last executing test programs: 37.195852825s ago: executing program 1 (id=495): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200800, 0x0, 0x103, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e20, 0x80000, @empty, 0x10000080}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x30}, 0x200000000000000) 21.119762671s ago: executing program 1 (id=503): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)=ANY=[@ANYRESDEC], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0xffffffffffffffe7) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_setup(0x61cd, &(0x7f0000000300)={0x0, 0x0, 0x2400, 0x0, 0xfffffffe}) r5 = dup(0xffffffffffffffff) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00004a6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000600)="652ef30f2d4c0f00670f215366b8d6000f00d0b9800000c035001000000f300f01c40f222466baf80cb8886c7a85ef66bafc0c66b8030066efc4c1795bbf9372b6e866baf80cb8b4260782ef66bafc0c8201e901e9f5", 0x56}], 0xaaaaaaaaaaaacc4, 0x48, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000002980)={{0x2, 0x0, 0x9d, {0x1000, 0x80a0000, 0x2}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136016c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadf64b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc58992a3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="660f3881ae000000c483b17e35e661c286000f08c4a2ed8c03f30f09f30fc7b5c5a40000410f01cbc4c2f9341cd50d0000000f7973d50f08", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000080)={0x3000, 0x3000, 0x1}) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 18.890907666s ago: executing program 2 (id=537): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x270, 0x168, 0x9, 0x0, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [], [], 'ip6tnl0\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x230, 0x270, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6, 0x1000}}}, @common=@inet=@ipcomp={{0x30}, {[], 0x12}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r5 = dup(r3) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff03010040"]) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000017b80)={0x0, 0x0, &(0x7f0000017b40)={&(0x7f00000000c0)=ANY=[], 0x2c}}, 0x0) 18.698347158s ago: executing program 1 (id=538): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00'}) 18.363499912s ago: executing program 2 (id=542): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4180) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000580), 0x4) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000180)=0x1) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000280)={r5}) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) pipe2(&(0x7f0000000140), 0x4180) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0xb0000) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r4, 0x107, 0xe, &(0x7f0000000580), 0x4) (async) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000180)=0x1) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x1a, 0xee, 0xbf, 0x10, 0x3fd, 0xebbe, 0xede2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x35, 0x0, 0x0, 0xc2, 0xba, 0xa4}}]}}]}}, 0x0) (async) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000240)={0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000280)={r5}) (async) 17.789488274s ago: executing program 1 (id=545): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x1, 0x9, 0x200000000, 0x1, 0xfffffffc, {0x0, 0x40000, 0x9, 0x0, 0x8, 0xfffffffffffffffd, 0xc0000, 0xe, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x60}}}, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c0000008100000001"], 0xfeffffff) 16.882467993s ago: executing program 1 (id=551): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', '', [{0x20, '*+\\.{*'}, {0x20, '#! '}, {0x20, '#! '}, {0x20, '0'}]}, 0x15) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0x10012, r1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5385, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1, 0xd651, 0x72b) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(r4, 0x0, r5, &(0x7f0000000140), 0x12, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0x2, 0x1}) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105511, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) keyctl$session_to_parent(0x12) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f00000002c0)="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", 0x14d, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 16.646341496s ago: executing program 1 (id=552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) listen(r0, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x48, &(0x7f0000000940)={{0x12, 0x1, 0x0, 0xa6, 0xff, 0x5, 0x40, 0xabcd, 0xcdee, 0x5b9, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x36, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9c, 0x0, 0x3, 0x1, 0x3, 0x51, 0x0, [], [{{0x9, 0x5, 0xa}}, {{0x9, 0x5, 0x3, 0x13}}, {{0x9, 0x5, 0xf}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x54, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x7, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "ca0c734891a263a2ef1df715fb24b095"}, @mptcp=@synack={0x1e, 0x10}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) 15.287783536s ago: executing program 2 (id=558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x2400) 15.214474757s ago: executing program 2 (id=559): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000280)={0x3, {{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x39}}, {{0xa, 0x4e21, 0x1, @private0, 0x40}}}, 0x108) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="763209006a424cf7ff25a301bdf53a89c89c7a182afdf6b977cb76514ac094cff7eec977d616f7aea61d178752275c2afc415ee16444950bd8c952e0b0620d6b1be82032f806094630ba49", @ANYRES16=r3, @ANYBLOB="000427bd7000fcdbdf250700000014002000fe8000000000000000000000000000bb05000700020000000c00160002000000000000000c000f000101000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4884) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x890b, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) fanotify_init(0x200, 0x0) r4 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000380)={0x0, 0x0, 0x100000}, 0x20) r8 = socket(0x1d, 0x2, 0x6) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r11 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, r12, 0x1}, 0x18) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r10, 0x1}, 0x18) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r15]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80000, 0x0) 14.487676717s ago: executing program 2 (id=562): r0 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r1 = socket$inet6(0xa, 0x3, 0xff) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) capset(&(0x7f0000000680)={0x19980330}, &(0x7f00000006c0)) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0xb) (rerun: 32) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0x7, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = getpid() (async) futex(&(0x7f0000004000)=0x1, 0x5, 0x0, 0x0, &(0x7f0000000180)=0xfffffffe, 0xb201fffc) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0xb, &(0x7f0000000080)) (async, rerun: 32) r7 = io_uring_setup(0x3125, &(0x7f0000000000)) (rerun: 32) io_uring_enter(r7, 0x0, 0xb80, 0x1, &(0x7f0000000080), 0x8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x5, r3}) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000300)={0xc}) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, 0x0) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async, rerun: 32) r9 = socket$inet6(0xa, 0x3, 0x7) (rerun: 32) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) 13.950988638s ago: executing program 2 (id=566): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00'}) 13.660963263s ago: executing program 4 (id=569): socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$can_bcm(0x1d, 0x2, 0x2) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 12.925515275s ago: executing program 4 (id=572): r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x1, 0x7fffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x7, '\x00', @value64=0xfffffffffffffff9}}) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000088c0), 0x0, 0x48055) syz_usb_connect(0x0, 0x1fc, &(0x7f0000000280)=ANY=[@ANYBLOB="120100004510c740cd062a01e269010203010902ea0101000000000904e000057a7afe000724060001407e05240000000d240f01ffffffff010100004806241a0000000524150c00072414090090ba0a24071006000600000009057504ff030009092421056ec02906785483f01cef83c1f238a7ed95cf94078c7bbf67097348fc44c14458370725018037070009058000ff0302037fad0f4700314c688e1472364016980d0410cf93b28df03553947cc460af9007a3392b183226c4601706a3508115968256f0bdeb82e0ae47c07ad972d6da0146cb4e15fffe46c96ebb29567ec62c0db1fe192c5a59a1b6b74991186a47efad9e73ebbb2b2a11f4344781950f574fe9256dab2c235290ae1a6cf8047cfd9b486074e2a6811fe7878f944c984a579e1072ecccb8adcc89e2807fd502229c0c13d8cb5a29f0b4aa6fa48dbd4545f8d207250100040600090501"], 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd5}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x2010, r5, 0xbf533000) r7 = socket(0x40000000015, 0xa, 0x0) getsockopt(r7, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0x39) shutdown(0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000500), 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, {0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, "9753e4164083e180d9aa47334782c7fc1f999ede28a666b10a250266f67d0b26"}}) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f00000002c0)={0x80000010}) set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x7) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f00000006c0)=""/201, 0x41000, 0x34, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x40000, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.727776964s ago: executing program 3 (id=575): ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="b000330080000000ffffffffffff080211000000f7ab87594b3f00000000000000000100dd068b7668a21729dd5ad8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb21c9c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc0dd2695e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737"], 0xcc}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400000000e0a01030000000000000000070000000900020073797a31000000000900010073797a30000000001400038010000080080003"], 0xd4}}, 0x0) syz_usb_connect(0x0, 0x48, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000a1e0bd10510452502e1d0102030904df0401f79b3c4009050d0000000601400904df7c4301b1610610a300000000000000000000000000000000c8503a773fec4be79d19eba9186ffc619e20d3b526766cfee051fc6a187ec39c89ad6f0d07a4a2013c538842adde69fa93e9eb6789ccd674202e133a0a5a2cc4be04cdc205b911f76235353af9f68fa4f2b65ed06afafd6c3ebf1eff17d2f995f32f718a717a59856eb3975992de103f6aa801cef103906d0d7214fe942616d08d632827aa5da1420a00006900000000000000"], 0x0) syz_open_dev$loop(&(0x7f0000000180), 0xd103, 0x32d2c2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = dup(r7) ioctl$KVM_SET_MSRS(r8, 0x4048aecb, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000240)={0xc}) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f00000003c0)={'ip6tnl0\x00', r9, 0x2f, 0xb, 0x0, 0x9, 0x11, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0x1, 0x20, 0x803, 0x80100006}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40800000000000061103c000000000062000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r10, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000080)={0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r11, &(0x7f0000000440)=ANY=[@ANYBLOB="8106000000000000d1b3d6cde7325c48288becaeceb44888efc7619b67099e0c40cc96e84ea861af6365d500e49fb7ce7ba5182567e2a7c709876d3b2b454fa312c55855eaf26576f21ec343c62a3d"], 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x0, 0x33c9bfd944701c4c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.482604733s ago: executing program 4 (id=576): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x64}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'vlan0\x00'}) 9.690145992s ago: executing program 4 (id=579): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000007000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={0x0, 0x4e, "bf33a010d38de7ad3c2fa2b8c3302362b11e6cbb12b3e25b6d8c6620179ff41f4caebe5aca6d33772207188272cfa448acd19ba9229335aababf963d3097ab8153ae0eec45718a0d5275db4ade59"}, &(0x7f0000000180)=0x56) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1, 0x2c6}, &(0x7f0000000340)=0x8) socket$tipc(0x1e, 0x5, 0x0) r2 = socket(0x200000100000011, 0x803, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x56, &(0x7f00000008c0)=ANY=[@ANYRES16]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0d}}, {0x4a, &(0x7f0000000440)=@string={0x4a, 0x3, "053464403ef2b404b6dd9d5e4558824c04a7908f5c784c5b9f000000000000c70350b07cfa888ab76ded79e5091ae70e1e03d8d4ce607f12e752a8964513d392dbeca8b90a387e58"}}]}) syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x40, "32341681c7"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x4, 0xa1, 0x0, "8ff404000000940000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xfe}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x25, &(0x7f0000000500)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "79f03953c4c96fe6b1d67b8b584cc085"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x3}]}, 0x3, [{0x9d, &(0x7f0000000740)=ANY=[@ANYBLOB="9d0379594b8573ba1de807f914061bb486a9eeb5549fd83515f82e0ca4117d5ecd579cf2a3eafef7377079eb0ecbf1b89b7a7dd3f19e9d890fe3648f133d8272af8bcd089bd8594252b1872d5a6286907b9542e69738c76ff4da43850d9423d6322609bc995eb8b7b088fd0910d90259ac61a382107a6d336cbedf657fae87a95e5a3336022d8b70ad3a67729d309b05d45251f40b91e28bfeca08fe7e43e2139e2a1b34eefdf6f454730039"]}, {0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0}]}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x8f}, 0x20) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4) r9 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_G_CROP(r9, 0xc014563b, 0x0) r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r10, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a19422ed"}}) socket$igmp6(0xa, 0x3, 0x2) 8.495659877s ago: executing program 0 (id=580): socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 8.182625257s ago: executing program 0 (id=581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) (async) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x82, &(0x7f0000000100), 0x8) (async) semget$private(0x0, 0x4000000009, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r2, 0x0, 0x0) (async) semop(0x0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r5) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0xca, 0x0) (async) r6 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)=0x0) (async) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x4, 0x2}]}) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x105101, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000040)={0xc, 0xa7ac4a80c261d4e, 0x2, {0x2, 0xb, 0x3, 0x9}}) (async) ioctl$TCSBRK(r3, 0x5409, 0x3) (async) semop(0x0, &(0x7f0000000000)=[{0x2, 0x7, 0x1000}], 0x1) (async) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) 8.083931028s ago: executing program 0 (id=582): unshare(0x800) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xe0, r2, 0x1, 0xcb, 0x6, @multicast}, 0x14) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000001900)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000040)="bd", 0x1}], 0x1}}], 0x1, 0xc0c0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0xffffffffffffff45, 0x11, 0x200, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1}, [{0x8}, {0x8, 0xb, 0x9}]}, 0x34}}, 0x0) 8.019749738s ago: executing program 4 (id=583): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x40018080, &(0x7f0000000040)="a795fc3155172b2f1b7527496104f3c3b87df0e28c2f0e9f7fe1352ec30c9ac0bf8cb7babdf261d5176d471f9abd81c5c4a5578d29a52fe6ffdc1ba0dabf9f03c48094c9545f0ecbd46a9f4520eb9eaf41aa0e0df29468eb7bdb8e09ae27b7405463e26cd10c13eaa6c9999033aad2847d510bb959166e90306a468a04bfbc", 0x7f, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f00000002c0)="2c6b26597e5346d0aa59") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000200)='\xacshU\xd6\r\x87%\bn\xd7\xc3W\xc3\x96\vem\xda\x99R@\x9b!\x18m\xfc\xfe\x9b', 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f0000000180)={0x2, 0x0, @dev}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0xa, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="cd", 0x34000}], 0x1}}], 0x1, 0x0) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) fcntl$lock(r5, 0x3, &(0x7f0000000300)={0x0, 0x1, 0x1, 0x4, r2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x40, 0x0, 0x5, 0x0, 0x0, 0x800}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.970010678s ago: executing program 0 (id=584): r0 = syz_open_dev$vivid(&(0x7f0000000140), 0x0, 0x2) sendfile(0xffffffffffffffff, r0, &(0x7f0000000180)=0x1, 0x7fffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f908, 0x7, '\x00', @value64=0xfffffffffffffff9}}) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000440)=ANY=[], 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4178c40ba0d0010"], 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000088c0)=[{0x0, 0x0, 0x0}], 0x1, 0x48055) syz_usb_connect(0x0, 0x1fc, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xd5}, 0x1c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x2010, r5, 0xbf533000) r7 = socket(0x40000000015, 0xa, 0x0) getsockopt(r7, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0x39) shutdown(0xffffffffffffffff, 0x0) r8 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000540)={&(0x7f0000000500), 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, {0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, "9753e4164083e180d9aa47334782c7fc1f999ede28a666b10a250266f67d0b26"}}) r9 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f00000002c0)={0x80000010}) set_mempolicy(0x3, &(0x7f0000000180)=0x1, 0x7) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f00000006c0)=""/201, 0x41000, 0x34, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000)={0x40000, 0xa}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.61039844s ago: executing program 3 (id=585): write(0xffffffffffffffff, &(0x7f0000000940)="7e31e3e923820f978f5719e0d575dcbcde95029b8a36682125d6b36345b82d159a149e0cb1a4a2369949ede0fd615cbdfe97869454b04fa04b9ca15c85971f355ff97217034cbc0af4de91f8f70284b113f7786b3d06b267b2e3f3b8b37140d30f4da8492fee7b5e9dcd4a697d702a79bde3dd84a7", 0x75) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = dup2(r1, r1) r3 = syz_io_uring_setup(0x24f8, &(0x7f00000003c0)={0x0, 0x0, 0x880, 0xfffffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}) io_uring_enter(r3, 0x5b43, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x8918, 0x1000000000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x1000000, @empty}}}, 0x9c) r7 = syz_usb_connect$cdc_ncm(0x6, 0x98, &(0x7f0000000ac0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "c150a09aa9a2"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0x0, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x0, 