loop6: unable to read RDB block 7 [ 440.862881][T10430] loop6: AHDI p3 [ 440.862908][T10430] loop6: partition table partially beyond EOD, truncated [ 443.513307][ T9] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 443.942650][ T9] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 443.942668][ T9] usb 3-1: config 0 has no interface number 0 [ 443.942703][ T9] usb 3-1: config 0 interface 113 has no altsetting 0 [ 444.010807][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 444.010837][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.010853][ T9] usb 3-1: Product: syz [ 444.010866][ T9] usb 3-1: Manufacturer: syz [ 444.010877][ T9] usb 3-1: SerialNumber: syz [ 444.017552][ T9] usb 3-1: config 0 descriptor?? [ 444.096757][ T9] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 446.093357][ T5808] usb 3-1: USB disconnect, device number 21 [ 446.423308][ T5808] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 446.473991][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 446.576788][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 446.579023][ T5808] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 446.579066][ T5808] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 446.579107][ T5808] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 446.579131][ T5808] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 446.579155][ T5808] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 446.579179][ T5808] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.633418][ T5808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 446.633445][ T5808] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 446.633463][ T5808] usb 3-1: Product: syz [ 446.633476][ T5808] usb 3-1: Manufacturer: syz [ 446.633488][ T5808] usb 3-1: SerialNumber: syz [ 446.694832][ T5808] usb 3-1: config 0 descriptor?? [ 446.703759][T10601] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.721493][ T5808] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 446.737939][ T5808] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 446.934096][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 447.126788][T10637] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 447.127463][ T5808] usb 3-1: USB disconnect, device number 22 [ 447.127471][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 447.131712][ T5808] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 449.305152][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.310259][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.312158][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.322265][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.328629][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.106608][ T9032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.364672][ T5801] Bluetooth: hci2: command tx timeout [ 451.582668][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.606361][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.607601][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.608855][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.610286][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.705500][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.708185][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.709362][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.710460][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.711785][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 453.473291][ T5801] Bluetooth: hci2: command tx timeout [ 453.642675][T10728] chnl_net:caif_netlink_parms(): no params data found [ 453.692398][ T5801] Bluetooth: hci1: command tx timeout [ 454.667412][T10901] loop6: detected capacity change from 0 to 7 [ 454.670823][T10901] Dev loop6: unable to read RDB block 7 [ 454.670852][T10901] loop6: AHDI p1 p3 [ 454.670880][T10901] loop6: partition table partially beyond EOD, truncated [ 454.803938][ T5801] Bluetooth: hci4: command tx timeout [ 454.879435][T10728] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.879636][T10728] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.879880][T10728] bridge_slave_0: entered allmulticast mode [ 454.882600][T10728] bridge_slave_0: entered promiscuous mode [ 454.939989][T10728] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.940136][T10728] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.940349][T10728] bridge_slave_1: entered allmulticast mode [ 454.950052][T10728] bridge_slave_1: entered promiscuous mode [ 455.247974][T10728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.252565][T10791] chnl_net:caif_netlink_parms(): no params data found [ 455.253414][ T5983] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 455.299879][T10728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.405426][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.405456][ T5983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.405491][ T5983] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 455.405510][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.412261][ T5983] usb 3-1: config 0 descriptor?? [ 455.523266][ T5801] Bluetooth: hci2: command tx timeout [ 455.763331][ T5801] Bluetooth: hci1: command tx timeout [ 455.791472][ T5983] usbhid 3-1:0.0: can't add hid device: -71 [ 455.791592][ T5983] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 455.807499][ T5983] usb 3-1: USB disconnect, device number 23 [ 455.992950][T10728] team0: Port device team_slave_0 added [ 456.189886][T10728] team0: Port device team_slave_1 added [ 456.212410][T10813] chnl_net:caif_netlink_parms(): no params data found [ 456.859408][T10728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.859424][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.859448][T10728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.893310][ T5801] Bluetooth: hci4: command tx timeout [ 457.443601][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 457.466211][T10728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.466227][T10728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 457.466251][T10728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.469396][T10791] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.469563][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.469771][T10791] bridge_slave_0: entered allmulticast mode [ 457.472815][T10791] bridge_slave_0: entered promiscuous mode [ 457.554825][T10791] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.554952][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.555155][T10791] bridge_slave_1: entered allmulticast mode [ 457.557874][T10791] bridge_slave_1: entered promiscuous mode [ 457.603362][ T5801] Bluetooth: hci2: command tx timeout [ 457.633259][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 457.635092][ T9] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 457.635131][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 457.635168][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 457.635182][ T9] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 457.635195][ T9] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 457.635208][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 457.637367][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 457.637390][ T9] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 457.637399][ T9] usb 3-1: Product: syz [ 457.637406][ T9] usb 3-1: Manufacturer: syz [ 457.637413][ T9] usb 3-1: SerialNumber: syz [ 457.645360][ T9] usb 3-1: config 0 descriptor?? [ 457.650561][T11018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 457.759628][ T9] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 457.795386][ T9] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 457.843931][ T5801] Bluetooth: hci1: command tx timeout [ 458.048079][T11051] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 458.053045][ T5982] usb 3-1: USB disconnect, device number 24 [ 458.053175][ C1] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 458.071276][ T5982] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 458.440040][T10791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.862748][T10791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.918385][T10813] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.918589][T10813] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.918786][T10813] bridge_slave_0: entered allmulticast mode [ 458.921557][T10813] bridge_slave_0: entered promiscuous mode [ 458.964633][ T5801] Bluetooth: hci4: command tx timeout [ 458.979887][T10728] hsr_slave_0: entered promiscuous mode [ 458.981316][T10728] hsr_slave_1: entered promiscuous mode [ 458.982293][T10728] debugfs: 'hsr0' already exists in 'hsr' [ 458.982321][T10728] Cannot create hsr debugfs directory [ 459.105297][T10813] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.105430][T10813] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.105633][T10813] bridge_slave_1: entered allmulticast mode [ 459.108429][T10813] bridge_slave_1: entered promiscuous mode [ 459.317635][T10791] team0: Port device team_slave_0 added [ 459.333469][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 459.503283][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 459.505223][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 459.505247][ T10] usb 3-1: config 0 has no interface number 0 [ 459.505296][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 459.505315][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 459.505327][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 459.505340][ T10] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 459.505350][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 459.505374][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 459.505385][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.509111][ T10] usb 3-1: config 0 descriptor?? [ 459.529558][T10791] team0: Port device team_slave_1 added [ 459.646351][ T10] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 459.701068][T10813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.726022][T11112] ldusb 3-1:0.55: Couldn't submit interrupt_in_urb -90 [ 459.735612][ T5808] usb 3-1: USB disconnect, device number 25 [ 459.741117][ T5808] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 459.923372][ T5801] Bluetooth: hci1: command tx timeout [ 460.000852][T10813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.186941][T10791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.186958][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.186983][T10791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.388183][T10791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.388199][T10791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.388224][T10791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.608724][T10813] team0: Port device team_slave_0 added [ 460.784134][T10813] team0: Port device team_slave_1 added [ 461.053399][ T5801] Bluetooth: hci4: command tx timeout [ 461.406009][T10813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.406025][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.406049][T10813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.463596][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 461.544996][T10813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.545012][T10813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.545037][T10813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.551055][T10791] hsr_slave_0: entered promiscuous mode [ 461.551848][T10791] hsr_slave_1: entered promiscuous mode [ 461.552399][T10791] debugfs: 'hsr0' already exists in 'hsr' [ 461.552417][T10791] Cannot create hsr debugfs directory [ 461.623487][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 461.625861][ T10] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 461.625883][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.625900][ T10] usb 3-1: config 0 has no interface number 0 [ 461.625947][ T10] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.625966][ T10] usb 3-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.626005][ T10] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 461.626025][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.638271][ T10] usb 3-1: config 0 descriptor?? [ 461.666533][ T10] ldusb 3-1:0.55: Interrupt in endpoint not found [ 461.890196][ T10] usb 3-1: USB disconnect, device number 26 [ 463.017201][T10813] hsr_slave_0: entered promiscuous mode [ 463.018625][T10813] hsr_slave_1: entered promiscuous mode [ 463.019957][T10813] debugfs: 'hsr0' already exists in 'hsr' [ 463.019982][T10813] Cannot create hsr debugfs directory [ 463.103403][ T5808] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 463.253475][ T5808] usb 3-1: Using ep0 maxpacket: 8 [ 463.257474][ T5808] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 463.257500][ T5808] usb 3-1: config 0 has no interface number 0 [ 463.257543][ T5808] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 463.257564][ T5808] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 463.257586][ T5808] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 463.257609][ T5808] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 463.257649][ T5808] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 463.257670][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.347746][ T5808] usb 3-1: config 0 descriptor?? [ 463.371264][ T5808] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 463.625620][ T10] usb 3-1: USB disconnect, device number 27 [ 463.637526][ T10] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 465.253295][ T1976] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 465.407539][ T1976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.407572][ T1976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.434886][ T1976] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 465.434914][ T1976] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 465.434932][ T1976] usb 3-1: Manufacturer: syz [ 465.441265][ T1976] usb 3-1: config 0 descriptor?? [ 465.590510][ T1213] bridge_slave_1: left allmulticast mode [ 465.590540][ T1213] bridge_slave_1: left promiscuous mode [ 465.590803][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.662183][ T1213] bridge_slave_0: left allmulticast mode [ 465.662212][ T1213] bridge_slave_0: left promiscuous mode [ 465.678700][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.769842][ T1213] bridge_slave_1: left allmulticast mode [ 465.769873][ T1213] bridge_slave_1: left promiscuous mode [ 465.770227][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.865560][ T1213] bridge_slave_0: left allmulticast mode [ 465.865589][ T1213] bridge_slave_0: left promiscuous mode [ 465.865839][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.867439][ T1976] cougar 0003:060B:700A.000A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 465.948816][ T1213] bridge_slave_1: left allmulticast mode [ 465.948846][ T1213] bridge_slave_1: left promiscuous mode [ 465.949077][ T1213] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.065051][ T1213] bridge_slave_0: left allmulticast mode [ 466.065081][ T1213] bridge_slave_0: left promiscuous mode [ 466.065332][ T1213] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.900682][ T5885] usb 3-1: USB disconnect, device number 28 [ 468.374824][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.464025][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.507309][ T1213] bond0 (unregistering): Released all slaves [ 472.063839][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.148939][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.223422][ T1213] bond0 (unregistering): Released all slaves [ 472.570917][T11634] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 474.516270][ T9] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 474.711935][ T9] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 474.711952][ T9] usb 3-1: config 0 has no interface number 0 [ 474.711982][ T9] usb 3-1: config 0 interface 113 has no altsetting 0 [ 474.743051][ T1213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.775902][ T9] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 474.775930][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.775949][ T9] usb 3-1: Product: syz [ 474.775962][ T9] usb 3-1: Manufacturer: syz [ 474.775974][ T9] usb 3-1: SerialNumber: syz [ 474.788094][ T9] usb 3-1: config 0 descriptor?? [ 474.837041][ T9] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 474.872288][ T1213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.016144][ T1213] bond0 (unregistering): Released all slaves [ 475.795886][ T1213] hsr_slave_0: left promiscuous mode [ 475.843368][ T1213] hsr_slave_1: left promiscuous mode [ 475.844042][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.891723][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.143424][ T1213] hsr_slave_0: left promiscuous mode [ 476.184267][ T1213] hsr_slave_1: left promiscuous mode [ 476.185257][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.235697][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.433908][ T1213] hsr_slave_0: left promiscuous mode [ 476.473418][ T1213] hsr_slave_1: left promiscuous mode [ 476.474022][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.516469][ T1213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.910378][ T9] usb 3-1: USB disconnect, device number 29 [ 478.877885][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 478.983351][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 479.133279][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 479.140715][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 479.140743][ T9] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 479.140764][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 94, changing to 10 [ 479.140784][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 57411, setting to 1024 [ 479.140807][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.227642][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 479.227671][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.227690][ T9] usb 3-1: Product: syz [ 479.227701][ T9] usb 3-1: Manufacturer: syz [ 479.227714][ T9] usb 3-1: SerialNumber: syz [ 479.296581][T11802] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 479.314529][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 479.316688][ T9] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 479.316772][ T9] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 479.322057][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 481.853460][ T1976] usb 3-1: USB disconnect, device number 30 [ 482.194779][ T1976] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 482.348758][ T1976] usb 3-1: Using ep0 maxpacket: 8 [ 482.360211][ T1976] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 482.360235][ T1976] usb 3-1: config 0 has no interface number 0 [ 482.360278][ T1976] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 482.360291][ T1976] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 482.360303][ T1976] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 482.360316][ T1976] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 482.360339][ T1976] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 482.360350][ T1976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.365117][ T1976] usb 3-1: config 0 descriptor?? [ 482.385148][ T1976] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 482.669228][ T1976] usb 3-1: USB disconnect, device number 31 [ 482.674867][ T1976] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 483.553327][ T5881] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 483.746556][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.746584][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.746606][ T5881] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 483.746617][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.791513][ T5881] usb 3-1: config 0 descriptor?? [ 484.076419][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 484.115471][ T5881] usbhid 3-1:0.0: can't add hid device: -71 [ 484.115592][ T5881] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 484.146924][ T5881] usb 3-1: USB disconnect, device number 32 [ 484.384128][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 485.333461][ T5885] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 485.506959][ T5885] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 485.506986][ T5885] usb 3-1: config 0 has no interface number 0 [ 485.507035][ T5885] usb 3-1: config 0 interface 113 has no altsetting 0 [ 485.510171][ T5885] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 485.510198][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.510215][ T5885] usb 3-1: Product: syz [ 485.510226][ T5885] usb 3-1: Manufacturer: syz [ 485.510237][ T5885] usb 3-1: SerialNumber: syz [ 485.514233][ T5885] usb 3-1: config 0 descriptor?? [ 485.580893][ T5885] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 487.917071][ T1976] usb 3-1: USB disconnect, device number 33 [ 489.067235][ T1213] team0 (unregistering): Port device team_slave_1 removed [ 489.354425][ T1213] team0 (unregistering): Port device team_slave_0 removed [ 492.817513][T10728] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 492.855139][T10728] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 493.090936][T10728] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 493.130340][T10728] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 493.791948][T10728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.865911][T10728] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.896795][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.897052][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.921309][ T5977] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.921633][ T5977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.390420][T10791] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 494.519973][T10791] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 494.744711][T10791] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 494.870540][T10791] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 495.053476][T10813] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 495.087576][T10813] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 495.131845][T10813] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 495.306525][T10813] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 495.679401][T10728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 496.069046][T10791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.122546][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.158007][T10791] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.206765][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.206992][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.281222][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.281514][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.311664][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.347754][ T7210] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.349964][ T7210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.391840][ T7210] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.392691][ T7210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 496.419907][T12432] macvtap0: entered promiscuous mode [ 496.421426][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2633'. [ 496.709352][T10728] veth0_vlan: entered promiscuous mode [ 496.825778][T10728] veth1_vlan: entered promiscuous mode [ 496.975224][T10728] veth0_macvtap: entered promiscuous mode [ 496.980959][T10728] veth1_macvtap: entered promiscuous mode [ 497.035737][T10728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.057745][T10728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.101393][ T1213] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.112835][ T1213] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.119096][ T1213] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.119144][ T1213] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.193351][ T5885] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 497.345163][ T5885] usb 3-1: Using ep0 maxpacket: 16 [ 497.350549][ T5885] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 497.350577][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 497.350594][ T5885] usb 3-1: Product: syz [ 497.350607][ T5885] usb 3-1: Manufacturer: syz [ 497.350620][ T5885] usb 3-1: SerialNumber: syz [ 497.398280][ T5885] usb 3-1: config 0 descriptor?? [ 497.643535][ T5811] usb 3-1: USB disconnect, device number 34 [ 497.657620][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.657641][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 497.706501][T10791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.739957][T10813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.979420][ T5977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.979441][ T5977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.375530][T12498] loop4: detected capacity change from 0 to 7 [ 498.391414][T12498] Dev loop4: unable to read RDB block 7 [ 498.391443][T12498] loop4: AHDI p1 p2 [ 498.391468][T12498] loop4: partition table partially beyond EOD, truncated [ 498.391718][T12498] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 498.718852][T12288] udevd[12288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 498.910036][T10813] veth0_vlan: entered promiscuous mode [ 499.048865][T10813] veth1_vlan: entered promiscuous mode [ 499.654529][T10791] veth0_vlan: entered promiscuous mode [ 499.724760][T10791] veth1_vlan: entered promiscuous mode [ 499.796685][T10813] veth0_macvtap: entered promiscuous mode [ 499.846672][T10813] veth1_macvtap: entered promiscuous mode [ 499.932307][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2661'. [ 499.983314][ T5885] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 500.025679][T10813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.061090][T10791] veth0_macvtap: entered promiscuous mode [ 500.074365][T10813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.096081][T10791] veth1_macvtap: entered promiscuous mode [ 500.125203][ T43] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.133434][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 500.148584][ T5885] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 500.148633][ T5885] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 500.148671][ T5885] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 500.148695][ T5885] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 500.148719][ T5885] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 500.148743][ T5885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 500.180439][ T43] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.188563][ T43] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.202703][ T43] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.244804][ T5885] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 500.244831][ T5885] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 500.244848][ T5885] usb 3-1: Product: syz [ 500.244860][ T5885] usb 3-1: Manufacturer: syz [ 500.244872][ T5885] usb 3-1: SerialNumber: syz [ 500.295441][ T5885] usb 3-1: config 0 descriptor?? [ 500.296441][T12512] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 