0x0, 0x8001}, @dmm={0x7, 0x24, 0x14, 0x8, 0x8}, @mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x10}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x9) syz_usb_connect$cdc_ecm(0x0, 0x65, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x53, 0x1, 0x1, 0x5, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0xa7, 0x2, 0x2, 0x6, 0x0, 0xe, {{0x8, 0x24, 0x6, 0x0, 0x0, "ccfe88"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x7, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0xff, 0xe9, 0x84, 0x3, 0xfffe, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xf, 0xe1, 0x3}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xa, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0xa, 0x1}}}}}]}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0xd, 0x3, 0x82, 0xff, 0x8d}, 0x12, &(0x7f0000000300)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0xb4cd4f97a8646dc0, 0xa, 0x80, 0x0, 0x69}]}, 0xa, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41f}}, {0xe8, &(0x7f0000000cc0)=@string={0xe8, 0x3, "d20a0fd4f00796631c9db5f8c08a14bed8ce877cb66c785779f4053ab0ca836aabef8d75a6a491a5328726f2dcf2eeada036ec45a9f76a08138bb691f98b1f9cb50c7f972d4fc36b167fad8fcdc2269f58be2f998b1cfea5daa9ea8fff23c4d93a843cc9482cfd7fac4ca974010108ecddacdc4f5cb9ec88cdd8b48291688ac1519b4d83abb20155bb6279d7ab0a2191dea8efb145b8d981ef4a14ea387d1e4182b31cb9d5391e6b0ee558c41f7a5e283556551b8f83a95ee7ed43044afcacdc665342a7093bbd1e39e6a8e4ce96975297474511b4e92e54ec098189e342cec3ef557fae17e6"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x384b}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3c41}}, {0xb8, &(0x7f00000009c0)=ANY=[@ANYBLOB="b8039abcc8ac72e0d02c18ea427ea95115a76a3961b9aac9a0070db572311da2cbe9c9a08d3f959118d5b23be6099e67e6592313bb52d04a38d15f7b54bec4bb7d1ff724a335cf83a56b0795a29fcad832fc5559600b619e1c8bbef97bfc003d21c4d334a5fd93c22a5f0f8fd9ef462d3875b8acb66f8c8bcd41a02c59b4e77e867eb62fd8a86d67048fc59c3f0d5e114ffc4a5de3673f386b8344c1504fcc19d9bd2a7b144436b671965027c7543be1929fdca6d6002ff77ebe1d38b58699bc67449ca0818126df633476430ee05ccd1c31570a8700000000"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x41f}}, {0x5b, &(0x7f0000000680)=ANY=[@ANYBLOB="5b0316ae7bfcc43d59d2f9246a1619f7087236368f142bbc1dab7d986deb77db1e56a3daab81eb8281d89f46d8a30bdfc39b0f48eb93ad9023e7c1b10e9f65345ce77f232de3574a7cd9e594d59f5b85d069af8fd349b242ff14e753513382b7ae20ea7b087dc7d00a"]}, {0xfc, &(0x7f0000000dc0)=@string={0xfc, 0x3, "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"}}, {0x70, &(0x7f0000000700)=@string={0x70, 0x3, "2aa3236d34dc94eb045f2398e91dd66276cf1d05f868d9c473e92656828c2e78a05572cee3561c5d0865990c194c6fe9354178a29c35f52a894da5bde8b8cb78975bec11ebdd39532cf3a32c9247723819b77587d9484e86f3faa384b20cac92983b749eb729b248f1723eed8407"}}, {0xeb, &(0x7f0000000780)=@string={0xeb, 0x3, "7a29702ff1728a7a63c4d6dd782501e06dacfc269b3dab3daf147ec072ea111ca6bc672d2c6718b738a5686833712a2a65f8e4767502b8d93cad90411d851f458d024674d9879967fe2cd5185f71f2f4a94436ad6e93aea2261965ea28576e5e6b132d887f6a5a409361578af14ec486906ddf42f2ff7ef5631868baae210a0ab292eaf458819fe756333c63c06ca989819082a994b3ad9c70dd020f00aa2836e59893ec24c4f3a651cff2554c1b23858c9284361b64a043da3e0012ad2fd02e1a3c4b5bac23a4a4a66a2b9b6b339324dfe2d4a0786e4a9ef48a019288a2136f3048a113b07cbfca08"}}]}) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, 0x0, 0x10, 0x10, 0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) io_setup(0x8, &(0x7f0000000640)) syz_emit_vhci(&(0x7f00000004c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_ecred_reconf_req={{0x19, 0x31, 0x4}, {0x251, 0x800}}}}, 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000c40)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @dest_unreach={0x1, 0x7, 0x0, 0x0, '\x00', {0x0, 0x6, "00b295", 0x0, 0x3a, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "caa7c1b7f4c336af"}}}}}}}, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) mlockall(0x3) 6.114665266s ago: executing program 4 (id=586): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x19, {0xa, 0x0, 0x0, @loopback}}, 0x24) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000001a0a0b4c460851a100"/21, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf090000000000005509010063af00000700000000000000bc9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe(&(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x190, 0x30, 0x2, 0x70b52d, 0x25dfdbff, {}, [{0x17c, 0x1, [@m_skbmod={0x108, 0x1f, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "f35b172d7baa6650224966c3f64eab2c30518026962cf5e57280dcc6e0b661da29afad601525508fce3d07af5dbb2381b08ccd78556c2f647620132671db1d7c309ebf6ed9bc2f6b34c06c478c617dcc6317198463a26239ee99dff9479ece66ca5a638081721d7abf577a62661f2fd72b9861bd4c0ec269d5a8d476a77a8d3e900d3ab9594606b9a1193813c8fa3b6eae4487242a39bb08c3fb5efe0513a176efe7d453756955a40048b74b617760e6e0ab30fae7f4eb7e131dbd8abb4dc20c8a58b1ebd68afbb719dbdcc144b12d5e71f885dad6"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbedit={0x40, 0x11, 0x0, 0x0, {{0xc}, {0x14, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x190}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x2, 0x0) r6 = fsopen(&(0x7f0000000000)='pstore\x00', 0x1) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r9, 0x4048ae9b, &(0x7f0000000300)={0xd0001}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000800b000000020000000100ffff5d0000000100000009000400"/48]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="36d0e866b80a0000000f23c80f21f866350c00a0000f23f866b9800000c00f326635000400000f300fc76a002e0f080f23742e3b5753baf80c66b8f494f78e66efbafc0c66b83ac8000066efda6509", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f0000000080)='[\x00', 0x0, r5) socket(0x23, 0x4, 0x8) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$pokeuser(0x6, r10, 0x358, 0xffffffff8e31da50) 5.77970562s ago: executing program 3 (id=587): r0 = open(&(0x7f0000001200)='./bus\x00', 0x400101042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000500000000000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000006010000f8ffffffbfa400000000000007040000f0fffdffb70200000800000018230000", @ANYRES32, @ANYBLOB="00000000ffffff1fb705000008000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfe2, &(0x7f0000001e00)=""/4066, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.611578516s ago: executing program 3 (id=588): r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x10000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() io_uring_setup(0x17c7, &(0x7f00000002c0)={0x0, 0x8000000, 0x3d, 0x3}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x9, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) semop(0x0, &(0x7f00000005c0)=[{0x4, 0xe, 0x1400}, {0x1}, {0x2, 0x5, 0x1800}], 0x3) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x7}, @window, @mss={0x2, 0xfff}, @mss={0x2, 0xd84}, @window={0x3, 0x9, 0x1000}], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x0, 0x7d}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x3, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000002c0)={0x1, r4}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r5, 0x111, 0x3, 0x20000000, 0x4) 5.280012154s ago: executing program 0 (id=589): socket$inet(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) 4.571528312s ago: executing program 3 (id=590): syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xa0201, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x0, 0x10300}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000140)) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0xfffffffffffffdec, r1, {0x8, 0x1}}, './file0\x00'}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4c891, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x63, &(0x7f0000000280)}) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) write$binfmt_script(r5, 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000c4f000/0x4000)=nil, 0x4000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x23) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) userfaultfd(0x80801) 17.573865ms ago: executing program 0 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x114, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2, @in=@multicast2}, {@in=@loopback, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@etimer_thresh={0x8, 0xc, 0x1}, @encap={0x1c, 0x8, {0x2, 0x0, 0xfffe, @in=@loopback}}]}, 0x114}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x1000000}}}}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x44000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) link(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='./file1\x00') r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="5c00000014006b03000000d86e6c1d000a117ea60809000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x63669b87798fda6f}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x8, 0x6, 0x100, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8010}, 0x4000014) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000300)='GPL\x00', 0xb, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe4b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14}}, 0x70}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 3 (id=592): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001280)=""/64, 0x40}], 0x1, 0x80fff5, 0x0) (async, rerun: 64) r2 = openat2(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x12080, 0x11, 0x26}, 0x18) (rerun: 64) read$FUSE(r1, &(0x7f00000012c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x28, 0x9, 0x2000010, 0x6d79, 0x1, 0x6, 0x8}}, 0x50) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r4, 0x10001}, &(0x7f0000000140)=0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000022800000240012800b00010062726964676529ff01000000e2141b6aebe429ad876d7bf486ec17c4d654fb5cf3267449d234cef07ca85011036aa8e1b6d7243d"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): 47] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 159.838746][ T5282] usbhid 1-1:1.0: can't add hid device: -71 [ 159.838859][ T5282] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 159.842107][ T5282] usb 1-1: USB disconnect, device number 18 [ 160.268842][ T9] usb 4-1: USB disconnect, device number 28 [ 160.301880][ T7176] ======================================================= [ 160.301880][ T7176] WARNING: The mand mount option has been deprecated and [ 160.301880][ T7176] and is ignored by this kernel. Remove the mand [ 160.301880][ T7176] option from the mount to silence this warning. [ 160.301880][ T7176] ======================================================= [ 160.482427][ T7185] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 160.554757][ T7180] input: syz0 as /devices/virtual/input/input19 [ 160.596916][ T7192] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 160.663966][ T7195] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 160.690097][ T7193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.345'. [ 160.886001][ T7204] batman_adv: batadv0: Adding interface: dummy0 [ 160.892714][ T7204] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.918369][ T25] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 160.928437][ T7204] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 161.052142][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 161.071369][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 161.079246][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 161.092005][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.106139][ T25] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.115805][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.124625][ T25] usb 2-1: Product: syz [ 161.128976][ T25] usb 2-1: Manufacturer: syz [ 161.134178][ T25] usb 2-1: SerialNumber: syz [ 161.140715][ T25] usb 2-1: config 0 descriptor?? [ 161.149602][ T25] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 161.160863][ T25] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 161.221182][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 161.234528][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 161.244343][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.253675][ T9] usb 3-1: Product: syz [ 161.258033][ T9] usb 3-1: Manufacturer: syz [ 161.264718][ T9] usb 3-1: SerialNumber: syz [ 161.271847][ T9] usb 3-1: config 0 descriptor?? [ 161.697257][ T9] airspy 3-1:0.0: Board ID: 00 [ 161.704811][ T9] airspy 3-1:0.0: Firmware version: [ 161.756293][ T25] em28xx 2-1:0.0: chip ID is em28178 [ 161.936727][ T2918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.966358][ T7197] CUSE: DEVNAME unspecified [ 161.987490][ T5232] usb 2-1: USB disconnect, device number 38 [ 161.994848][ T5232] em28xx 2-1:0.0: Disconnecting em28xx [ 162.021974][ T5232] em28xx 2-1:0.0: Freeing device [ 162.114154][ T9] airspy 3-1:0.0: usb_control_msg() failed -32 request 0e [ 162.126557][ T2918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.148085][ T9] airspy 3-1:0.0: Registered as swradio16 [ 162.189313][ T9] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 162.302838][ T2918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.376408][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.387934][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.398040][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.405395][ T9] usb 3-1: USB disconnect, device number 14 [ 162.412501][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.423507][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.431248][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.515959][ T2918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.921320][ T2918] bridge_slave_1: left allmulticast mode [ 162.927595][ T2918] bridge_slave_1: left promiscuous mode [ 162.937090][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.973799][ T2918] bridge_slave_0: left allmulticast mode [ 162.995099][ T2918] bridge_slave_0: left promiscuous mode [ 163.009233][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.054818][ T7236] program syz.2.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.860250][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.886671][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.919218][ T2918] bond0 (unregistering): Released all slaves [ 164.222339][ T7219] chnl_net:caif_netlink_parms(): no params data found [ 164.540212][ T5241] Bluetooth: hci0: command tx timeout [ 164.655680][ T2918] hsr_slave_0: left promiscuous mode [ 164.670858][ T2918] hsr_slave_1: left promiscuous mode [ 164.727437][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.821867][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.960947][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.000319][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.124141][ T2918] veth1_macvtap: left promiscuous mode [ 165.211146][ T2918] veth0_macvtap: left promiscuous mode [ 165.225553][ T2918] veth1_vlan: left promiscuous mode [ 165.238857][ T2918] veth0_vlan: left promiscuous mode [ 165.333313][ T6291] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 165.441215][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 165.511470][ T6291] usb 2-1: Using ep0 maxpacket: 32 [ 165.573324][ T6291] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 165.590375][ T6291] usb 2-1: can't read configurations, error -22 [ 165.741150][ T6291] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 165.911389][ T6291] usb 2-1: Using ep0 maxpacket: 32 [ 165.943771][ T6291] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 165.992722][ T6291] usb 2-1: can't read configurations, error -22 [ 166.089234][ T6291] usb usb2-port1: attempt power cycle [ 166.481320][ T6291] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 166.505779][ T6291] usb 2-1: Using ep0 maxpacket: 32 [ 166.513768][ T6291] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 166.523973][ T6291] usb 2-1: can't read configurations, error -22 [ 166.618043][ T5241] Bluetooth: hci0: command tx timeout [ 166.649729][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 166.649748][ T29] audit: type=1326 audit(1728863030.310:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a377dff9 code=0x7ffc0000 [ 166.701166][ T6291] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 166.727456][ T29] audit: type=1326 audit(1728863030.310:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7305 comm="syz.3.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04a377dff9 code=0x7ffc0000 [ 166.759525][ T6291] usb 2-1: Using ep0 maxpacket: 32 [ 166.797698][ T6291] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 166.834303][ T6291] usb 2-1: can't read configurations, error -22 [ 166.858362][ T6291] usb usb2-port1: unable to enumerate USB device [ 166.944321][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 167.048236][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 167.683642][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.694936][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 167.705837][ T9] usb 3-1: can't read configurations, error -71 [ 168.061804][ T7219] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.068985][ T7219] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.076422][ T7219] bridge_slave_0: entered allmulticast mode [ 168.083970][ T7219] bridge_slave_0: entered promiscuous mode [ 168.092502][ T7219] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.099618][ T7219] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.107454][ T7219] bridge_slave_1: entered allmulticast mode [ 168.115185][ T7219] bridge_slave_1: entered promiscuous mode [ 168.130080][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 168.172360][ T29] audit: type=1326 audit(1728863031.840:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 168.211719][ T7314] netlink: 60 bytes leftover after parsing attributes in process `syz.2.371'. [ 168.333395][ T7219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.423757][ T29] audit: type=1326 audit(1728863031.850:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 168.466290][ T7219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.511754][ T29] audit: type=1326 audit(1728863031.850:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 168.583872][ T29] audit: type=1326 audit(1728863031.850:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 168.691493][ T5241] Bluetooth: hci0: command tx timeout [ 168.714445][ T29] audit: type=1326 audit(1728863031.940:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 168.745610][ T7219] team0: Port device team_slave_0 added [ 168.789970][ T7219] team0: Port device team_slave_1 added [ 168.883442][ T29] audit: type=1326 audit(1728863031.940:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 168.906375][ T29] audit: type=1326 audit(1728863031.940:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 168.959170][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.978030][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.029966][ T29] audit: type=1326 audit(1728863031.940:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7315 comm="syz.4.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54be97dff9 code=0x7ffc0000 [ 169.172411][ T7219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.238580][ T7219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.255045][ T7219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.441229][ T5232] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 169.468219][ T7339] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 169.530539][ T7219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.671376][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 169.680429][ T7219] hsr_slave_0: entered promiscuous mode [ 169.688074][ T5232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 169.714375][ T5232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 169.721538][ T7219] hsr_slave_1: entered promiscuous mode [ 169.726142][ T5232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.742204][ T5232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.763120][ T5232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.763150][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 169.788934][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.798626][ T7219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.817952][ T7219] Cannot create hsr debugfs directory [ 170.002029][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 170.020783][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 170.030116][ T5232] usb 2-1: GET_CAPABILITIES returned 0 [ 170.030154][ T5232] usbtmc 2-1:16.0: can't read capabilities [ 170.083222][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.115724][ T9] usb 5-1: config 0 descriptor?? [ 170.300781][ T7336] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 170.355711][ T1567] usb 2-1: USB disconnect, device number 43 [ 170.775222][ T5241] Bluetooth: hci0: command tx timeout [ 171.014995][ T7219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.077280][ T7373] trusted_key: encrypted_key: master key parameter '' is invalid [ 171.091487][ T7219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.179872][ T7219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.236506][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.381'. [ 171.295292][ T7373] batadv0: entered promiscuous mode [ 171.308816][ T7373] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 171.317692][ T7219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.516143][ T7219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.575279][ T7219] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.658229][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.852630][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.865175][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.872469][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.901439][ T6291] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 171.933739][ T7394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.977798][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.981299][ T7390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.985155][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.072552][ T7394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.094108][ T7385] syz.3.380 (7385): drop_caches: 0 [ 172.132176][ T6291] usb 3-1: Using ep0 maxpacket: 16 [ 172.137880][ T7390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.140887][ T6291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.170256][ T6291] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.178937][ T7219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.203665][ T6291] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.220057][ T6291] usb 3-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 172.241515][ T6291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.271719][ T6291] usb 3-1: config 0 descriptor?? [ 172.292923][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 172.305865][ T9] asix 5-1:0.0: probe with driver asix failed with error -71 [ 172.354572][ T9] usb 5-1: USB disconnect, device number 29 [ 172.372445][ T5284] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 172.415635][ T7219] veth0_vlan: entered promiscuous mode [ 172.479584][ T7219] veth1_vlan: entered promiscuous mode [ 172.531729][ T5284] usb 2-1: Using ep0 maxpacket: 32 [ 172.538806][ T5284] usb 2-1: config 0 has no interfaces? [ 172.548097][ T5284] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 172.557908][ T5284] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 172.572660][ T6291] usbhid 3-1:0.0: can't add hid device: -71 [ 172.584982][ T5284] usb 2-1: Product: syz [ 172.589564][ T6291] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 172.597242][ T7219] veth0_macvtap: entered promiscuous mode [ 172.600841][ T5284] usb 2-1: Manufacturer: syz [ 172.618916][ T7219] veth1_macvtap: entered promiscuous mode [ 172.623972][ T6291] usb 3-1: USB disconnect, device number 17 [ 172.634851][ T5284] usb 2-1: SerialNumber: syz [ 172.651321][ T5284] usb 2-1: config 0 descriptor?? [ 172.670135][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.699715][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.719319][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.737524][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.751390][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.774069][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.798102][ T7219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.846747][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.886136][ T7422] trusted_key: encrypted_key: master key parameter '' is invalid [ 172.900195][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.906026][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.918023][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.930199][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.941637][ T7219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.952691][ T7219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.963764][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.964578][ T7219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.998361][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 173.049015][ T5284] usb 2-1: USB disconnect, device number 44 [ 173.053729][ T7422] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 173.098084][ T7219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.117738][ T7219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.130880][ T7219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.142562][ T7219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.373466][ T5368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.382126][ T5365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.390076][ T5365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.413250][ T5368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.620674][ T7443] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 173.629377][ T7443] IPv6: NLM_F_CREATE should be set when creating new route [ 173.675563][ T7446] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:65533 [ 173.703757][ T7443] netlink: 'syz.0.355': attribute type 27 has an invalid length. [ 173.716158][ T25] IPVS: starting estimator thread 0... [ 173.756085][ T7449] binder: 7444:7449 ioctl 4020ae46 20000180 returned -22 [ 173.812045][ T7450] IPVS: using max 32 ests per chain, 76800 per kthread [ 173.949786][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.957241][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.052527][ T7456] block device autoloading is deprecated and will be removed. [ 174.094723][ T7464] netlink: 64 bytes leftover after parsing attributes in process `syz.1.395'. [ 174.370404][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.403271][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.572892][ T7443] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.585074][ T7443] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.595614][ T7443] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.610198][ T7443] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.161680][ T6291] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 175.323795][ T7515] netlink: 44 bytes leftover after parsing attributes in process `syz.0.404'. [ 175.334569][ T6291] usb 3-1: Using ep0 maxpacket: 16 [ 175.370037][ T6291] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 175.421212][ T6291] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.474302][ T6291] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.501228][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 175.525860][ T6291] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.562741][ T6291] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.603195][ T6291] usb 3-1: Product: syz [ 175.616999][ T6291] usb 3-1: Manufacturer: syz [ 175.633893][ T6291] usb 3-1: SerialNumber: syz [ 175.658266][ T7524] ucma_write: process 56 (syz.3.406) changed security contexts after opening file descriptor, this is not allowed. [ 175.688101][ T25] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 175.724969][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.775550][ T25] usb 2-1: config 0 has no interface number 0 [ 175.820276][ T25] usb 2-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 175.843006][ T25] usb 2-1: config 0 interface 106 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 113 [ 175.861048][ T25] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 175.884618][ T25] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 175.910476][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.962116][ T25] usb 2-1: config 0 descriptor?? [ 175.978630][ T7511] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 176.045404][ T25] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 176.070797][ T7533] netlink: 152 bytes leftover after parsing attributes in process `syz.0.408'. [ 176.096086][ T6291] usb 3-1: 0:2 : does not exist [ 176.113657][ T7533] tipc: Started in network mode [ 176.118758][ T7533] tipc: Node identity :, cluster identity 4711 [ 176.141455][ T5322] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 176.271262][ T5322] usb 4-1: device descriptor read/64, error -71 [ 176.537371][ T5322] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 176.548121][ T6291] usb 3-1: USB disconnect, device number 18 [ 176.671376][ T5282] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 176.691465][ T5322] usb 4-1: device descriptor read/64, error -71 [ 176.801532][ T5322] usb usb4-port1: attempt power cycle [ 176.833445][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 176.844490][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.853709][ T7537] trusted_key: encrypted_key: master key parameter '' is invalid [ 176.861564][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.879385][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.410'. [ 176.890396][ T5282] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 176.899843][ T7537] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 176.909523][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.930953][ T5282] usb 1-1: config 0 descriptor?? [ 177.093683][ T35] usb 2-1: Failed to submit usb control message: -110 [ 177.110778][ T35] usb 2-1: unable to send the bmi data to the device: -110 [ 177.136932][ T35] usb 2-1: unable to get target info from device [ 177.146163][ T35] usb 2-1: could not get target info (-110) [ 177.159627][ T35] usb 2-1: could not probe fw (-110) [ 177.171322][ T5322] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 177.196734][ T5322] usb 4-1: device descriptor read/8, error -71 [ 177.410343][ T5282] hid_mf 0003:0079:1801.000A: item fetching failed at offset 0/2 [ 177.419804][ T5282] hid_mf 0003:0079:1801.000A: HID parse failed. [ 177.427004][ T5282] hid_mf 0003:0079:1801.000A: probe with driver hid_mf failed with error -22 [ 177.442071][ T5322] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 177.472208][ T5322] usb 4-1: device descriptor read/8, error -71 [ 177.581490][ T5322] usb usb4-port1: unable to enumerate USB device [ 177.601333][ T6291] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 177.623849][ T5322] usb 1-1: USB disconnect, device number 19 [ 177.751471][ T6291] usb 3-1: device descriptor read/64, error -71 [ 177.920280][ T7554] netlink: 48 bytes leftover after parsing attributes in process `syz.4.416'. [ 178.014587][ T6291] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 178.161381][ T6291] usb 3-1: device descriptor read/64, error -71 [ 178.264165][ T5284] usb 2-1: USB disconnect, device number 45 [ 178.330397][ T6291] usb usb3-port1: attempt power cycle [ 178.690586][ T6291] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 178.712149][ T5284] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 178.731958][ T6291] usb 3-1: device descriptor read/8, error -71 [ 178.851304][ T5284] usb 2-1: device descriptor read/64, error -71 [ 178.863510][ T7572] trusted_key: encrypted_key: master key parameter '' is invalid [ 178.877375][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 178.919036][ T7572] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 178.971463][ T6291] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 179.003442][ T6291] usb 3-1: device descriptor read/8, error -71 [ 179.070590][ T7578] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 179.102306][ T5284] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 179.121632][ T6291] usb usb3-port1: unable to enumerate USB device [ 179.151225][ T5282] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 179.271190][ T5284] usb 2-1: device descriptor read/64, error -71 [ 179.311308][ T5282] usb 1-1: Using ep0 maxpacket: 8 [ 179.321835][ T5282] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 179.333599][ T5282] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 179.343112][ T5282] usb 1-1: config 0 has no interface number 0 [ 179.349454][ T5282] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.362842][ T5282] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 108, changing to 10 [ 179.375823][ T5282] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 24694, setting to 1024 [ 179.392647][ T5282] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 179.399367][ T5284] usb usb2-port1: attempt power cycle [ 179.402982][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 179.416845][ T5282] usb 1-1: Product: syz [ 179.424669][ T5282] usb 1-1: config 0 descriptor?? [ 179.781161][ T5284] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 179.818431][ T5284] usb 2-1: device descriptor read/8, error -71 [ 180.081166][ T5284] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 180.111963][ T5284] usb 2-1: device descriptor read/8, error -71 [ 180.245517][ T5284] usb usb2-port1: unable to enumerate USB device [ 180.595567][ T7596] capability: warning: `syz.0.420' uses deprecated v2 capabilities in a way that may be insecure [ 180.750393][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 180.912824][ T5284] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 181.091825][ T5284] usb 4-1: Using ep0 maxpacket: 16 [ 181.104265][ T5284] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 181.129963][ T5284] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 181.168042][ T5284] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.191100][ T5284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.211619][ T5284] usb 4-1: Product: ࠓ [ 181.236404][ T5284] usb 4-1: Manufacturer: 섴ꭰ亜⽃⵻ᔮල椇냛⬩椫䥐뾫퇅ퟪ殫䖻幇㬤斐艁ⷸ䱎䌶䪝둬㵃쌃폣㬴䞍팥뮦佴纔䯙䚨跤懂䔵√隨묏ﴮ똷澬ଡⲦ䉀쭛⧮ⴳ뮖辋ﲽ䅷㜇䆄ꗇ┌鼏칔ৢ徾垹餪訁⩉讨䯐꼵镸Ꮝ䁁攖ᥣ摬ܵ皼䮸㩚棃臿꫏ﭗ [ 181.302706][ T5284] usb 4-1: SerialNumber: ꄳ႕଱㎭褡趥嚷风띚焷顠旗䏧햰荖㧬漂ࡁ犑䒒횞⼧儉億뙣萃캻殷豕ᚳ㦨詰䔓뤺烧嫿⋋陨쓳∛犻ᵷ㣩倽욞㙨뎿뚟硧丐坥ㅦձ饂湌嶥ཨỆ誟㕳ﾣ蜋젚旘✇葢๵ᐅ僺䆮㚺樳둌白瘌론֞ [ 181.549677][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.561517][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.576007][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.627807][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.643660][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.729853][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.801980][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.972648][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.002489][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.027870][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.119429][ T5282] usb 1-1: USB disconnect, device number 20 [ 182.186021][ T5284] cdc_ncm 4-1:1.0: bind() failure [ 182.224995][ T5284] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 182.300201][ T5284] cdc_ncm 4-1:1.1: bind() failure [ 182.329087][ T5284] usb 4-1: USB disconnect, device number 33 [ 182.613465][ T7645] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.620893][ T7645] IPv6: NLM_F_CREATE should be set when creating new route [ 182.632205][ T7645] netlink: 'syz.2.445': attribute type 27 has an invalid length. [ 182.937142][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.945004][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.231749][ T7648] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 183.468774][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.487401][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.497525][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.512346][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.529944][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.540767][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.586475][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.633855][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.711177][ T8] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 183.873027][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.889074][ T8] usb 4-1: config 0 has no interfaces? [ 183.906886][ T7645] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.920090][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 183.934495][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.945805][ T7645] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.958304][ T8] usb 4-1: Product: syz [ 183.964706][ T7645] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.981073][ T8] usb 4-1: Manufacturer: syz [ 183.999897][ T8] usb 4-1: SerialNumber: syz [ 184.013016][ T7645] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.044664][ T8] usb 4-1: config 0 descriptor?? [ 184.291896][ T7658] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 184.401333][ T1567] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 184.537889][ T7661] chnl_net:caif_netlink_parms(): no params data found [ 184.568801][ T5368] bridge_slave_1: left allmulticast mode [ 184.578094][ T5368] bridge_slave_1: left promiscuous mode [ 184.613412][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.647971][ T5368] bridge_slave_0: left allmulticast mode [ 184.672622][ T5368] bridge_slave_0: left promiscuous mode [ 184.690226][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.017093][ T7695] netlink: 104 bytes leftover after parsing attributes in process `syz.4.455'. [ 185.065313][ T7695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 185.112971][ T7695] netlink: 20 bytes leftover after parsing attributes