500.306410][ T5885] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 500.343793][ T5885] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 500.387922][T10791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.487276][T10791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.764377][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.773832][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.775096][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.776229][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.796892][ T1976] usb 3-1: USB disconnect, device number 35 [ 500.796990][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 500.801887][T12531] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 500.822576][ T1976] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 501.064641][ T1213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.064662][ T1213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.243313][ T5808] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 501.395400][ T5808] usb 7-1: Using ep0 maxpacket: 8 [ 501.407641][ T5808] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 501.407670][ T5808] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 501.407692][ T5808] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 94, changing to 10 [ 501.407715][ T5808] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 57411, setting to 1024 [ 501.407737][ T5808] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.426938][ T5808] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 501.426967][ T5808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.426984][ T5808] usb 7-1: Product: syz [ 501.427001][ T5808] usb 7-1: Manufacturer: syz [ 501.427013][ T5808] usb 7-1: SerialNumber: syz [ 501.442508][T12539] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 501.462321][ T5808] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 501.465033][ T5808] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 501.465114][ T5808] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 501.527701][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.527799][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.646980][ T1213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.646999][ T1213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.718003][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.718021][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.845789][ T5975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.845810][ T5975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.565431][T12529] usb 7-1: USB disconnect, device number 2 [ 502.598242][T12591] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2691'. [ 503.895636][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 503.916682][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 503.920084][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 503.934360][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 503.942374][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.186528][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 504.346286][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 504.348499][ T9] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 504.348541][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 504.348584][ T9] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 504.348608][ T9] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 504.348632][ T9] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 504.348656][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 504.351020][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 504.351046][ T9] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 504.351072][ T9] usb 9-1: Product: syz [ 504.351084][ T9] usb 9-1: Manufacturer: syz [ 504.351097][ T9] usb 9-1: SerialNumber: syz [ 504.467457][ T9] usb 9-1: config 0 descriptor?? [ 504.472323][T12610] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 504.496304][ T9] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 504.521571][ T9] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 504.866074][ T9] usb 9-1: USB disconnect, device number 2 [ 504.903370][ T9] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 505.288157][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2705'. [ 505.601376][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.611555][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.002016][ T5977] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.003815][ T61] Bluetooth: hci3: command tx timeout [ 506.456787][ T5977] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.697436][ T5977] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.037614][ T5977] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.379365][T12641] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 507.379487][T12641] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 507.558607][T12641] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 507.558697][T12641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 507.692803][T12641] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 507.755676][T12641] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 507.755845][T12641] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 507.839392][T12641] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 507.843573][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 507.903683][T12641] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 507.921564][T12641] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 508.017693][T12641] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 508.115711][T12641] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 508.115885][T12641] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 508.215915][T12641] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 508.683306][T12529] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 508.847228][T12529] usb 9-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 508.847259][T12529] usb 9-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.847282][T12529] usb 9-1: config 1 interface 0 has no altsetting 0 [ 508.850941][T12529] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 508.850967][T12529] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.850984][T12529] usb 9-1: Product: ࠁ [ 508.850996][T12529] usb 9-1: Manufacturer: 䰌岸疃鶡慛れੈṸ锻ۀ囄ඣ돓聯Ꮌᢽᥭ㩊鴓꩘鿼吕थ꡷皵吒Ἀ阍枙᭦諺ʦ髡펍 [ 508.851014][T12529] usb 9-1: SerialNumber: 網㆙滗㱈쨑獛㱙䀏ꡛ잱獈뺍鷠꛲꡴쫽ᐟ궠œ잇愻쮈颎᪏鱰얼怗〠矸ꆒ굿⹄壜엕䕾䳉겼ᩊ蘢蛂璨䀛筜敠﹔嘼쭩ꯘ囷鹷዗ [ 508.942954][T12529] usb 9-1: rejected 1 configuration due to insufficient available bus power [ 508.942980][T12529] usb 9-1: no configuration chosen from 1 choice [ 509.013286][ T1976] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 509.163345][ T1976] usb 7-1: Using ep0 maxpacket: 16 [ 509.191920][ T1976] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 509.191945][ T1976] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 509.191956][ T1976] usb 7-1: Product: syz [ 509.191963][ T1976] usb 7-1: Manufacturer: syz [ 509.191969][ T1976] usb 7-1: SerialNumber: syz [ 509.197331][ T1976] usb 7-1: config 0 descriptor?? [ 509.455614][ T9] usb 7-1: USB disconnect, device number 3 [ 509.623521][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 509.777094][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 509.913513][T12529] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 509.932150][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 509.932205][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 510.115258][T12529] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 510.115285][T12529] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 510.115322][T12529] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 510.115353][T12529] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 510.115366][T12529] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 510.117046][T12529] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 510.117062][T12529] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 510.117072][T12529] usb 3-1: Product: syz [ 510.117078][T12529] usb 3-1: Manufacturer: syz [ 510.127869][T12529] cdc_wdm 3-1:1.0: skipping garbage [ 510.127887][T12529] cdc_wdm 3-1:1.0: skipping garbage [ 510.150557][T12529] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 510.150593][T12529] cdc_wdm 3-1:1.0: Unknown control protocol [ 510.163481][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 510.258086][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2716'. [ 510.272792][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.382042][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.398002][ T1976] usb 3-1: USB disconnect, device number 36 [ 510.422061][ T5977] bond0 (unregistering): Released all slaves [ 510.481446][T12677] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.488901][T12677] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.053405][ T9] usb 9-1: USB disconnect, device number 3 [ 511.253282][ T1976] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 511.403331][ T1976] usb 3-1: Using ep0 maxpacket: 8 [ 511.405634][ T1976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.405681][ T1976] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 511.405703][ T1976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.475442][T12609] chnl_net:caif_netlink_parms(): no params data found [ 511.501115][ T1976] usb 3-1: config 0 descriptor?? [ 511.683513][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 511.723073][ T1976] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 511.843258][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 512.005050][ T1976] usb 3-1: USB disconnect, device number 37 [ 512.013687][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 512.245236][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 513.682664][T12709] mkiss: ax0: crc mode is auto. [ 513.765981][ T61] Bluetooth: hci2: command 0x0c1a tx timeout [ 513.923442][ T61] Bluetooth: hci1: command 0x0c1a tx timeout [ 514.083326][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 514.301148][T12730] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2732'. [ 514.324755][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 514.413467][ T5977] hsr_slave_0: left promiscuous mode [ 514.460251][ T5977] hsr_slave_1: left promiscuous mode [ 514.461232][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.461258][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.505426][ T5977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.505543][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.721627][ T5977] veth1_macvtap: left promiscuous mode [ 514.721744][ T5977] veth0_macvtap: left promiscuous mode [ 514.722028][ T5977] veth1_vlan: left promiscuous mode [ 514.722208][ T5977] veth0_vlan: left promiscuous mode [ 515.938636][T12744] loop4: detected capacity change from 0 to 7 [ 516.041862][T12744] Dev loop4: unable to read RDB block 7 [ 516.041900][T12744] loop4: AHDI p1 p2 [ 516.041928][T12744] loop4: partition table partially beyond EOD, truncated [ 516.042223][T12744] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 516.249699][T12288] udevd[12288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 516.266284][T12755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2742'. [ 516.423268][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 518.483458][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 518.591637][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2747'. [ 519.064763][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 519.344187][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 519.750908][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.850232][ C0] vkms_vblank_simulate: vblank timer overrun [ 519.953459][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.117287][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.563452][ T61] Bluetooth: hci3: command 0x041b tx timeout [ 520.798279][ C0] vkms_vblank_simulate: vblank timer overrun [ 520.998247][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.391215][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.450322][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.516682][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.765412][ C0] vkms_vblank_simulate: vblank timer overrun [ 521.815047][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.491428][T12609] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.498220][T12609] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.498548][T12609] bridge_slave_0: entered allmulticast mode [ 522.514351][T12609] bridge_slave_0: entered promiscuous mode [ 522.549535][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.551975][T12609] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.559000][T12609] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.559231][T12609] bridge_slave_1: entered allmulticast mode [ 522.561795][T12609] bridge_slave_1: entered promiscuous mode [ 522.787454][ C0] vkms_vblank_simulate: vblank timer overrun [ 522.960755][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.601895][T12809] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2761'. [ 523.806943][T12814] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2763'. [ 523.910748][T12812] netlink: 320 bytes leftover after parsing attributes in process `syz.6.2760'. [ 524.054903][T12609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.085479][T12609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.684872][T12823] netlink: 'syz.2.2765': attribute type 4 has an invalid length. [ 524.687716][T12609] team0: Port device team_slave_0 added [ 524.734340][T12825] netlink: 