in process `syz.4.455'. [ 185.231304][ T5232] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 185.410249][ T5232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.422148][ T5232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.434774][ T5232] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 185.444645][ T5232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.464533][ T5232] usb 3-1: config 0 descriptor?? [ 185.475012][ T5368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.493649][ T5368] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.503300][ T1567] usb 2-1: device descriptor read/64, error -71 [ 185.521846][ T5368] bond0 (unregistering): Released all slaves [ 185.571278][ T5234] Bluetooth: hci0: command tx timeout [ 185.614233][ T5368] tipc: Left network mode [ 185.692725][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.700066][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.708420][ T7661] bridge_slave_0: entered allmulticast mode [ 185.716143][ T7661] bridge_slave_0: entered promiscuous mode [ 185.759681][ T1567] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 185.778950][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.800427][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.823746][ T7661] bridge_slave_1: entered allmulticast mode [ 185.844699][ T7661] bridge_slave_1: entered promiscuous mode [ 185.895248][ T5232] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 185.932912][ T5232] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 185.946350][ T1567] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.959108][ T1567] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.993016][ T1567] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 186.003404][ T1567] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.011774][ T5368] hsr_slave_0: left promiscuous mode [ 186.020233][ T5368] hsr_slave_1: left promiscuous mode [ 186.030496][ T7698] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 186.061863][ T5368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.082714][ T1567] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.092309][ T5232] cp2112 0003:10C4:EA90.000B: Part Number: 0x82 Device Version: 0xFE [ 186.108410][ T5368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.137248][ T5232] cp2112 0003:10C4:EA90.000B: error requesting SMBus config [ 186.180256][ T5232] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -5 [ 186.481279][ T25] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 186.556260][ T1567] usb 4-1: USB disconnect, device number 34 [ 186.605236][ T5232] usb 2-1: USB disconnect, device number 51 [ 186.644327][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 186.671821][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 186.701145][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 186.733048][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 186.757078][ T5284] usb 3-1: USB disconnect, device number 23 [ 186.784127][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.821422][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.854396][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 186.926432][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.082942][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 187.408562][ T1567] usb 5-1: USB disconnect, device number 30 [ 187.661803][ T5234] Bluetooth: hci0: command tx timeout [ 188.134963][ T5368] team0 (unregistering): Port device team_slave_1 removed [ 188.278466][ T5368] team0 (unregistering): Port device team_slave_0 removed [ 188.511273][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 188.683402][ T25] usb 4-1: config 0 has no interfaces? [ 188.693701][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 188.723065][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.746774][ T25] usb 4-1: config 0 descriptor?? [ 189.147356][ T1567] usb 4-1: USB disconnect, device number 35 [ 189.390007][ T7737] netlink: 60 bytes leftover after parsing attributes in process `syz.2.462'. [ 189.417134][ T7661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.453864][ T7661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.606873][ T7661] team0: Port device team_slave_0 added [ 189.644623][ T7661] team0: Port device team_slave_1 added [ 189.739851][ T5234] Bluetooth: hci0: command tx timeout [ 189.798278][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.824461][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.905058][ T7661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.947944][ T7661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.955119][ T7661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.982673][ T7661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.055200][ T7777] netlink: 'syz.3.476': attribute type 1 has an invalid length. [ 190.081575][ T7661] hsr_slave_0: entered promiscuous mode [ 190.091330][ T7661] hsr_slave_1: entered promiscuous mode [ 190.099970][ T7661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.110088][ T7661] Cannot create hsr debugfs directory [ 190.311395][ T5322] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 190.463196][ T5322] usb 4-1: Using ep0 maxpacket: 8 [ 190.490228][ T5322] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 190.512442][ T5322] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.537622][ T5322] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.565443][ T5322] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.592103][ T5322] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.615553][ T5322] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 190.651468][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.928441][ T5322] usb 4-1: usb_control_msg returned -32 [ 190.938888][ T5322] usbtmc 4-1:16.0: can't read capabilities [ 190.959857][ T7804] netlink: 'syz.1.481': attribute type 1 has an invalid length. [ 191.100560][ T7804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.481'. [ 191.119071][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 191.134754][ T1567] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.179103][ T7804] bond4: (slave batadv1): Enslaving as a backup interface with an up link [ 191.324153][ T1567] usb 3-1: config 0 has an invalid interface number: 175 but max is 0 [ 191.332732][ T1567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.374487][ T1567] usb 3-1: config 0 has no interface number 0 [ 191.380687][ T1567] usb 3-1: config 0 interface 175 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 191.430932][ T7661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 191.456189][ T1567] usb 3-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 191.466050][ T1567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.475657][ T1567] usb 3-1: Product: syz [ 191.479993][ T1567] usb 3-1: Manufacturer: syz [ 191.484719][ T1567] usb 3-1: SerialNumber: syz [ 191.492484][ T1567] usb 3-1: config 0 descriptor?? [ 191.513062][ T7661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 191.516636][ T1567] symbolserial 3-1:0.175: required endpoints missing [ 191.553964][ T7661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 191.587543][ T7661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 191.681692][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.725469][ T7661] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.738187][ T5359] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.744503][ T7802] loop0: detected capacity change from 0 to 7 [ 191.745385][ T5359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.787836][ T7802] Dev loop0: unable to read RDB block 7 [ 191.805036][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.812227][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.820108][ T5234] Bluetooth: hci0: command tx timeout [ 191.821209][ T7802] loop0: unable to read partition table [ 191.832304][ T7802] loop0: partition table beyond EOD, truncated [ 191.871494][ T7802] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 191.871494][ T7802] ) failed (rc=-5) [ 191.892574][ T25] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 191.946874][ T5284] usb 3-1: USB disconnect, device number 24 [ 192.005119][ T7661] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.046296][ T7661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.079994][ T7661] veth0_vlan: entered promiscuous mode [ 192.106838][ T7661] veth1_vlan: entered promiscuous mode [ 192.140808][ T7661] veth0_macvtap: entered promiscuous mode [ 192.157560][ T25] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.168685][ T25] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 192.179355][ T7661] veth1_macvtap: entered promiscuous mode [ 192.191710][ T1567] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 192.205386][ T25] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 192.225641][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.236785][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.257392][ T25] usb 2-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱 [ 192.267083][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.277769][ T25] usb 2-1: SerialNumber: syz [ 192.295478][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.320912][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.348515][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.365714][ T1567] usb 5-1: Using ep0 maxpacket: 8 [ 192.371643][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.381665][ T1567] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 192.399755][ T1567] usb 5-1: config 179 has no interface number 0 [ 192.401476][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.407651][ T1567] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 192.431357][ T7661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.443866][ T1567] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 192.445695][ T7661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.471347][ T1567] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.485681][ T7661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.503927][ T1567] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 192.525854][ T7661] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.537466][ T1567] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 192.555392][ T1567] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 192.566080][ T7661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.575339][ T1567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.600741][ T7824] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 192.631153][ T7661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.660234][ T7661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.700905][ T25] usb 2-1: 0:2 : does not exist [ 192.752747][ T25] usb 2-1: USB disconnect, device number 52 [ 192.810575][ T5732] udevd[5732]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.944836][ T5365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.963234][ T5365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.991745][ T7847] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 193.045756][ T25] usb 4-1: USB disconnect, device number 36 [ 193.070264][ T8] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input23 [ 193.149016][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.488'. [ 193.225232][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 193.234576][ T7850] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 193.257931][ T2918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.268962][ T5282] usb 5-1: USB disconnect, device number 31 [ 193.269028][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 193.296892][ T5282] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 193.300303][ T2918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.405793][ T6843] bridge0: port 3(syz_tun) entered disabled state [ 193.489905][ T6843] syz_tun (unregistering): left allmulticast mode [ 193.518587][ T6843] syz_tun (unregistering): left promiscuous mode [ 193.536156][ T6843] bridge0: port 3(syz_tun) entered disabled state [ 193.936279][ T3024] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.220158][ T3024] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.455344][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.465131][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.537974][ T5241] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 194.548828][ T5241] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 194.557224][ T5241] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 194.566497][ T5241] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 194.580908][ T5241] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 194.588546][ T5241] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 194.885810][ T3024] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.001941][ T5234] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 195.063115][ T3024] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.106617][ T5234] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 195.167774][ T5234] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 195.200176][ T7891] fuse: Bad value for 'fd' [ 195.248984][ T5234] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 195.293854][ T7875] futex_wake_op: syz.0.446 tries to shift op by -1; fix this program [ 195.312821][ T5234] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 195.320735][ T5234] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 195.389924][ T3024] bridge_slave_1: left allmulticast mode [ 195.395902][ T3024] bridge_slave_1: left promiscuous mode [ 195.402129][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.496155][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 195.496173][ T29] audit: type=1326 audit(1728863059.170:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 195.524877][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.554855][ T3024] bridge_slave_0: left allmulticast mode [ 195.560567][ T3024] bridge_slave_0: left promiscuous mode [ 195.604424][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.619408][ T29] audit: type=1326 audit(1728863059.210:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 195.641592][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.680326][ T29] audit: type=1326 audit(1728863059.250:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f45fd1b00e5 code=0x7ffc0000 [ 195.751284][ T29] audit: type=1326 audit(1728863059.250:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 195.773471][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.817780][ T29] audit: type=1326 audit(1728863059.250:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7874 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 195.839970][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.846432][ T5282] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 195.899765][ T29] audit: type=1326 audit(1728863059.400:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7909 comm="syz.0.446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 195.921989][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.053190][ T5282] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.063883][ T5282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.095548][ T5282] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 196.105152][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.121194][ T5282] usb 5-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱 [ 196.129970][ T5282] usb 5-1: SerialNumber: syz [ 196.650361][ T3024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.675987][ T3024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.689411][ T3024] bond0 (unregistering): Released all slaves [ 196.753746][ T5282] usb 5-1: 0:2 : does not exist [ 196.789546][ T5282] usb 5-1: USB disconnect, device number 32 [ 196.931809][ T5241] Bluetooth: hci2: command tx timeout [ 197.223409][ T7892] chnl_net:caif_netlink_parms(): no params data found [ 197.413998][ T5241] Bluetooth: hci3: command tx timeout [ 197.421874][ T8] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 197.611142][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 197.627905][ T8] usb 1-1: config 0 has no interfaces? [ 197.649632][ T8] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 197.711060][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.746071][ T8] usb 1-1: config 0 descriptor?? [ 197.888561][ T3024] hsr_slave_0: left promiscuous mode [ 197.905310][ T3024] hsr_slave_1: left promiscuous mode [ 197.914501][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.928139][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.949363][ T3024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.960026][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.961523][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.986577][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.009466][ T25] usb 1-1: USB disconnect, device number 21 [ 198.026474][ T3024] veth1_macvtap: left promiscuous mode [ 198.035601][ T3024] veth0_macvtap: left promiscuous mode [ 198.042496][ T3024] veth1_vlan: left promiscuous mode [ 198.048278][ T3024] veth0_vlan: left promiscuous mode [ 198.286963][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.296782][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.308090][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.317218][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.326295][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 198.344037][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.441259][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 198.629636][ T25] usb 1-1: config 0 has no interfaces? [ 198.635607][ T25] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 198.655356][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.674332][ T25] usb 1-1: config 0 descriptor?? [ 198.813070][ T3024] team0 (unregistering): Port device team_slave_1 removed [ 198.862625][ T3024] team0 (unregistering): Port device team_slave_0 removed [ 198.885322][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.911499][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.954433][ T25] usb 1-1: USB disconnect, device number 22 [ 199.018711][ T5234] Bluetooth: hci2: command tx timeout [ 199.470309][ T7892] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.477968][ T7892] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.491215][ T5234] Bluetooth: hci3: command tx timeout [ 199.501673][ T7892] bridge_slave_0: entered allmulticast mode [ 199.519004][ T7892] bridge_slave_0: entered promiscuous mode [ 199.551425][ T8] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 199.668327][ T7892] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.680708][ T7892] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.688652][ T7892] bridge_slave_1: entered allmulticast mode [ 199.695744][ T7892] bridge_slave_1: entered promiscuous mode [ 199.724183][ T8] usb 3-1: config 0 has no interfaces? [ 199.730019][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 199.739389][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.754668][ T7904] chnl_net:caif_netlink_parms(): no params data found [ 199.773971][ T8] usb 3-1: config 0 descriptor?? [ 199.832916][ T7892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.916585][ T7892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.943032][ T7970] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 200.058197][ T7892] team0: Port device team_slave_0 added [ 200.073972][ T7956] netlink: 80 bytes leftover after parsing attributes in process `syz.2.508'. [ 200.106833][ T7956] netlink: 80 bytes leftover after parsing attributes in process `syz.2.508'. [ 200.139911][ T8] usb 3-1: USB disconnect, device number 25 [ 200.171476][ T7892] team0: Port device team_slave_1 added [ 200.319593][ T7904] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.341423][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.351387][ T7904] bridge_slave_0: entered allmulticast mode [ 200.358066][ T7989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.513'. [ 200.358455][ T7904] bridge_slave_0: entered promiscuous mode [ 200.373357][ T5234] Bluetooth: hci4: command tx timeout [ 200.386772][ T7904] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.402060][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.419600][ T7904] bridge_slave_1: entered allmulticast mode [ 200.448766][ T7904] bridge_slave_1: entered promiscuous mode [ 200.476400][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.496543][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.527828][ T7892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.547380][ T7952] chnl_net:caif_netlink_parms(): no params data found [ 200.565545][ T7892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.572983][ T7892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.600459][ T7892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.681871][ T7904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.708366][ T7904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.741311][ T5282] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 200.768805][ T7904] team0: Port device team_slave_0 added [ 200.791355][ T7997] netlink: 'syz.2.515': attribute type 10 has an invalid length. [ 200.799801][ T7997] batman_adv: batadv0: Adding interface: team0 [ 200.806831][ T7997] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.833919][ T7997] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 200.847360][ T7904] team0: Port device team_slave_1 added [ 200.912752][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.960351][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.976780][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.987279][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.987393][ T5282] usb 1-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 201.016738][ T7904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.037926][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.053283][ T5282] usb 1-1: config 0 descriptor?? [ 201.089880][ T7904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.091581][ T5234] Bluetooth: hci2: command tx timeout [ 201.103703][ T7904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.130025][ T7904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.164845][ T7892] hsr_slave_0: entered promiscuous mode [ 201.173071][ T7892] hsr_slave_1: entered promiscuous mode [ 201.201465][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 201.215478][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.222995][ T7952] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.230230][ T7952] bridge_slave_0: entered allmulticast mode [ 201.238417][ T7952] bridge_slave_0: entered promiscuous mode [ 201.247041][ T7952] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.257053][ T7952] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.264863][ T7952] bridge_slave_1: entered allmulticast mode [ 201.273020][ T7952] bridge_slave_1: entered promiscuous mode [ 201.371191][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 201.384495][ T7952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.398061][ T7952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.401868][ T8] usb 3-1: config 0 has no interfaces? [ 201.432522][ T8] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 201.468967][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.506564][ T8] usb 3-1: config 0 descriptor?? [ 201.532514][ T7904] hsr_slave_0: entered promiscuous mode [ 201.557213][ T7904] hsr_slave_1: entered promiscuous mode [ 201.565032][ T7904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.572421][ T5234] Bluetooth: hci3: command tx timeout [ 201.573492][ T7904] Cannot create hsr debugfs directory [ 201.613908][ T7952] team0: Port device team_slave_0 added [ 201.623968][ T7952] team0: Port device team_slave_1 added [ 201.753420][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.793046][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.802958][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.804704][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.831740][ T7952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.836678][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.854217][ T7952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.861966][ T7952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.896013][ T7952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.949730][ T8] usb 3-1: USB disconnect, device number 26 [ 202.146548][ T3024] bridge_slave_1: left allmulticast mode [ 202.160202][ T3024] bridge_slave_1: left promiscuous mode [ 202.169011][ T3024] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.184414][ T3024] bridge_slave_0: left allmulticast mode [ 202.190570][ T3024] bridge_slave_0: left promiscuous mode [ 202.197022][ T3024] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.412739][ T6291] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 202.451301][ T5234] Bluetooth: hci4: command tx timeout [ 202.619664][ T6291] usb 3-1: config 0 has no interfaces? [ 202.625412][ T6291] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 202.644047][ T6291] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.668524][ T6291] usb 3-1: config 0 descriptor?? [ 202.674430][ T3024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.692898][ T3024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.703188][ T3024] bond0 (unregistering): Released all slaves [ 202.849843][ T3024] bond1 (unregistering): Released all slaves [ 202.862394][ T3024] bond2 (unregistering): Released all slaves [ 202.893429][ T8003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.912224][ T8003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.934760][ T7952] hsr_slave_0: entered promiscuous mode [ 202.954423][ T25] usb 3-1: USB disconnect, device number 27 [ 202.966389][ T7952] hsr_slave_1: entered promiscuous mode [ 202.989380][ T7952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.008186][ T7952] Cannot create hsr debugfs directory [ 203.059106][ T3024] tipc: Left network mode [ 203.171352][ T5234] Bluetooth: hci2: command tx timeout [ 203.192059][ T7904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.363817][ T7904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.532831][ T5282] usbhid 1-1:0.0: can't add hid device: -71 [ 203.538957][ T5282] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.544677][ T7904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.597667][ T5282] usb 1-1: USB disconnect, device number 23 [ 203.651781][ T5234] Bluetooth: hci3: command tx timeout [ 203.790912][ T7904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.935775][ T3024] hsr_slave_0: left promiscuous mode [ 203.956179][ T3024] hsr_slave_1: left promiscuous mode [ 203.972234][ T3024] batman_adv: batadv0: Removing interface: dummy0 [ 203.992414][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.011890][ T3024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.081805][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 204.293177][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 204.314363][ T25] usb 3-1: config 1 has an invalid descriptor of length 205, skipping remainder of the config [ 204.327612][ T25] usb 3-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 204.356934][ T25] usb 3-1: config 1 interface 0 has no altsetting 0 [ 204.375798][ T25] usb 3-1: New USB device found, idVendor=0525, idProduct=fb40, bcdDevice= 0.40 [ 204.401155][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.421103][ T25] usb 3-1: Product: syz [ 204.425512][ T25] usb 3-1: Manufacturer: syz [ 204.451193][ T25] usb 3-1: SerialNumber: syz [ 204.540367][ T5234] Bluetooth: hci4: command tx timeout [ 204.618857][ T29] audit: type=1326 audit(1728863068.280:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 204.641073][ C1] vkms_vblank_simulate: vblank timer overrun [ 204.677671][ T29] audit: type=1326 audit(1728863068.320:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 204.684055][ T25] cdc_ether 3-1:1.0: skipping garbage [ 204.719676][ T29] audit: type=1326 audit(1728863068.320:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 204.737908][ T25] usb 3-1: bad CDC descriptors [ 204.784960][ T29] audit: type=1326 audit(1728863068.320:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 204.804687][ T25] usb 3-1: USB disconnect, device number 28 [ 204.827090][ T29] audit: type=1326 audit(1728863068.320:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 204.901109][ T29] audit: type=1326 audit(1728863068.320:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 204.946552][ T29] audit: type=1326 audit(1728863068.320:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 204.979352][ T29] audit: type=1326 audit(1728863068.320:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 205.067338][ T29] audit: type=1326 audit(1728863068.320:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 205.097682][ T29] audit: type=1326 audit(1728863068.320:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.0.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fd17dff9 code=0x7ffc0000 [ 205.505398][ T3024] team0 (unregistering): Port device team_slave_1 removed [ 205.566173][ T3024] team0 (unregistering): Port device team_slave_0 removed [ 206.612913][ T5234] Bluetooth: hci4: command tx timeout [ 206.791333][ T8] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 206.809074][ T3024] IPVS: stop unused estimator thread 0... [ 206.951932][ T8] usb 1-1: device descriptor read/64, error -71 [ 206.996546][ T7892] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.018898][ T7892] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.033741][ T7892] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.120204][ T7892] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.192598][ T8] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 207.296314][ T7892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.341294][ T8] usb 1-1: device descriptor read/64, error -71 [ 207.361814][ T5322] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 207.385789][ T7892] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.402749][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.409969][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.421449][ T7904] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 207.438547][ T7904] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 207.449383][ T7904] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 207.456626][ T8] usb usb1-port1: attempt power cycle [ 207.472210][ T7904] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.492856][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.500015][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.521340][ T5322] usb 3-1: Using ep0 maxpacket: 8 [ 207.530285][ T5322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.561507][ T5322] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 207.579963][ T5322] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 207.594736][ T7952] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.599512][ T5322] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 207.627578][ T5322] usb 3-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 207.631691][ T7952] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.648270][ T5322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.659328][ T5322] usb 3-1: Product: syz [ 207.673287][ T7952] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.680068][ T5322] usb 3-1: Manufacturer: syz [ 207.684981][ T5322] usb 3-1: SerialNumber: syz [ 207.693934][ T5322] usb 3-1: config 0 descriptor?? [ 207.711696][ T5322] smsusb:smsusb_probe: board id=2, interface number 0 [ 207.719240][ T5322] smsusb:smsusb_probe: Device initialized with return code -19 [ 207.730765][ T7952] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.805203][ T7892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.812413][ T8] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 207.851845][ T8] usb 1-1: device descriptor read/8, error -71 [ 207.882014][ T7904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.908555][ T5322] usb 3-1: USB disconnect, device number 29 [ 207.913024][ T7904] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.970368][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.977570][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.028250][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.035616][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.092923][ T8] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 208.122599][ T8] usb 1-1: device descriptor read/8, error -71 [ 208.179628][ T7952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.202032][ T7892] veth0_vlan: entered promiscuous mode [ 208.231519][ T7892] veth1_vlan: entered promiscuous mode [ 208.231750][ T8] usb usb1-port1: unable to enumerate USB device [ 208.253371][ T7952] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.295994][ T7904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.316868][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.324087][ T5368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.334719][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.341890][ T5368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.442646][ T7892] veth0_macvtap: entered promiscuous mode [ 208.500338][ T7904] veth0_vlan: entered promiscuous mode [ 208.549343][ T7892] veth1_macvtap: entered promiscuous mode [ 208.579299][ T7904] veth1_vlan: entered promiscuous mode [ 208.623588][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.634512][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.645719][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.657361][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.669086][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.705324][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.726365][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.739050][ T7892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.755373][ T7892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.778734][ T7892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.791754][ T7904] veth0_macvtap: entered promiscuous mode [ 208.800976][ T7904] veth1_macvtap: entered promiscuous mode [ 208.811486][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 208.830356][ T7952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.852398][ T7892] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.862229][ T7892] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.870976][ T7892] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.891067][ T7892] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.933097][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.944749][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.956191][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.968249][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.978541][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.989696][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 208.995830][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.008931][ T8] usb 3-1: config 0 has an invalid interface number: 27 but max is 0 [ 209.020074][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.028486][ T8] usb 3-1: config 0 has no interface number 0 [ 209.060153][ T8] usb 3-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=9a.5e [ 209.087042][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.114450][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.132104][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.144649][ T8] usb 3-1: config 0 descriptor?? [ 209.149902][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.162693][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.182319][ T7904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.195285][ T7904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.208014][ T7904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.234283][ T7904] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.245088][ T7904] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.256459][ T7904] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.271735][ T7904] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.286155][ T7952] veth0_vlan: entered promiscuous mode [ 209.343822][ T5365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.353512][ T5365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.376849][ T7952] veth1_vlan: entered promiscuous mode [ 209.453543][ T8091] kvm: pic: non byte write [ 209.510370][ T3024] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.518828][ T8] pegasus 3-1:0.27: probe with driver pegasus failed with error -71 [ 209.539697][ T3024] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.571914][ T8] usb 3-1: USB disconnect, device number 30 [ 209.687321][ T7952] veth0_macvtap: entered promiscuous mode [ 209.724511][ T7952] veth1_macvtap: entered promiscuous mode [ 209.750509][ T3024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.781146][ T3024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.811885][ T8121] trusted_key: encrypted_key: master key parameter '' is invalid [ 209.841820][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.494'. [ 209.855481][ T8121] batadv0: entered promiscuous mode [ 209.872072][ T8121] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 209.901819][ T5365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.912349][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.923060][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.927304][ T5365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.933024][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.933042][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.933061][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.933074][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.933086][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.933099][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.934492][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.016259][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.027177][ T5322] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 210.042489][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.074245][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.084830][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.099521][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.111347][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.123464][ T7952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.134078][ T7952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.145770][ T7952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.175539][ T7952] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.199151][ T7952] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.201712][ T5322] usb 1-1: Using ep0 maxpacket: 32 [ 210.208152][ T7952] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.254502][ T7952] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.271515][ T5322] usb 1-1: config 0 has no interfaces? [ 210.281996][ T5322] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 210.333097][ T5322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.377793][ T5322] usb 1-1: config 0 descriptor?? [ 210.465313][ T5234] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 210.474016][ T5234] Bluetooth: hci0: Injecting HCI hardware error event [ 210.483652][ T5234] Bluetooth: hci0: hardware error 0x00 [ 210.492408][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 210.492425][ T29] audit: type=1326 audit(1728863074.170:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 210.588986][ T29] audit: type=1326 audit(1728863074.170:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 210.622099][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.734990][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.740710][ T29] audit: type=1326 audit(1728863074.170:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 210.766295][ T29] audit: type=1326 audit(1728863074.200:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 210.790631][ T29] audit: type=1326 audit(1728863074.200:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 210.813500][ T29] audit: type=1326 audit(1728863074.200:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 210.863282][ T5282] usb 1-1: USB disconnect, device number 28 [ 211.019284][ T29] audit: type=1326 audit(1728863074.200:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 211.042751][ T29] audit: type=1326 audit(1728863074.200:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 211.075641][ T5365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.094538][ T5365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.112602][ T29] audit: type=1326 audit(1728863074.200:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 211.269268][ T5359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.282076][ T29] audit: type=1326 audit(1728863074.200:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8132 comm="syz.1.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235577dff9 code=0x7ffc0000 [ 211.315899][ T5359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.401186][ T5282] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 211.561272][ T5282] usb 1-1: config 0 has no interfaces? [ 211.573004][ T5282] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 211.673171][ T5282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.756237][ T5282] usb 1-1: config 0 descriptor?? [ 211.988521][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.085763][ T8171] syz_tun: entered promiscuous mode [ 212.127669][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.204154][ T9] usb 1-1: USB disconnect, device number 29 [ 212.271802][ T8171] batadv_slave_0: entered promiscuous mode [ 212.343885][ T8171] syz_tun: left promiscuous mode [ 212.414125][ T8171] batadv_slave_0: left promiscuous mode [ 212.521987][ T8192] xt_ipcomp: unknown flags 12 [ 212.691645][ T5234] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 213.241321][ T5282] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 213.281220][ T8] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 213.401257][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 213.421365][ T8] usb 3-1: device descriptor read/64, error -71 [ 213.429147][ T5282] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 213.446196][ T5282] usb 4-1: config 0 has no interface number 0 [ 213.460573][ T5282] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 213.477816][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.492580][ T5282] usb 4-1: Product: syz [ 213.501965][ T5282] usb 4-1: Manufacturer: syz [ 213.512317][ T5282] usb 4-1: SerialNumber: syz [ 213.524963][ T5282] usb 4-1: config 0 descriptor?? [ 213.539857][ T5282] smsc95xx v2.0.0 [ 213.671304][ T8] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 213.751457][ T6291] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 213.811517][ T8] usb 3-1: device descriptor read/64, error -71 [ 213.874274][ T8232] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 213.921437][ T8] usb usb3-port1: attempt power cycle [ 213.939022][ T6291] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.956253][ T6291] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.975398][ T6291] usb 5-1: config 0 descriptor?? [ 213.989648][ T6291] cp210x 5-1:0.0: cp210x converter detected [ 214.271281][ T8] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 214.302303][ T8] usb 3-1: device descriptor read/8, error -71 [ 214.452062][ T5322] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 214.541773][ T8] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 214.567954][ T5282] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 214.579085][ T5282] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.583984][ T8] usb 3-1: device descriptor read/8, error -71 [ 214.591373][ T5282] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 214.605667][ T5282] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 214.610731][ T8225] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 214.625323][ T5282] usb 4-1: USB disconnect, device number 37 [ 214.635621][ T5322] usb 1-1: Using ep0 maxpacket: 32 [ 214.710928][ T8] usb usb3-port1: unable to enumerate USB device [ 214.736358][ T8225] hsr_slave_0 (unregistering): left promiscuous mode [ 214.800971][ T5322] usb 1-1: config 0 has no interfaces? [ 214.806633][ T5322] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 214.816820][ T5322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.843872][ T5322] usb 1-1: config 0 descriptor?? [ 214.929866][ T6291] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 214.958712][ T6291] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 214.982565][ T6291] usb 5-1: cp210x converter now attached to ttyUSB0 [ 215.005641][ T6291] usb 5-1: USB disconnect, device number 33 [ 215.013996][ T5359] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.031905][ T6291] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.040081][ T6291] cp210x 5-1:0.0: device disconnected [ 215.054078][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.078844][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.097750][ T5282] usb 1-1: USB disconnect, device number 30 [ 215.168066][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.179450][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.188213][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.194509][ T5359] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.220229][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.231814][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.239240][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.327576][ T5359] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.421439][ T5359] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.524840][ T8247] chnl_net:caif_netlink_parms(): no params data found [ 215.571486][ T5322] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 215.612900][ T5359] bridge_slave_1: left allmulticast mode [ 215.623508][ T5359] bridge_slave_1: left promiscuous mode [ 215.639633][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.665770][ T5359] bridge_slave_0: left allmulticast mode [ 215.672216][ T5359] bridge_slave_0: left promiscuous mode [ 215.677969][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.733210][ T5322] usb 1-1: config 0 has no interfaces? [ 215.741824][ T5322] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 215.766275][ T5322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.793788][ T5322] usb 1-1: config 0 descriptor?? [ 216.025915][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.078281][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.114450][ T5282] usb 1-1: USB disconnect, device number 31 [ 216.191145][ T5322] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 216.378217][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.406464][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 216.428520][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 216.445758][ T5322] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.475235][ T5322] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.494608][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.516560][ T5322] usb 4-1: config 0 descriptor?? [ 216.523251][ T5359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.547553][ T5359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.569159][ T5359] bond0 (unregistering): Released all slaves [ 216.615261][ T8280] netlink: 6204 bytes leftover after parsing attributes in process `syz.4.561'. [ 216.632177][ T8280] netlink: 12 bytes leftover after parsing attributes in process `syz.4.561'. [ 216.650453][ T8280] netlink: 6204 bytes leftover after parsing attributes in process `syz.4.561'. [ 216.893278][ T8285] FAULT_INJECTION: forcing a failure. [ 216.893278][ T8285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.947779][ T8285] CPU: 0 UID: 0 PID: 8285 Comm: syz.0.563 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 216.958437][ T8285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.968523][ T8285] Call Trace: [ 216.971831][ T8285] [ 216.974783][ T8285] dump_stack_lvl+0x241/0x360 [ 216.979683][ T8285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.984912][ T8285] ? __pfx__printk+0x10/0x10 [ 216.989542][ T8285] ? snprintf+0xda/0x120 [ 216.993851][ T8285] should_fail_ex+0x3b0/0x4e0 [ 216.998665][ T8285] _copy_to_user+0x2f/0xb0 [ 217.003122][ T8285] simple_read_from_buffer+0xca/0x150 [ 217.008521][ T8285] proc_fail_nth_read+0x1e9/0x250 [ 217.013584][ T8285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.019168][ T8285] ? rw_verify_area+0x55e/0x6f0 [ 217.024067][ T8285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.029648][ T8285] vfs_read+0x201/0xbc0 [ 217.033827][ T8285] ? __pfx_lock_release+0x10/0x10 [ 217.038892][ T8285] ? __pfx_vfs_read+0x10/0x10 [ 217.043609][ T8285] ? __fget_files+0x3f3/0x470 [ 217.048327][ T8285] ? fdget_pos+0x24e/0x320 [ 217.052781][ T8285] ksys_read+0x183/0x2b0 [ 217.057058][ T8285] ? __pfx_ksys_read+0x10/0x10 [ 217.061848][ T8285] ? do_syscall_64+0x100/0x230 [ 217.066638][ T8285] ? do_syscall_64+0xb6/0x230 [ 217.071350][ T8285] do_syscall_64+0xf3/0x230 [ 217.075890][ T8285] ? clear_bhb_loop+0x35/0x90 [ 217.080688][ T8285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.086981][ T8285] RIP: 0033:0x7f45fd17ca3c [ 217.091465][ T8285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 217.111455][ T8285] RSP: 002b:00007f45fdefa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.119997][ T8285] RAX: ffffffffffffffda RBX: 00007f45fd335f80 RCX: 00007f45fd17ca3c [ 217.127991][ T8285] RDX: 000000000000000f RSI: 00007f45fdefa0a0 RDI: 0000000000000004 [ 217.136020][ T8285] RBP: 00007f45fdefa090 R08: 0000000000000000 R09: 0000000000000000 [ 217.144051][ T8285] R10: 0000000020000540 R11: 0000000000000246 R12: 0000000000000001 [ 217.152061][ T8285] R13: 0000000000000000 R14: 00007f45fd335f80 R15: 00007f45fd45fa28 [ 217.160108][ T8285] [ 217.163274][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.224527][ T5322] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 217.259461][ T5322] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 217.335099][ T5241] Bluetooth: hci3: command tx timeout [ 217.391625][ T8247] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.409341][ T8247] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.435964][ T8247] bridge_slave_0: entered allmulticast mode [ 217.462310][ T8247] bridge_slave_0: entered promiscuous mode [ 217.507290][ T8247] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.524966][ T8247] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.561306][ T8247] bridge_slave_1: entered allmulticast mode [ 217.578687][ T8247] bridge_slave_1: entered promiscuous mode [ 217.703811][ T8104] usb 4-1: USB disconnect, device number 38 [ 217.935879][ T8247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.021865][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.035611][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.036912][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.041154][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.062646][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.070086][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.149218][ T8312] netlink: 168 bytes leftover after parsing attributes in process `syz.0.570'. [ 218.164855][ T5359] hsr_slave_0: left promiscuous mode [ 218.201594][ T5359] hsr_slave_1: left promiscuous mode [ 218.224721][ T5359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.241394][ T5359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.251414][ T5359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.260508][ T5359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.342313][ T5359] veth1_macvtap: left promiscuous mode [ 218.353797][ T5359] veth0_macvtap: left promiscuous mode [ 218.360005][ T5359] veth1_vlan: left promiscuous mode [ 218.366512][ T5359] veth0_vlan: left promiscuous mode [ 218.731212][ T8104] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 218.892005][ T8104] usb 5-1: Using ep0 maxpacket: 32 [ 218.898860][ T8104] usb 5-1: config 0 has no interfaces? [ 218.911252][ T8104] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 218.926656][ T8104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.951691][ T8104] usb 5-1: config 0 descriptor?? [ 219.166237][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.194144][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.219671][ T8104] usb 5-1: USB disconnect, device number 34 [ 219.337201][ T5359] team0 (unregistering): Port device team_slave_1 removed [ 219.388312][ T5359] team0 (unregistering): Port device team_slave_0 removed [ 219.427780][ T5234] Bluetooth: hci3: command tx timeout [ 219.708152][ T8] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 219.890195][ T8] usb 5-1: config 0 has no interfaces? [ 219.909072][ T8] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 219.919763][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.933467][ T8247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.942000][ T8] usb 5-1: config 0 descriptor?? [ 220.078056][ T8247] team0: Port device team_slave_0 added [ 220.111846][ T8247] team0: Port device team_slave_1 added [ 220.131949][ T5234] Bluetooth: hci1: command tx timeout [ 220.158941][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.182251][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.205499][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.220862][ T6291] usb 5-1: USB disconnect, device number 35 [ 220.221340][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.256168][ T8247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 220.324582][ T8247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.340599][ T8247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.368513][ T8247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.484309][ T8247] hsr_slave_0: entered promiscuous mode [ 220.492813][ T8247] hsr_slave_1: entered promiscuous mode [ 220.504248][ T8247] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 220.512210][ T8247] Cannot create hsr debugfs directory [ 220.717998][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 220.921736][ T1850] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 221.051482][ T1850] usb 4-1: device descriptor read/64, error -71 [ 221.175047][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.188516][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.196465][ T8316] bridge_slave_0: entered allmulticast mode [ 221.214283][ T8316] bridge_slave_0: entered promiscuous mode [ 221.269342][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.277447][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.290542][ T8316] bridge_slave_1: entered allmulticast mode [ 221.298494][ T8316] bridge_slave_1: entered promiscuous mode [ 221.304500][ T1850] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 221.378653][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.411878][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.442607][ T1850] usb 4-1: device descriptor read/64, error -71 [ 221.494372][ T8316] team0: Port device team_slave_0 added [ 221.495126][ T8368] syz.0.578 uses obsolete (PF_INET,SOCK_PACKET) [ 221.509667][ T8316] team0: Port device team_slave_1 added [ 221.511082][ T5234] Bluetooth: hci3: command tx timeout [ 221.551402][ T1850] usb usb4-port1: attempt power cycle [ 221.596975][ T8369] netlink: 'syz.0.578': attribute type 9 has an invalid length. [ 221.699631][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.716576][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.743183][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.759077][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.781367][ T5359] bridge_slave_1: left allmulticast mode [ 221.787428][ T5359] bridge_slave_1: left promiscuous mode [ 221.801999][ T5359] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.829935][ T5359] bridge_slave_0: left allmulticast mode [ 221.835906][ T5359] bridge_slave_0: left promiscuous mode [ 221.855775][ T5359] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.891246][ T6291] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 221.921298][ T1850] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 221.947594][ T1850] usb 4-1: device descriptor read/8, error -71 [ 222.085586][ T6291] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.097430][ T6291] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.121929][ T6291] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.131266][ T6291] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.139316][ T6291] usb 5-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱 [ 222.149353][ T6291] usb 5-1: SerialNumber: syz [ 222.191261][ T1850] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 222.211980][ T1850] usb 4-1: device descriptor read/8, error -71 [ 222.221327][ T5234] Bluetooth: hci1: command tx timeout [ 222.325487][ T1850] usb usb4-port1: unable to