'syz.2.2765': attribute type 4 has an invalid length. [ 524.838979][T12609] team0: Port device team_slave_1 added [ 524.989111][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.048992][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.364167][T12609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.364179][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.364192][T12609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.456284][T12609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.456300][T12609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.456325][T12609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.071100][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.604558][T12609] hsr_slave_0: entered promiscuous mode [ 527.611296][T12609] hsr_slave_1: entered promiscuous mode [ 527.612407][T12609] debugfs: 'hsr0' already exists in 'hsr' [ 527.612432][T12609] Cannot create hsr debugfs directory [ 528.793293][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 528.839840][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.943247][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 528.946892][ T9] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 528.946917][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.946935][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 528.950005][ T9] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 528.950031][ T9] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 528.950049][ T9] usb 8-1: Product: syz [ 528.950062][ T9] usb 8-1: Manufacturer: syz [ 528.950074][ T9] usb 8-1: SerialNumber: syz [ 529.020432][ T9] usb 8-1: config 0 descriptor?? [ 529.378252][ T5811] usb 8-1: USB disconnect, device number 2 [ 530.291350][T12890] mmap: syz.6.2785 (12890) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 530.694069][T12609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 530.758189][T12609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 530.813748][T12609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.898616][T12609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 531.260612][T12902] loop4: detected capacity change from 0 to 7 [ 531.307986][T12902] Dev loop4: unable to read RDB block 7 [ 531.308009][T12902] loop4: AHDI p1 p2 [ 531.308027][T12902] loop4: partition table partially beyond EOD, truncated [ 531.308393][T12902] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 531.619357][T12609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.757195][T12609] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.849732][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.866873][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.878114][T12288] udevd[12288]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 532.087695][ T1213] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.090604][ T1213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.403171][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.141715][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.593582][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 533.905624][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 534.368601][ T9] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 534.368620][ T9] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 534.368632][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 94, changing to 10 [ 534.368645][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 57411, setting to 1024 [ 534.368657][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.368803][ T5881] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 534.524507][T12945] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 534.552088][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 534.552116][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.552134][ T9] usb 9-1: Product: syz [ 534.552147][ T9] usb 9-1: Manufacturer: syz [ 534.552159][ T9] usb 9-1: SerialNumber: syz [ 534.599757][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.599790][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.602918][ T5881] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 534.602998][ T5881] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 534.603017][ T5881] usb 8-1: Manufacturer: syz [ 534.643072][T12609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.691084][ T5881] usb 8-1: config 0 descriptor?? [ 534.751275][T12609] veth0_vlan: entered promiscuous mode [ 534.760994][T12609] veth1_vlan: entered promiscuous mode [ 534.800228][T12609] veth0_macvtap: entered promiscuous mode [ 534.836832][T12609] veth1_macvtap: entered promiscuous mode [ 534.861359][T12925] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 534.903039][T12609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.935446][ T9] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 534.951686][ T9] usbtest 9-1:1.0: couldn't get endpoints, -22 [ 534.952001][ T9] usbtest 9-1:1.0: probe with driver usbtest failed with error -22 [ 534.974883][T12609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.181170][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.181221][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.181254][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.181287][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.268656][ T5881] cougar 0003:060B:700A.000B: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 535.693456][ T7213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.693471][ T7213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.814964][ T4924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.814985][ T4924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.926137][ T5881] usb 9-1: USB disconnect, device number 4 [ 536.390495][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.538290][T12955] tty tty25: ldisc open failed (-12), clearing slot 24 [ 536.962152][ T5811] usb 8-1: USB disconnect, device number 3 [ 538.007258][T12984] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2812'. [ 538.389064][T12958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.416393][T12958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.403354][ T5811] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 539.563288][ T5811] usb 8-1: Using ep0 maxpacket: 32 [ 539.568580][ T5811] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 539.568607][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.608562][ T5811] usb 8-1: config 0 descriptor?? [ 539.713667][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.826151][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.827043][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.921303][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.921629][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.921838][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.922064][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.922256][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.922462][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2811'. [ 539.923808][ T5811] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 540.100224][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 540.120356][ T5811] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 540.120415][ T5811] usb 8-1: media controller created [ 540.282093][ T65] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.290353][ T4924] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.297204][ T4924] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.297252][ T4924] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.303999][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 540.727322][ T5811] DVB: Unable to find symbol dib7000p_attach() [ 540.727338][ T5811] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 540.893276][ T5811] rc_core: IR keymap rc-dib0700-rc5 not found [ 540.893298][ T5811] Registered IR keymap rc-empty [ 540.893471][ T5811] dvb-usb: could not initialize remote control. [ 540.893476][ T5811] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 540.899137][ T5811] usb 8-1: USB disconnect, device number 4 [ 541.232900][ T5811] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 541.490832][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.806313][ C1] vkms_vblank_simulate: vblank timer overrun [ 542.665127][T13038] netlink: 'syz.0.2834': attribute type 1 has an invalid length. [ 542.665148][T13038] netlink: 'syz.0.2834': attribute type 6 has an invalid length. [ 543.103336][ T5808] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 543.266816][ T5808] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 543.266834][ T5808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.266844][ T5808] usb 9-1: Product: syz [ 543.266851][ T5808] usb 9-1: Manufacturer: syz [ 543.266858][ T5808] usb 9-1: SerialNumber: syz [ 543.393257][ T5808] usb 9-1: config 0 descriptor?? [ 544.142014][T13044] syz.2.2831 (13044): drop_caches: 2 [ 544.151632][T13044] syz.2.2831 (13044): drop_caches: 2 [ 545.715561][T13095] __nla_validate_parse: 65 callbacks suppressed [ 545.715574][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2852'. [ 545.868255][ T5881] usb 9-1: USB disconnect, device number 5 [ 548.160504][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 548.162766][T13135] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.193306][T13135] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.573305][ T1976] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 548.683372][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 548.733344][ T1976] usb 8-1: Using ep0 maxpacket: 16 [ 548.735668][ T1976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.735686][ T1976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 548.735707][ T1976] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 548.735718][ T1976] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.740485][ T1976] usb 8-1: config 0 descriptor?? [ 548.833316][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 548.836144][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 548.836189][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 548.836210][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.856363][ T9] usb 1-1: config 0 descriptor?? [ 549.197327][ T9] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 549.210138][ T9] usb 1-1: USB disconnect, device number 22 [ 549.247365][ T1976] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 549.247409][ T1976] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 549.247454][ T1976] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 549.247479][ T1976] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 549.247503][ T1976] mcp2221 0003:04D8:00DD.000C: unknown main item tag 0x0 [ 549.252006][ T1976] mcp2221 0003:04D8:00DD.000C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 550.505763][ T5811] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 550.951982][T13180] syz.6.2882 (13180): drop_caches: 2 [ 550.957193][T13180] syz.6.2882 (13180): drop_caches: 2 [ 550.965366][T13175] syz.0.2881 (13175): drop_caches: 2 [ 550.969331][T13175] syz.0.2881 (13175): drop_caches: 2 [ 551.081851][T13185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2883'. [ 551.108187][T13185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2883'. [ 551.546594][ T1976] usb 8-1: USB disconnect, device number 5 [ 553.248840][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 553.393322][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 553.401606][ T9] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 553.401630][ T9] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 553.401647][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 553.401697][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 553.458770][ T9] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=ee.ed [ 553.458798][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.458813][ T9] usb 9-1: Product: syz [ 553.458820][ T9] usb 9-1: Manufacturer: syz [ 553.458827][ T9] usb 9-1: SerialNumber: syz [ 553.462376][ T9] usb 9-1: config 0 descriptor?? [ 553.613447][ T1976] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 553.763588][ T1976] usb 3-1: Using ep0 maxpacket: 8 [ 553.766286][ T1976] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 553.766323][ T1976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 553.766345][ T1976] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 553.766365][ T1976] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 553.766405][ T1976] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 553.766424][ T1976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.933941][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 554.090666][ T1976] usb 3-1: GET_CAPABILITIES returned 0 [ 554.090697][ T1976] usbtmc 3-1:16.0: can't read capabilities [ 554.248375][ T10] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 554.248616][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.248635][ T10] usb 8-1: Product: syz [ 554.248646][ T10] usb 8-1: Manufacturer: syz [ 554.248659][ T10] usb 8-1: SerialNumber: syz [ 554.379473][ T10] usb 8-1: config 0 descriptor?? [ 554.586522][ T9] usb 9-1: ucan: probing device on interface #0 [ 554.586539][ T9] usb 9-1: ucan: invalid EP count (0) [ 554.586547][ T9] usb 9-1: ucan: probe failed; try to update the device firmware [ 554.640157][ T9] usb 9-1: USB disconnect, device number 6 [ 554.946671][ T9] usb 3-1: USB disconnect, device number 38 [ 556.133341][ T5811] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 556.303286][ T5811] usb 9-1: Using ep0 maxpacket: 8 [ 556.305503][ T5811] usb 9-1: config 1 has an invalid descriptor of length 22, skipping remainder of the config [ 556.305556][ T5811] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 10304, setting to 1024 [ 556.305579][ T5811] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 556.305599][ T5811] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 556.312929][ T5811] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 556.312956][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.312973][ T5811] usb 9-1: Product: syz [ 556.312986][ T5811] usb 9-1: Manufacturer: syz [ 556.312998][ T5811] usb 9-1: SerialNumber: syz [ 556.353996][T13281] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 556.358161][ T5811] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 556.360174][ T5811] usbtest 9-1:1.0: couldn't get endpoints, -22 [ 556.360254][ T5811] usbtest 9-1:1.0: probe with driver usbtest failed with error -22 [ 556.607677][ T9] usb 8-1: USB disconnect, device number 6 [ 558.414641][ T10] usb 9-1: USB disconnect, device number 7 [ 558.593249][ T5881] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 558.743273][ T1976] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 558.745641][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 558.745672][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.751493][ T5881] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 558.751510][ T5881] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 558.751520][ T5881] usb 7-1: Manufacturer: syz [ 558.822804][ T5881] usb 7-1: config 0 descriptor?? [ 558.863297][ T5885] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 558.873383][ T5811] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 558.969213][ T1976] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 558.969241][ T1976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.969258][ T1976] usb 3-1: Product: syz [ 558.969271][ T1976] usb 3-1: Manufacturer: syz [ 558.969283][ T1976] usb 3-1: SerialNumber: syz [ 559.016389][ T1976] usb 3-1: config 0 descriptor?? [ 559.033252][ T5885] usb 1-1: Using ep0 maxpacket: 8 [ 559.043861][ T5811] usb 9-1: Using ep0 maxpacket: 16 [ 559.044695][ T5811] usb 9-1: no configurations [ 559.044710][ T5811] usb 9-1: can't read configurations, error -22 [ 559.066388][ T5885] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 559.066412][ T5885] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 559.117572][ T5885] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 559.117982][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.118001][ T5885] usb 1-1: Product: syz [ 559.118013][ T5885] usb 1-1: Manufacturer: syz [ 559.118025][ T5885] usb 1-1: SerialNumber: syz [ 559.173548][ T5811] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 559.306805][ T5881] cougar 0003:060B:700A.000D: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 559.324084][ T5811] usb 9-1: Using ep0 maxpacket: 16 [ 559.324999][ T5811] usb 9-1: no configurations [ 559.325008][ T5811] usb 9-1: can't read configurations, error -22 [ 559.325712][ T5811] usb usb9-port1: attempt power cycle [ 560.422592][ T5811] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 560.435331][ T5811] usb 9-1: Using ep0 maxpacket: 16 [ 560.436141][ T5811] usb 9-1: no configurations [ 560.436155][ T5811] usb 9-1: can't read configurations, error -22 [ 560.563310][ T5811] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 560.597161][ T5811] usb 9-1: Using ep0 maxpacket: 16 [ 560.603570][ T5811] usb 9-1: no configurations [ 560.603589][ T5811] usb 9-1: can't read configurations, error -22 [ 560.621779][ T5811] usb usb9-port1: unable to enumerate USB device [ 561.327027][ T5981] usb 7-1: USB disconnect, device number 4 [ 561.519163][ T5811] usb 3-1: USB disconnect, device number 39 [ 562.987475][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.988501][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.290867][T13351] netlink: 112 bytes leftover after parsing attributes in process `syz.8.2945'. [ 564.903887][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 565.144000][ T9] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 565.144028][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.144046][ T9] usb 8-1: Product: syz [ 565.144059][ T9] usb 8-1: Manufacturer: syz [ 565.144071][ T9] usb 8-1: SerialNumber: syz [ 565.198052][ T9] usb 8-1: config 0 descriptor?? [ 565.504486][ T9] usb 1-1: USB disconnect, device number 23 [ 567.492696][T13407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 567.671805][ T5981] usb 8-1: USB disconnect, device number 7 [ 567.903287][ T5811] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 568.153271][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 568.368803][ T5811] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 568.369357][ T5811] usb 7-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 568.369454][ T5811] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.495056][ T5811] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 568.495084][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.495102][ T5811] usb 7-1: Product: syz [ 568.495158][ T5811] usb 7-1: Manufacturer: syz [ 568.495171][ T5811] usb 7-1: SerialNumber: syz [ 568.671421][T13412] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 568.799601][ T5811] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 568.842487][ T5811] usbtest 7-1:1.0: couldn't get endpoints, -22 [ 568.842542][ T5811] usbtest 7-1:1.0: probe with driver usbtest failed with error -22 [ 569.699304][ T9] usb 7-1: USB disconnect, device number 5 [ 570.550282][T13451] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2981'. [ 570.823278][ T5981] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 570.984753][ T5981] usb 3-1: Using ep0 maxpacket: 8 [ 570.987976][ T5981] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 570.988006][ T5981] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 570.988026][ T5981] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 570.988045][ T5981] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 570.988083][ T5981] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 570.988103][ T5981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.294412][ T5981] usb 3-1: GET_CAPABILITIES returned 0 [ 571.294442][ T5981] usbtmc 3-1:16.0: can't read capabilities [ 571.576387][ T5811] usb 3-1: USB disconnect, device number 40 [ 573.133273][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 573.256741][T13493] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2998'. [ 573.283290][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 573.285046][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 573.285063][ T9] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 573.285074][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 573.287314][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 573.287328][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.287338][ T9] usb 1-1: Product: syz [ 573.287345][ T9] usb 1-1: Manufacturer: syz [ 573.287352][ T9] usb 1-1: SerialNumber: syz [ 573.291188][T13486] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 573.293024][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 573.295760][ T9] usbtest 1-1:1.0: couldn't get endpoints, -22 [ 573.295841][ T9] usbtest 1-1:1.0: probe with driver usbtest failed with error -22 [ 573.443398][ T1976] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 573.613215][ T1976] usb 3-1: Using ep0 maxpacket: 32 [ 573.614623][ T1976] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 573.614649][ T1976] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 573.614670][ T1976] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 573.614683][ T1976] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 573.614696][ T1976] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 573.614709][ T1976] usb 3-1: config 0 interface 0 has no altsetting 0 [ 573.617918][ T1976] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 573.617933][ T1976] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 573.617943][ T1976] usb 3-1: Product: syz [ 573.617950][ T1976] usb 3-1: Manufacturer: syz [ 573.617957][ T1976] usb 3-1: SerialNumber: syz [ 573.739597][ T1976] usb 3-1: config 0 descriptor?? [ 573.740714][T13491] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 573.756982][ T1976] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 573.779249][ T1976] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 574.120073][ T10] usb 3-1: USB disconnect, device number 41 [ 574.154324][ T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 574.176536][ T5981] usb 1-1: USB disconnect, device number 24 [ 575.760340][T13521] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3009'. [ 575.794019][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 575.853577][ T5881] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 575.955469][ T9] usb 9-1: config 0 has no interfaces? [ 575.955506][ T9] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 575.955528][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.958693][ T9] usb 9-1: config 0 descriptor?? [ 576.014473][ T5881] usb 8-1: Using ep0 maxpacket: 16 [ 576.020776][ T5881] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.020800][ T5881] usb 8-1: config 0 has no interfaces? [ 576.023104][ T5881] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 576.023276][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 576.023294][ T5881] usb 8-1: Product: syz [ 576.023306][ T5881] usb 8-1: Manufacturer: syz [ 576.023318][ T5881] usb 8-1: SerialNumber: syz [ 576.035849][ T5881] usb 8-1: config 0 descriptor?? [ 576.290160][ T9] usb 8-1: USB disconnect, device number 8 [ 576.311058][ T5981] usb 9-1: USB disconnect, device number 12 [ 576.410152][T13536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3016'. [ 576.410192][T13536] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3016'. [ 577.611711][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3018'. [ 577.681493][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3018'. [ 578.052656][T13568] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3026'. [ 578.273299][ T5983] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 578.363402][ T1976] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 578.423249][ T5983] usb 7-1: Using ep0 maxpacket: 32 [ 578.426561][ T5983] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 578.426603][ T5983] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 578.426646][ T5983] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 578.426670][ T5983] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 578.426701][ T5983] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 578.426725][ T5983] usb 7-1: config 0 interface 0 has no altsetting 0 [ 578.453357][ T5983] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 578.453384][ T5983] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 578.453401][ T5983] usb 7-1: Product: syz [ 578.453414][ T5983] usb 7-1: Manufacturer: syz [ 578.453426][ T5983] usb 7-1: SerialNumber: syz [ 579.443413][ T5981] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 579.475320][ T5983] usb 7-1: config 0 descriptor?? [ 579.483517][ T1976] usb 1-1: Using ep0 maxpacket: 8 [ 579.483731][T13567] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 579.494973][ T1976] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 579.494997][ T1976] usb 1-1: config 0 has no interface number 0 [ 579.495042][ T1976] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 579.495063][ T1976] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 579.495084][ T1976] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 579.495107][ T1976] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 579.495146][ T1976] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 579.495166][ T1976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.526361][ T5983] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 579.600497][ T1976] usb 1-1: config 0 descriptor?? [ 579.619157][ T5983] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 579.633216][ T5981] usb 9-1: Using ep0 maxpacket: 16 [ 579.648589][ T5981] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.648613][ T5981] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 579.657728][ T5981] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 579.657755][ T5981] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 579.657773][ T5981] usb 9-1: Product: syz [ 579.657786][ T5981] usb 9-1: Manufacturer: syz [ 579.657798][ T5981] usb 9-1: SerialNumber: syz [ 579.738850][ T5981] usb 9-1: config 0 descriptor?? [ 579.773007][ T1976] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 579.853014][T13570] ldusb 7-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 579.857823][ T5885] usb 7-1: USB disconnect, device number 6 [ 579.857900][ C0] ldusb 7-1:0.0: usb_submit_urb failed (-19) [ 579.866834][ T9] usb 1-1: USB disconnect, device number 25 [ 579.888576][ T9] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 579.890490][ T5885] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 579.964324][ T5881] usb 9-1: USB disconnect, device number 13 [ 580.353504][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 580.378225][T13596] create_pit_timer: 133 callbacks suppressed [ 580.378238][T13596] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 580.466767][T13596] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 580.467444][T13596] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 580.467583][T13596] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 580.467739][T13596] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 580.467767][T13596] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 