enumerate USB device [ 222.381450][ T5359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.393248][ T5359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.404680][ T5359] bond0 (unregistering): Released all slaves [ 222.422666][ T5359] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 222.437094][ T5359] bond1 (unregistering): Released all slaves [ 222.548282][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.555761][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.582139][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.690617][ T6291] usb 5-1: 0:2 : does not exist [ 222.742179][ T6291] usb 5-1: USB disconnect, device number 36 [ 222.797964][ T5732] udevd[5732]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.972732][ T8316] hsr_slave_0: entered promiscuous mode [ 223.008377][ T8316] hsr_slave_1: entered promiscuous mode [ 223.031401][ T8316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.044565][ T8316] Cannot create hsr debugfs directory [ 223.256508][ T5359] hsr_slave_0: left promiscuous mode [ 223.287785][ T5359] hsr_slave_1: left promiscuous mode [ 223.323190][ T5359] batman_adv: batadv0: Removing interface: team0 [ 223.350623][ T5359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.372167][ T5359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.577825][ T5234] Bluetooth: hci3: command tx timeout [ 223.646920][ T8] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 223.814888][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 223.836137][ T8] usb 1-1: config 0 has no interfaces? [ 223.849526][ T8] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 223.860252][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.890520][ T8] usb 1-1: config 0 descriptor?? [ 223.942730][ T5359] team0 (unregistering): Port device team_slave_1 removed [ 223.997906][ T5359] team0 (unregistering): Port device team_slave_0 removed [ 224.082521][ T5322] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 224.114890][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.144979][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.167598][ T46] usb 1-1: USB disconnect, device number 32 [ 224.251222][ T5322] usb 4-1: Using ep0 maxpacket: 32 [ 224.262889][ T5322] usb 4-1: config 1 interface 0 altsetting 167 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 224.288034][ T5322] usb 4-1: config 1 interface 0 has no altsetting 0 [ 224.304483][ T5234] Bluetooth: hci1: command tx timeout [ 224.308495][ T5322] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.319395][ T5322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.335817][ T5322] usb 4-1: Product: 㡋 [ 224.340022][ T5322] usb 4-1: Manufacturer: ૒퐏߰掖鴜諀블컘粇沶坸㨅쪰檃疍꒦ꖑ蜲귮㚠䗬ࡪ謓醶诹鰟ವ靿伭毃编辭싍鼦빘餯᲋ꗾ꧚迪⏿萺줼ⱈ翽䲬璩ā곝俜륜裬芴梑솊魑荍늫唁抻흹ફ鄡꣞뇯롅臙䫯紸䄞뎂뤜㧕欞쑘稟⡞嘵᭕莏庩уﱊ卦Ꝃ㬉ẽ雎劗䞗ᅅ吮৬要䋣쏎嗯깿 [ 224.374781][ T5322] usb 4-1: SerialNumber: 㱁 [ 224.393453][ T8402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 224.623664][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 224.623685][ T29] audit: type=1326 audit(1728863088.290:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.652810][ T8104] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 224.664552][ T29] audit: type=1326 audit(1728863088.290:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.686713][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.701266][ T29] audit: type=1326 audit(1728863088.290:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.713146][ T5322] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 224.723531][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.723797][ T29] audit: type=1326 audit(1728863088.290:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.768080][ T5322] usb 4-1: USB disconnect, device number 43 [ 224.786759][ T29] audit: type=1326 audit(1728863088.290:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd350f7cadf code=0x7ffc0000 [ 224.810017][ T29] audit: type=1326 audit(1728863088.290:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.833942][ T29] audit: type=1326 audit(1728863088.290:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.856031][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.864303][ T29] audit: type=1326 audit(1728863088.290:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.886466][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.896845][ T8104] usb 1-1: config 0 has no interfaces? [ 224.902654][ T8104] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 224.912166][ T8104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.922374][ T8104] usb 1-1: config 0 descriptor?? [ 224.927480][ T29] audit: type=1326 audit(1728863088.290:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.951693][ T29] audit: type=1326 audit(1728863088.290:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8401 comm="syz.3.585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd350f7dff9 code=0x7ffc0000 [ 224.973952][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.157506][ T8400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.172624][ T8400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.211542][ T5322] usb 1-1: USB disconnect, device number 33 [ 225.308286][ T8247] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 225.336522][ T8247] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 225.444394][ T8247] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 225.460926][ T8247] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 225.780977][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 225.797410][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 225.808290][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 225.820731][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 225.845440][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 225.859837][ T5359] IPVS: stop unused estimator thread 0... [ 225.883821][ T8247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.903908][ T8247] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.944324][ T8247] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.954833][ T8247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.989330][ T3024] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.996553][ T3024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.025916][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.132994][ T3024] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.140196][ T3024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.371340][ T5241] Bluetooth: hci1: command tx timeout [ 226.386307][ T8247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.706931][ T8316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.498895][ T5241] Bluetooth: hci4: command tx timeout [ 230.391017][ C0] sched: DL replenish lagged too much [ 230.410358][ T8316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 230.531412][ T5241] Bluetooth: hci4: command tx timeout [ 231.354605][ T8316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 231.663580][ T8316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 231.768997][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.592'. [ 232.611947][ T5241] Bluetooth: hci4: command tx timeout [ 234.691144][ T5241] Bluetooth: hci4: command tx timeout [ 244.608308][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 244.618622][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 244.628562][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 244.636757][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 244.651275][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 244.661375][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 244.770357][ T5241] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 244.780796][ T5241] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 244.789639][ T5241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 244.799239][ T5241] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 244.807347][ T5241] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 244.821231][ T5241] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.691259][ T5241] Bluetooth: hci5: command tx timeout [ 246.851326][ T5241] Bluetooth: hci6: command tx timeout [ 248.771292][ T5241] Bluetooth: hci5: command tx timeout [ 248.931352][ T5241] Bluetooth: hci6: command tx timeout [ 250.851253][ T5241] Bluetooth: hci5: command tx timeout [ 251.019183][ T5241] Bluetooth: hci6: command tx timeout [ 252.935231][ T5241] Bluetooth: hci5: command tx timeout [ 253.091244][ T5241] Bluetooth: hci6: command tx timeout [ 255.961565][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.967911][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.957712][ T5234] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 277.968478][ T5234] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 277.976893][ T5234] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 277.990063][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 277.998896][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.007278][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.472292][ T5241] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 278.483500][ T5241] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 278.492291][ T5241] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 278.501769][ T5241] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 278.513353][ T5241] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 278.520689][ T5241] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 280.051440][ T5241] Bluetooth: hci7: command tx timeout [ 280.611285][ T5241] Bluetooth: hci8: command tx timeout [ 282.139220][ T5241] Bluetooth: hci7: command tx timeout [ 282.691239][ T5241] Bluetooth: hci8: command tx timeout [ 284.211247][ T5241] Bluetooth: hci7: command tx timeout [ 284.772299][ T5241] Bluetooth: hci8: command tx timeout [ 286.291864][ T5241] Bluetooth: hci7: command tx timeout [ 286.306316][ T5234] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 286.321295][ T5234] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 286.347049][ T5234] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 286.355763][ T5234] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 286.364407][ T5234] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 286.371815][ T5234] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 286.851209][ T5241] Bluetooth: hci8: command tx timeout [ 288.456218][ T5241] Bluetooth: hci9: command tx timeout [ 290.533369][ T5241] Bluetooth: hci9: command tx timeout [ 292.611270][ T5241] Bluetooth: hci9: command tx timeout [ 294.691216][ T5241] Bluetooth: hci9: command tx timeout [ 305.933852][ T5234] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 305.943764][ T5234] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 305.966863][ T5234] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 305.976921][ T5234] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 305.986889][ T5234] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 305.994490][ T5234] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 306.103151][ T5241] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 306.113868][ T5241] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 306.123999][ T5241] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 306.135945][ T5241] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 306.144309][ T5241] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 306.152245][ T5241] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 308.053637][ T5234] Bluetooth: hci10: command tx timeout [ 308.212618][ T5234] Bluetooth: hci11: command tx timeout [ 310.131260][ T5234] Bluetooth: hci10: command tx timeout [ 310.291330][ T5241] Bluetooth: hci11: command tx timeout [ 312.214875][ T5234] Bluetooth: hci10: command tx timeout [ 312.371340][ T5234] Bluetooth: hci11: command tx timeout [ 314.291221][ T5234] Bluetooth: hci10: command tx timeout [ 314.451301][ T5234] Bluetooth: hci11: command tx timeout [ 317.335066][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.357051][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.422456][ T5241] Bluetooth: hci2: command 0x0406 tx timeout [ 320.154976][ T5359] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.017628][ T5241] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.030924][ T5241] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.041786][ T5241] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.049749][ T5241] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.057397][ T5241] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.077807][ T5241] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.173234][ T5241] Bluetooth: hci3: command tx timeout [ 339.395431][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 339.406679][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 339.416874][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 339.426286][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 339.434392][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 339.443540][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.251323][ T5234] Bluetooth: hci3: command tx timeout [ 341.491169][ T5234] Bluetooth: hci4: command tx timeout [ 343.331433][ T5234] Bluetooth: hci3: command tx timeout [ 343.571296][ T5234] Bluetooth: hci4: command tx timeout [ 345.011422][ T5234] Bluetooth: hci1: command 0x0406 tx timeout [ 345.411503][ T5241] Bluetooth: hci3: command tx timeout [ 345.651198][ T5241] Bluetooth: hci4: command tx timeout [ 347.337273][ T5234] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 347.347496][ T5234] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 347.355832][ T5234] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 347.365233][ T5234] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 347.378811][ T5234] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 347.388638][ T5234] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 347.731274][ T5234] Bluetooth: hci4: command tx timeout [ 349.411214][ T5234] Bluetooth: hci12: command tx timeout [ 351.492334][ T5234] Bluetooth: hci12: command tx timeout [ 353.571181][ T5234] Bluetooth: hci12: command tx timeout [ 355.651228][ T5234] Bluetooth: hci12: command tx timeout [ 366.452376][ T5241] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 366.471384][ T5241] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 366.481307][ T5241] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 366.491559][ T5241] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 366.499503][ T5241] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 366.511593][ T5241] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 366.663908][ T5234] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 366.673523][ T5234] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 366.682464][ T5234] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 366.692882][ T5234] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 366.700587][ T5234] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 366.709909][ T5234] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 368.538795][ T5241] Bluetooth: hci13: command tx timeout [ 368.771235][ T8503] Bluetooth: hci14: command tx timeout [ 370.626156][ T8503] Bluetooth: hci5: command 0x0406 tx timeout [ 370.641178][ T8503] Bluetooth: hci13: command tx timeout [ 370.691304][ T5241] Bluetooth: hci6: command 0x0406 tx timeout [ 370.851253][ T5234] Bluetooth: hci14: command tx timeout [ 372.691305][ T5234] Bluetooth: hci13: command tx timeout [ 372.931267][ T5234] Bluetooth: hci14: command tx timeout [ 374.771227][ T5234] Bluetooth: hci13: command tx timeout [ 375.011444][ T5234] Bluetooth: hci14: command tx timeout [ 377.491444][ T30] INFO: task syz-executor:8316 blocked for more than 143 seconds. [ 377.499312][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 377.551258][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 377.601316][ T30] task:syz-executor state:D stack:21728 pid:8316 tgid:8316 ppid:1 flags:0x00000004 [ 377.681151][ T30] Call Trace: [ 377.684489][ T30] [ 377.687442][ T30] __schedule+0x1895/0x4b30 [ 377.754768][ T30] ? __pfx___schedule+0x10/0x10 [ 377.759700][ T30] ? __pfx_lock_release+0x10/0x10 [ 377.799422][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 377.831336][ T30] ? schedule+0x90/0x320 [ 377.835654][ T30] schedule+0x14b/0x320 [ 377.840291][ T30] schedule_preempt_disabled+0x13/0x30 [ 377.906662][ T30] __mutex_lock+0x6a7/0xd70 [ 377.921558][ T30] ? __mutex_lock+0x52a/0xd70 [ 377.926302][ T30] ? wg_set_device+0x102/0x2160 [ 377.960088][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 377.968864][ T30] ? dev_get_by_name+0x25/0x2d0 [ 377.981846][ T30] ? dev_get_by_name+0x28c/0x2d0 [ 377.986843][ T30] ? lookup_interface+0x292/0x2d0 [ 378.002921][ T30] wg_set_device+0x102/0x2160 [ 378.007665][ T30] ? __pfx___nla_validate_parse+0x10/0x10 [ 378.021135][ T30] ? __pfx_wg_set_device+0x10/0x10 [ 378.026310][ T30] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 378.041489][ T30] ? __nla_parse+0x40/0x60 [ 378.047913][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 378.066734][ T30] genl_rcv_msg+0xb14/0xec0 [ 378.078345][ T30] ? mark_lock+0x9a/0x360 [ 378.083339][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.088428][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 378.104413][ T30] ? __pfx_wg_set_device+0x10/0x10 [ 378.109581][ T30] ? __pfx___might_resched+0x10/0x10 [ 378.121219][ T30] netlink_rcv_skb+0x1e3/0x430 [ 378.126040][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.140785][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.147302][ T30] genl_rcv+0x28/0x40 [ 378.163285][ T30] netlink_unicast+0x7f6/0x990 [ 378.168117][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 378.182334][ T30] ? __virt_addr_valid+0x183/0x530 [ 378.187503][ T30] ? __check_object_size+0x48e/0x900 [ 378.203129][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 378.207952][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.221241][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 378.226239][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.246760][ T30] __sock_sendmsg+0x221/0x270 [ 378.257087][ T30] __sys_sendto+0x39b/0x4f0 [ 378.269344][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 378.279761][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 378.292558][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 378.298951][ T30] __x64_sys_sendto+0xde/0x100 [ 378.317750][ T30] do_syscall_64+0xf3/0x230 [ 378.326950][ T30] ? clear_bhb_loop+0x35/0x90 [ 378.338603][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.348377][ T30] RIP: 0033:0x7f3857b7fe8c [ 378.360448][ T30] RSP: 002b:00007f3857e5f6b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 378.374542][ T30] RAX: ffffffffffffffda RBX: 00007f3858864620 RCX: 00007f3857b7fe8c [ 378.389728][ T30] RDX: 0000000000000170 RSI: 00007f3858864670 RDI: 0000000000000005 [ 378.404269][ T30] RBP: 0000000000000000 R08: 00007f3857e5f704 R09: 000000000000000c [ 378.422450][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 378.441455][ T30] R13: 0000000000000000 