580.468089][T13596] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 580.468219][T13596] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 580.468382][T13596] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 580.468416][T13596] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 581.275461][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 581.423336][ T9] usb 9-1: device descriptor read/64, error -71 [ 581.765372][T13587] Bluetooth: hci3: command 0x041b tx timeout [ 582.153301][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 582.293451][ T9] usb 9-1: device descriptor read/64, error -71 [ 582.403391][ T1976] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 582.463591][ T9] usb usb9-port1: attempt power cycle [ 582.553556][ T1976] usb 7-1: Using ep0 maxpacket: 32 [ 582.565556][ T1976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.565586][ T1976] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.565623][ T1976] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 582.565642][ T1976] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.592679][ T1976] usb 7-1: config 0 descriptor?? [ 582.814648][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 582.842921][ T9] usb 9-1: device descriptor read/8, error -71 [ 583.045648][ T1976] savu 0003:1E7D:2D5A.000E: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 583.067098][ T5885] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 583.073291][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 583.094015][ T9] usb 9-1: device descriptor read/8, error -71 [ 583.203645][ T9] usb usb9-port1: unable to enumerate USB device [ 583.233265][ T5885] usb 8-1: Using ep0 maxpacket: 16 [ 583.237431][ T5885] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.237454][ T5885] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 583.240484][ T5885] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 583.240500][ T5885] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 583.240510][ T5885] usb 8-1: Product: syz [ 583.240517][ T5885] usb 8-1: Manufacturer: syz [ 583.240524][ T5885] usb 8-1: SerialNumber: syz [ 583.283360][ T1976] usb 7-1: USB disconnect, device number 7 [ 583.303284][ T5881] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 583.317642][ T5885] usb 8-1: config 0 descriptor?? [ 583.453595][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 583.471602][ T5881] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 583.471644][ T5881] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 583.471682][ T5881] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 56, changing to 9 [ 583.471707][ T5881] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 9275, setting to 1024 [ 583.471730][ T5881] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 583.471754][ T5881] usb 1-1: config 0 interface 0 has no altsetting 0 [ 583.475649][ T5881] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 583.475675][ T5881] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 583.475695][ T5881] usb 1-1: Product: syz [ 583.475707][ T5881] usb 1-1: Manufacturer: syz [ 583.475719][ T5881] usb 1-1: SerialNumber: syz [ 583.533298][ T1976] usb 8-1: USB disconnect, device number 9 [ 583.588142][ T5881] usb 1-1: config 0 descriptor?? [ 583.588962][T13634] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 583.608849][ T5881] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 583.621801][ T5881] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 585.238705][ T5881] usb 1-1: USB disconnect, device number 26 [ 585.261932][T13634] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 585.290283][ T5881] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 587.913258][ T5881] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 588.083386][ T5881] usb 8-1: Using ep0 maxpacket: 32 [ 588.085895][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.085925][ T5881] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.085960][ T5881] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 588.085981][ T5881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.152520][ T5881] usb 8-1: config 0 descriptor?? [ 589.034224][ T5881] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 589.303252][ T5881] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 589.331273][ T5981] usb 8-1: USB disconnect, device number 10 [ 589.455672][ T5881] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 589.455699][ T5881] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 589.455717][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 589.455766][ T5881] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.455789][ T5881] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 589.455813][ T5881] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 589.458226][ T5881] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 589.458251][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 589.458269][ T5881] usb 1-1: Product: syz [ 589.458282][ T5881] usb 1-1: Manufacturer: syz [ 589.734693][T13707] Bluetooth: MGMT ver 1.23 [ 590.507567][T13698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 590.510756][ T5881] cdc_wdm 1-1:1.0: skipping garbage [ 590.510772][ T5881] cdc_wdm 1-1:1.0: skipping garbage [ 590.539437][ T5881] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 590.539457][ T5881] cdc_wdm 1-1:1.0: Unknown control protocol [ 590.672008][ T37] audit: type=1326 audit(1760923630.828:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13715 comm="syz.8.3078" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c93a4efc9 code=0x0 [ 590.719333][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.719455][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.719753][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.719775][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.720000][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.720022][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.720250][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.720268][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.720506][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.720526][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.720746][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.720764][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.720996][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.721013][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.721239][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.721261][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.721493][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.721513][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.721741][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 590.721761][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 590.884393][ T10] usb 1-1: USB disconnect, device number 27 [ 592.403311][ T5881] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 592.567363][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 592.600817][ T5881] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 592.600844][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.651527][ T5881] usb 3-1: config 0 descriptor?? [ 592.962999][ T5881] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 593.157857][ T5881] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 593.157894][ T5881] dib0700: firmware download failed at 7 with -22 [ 593.206929][ T5881] usb 3-1: USB disconnect, device number 43 [ 594.122997][ T1213] Bluetooth: hci5: Frame reassembly failed (-84) [ 594.142109][ T1213] Bluetooth: hci5: Frame reassembly failed (-84) [ 594.159814][ T1213] Bluetooth: hci5: Frame reassembly failed (-84) [ 594.394027][ T5881] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 594.593677][ T5881] usb 3-1: Using ep0 maxpacket: 32 [ 594.598269][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.598298][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.598341][ T5881] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 594.598361][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.721139][ T5881] usb 3-1: config 0 descriptor?? [ 595.702149][ T5881] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 596.163384][T13587] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 597.809776][ T5808] usb 3-1: USB disconnect, device number 44 [ 598.178739][T13787] fido_id[13787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 598.218579][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 598.218615][T13800] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3102'. [ 598.433519][ T1976] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 598.481091][ T5808] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 598.585895][ T1976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 598.585928][ T1976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 598.587707][ T1976] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 598.587733][ T1976] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 598.587853][ T1976] usb 9-1: Manufacturer: syz [ 598.654735][ T1976] usb 9-1: config 0 descriptor?? [ 598.663391][ T5808] usb 3-1: Using ep0 maxpacket: 32 [ 599.420251][ T5808] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 599.420279][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.459963][ T5808] usb 3-1: config 0 descriptor?? [ 599.543321][ T5881] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 599.546532][ T1976] cougar 0003:060B:700A.0011: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 600.149148][ T5808] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 600.151761][ T5808] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 600.151809][ T5808] dib0700: firmware download failed at 7 with -22 [ 600.160127][ T5881] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 600.160155][ T5881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.160170][ T5881] usb 8-1: Product: syz [ 600.160180][ T5881] usb 8-1: Manufacturer: syz [ 600.160192][ T5881] usb 8-1: SerialNumber: syz [ 600.218509][ T5881] usb 8-1: config 0 descriptor?? [ 600.219202][ T5808] usb 3-1: USB disconnect, device number 45 [ 600.440526][ T5881] usb 8-1: USB disconnect, device number 11 [ 601.241193][ T5981] usb 9-1: USB disconnect, device number 18 [ 601.513715][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3115'. [ 601.513750][T13841] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3115'. [ 602.973413][T13587] Bluetooth: hci3: command 0x041b tx timeout [ 603.123627][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 603.278831][ T10] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 603.278859][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.278878][ T10] usb 7-1: Product: syz [ 603.278891][ T10] usb 7-1: Manufacturer: syz [ 603.278903][ T10] usb 7-1: SerialNumber: syz [ 603.324263][ T10] usb 7-1: config 0 descriptor?? [ 603.547832][ T10] usb 7-1: USB disconnect, device number 8 [ 603.553770][ T5808] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 603.965836][T13886] input: syz1 as /devices/virtual/input/input9 [ 604.139020][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.275614][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 604.275646][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.277269][ T5808] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 604.277294][ T5808] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 604.277312][ T5808] usb 1-1: Manufacturer: syz [ 604.339848][ T5808] usb 1-1: config 0 descriptor?? [ 604.487904][ C1] vkms_vblank_simulate: vblank timer overrun [ 604.806172][ T5808] cougar 0003:060B:700A.0012: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 605.848738][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.562759][ T5885] usb 1-1: USB disconnect, device number 28 [ 606.732218][ C1] vkms_vblank_simulate: vblank timer overrun [ 607.153378][ T5808] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 607.742111][ T5808] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 607.742140][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.742158][ T5808] usb 1-1: Product: syz [ 607.742169][ T5808] usb 1-1: Manufacturer: syz [ 607.742182][ T5808] usb 1-1: SerialNumber: syz [ 607.812494][ T5808] usb 1-1: config 0 descriptor?? [ 608.014307][T13946] create_pit_timer: 113 callbacks suppressed [ 608.014320][T13946] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 608.071117][ T5983] usb 1-1: USB disconnect, device number 29 [ 613.955395][T12289] udevd[12289]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.959989][T12288] udevd[12288]: setting mode of /dev/snd/hwC3D0 to 020660 failed: Read-only file system [ 613.960068][T12288] udevd[12288]: setting owner of /dev/snd/hwC3D0 to uid=0, gid=29 failed: Read-only file system [ 615.435180][T13989] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3169'. [ 615.674518][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3175'. [ 615.713255][ T5983] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 615.843277][ T5881] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 615.871799][ T5983] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 615.871828][ T5983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.871847][ T5983] usb 7-1: Product: syz [ 615.871859][ T5983] usb 7-1: Manufacturer: syz [ 615.871872][ T5983] usb 7-1: SerialNumber: syz [ 615.911271][ T5983] usb 7-1: config 0 descriptor?? [ 615.993241][ T5881] usb 9-1: Using ep0 maxpacket: 32 [ 615.995650][ T5881] usb 9-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 615.995672][ T5881] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 615.995689][ T5881] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 615.995737][ T5881] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 615.998726][ T5881] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=ee.ed [ 615.998750][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.998768][ T5881] usb 9-1: Product: syz [ 615.998780][ T5881] usb 9-1: Manufacturer: syz [ 615.998792][ T5881] usb 9-1: SerialNumber: syz [ 616.010189][T12288] udevd[12288]: setting mode of /dev/snd/hwC3D0 to 020660 failed: Read-only file system [ 616.010320][T12288] udevd[12288]: setting owner of /dev/snd/hwC3D0 to uid=0, gid=29 failed: Read-only file system [ 616.063256][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 616.118993][ T5881] usb 9-1: config 0 descriptor?? [ 616.143983][ T9] usb 7-1: USB disconnect, device number 9 [ 616.622757][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 616.698372][ T10] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 616.698400][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.752726][ T10] usb 8-1: config 0 descriptor?? [ 617.016973][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 617.040104][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 617.040472][ T10] dib0700: firmware download failed at 7 with -22 [ 617.419264][ T10] usb 8-1: USB disconnect, device number 12 [ 618.366131][ T5881] usb 9-1: ucan: probing device on interface #0 [ 618.366146][ T5881] usb 9-1: ucan: invalid EP count (0) [ 618.366154][ T5881] usb 9-1: ucan: probe failed; try to update the device firmware [ 618.405870][ T5881] usb 9-1: USB disconnect, device number 19 [ 621.310511][ T5808] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 621.599159][ T5808] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 621.599189][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.599208][ T5808] usb 1-1: Product: syz [ 621.599221][ T5808] usb 1-1: Manufacturer: syz [ 621.599235][ T5808] usb 1-1: SerialNumber: syz [ 621.604974][ T5808] usb 1-1: config 0 descriptor?? [ 622.367257][ T5808] usb 1-1: USB disconnect, device number 30 [ 622.373277][ T5983] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 622.456888][T12288] udevd[12288]: setting mode of /dev/snd/hwC3D0 to 020660 failed: Read-only file system [ 622.457016][T12288] udevd[12288]: setting owner of /dev/snd/hwC3D0 to uid=0, gid=29 failed: Read-only file system [ 622.492325][T12289] udevd[12289]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.535087][ T5983] usb 3-1: Using ep0 maxpacket: 32 [ 622.542348][ T5983] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 622.542375][ T5983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.585323][ T5983] usb 3-1: config 0 descriptor?? [ 622.801304][ T5983] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 622.814229][ T5983] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 622.814287][ T5983] dib0700: firmware download failed at 7 with -22 [ 623.005183][ T5983] usb 3-1: USB disconnect, device number 46 [ 623.406752][ T5808] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 623.973653][T13587] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 624.165519][ T5808] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 624.165550][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 624.165573][ T5808] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 624.165593][ T5808] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.165632][ T5808] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.165652][ T5808] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.246397][ T5808] usb 9-1: config 0 descriptor?? [ 624.423967][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.424038][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.689480][ T5808] plantronics 0003:047F:FFFF.0013: ignoring exceeding usage max [ 624.702435][ T5808] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 624.702476][ T5808] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 624.702502][ T5808] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 624.702526][ T5808] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 624.702550][ T5808] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 624.765649][ T5808] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 624.869287][ T5808] usb 9-1: USB disconnect, device number 20 [ 624.888483][T14131] fido_id[14131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 624.975887][T14134] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3227'. [ 626.197027][ T5881] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 627.140687][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 627.155530][ T5881] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 627.155558][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.161435][ T5881] usb 7-1: config 0 descriptor?? [ 627.273526][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 627.399778][ T5881] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 627.415383][ T5881] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 627.415433][ T5881] dib0700: firmware download failed at 7 with -22 [ 627.433266][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 627.443891][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 627.443924][ T9] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 627.443976][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 627.444015][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 627.444035][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.515566][ T9] usbtmc 1-1:16.0: bulk endpoints not found [ 627.615187][ T5981] usb 7-1: USB disconnect, device number 10 [ 627.667900][T14171] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3242'. [ 628.096222][ T5811] IPVS: starting estimator thread 0... [ 628.183351][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 628.183563][T14184] IPVS: using max 8 ests per chain, 19200 per kthread [ 628.363417][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 628.366016][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 628.366044][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 42761, setting to 1024 [ 628.366069][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 628.370916][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 628.370941][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.370959][ T9] usb 3-1: Product: syz [ 628.370971][ T9] usb 3-1: Manufacturer: syz [ 628.371067][ T9] usb 3-1: SerialNumber: syz [ 628.463408][T14176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 628.463600][T14176] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 628.487924][ T9] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 628.503635][ T9] usbtest 3-1:1.0: couldn't get endpoints, -22 [ 628.503724][ T9] usbtest 3-1:1.0: probe with driver usbtest failed with error -22 [ 629.664782][ T5881] usb 3-1: USB disconnect, device number 47 [ 630.081656][ T9] usb 1-1: USB disconnect, device number 31 [ 630.183473][ T5881] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 630.227071][T14224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3258'. [ 630.335486][ T5881] usb 9-1: config 0 has no interfaces? [ 630.335524][ T5881] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 630.335545][ T5881] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.341311][ T5881] usb 9-1: config 0 descriptor?? [ 630.443590][ T5811] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 630.590243][T14229] fuse: Bad value for 'group_id' [ 630.590263][T14229] fuse: Bad value for 'group_id' [ 630.704273][ T5811] usb 8-1: Using ep0 maxpacket: 32 [ 630.706592][ T5811] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 630.706618][ T5811] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.708412][ T5808] usb 9-1: USB disconnect, device number 21 [ 631.261228][ T5811] usb 8-1: config 0 descriptor?? [ 631.494440][ T5811] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 631.522264][ T5811] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 631.522312][ T5811] dib0700: firmware download failed at 7 with -22 [ 631.711322][ T5885] usb 8-1: USB disconnect, device number 13 [ 631.863420][ T5881] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 631.883231][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 632.013290][ T9] usb 1-1: device descriptor read/64, error -71 [ 632.013478][ T5881] usb 9-1: Using ep0 maxpacket: 8 [ 632.016197][ T5881] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 632.016220][ T5881] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 632.016240][ T5881] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 96, changing to 7 [ 632.016261][ T5881] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1097, setting to 1024 [ 632.016281][ T5881] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 632.018887][ T5881] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 632.018914][ T5881] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.018935][ T5881] usb 9-1: Product: syz [ 632.018948][ T5881] usb 9-1: Manufacturer: syz [ 632.018960][ T5881] usb 9-1: SerialNumber: syz [ 632.031171][T14236] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 632.042513][ T5881] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 632.046535][ T5881] usbtest 9-1:1.0: Linux user mode ISO test driver [ 632.046554][ T5881] usbtest 9-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 632.284902][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 632.414488][ T9] usb 1-1: device descriptor read/64, error -71 [ 633.241205][T14256] fuse: Bad value for 'group_id' [ 633.241225][T14256] fuse: Bad value for 'group_id' [ 633.271319][ T5811] usb 9-1: USB disconnect, device number 22 [ 633.353054][ T9] usb usb1-port1: attempt power cycle [ 635.653494][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 635.667438][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 635.958942][ T9] usb 1-1: device descriptor read/8, error -71 [ 636.041750][ T10] usb 3-1: config 0 has no interfaces? [ 636.041788][ T10] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 636.041809][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.055253][ T10] usb 3-1: config 0 descriptor?? [ 636.272250][T12529] usb 3-1: USB disconnect, device number 48 [ 636.273315][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 636.432555][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 636.461138][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.461197][ T10] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 636.461217][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.386581][ T10] usb 9-1: config 0 descriptor?? [ 637.407948][ T10] iowarrior 9-1:0.0: no interrupt-in endpoint found [ 637.823284][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 637.843945][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 637.846083][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 637.846109][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.850327][ T9] usb 1-1: config 0 descriptor?? [ 637.903287][ T10] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 638.381121][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 638.403480][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 638.405625][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 638.405999][ T9] dib0700: firmware download failed at 7 with -22 [ 638.407934][ T10] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 638.407961][ T10] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x33, changing to 0x3 [ 638.407983][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 96, changing to 7 [ 638.408005][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1097, setting to 1024 [ 638.408028][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 638.411149][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 638.411173][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.411191][ T10] usb 8-1: Product: syz [ 638.411203][ T10] usb 8-1: Manufacturer: syz [ 638.411216][ T10] usb 8-1: SerialNumber: syz [ 638.546832][T14287] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 638.573623][ T10] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 638.576629][ T10] usbtest 8-1:1.0: Linux user mode ISO test driver [ 638.576647][ T10] usbtest 8-1:1.0: high-speed {control bulk-in iso-out} tests (+alt) [ 638.632543][ T9] usb 1-1: USB disconnect, device number 35 [ 639.270390][ T5808] usb 8-1: USB disconnect, device number 14 [ 639.594827][ T5808] usb 9-1: USB disconnect, device number 23 [ 641.333266][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 641.423275][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 641.513297][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 641.516483][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.516534][ T9] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 641.516553][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.556393][ T9] usb 9-1: config 0 descriptor?? [ 641.560785][ T9] iowarrior 9-1:0.0: no interrupt-in endpoint found [ 641.573249][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 641.580305][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 641.580320][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.608417][ T10] usb 1-1: config 0 descriptor?? [ 641.683460][ T5808] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 641.832925][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 641.837346][ T5808] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 641.837370][ T5808] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 641.837387][ T5808] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 641.876082][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 641.876124][ T10] dib0700: firmware download failed at 7 with -22 [ 641.905090][ T5808] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 