R14: 00007f3858864670 R15: 0000000000000000 [ 378.449496][ T30] [ 378.461185][ T30] INFO: task syz.0.591:8436 blocked for more than 144 seconds. [ 378.468783][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 378.488277][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.501200][ T30] task:syz.0.591 state:D stack:25920 pid:8436 tgid:8436 ppid:7661 flags:0x00004006 [ 378.522871][ T30] Call Trace: [ 378.526194][ T30] [ 378.529468][ T30] __schedule+0x1895/0x4b30 [ 378.545244][ T30] ? __pfx___schedule+0x10/0x10 [ 378.550152][ T30] ? __pfx_lock_release+0x10/0x10 [ 378.566394][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 378.577100][ T30] ? schedule+0x90/0x320 [ 378.588243][ T30] schedule+0x14b/0x320 [ 378.597532][ T30] schedule_preempt_disabled+0x13/0x30 [ 378.607882][ T30] __mutex_lock+0x6a7/0xd70 [ 378.615502][ T30] ? __mutex_lock+0x52a/0xd70 [ 378.620220][ T30] ? raw_release+0x1b8/0x8b0 [ 378.641350][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 378.646441][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 378.662686][ T30] raw_release+0x1b8/0x8b0 [ 378.667164][ T30] sock_close+0xbc/0x240 [ 378.676414][ T30] ? __pfx_sock_close+0x10/0x10 [ 378.687569][ T30] __fput+0x23f/0x880 [ 378.697636][ T30] task_work_run+0x24f/0x310 [ 378.709225][ T30] ? __pfx_task_work_run+0x10/0x10 [ 378.718056][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 378.730785][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 378.740144][ T30] do_syscall_64+0x100/0x230 [ 378.751139][ T30] ? clear_bhb_loop+0x35/0x90 [ 378.755870][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.777438][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783949][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.810879][ T30] RIP: 0033:0x7f45fd17dff9 [ 378.815806][ T30] RSP: 002b:00007f45fd45fb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 378.851269][ T30] RAX: 0000000000000000 RBX: 00007f45fd337a80 RCX: 00007f45fd17dff9 [ 378.859310][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 378.894298][ T30] RBP: 00007f45fd337a80 R08: 0000000000000006 R09: 00007f45fd45fe7f [ 378.931219][ T30] R10: 00000000005ec648 R11: 0000000000000246 R12: 0000000000038b05 [ 378.939256][ T30] R13: 00007f45fd45fc90 R14: 0000000000000032 R15: ffffffffffffffff [ 378.971237][ T30] [ 378.988381][ T30] INFO: task syz.3.592:8440 blocked for more than 144 seconds. [ 379.020989][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 379.028751][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.067372][ T30] task:syz.3.592 state:D stack:25392 pid:8440 tgid:8437 ppid:7892 flags:0x00004004 [ 379.102477][ T30] Call Trace: [ 379.105817][ T30] [ 379.108772][ T30] __schedule+0x1895/0x4b30 [ 379.140970][ T30] ? __pfx___schedule+0x10/0x10 [ 379.145952][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.169771][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.191143][ T30] ? schedule+0x90/0x320 [ 379.195946][ T30] schedule+0x14b/0x320 [ 379.200142][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.231132][ T30] __mutex_lock+0x6a7/0xd70 [ 379.235708][ T30] ? __mutex_lock+0x52a/0xd70 [ 379.240412][ T30] ? rtnl_newlink+0xab7/0x20a0 [ 379.271154][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.301096][ T30] ? __asan_memset+0x23/0x50 [ 379.305764][ T30] ? nla_strscpy+0x113/0x180 [ 379.310391][ T30] rtnl_newlink+0xab7/0x20a0 [ 379.341193][ T30] ? rtnl_newlink+0xa91/0x20a0 [ 379.346046][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.371206][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 379.381071][ T30] ? __mutex_lock+0x9ab/0xd70 [ 379.385806][ T30] ? __mutex_lock+0x52a/0xd70 [ 379.390530][ T30] ? __pfx_rtnl_newlink+0x10/0x10 [ 379.441336][ T30] rtnetlink_rcv_msg+0x73f/0xcf0 [ 379.446348][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 379.461689][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.467223][ T30] ? ref_tracker_free+0x643/0x7e0 [ 379.500812][ T30] netlink_rcv_skb+0x1e3/0x430 [ 379.513376][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 379.518915][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 379.551136][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 379.556410][ T30] netlink_unicast+0x7f6/0x990 [ 379.579382][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 379.611219][ T30] ? __virt_addr_valid+0x183/0x530 [ 379.616399][ T30] ? __check_object_size+0x48e/0x900 [ 379.651248][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 379.656090][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.682495][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 379.687499][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.710026][ T30] __sock_sendmsg+0x221/0x270 [ 379.723354][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 379.728187][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.760823][ T30] __sys_sendmsg+0x292/0x380 [ 379.772303][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.777512][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.805807][ T30] ? do_syscall_64+0x100/0x230 [ 379.810637][ T30] ? do_syscall_64+0xb6/0x230 [ 379.841305][ T30] do_syscall_64+0xf3/0x230 [ 379.845873][ T30] ? clear_bhb_loop+0x35/0x90 [ 379.850576][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.884674][ T30] RIP: 0033:0x7fd350f7dff9 [ 379.911082][ T30] RSP: 002b:00007fd351d8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.919559][ T30] RAX: ffffffffffffffda RBX: 00007fd351136058 RCX: 00007fd350f7dff9 [ 379.951068][ T30] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 379.959106][ T30] RBP: 00007fd350ff0296 R08: 0000000000000000 R09: 0000000000000000 [ 380.007893][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.041167][ T30] R13: 0000000000000000 R14: 00007fd351136058 R15: 00007fd35125fa28 [ 380.049219][ T30] [ 380.071149][ T30] [ 380.071149][ T30] Showing all locks held in the system: [ 380.078919][ T30] 7 locks held by kworker/0:0/8: [ 380.111531][ T30] 1 lock held by khungtaskd/30: [ 380.122943][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 380.161342][ T30] 1 lock held by dhcpcd/4901: [ 380.166074][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 380.201213][ T30] 2 locks held by getty/4984: [ 380.205949][ T30] #0: ffff8880335da0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 380.241203][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 380.278923][ T30] 6 locks held by kworker/u8:9/5359: [ 380.293352][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 380.319733][ T30] #1: ffffc900045b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 380.336230][ T30] #2: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 380.353453][ T30] #3: ffff88806cdcb0e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 380.371603][ T30] #4: ffff88806cdca250 (&devlink->lock_key#20){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 380.398592][ T30] #5: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 380.417926][ T30] 3 locks held by kworker/u8:13/5365: [ 380.428024][ T30] #0: ffff88802e805948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 380.451723][ T30] #1: ffffc900047a7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 380.481059][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 380.490579][ T30] 3 locks held by kworker/0:6/6291: [ 380.507808][ T30] 3 locks held by kworker/0:7/8104: [ 380.517262][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 380.551272][ T30] #1: ffffc9000317fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 380.571071][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 380.580749][ T30] 1 lock held by syz-executor/8247: [ 380.598006][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 380.621174][ T30] 3 locks held by syz-executor/8316: [ 380.627023][ T30] #0: ffffffff8fd37ef0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 380.642529][ T30] #1: ffffffff8fd37da8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 380.661309][ T30] #2: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0x102/0x2160 [ 380.670544][ T30] 1 lock held by syz-executor/8422: [ 380.686358][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 380.705775][ T30] 2 locks held by syz.0.591/8436: [ 380.710844][ T30] #0: ffff88805eaaac08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 380.731568][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 380.740549][ T30] 2 locks held by syz.0.591/8438: [ 380.757405][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 380.779361][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 380.792845][ T30] 1 lock held by syz.3.592/8440: [ 380.797820][ T30] #0: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_newlink+0xab7/0x20a0 [ 380.820379][ T30] 2 locks held by syz-executor/8449: [ 380.826100][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 380.846982][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 380.868960][ T30] 2 locks held by syz-executor/8451: [ 380.879433][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 380.897300][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 380.920847][ T30] 2 locks held by syz-executor/8458: [ 380.926651][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 380.945872][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 380.967360][ T30] 2 locks held by syz-executor/8460: [ 380.978570][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.000072][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.021241][ T30] 2 locks held by syz-executor/8465: [ 381.026579][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.046413][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.063373][ T30] 2 locks held by syz-executor/8471: [ 381.068694][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.089039][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.111422][ T30] 2 locks held by syz-executor/8475: [ 381.117778][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.134394][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.153740][ T30] 2 locks held by syz-executor/8485: [ 381.159061][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.178385][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.191576][ T30] 2 locks held by syz-executor/8488: [ 381.196894][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.217768][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.240044][ T30] 2 locks held by syz-executor/8493: [ 381.248601][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.266580][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.283400][ T30] 2 locks held by syz-executor/8499: [ 381.288723][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.308759][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.331476][ T30] 2 locks held by syz-executor/8502: [ 381.336811][ T30] #0: ffffffff8fcc5690 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 381.361154][ T30] #1: ffffffff8fcd2188 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 381.381139][ T30] [ 381.383505][ T30] ============================================= [ 381.383505][ T30] [ 381.401611][ T30] NMI backtrace for cpu 1 [ 381.405976][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 381.416510][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.426597][ T30] Call Trace: [ 381.429905][ T30] [ 381.432861][ T30] dump_stack_lvl+0x241/0x360 [ 381.437565][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 381.442788][ T30] ? __pfx__printk+0x10/0x10 [ 381.447419][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 381.452395][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 381.457881][ T30] ? _printk+0xd5/0x120 [ 381.462059][ T30] ? __pfx__printk+0x10/0x10 [ 381.466674][ T30] ? __wake_up_klogd+0xcc/0x110 [ 381.471549][ T30] ? __pfx__printk+0x10/0x10 [ 381.476166][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 381.481220][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 381.487220][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 381.493230][ T30] watchdog+0xff4/0x1040 [ 381.497501][ T30] ? watchdog+0x1ea/0x1040 [ 381.501944][ T30] ? __pfx_watchdog+0x10/0x10 [ 381.506644][ T30] kthread+0x2f0/0x390 [ 381.510729][ T30] ? __pfx_watchdog+0x10/0x10 [ 381.515430][ T30] ? __pfx_kthread+0x10/0x10 [ 381.520038][ T30] ret_from_fork+0x4b/0x80 [ 381.524480][ T30] ? __pfx_kthread+0x10/0x10 [ 381.529091][ T30] ret_from_fork_asm+0x1a/0x30 [ 381.533890][ T30] [ 381.537802][ T30] Sending NMI from CPU 1 to CPUs 0: [ 381.543291][ C0] NMI backtrace for cpu 0 [ 381.543305][ C0] CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 381.543324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.543335][ C0] Workqueue: events nsim_dev_trap_report_work [ 381.543356][ C0] RIP: 0010:__lock_acquire+0x403/0x2050 [ 381.543379][ C0] Code: c8 00 00 00 48 89 9c 24 80 00 00 00 48 89 03 65 8b 05 9d 26 92 7e 31 db 85 c0 0f 95 c3 01 db 49 8d bc 24 c4 0a 00 00 48 89 f8 <48> c1 e8 03 48 89 44 24 58 0f b6 04 30 84 c0 48 89 7c 24 18 0f 85 [ 381.543393][ C0] RSP: 0018:ffffc90000007630 EFLAGS: 00000046 [ 381.543406][ C0] RAX: ffff88801cafe4c4 RBX: 0000000000000000 RCX: ffffffff9a3ce903 [ 381.543418][ C0] RDX: 0000000000000005 RSI: dffffc0000000000 RDI: ffff88801cafe4c4 [ 381.543429][ C0] RBP: 0000000000000019 R08: 0000000000000022 R09: ffff88801cafe4e0 [ 381.543440][ C0] R10: dffffc0000000000 R11: fffffbfff2039e6e R12: ffff88801cafda00 [ 381.543452][ C0] R13: 0000000000000022 R14: 0000000000000000 R15: ffffffff8e937de0 [ 381.543463][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 381.543477][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 381.543488][ C0] CR2: 00007f45fd306d38 CR3: 00000000690b8000 CR4: 00000000003526f0 [ 381.543503][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 381.543512][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 381.543523][ C0] Call Trace: [ 381.543528][ C0] [ 381.543535][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 381.543553][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 381.543574][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 381.543596][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 381.543615][ C0] ? nmi_handle+0x14f/0x5a0 [ 381.543631][ C0] ? nmi_handle+0x2a/0x5a0 [ 381.543647][ C0] ? __lock_acquire+0x403/0x2050 [ 381.543665][ C0] ? default_do_nmi+0x63/0x160 [ 381.543683][ C0] ? exc_nmi+0x123/0x1f0 [ 381.543700][ C0] ? end_repeat_nmi+0xf/0x53 [ 381.543718][ C0] ? __lock_acquire+0x403/0x2050 [ 381.543738][ C0] ? __lock_acquire+0x403/0x2050 [ 381.543757][ C0] ? __lock_acquire+0x403/0x2050 [ 381.543776][ C0] [ 381.543782][ C0] [ 381.543793][ C0] lock_acquire+0x1ed/0x550 [ 381.543811][ C0] ? NF_HOOK+0x9a/0x450 [ 381.543830][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 381.543850][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 381.543866][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 381.543888][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 381.543903][ C0] NF_HOOK+0xbb/0x450 [ 381.543918][ C0] ? NF_HOOK+0x9a/0x450 [ 381.543933][ C0] ? __lock_acquire+0x1384/0x2050 [ 381.543952][ C0] ? skb_orphan+0xae/0xd0 [ 381.543968][ C0] ? NF_HOOK+0x9a/0x450 [ 381.543983][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 381.543997][ C0] ? ip_rcv_core+0x801/0xd10 [ 381.544017][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 381.544032][ C0] __netif_receive_skb+0x2bf/0x650 [ 381.544050][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 381.544069][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 381.544085][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.544104][ C0] ? __pfx_lock_release+0x10/0x10 [ 381.544124][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 381.544147][ C0] process_backlog+0x662/0x15b0 [ 381.544167][ C0] ? process_backlog+0x33b/0x15b0 [ 381.544187][ C0] ? __pfx_process_backlog+0x10/0x10 [ 381.544204][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.544225][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.544252][ C0] __napi_poll+0xcb/0x490 [ 381.544270][ C0] net_rx_action+0x89b/0x1240 [ 381.544295][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 381.544313][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 381.544344][ C0] handle_softirqs+0x2c5/0x980 [ 381.544365][ C0] ? do_softirq+0x11b/0x1e0 [ 381.544383][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 381.544404][ C0] do_softirq+0x11b/0x1e0 [ 381.544421][ C0] [ 381.544426][ C0] [ 381.544431][ C0] ? __pfx_do_softirq+0x10/0x10 [ 381.544449][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 381.544469][ C0] ? rcu_is_watching+0x15/0xb0 [ 381.544486][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 381.544504][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 381.544521][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 381.544539][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 381.544557][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 381.544576][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 381.544598][ C0] ? process_scheduled_works+0x976/0x1850 [ 381.544617][ C0] process_scheduled_works+0xa63/0x1850 [ 381.544644][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.544666][ C0] ? assign_work+0x364/0x3d0 [ 381.544685][ C0] worker_thread+0x870/0xd30 [ 381.544708][ C0] ? __kthread_parkme+0x169/0x1d0 [ 381.544728][ C0] ? __pfx_worker_thread+0x10/0x10 [ 381.544746][ C0] kthread+0x2f0/0x390 [ 381.544760][ C0] ? __pfx_worker_thread+0x10/0x10 [ 381.544778][ C0] ? __pfx_kthread+0x10/0x10 [ 381.544793][ C0] ret_from_fork+0x4b/0x80 [ 381.544813][ C0] ? __pfx_kthread+0x10/0x10 [ 381.544827][ C0] ret_from_fork_asm+0x1a/0x30 [ 381.544850][ C0] [ 382.129473][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 382.136367][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 382.146888][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 382.156964][ T30] Call Trace: [ 382.160256][ T30] [ 382.163200][ T30] dump_stack_lvl+0x241/0x360 [ 382.167903][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.173116][ T30] ? __pfx__printk+0x10/0x10 [ 382.177744][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 382.183753][ T30] ? vscnprintf+0x5d/0x90 [ 382.188104][ T30] panic+0x349/0x880 [ 382.192020][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 382.198193][ T30] ? __pfx_panic+0x10/0x10 [ 382.202632][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 382.208020][ T30] ? __irq_work_queue_local+0x137/0x410 [ 382.213592][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 382.218988][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 382.225161][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 382.231343][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 382.237518][ T30] watchdog+0x1033/0x1040 [ 382.241872][ T30] ? watchdog+0x1ea/0x1040 [ 382.246314][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.251008][ T30] kthread+0x2f0/0x390 [ 382.255095][ T30] ? __pfx_watchdog+0x10/0x10 [ 382.259791][ T30] ? __pfx_kthread+0x10/0x10 [ 382.264399][ T30] ret_from_fork+0x4b/0x80 [ 382.268843][ T30] ? __pfx_kthread+0x10/0x10 [ 382.273452][ T30] ret_from_fork_asm+0x1a/0x30 [ 382.278248][ T30] [ 382.281539][ T30] Kernel Offset: disabled [ 382.285860][ T30] Rebooting in 86400 seconds..