641.905117][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.905129][ T5808] usb 8-1: Product: syz [ 641.905136][ T5808] usb 8-1: Manufacturer: syz [ 641.905143][ T5808] usb 8-1: SerialNumber: syz [ 642.017027][T14339] syz.2.3307 (14339): drop_caches: 2 [ 642.035652][T14339] syz.2.3307 (14339): drop_caches: 2 [ 642.051892][ T10] usb 1-1: USB disconnect, device number 36 [ 642.282098][ T5808] usb 8-1: 0:2 : does not exist [ 642.519903][ T5808] usb 8-1: USB disconnect, device number 15 [ 642.675243][T12288] udevd[12288]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.403630][ T5981] usb 9-1: USB disconnect, device number 24 [ 643.493554][ T10] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 643.808269][ T10] usb 8-1: config 0 has an invalid interface number: 113 but max is 0 [ 643.808285][ T10] usb 8-1: config 0 has no interface number 0 [ 643.808313][ T10] usb 8-1: config 0 interface 113 has no altsetting 0 [ 643.840282][ T10] usb 8-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 643.840300][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.840310][ T10] usb 8-1: Product: syz [ 643.840317][ T10] usb 8-1: Manufacturer: syz [ 643.840329][ T10] usb 8-1: SerialNumber: syz [ 643.909698][ T10] usb 8-1: config 0 descriptor?? [ 643.948584][ T10] pn533_usb 8-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 645.425146][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 645.454062][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3321'. [ 645.455128][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3321'. [ 645.593272][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 645.597223][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 645.597251][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.663368][ T10] usb 1-1: config 0 descriptor?? [ 645.783312][T12529] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 645.879509][ T10] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 645.881353][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 645.881381][ T10] dib0700: firmware download failed at 7 with -22 [ 645.944755][T12529] usb 3-1: Using ep0 maxpacket: 8 [ 646.067779][T12529] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 646.067835][T12529] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 646.067857][T12529] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.082654][T12529] usb 3-1: config 0 descriptor?? [ 646.123989][ T10] usb 1-1: USB disconnect, device number 37 [ 646.148654][T12529] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 647.260766][T14244] Set syz1 is full, maxelem 65536 reached [ 647.341829][ T5808] usb 8-1: USB disconnect, device number 16 [ 647.904472][T13587] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 647.936552][T13587] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 647.948530][T13587] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 647.949972][T13587] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 647.951900][T13587] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 648.985502][ T10] usb 3-1: USB disconnect, device number 49 [ 650.627505][ T37] audit: type=1326 audit(1760923690.788:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14421 comm="syz.0.3334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa20b19efc9 code=0x0 [ 650.963372][ T61] Bluetooth: hci5: command tx timeout [ 651.333244][ T5811] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 651.433260][ T1976] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 651.485409][ T5811] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 651.485426][ T5811] usb 9-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 651.485436][ T5811] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 651.485463][ T5811] usb 9-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 651.485476][ T5811] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 651.485488][ T5811] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 651.486898][ T5811] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 651.486913][ T5811] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 651.486922][ T5811] usb 9-1: Product: syz [ 651.486929][ T5811] usb 9-1: Manufacturer: syz [ 651.586112][T14439] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 651.589467][ T5811] cdc_wdm 9-1:1.0: skipping garbage [ 651.589478][ T5811] cdc_wdm 9-1:1.0: skipping garbage [ 651.614292][ T1976] usb 8-1: config 0 has an invalid interface number: 113 but max is 0 [ 651.614308][ T1976] usb 8-1: config 0 has no interface number 0 [ 651.614338][ T1976] usb 8-1: config 0 interface 113 has no altsetting 0 [ 651.616906][ T5811] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 651.616952][ T5811] cdc_wdm 9-1:1.0: Unknown control protocol [ 651.622710][ T1976] usb 8-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 651.622733][ T1976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.622750][ T1976] usb 8-1: Product: syz [ 651.622763][ T1976] usb 8-1: Manufacturer: syz [ 651.622773][ T1976] usb 8-1: SerialNumber: syz [ 651.709153][ T1976] usb 8-1: config 0 descriptor?? [ 651.728909][ T1976] pn533_usb 8-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 651.795140][ T1976] usb 9-1: USB disconnect, device number 25 [ 651.968660][ T7210] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.319483][ T7210] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.433260][ T1197] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 652.515804][T14449] ------------[ cut here ]------------ [ 652.515825][T14449] WARNING: CPU: 0 PID: 14449 at ./include/linux/seqlock.h:221 cgroup_freeze+0x80a/0xf90 [ 652.515868][T14449] Modules linked in: [ 652.515896][T14449] CPU: 0 UID: 0 PID: 14449 Comm: syz.8.3342 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 652.515918][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.515932][T14449] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 652.515955][T14449] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 652.515971][T14449] RSP: 0018:ffffc9000cfcf8e0 EFLAGS: 00010287 [ 652.515984][T14449] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 652.515995][T14449] RDX: ffffc90014198000 RSI: 00000000000000a2 RDI: 00000000000000a3 [ 652.516005][T14449] RBP: ffffc9000cfcfa70 R08: 0000000000000000 R09: 0000000000000000 [ 652.516014][T14449] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 652.516025][T14449] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888027b1a791 [ 652.516034][T14449] FS: 00007f6c91cae6c0(0000) GS:ffff888126bc8000(0000) knlGS:0000000000000000 [ 652.516045][T14449] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.516054][T14449] CR2: 000000110c249135 CR3: 000000001dfe0000 CR4: 00000000003526f0 [ 652.516068][T14449] Call Trace: [ 652.516078][T14449] [ 652.516094][T14449] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 652.516124][T14449] ? __pfx_cgroup_freeze+0x10/0x10 [ 652.516145][T14449] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 652.516169][T14449] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 652.516192][T14449] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 652.516223][T14449] ? mutex_lock_nested+0x154/0x1d0 [ 652.516241][T14449] ? cgroup_kn_lock_live+0x13c/0x230 [ 652.516271][T14449] cgroup_freeze_write+0x156/0x1c0 [ 652.516296][T14449] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 652.516315][T14449] ? kernfs_root+0x1c/0x230 [ 652.516336][T14449] ? kernfs_root+0x1c/0x230 [ 652.516359][T14449] ? kernfs_root+0x1ea/0x230 [ 652.516380][T14449] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 652.516401][T14449] cgroup_file_write+0x39e/0x740 [ 652.516425][T14449] ? __pfx_cgroup_file_write+0x10/0x10 [ 652.516458][T14449] ? __pfx_cgroup_file_write+0x10/0x10 [ 652.516473][T14449] kernfs_fop_write_iter+0x3b0/0x540 [ 652.516525][T14449] vfs_write+0x5d5/0xb40 [ 652.516558][T14449] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 652.516580][T14449] ? __pfx_vfs_write+0x10/0x10 [ 652.516602][T14449] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 652.516636][T14449] ? mutex_lock_nested+0x154/0x1d0 [ 652.516656][T14449] ? fdget_pos+0x253/0x320 [ 652.516683][T14449] ksys_write+0x14b/0x260 [ 652.516704][T14449] ? __pfx_ksys_write+0x10/0x10 [ 652.516726][T14449] ? do_syscall_64+0xbe/0xfa0 [ 652.516750][T14449] do_syscall_64+0xfa/0xfa0 [ 652.516765][T14449] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.516790][T14449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.516809][T14449] ? clear_bhb_loop+0x60/0xb0 [ 652.516831][T14449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.516849][T14449] RIP: 0033:0x7f6c93a4efc9 [ 652.516872][T14449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.516888][T14449] RSP: 002b:00007f6c91cae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.516908][T14449] RAX: ffffffffffffffda RBX: 00007f6c93ca5fa0 RCX: 00007f6c93a4efc9 [ 652.516922][T14449] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 652.516934][T14449] RBP: 00007f6c93ad1f91 R08: 0000000000000000 R09: 0000000000000000 [ 652.516947][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.516958][T14449] R13: 00007f6c93ca6038 R14: 00007f6c93ca5fa0 R15: 00007ffe55c79c08 [ 652.516995][T14449] [ 652.517013][T14449] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 652.517028][T14449] CPU: 0 UID: 0 PID: 14449 Comm: syz.8.3342 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 652.517049][T14449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 652.517060][T14449] Call Trace: [ 652.517066][T14449] [ 652.517073][T14449] dump_stack_lvl+0x99/0x250 [ 652.517095][T14449] ? __asan_memcpy+0x40/0x70 [ 652.517120][T14449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.517142][T14449] ? __pfx__printk+0x10/0x10 [ 652.517181][T14449] vpanic+0x237/0x6d0 [ 652.517200][T14449] ? __pfx_vpanic+0x10/0x10 [ 652.517231][T14449] panic+0xb9/0xc0 [ 652.517248][T14449] ? __pfx_panic+0x10/0x10 [ 652.517285][T14449] __warn+0x31b/0x4b0 [ 652.517301][T14449] ? cgroup_freeze+0x80a/0xf90 [ 652.517328][T14449] ? cgroup_freeze+0x80a/0xf90 [ 652.517351][T14449] report_bug+0x2be/0x4f0 [ 652.517375][T14449] ? cgroup_freeze+0x80a/0xf90 [ 652.517426][T14449] ? cgroup_freeze+0x80a/0xf90 [ 652.517451][T14449] ? cgroup_freeze+0x80c/0xf90 [ 652.517485][T14449] handle_bug+0x84/0x160 [ 652.517506][T14449] exc_invalid_op+0x1a/0x50 [ 652.517526][T14449] asm_exc_invalid_op+0x1a/0x20 [ 652.517542][T14449] RIP: 0010:cgroup_freeze+0x80a/0xf90 [ 652.517564][T14449] Code: 90 e9 9e fb ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c e7 f9 ff ff 4c 89 f7 e8 c1 1f 68 00 e9 da f9 ff ff e8 37 68 06 00 90 <0f> 0b 90 e9 10 fc ff ff 44 89 f9 80 e1 07 38 c1 48 8b 0c 24 0f 8c [ 652.517579][T14449] RSP: 0018:ffffc9000cfcf8e0 EFLAGS: 00010287 [ 652.517594][T14449] RAX: ffffffff81b8a4d9 RBX: 0000000000000000 RCX: 0000000000080000 [ 652.517606][T14449] RDX: ffffc90014198000 RSI: 00000000000000a2 RDI: 00000000000000a3 [ 652.517618][T14449] RBP: ffffc9000cfcfa70 R08: 0000000000000000 R09: 0000000000000000 [ 652.517630][T14449] R10: dffffc0000000000 R11: fffffbfff1deea2f R12: dffffc0000000000 [ 652.517644][T14449] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888027b1a791 [ 652.517670][T14449] ? cgroup_freeze+0x809/0xf90 [ 652.517709][T14449] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 652.517738][T14449] ? __pfx_cgroup_freeze+0x10/0x10 [ 652.517760][T14449] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 652.517785][T14449] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 652.517809][T14449] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 652.517842][T14449] ? mutex_lock_nested+0x154/0x1d0 [ 652.517862][T14449] ? cgroup_kn_lock_live+0x13c/0x230 [ 652.517892][T14449] cgroup_freeze_write+0x156/0x1c0 [ 652.517917][T14449] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 652.517937][T14449] ? kernfs_root+0x1c/0x230 [ 652.517957][T14449] ? kernfs_root+0x1c/0x230 [ 652.517980][T14449] ? kernfs_root+0x1ea/0x230 [ 652.518001][T14449] ? __pfx_cgroup_freeze_write+0x10/0x10 [ 652.518024][T14449] cgroup_file_write+0x39e/0x740 [ 652.518054][T14449] ? __pfx_cgroup_file_write+0x10/0x10 [ 652.518089][T14449] ? __pfx_cgroup_file_write+0x10/0x10 [ 652.518105][T14449] kernfs_fop_write_iter+0x3b0/0x540 [ 652.518133][T14449] vfs_write+0x5d5/0xb40 [ 652.518165][T14449] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 652.518187][T14449] ? __pfx_vfs_write+0x10/0x10 [ 652.518208][T14449] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 652.518242][T14449] ? mutex_lock_nested+0x154/0x1d0 [ 652.518260][T14449] ? fdget_pos+0x253/0x320 [ 652.518289][T14449] ksys_write+0x14b/0x260 [ 652.518310][T14449] ? __pfx_ksys_write+0x10/0x10 [ 652.518332][T14449] ? do_syscall_64+0xbe/0xfa0 [ 652.518354][T14449] do_syscall_64+0xfa/0xfa0 [ 652.518370][T14449] ? lockdep_hardirqs_on+0x9c/0x150 [ 652.518394][T14449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.518412][T14449] ? clear_bhb_loop+0x60/0xb0 [ 652.518435][T14449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.518452][T14449] RIP: 0033:0x7f6c93a4efc9 [ 652.518468][T14449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.518489][T14449] RSP: 002b:00007f6c91cae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.518508][T14449] RAX: ffffffffffffffda RBX: 00007f6c93ca5fa0 RCX: 00007f6c93a4efc9 [ 652.518522][T14449] RDX: 0000000000000012 RSI: 0000200000000200 RDI: 0000000000000007 [ 652.518534][T14449] RBP: 00007f6c93ad1f91 R08: 0000000000000000 R09: 0000000000000000 [ 652.518547][T14449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.518558][T14449] R13: 00007f6c93ca6038 R14: 00007f6c93ca5fa0 R15: 00007ffe55c79c08 [ 652.518595][T14449] [ 652.518913][T14449] Kernel Offset: disabled