last executing test programs: 20.841298094s ago: executing program 1 (id=1938): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_cancel(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="d1e2a87d91114a9dad3b3fb92cefe5093bc1e48b048886c719e51a37bbce78bac47e4b34790d15af867b4b0ab4305b0fff1fb9938655953405142415f0b2221825a0e21c29b2616272773422110fd971c91911ba71ddabe5773663f990d6f17e63698fb5e4509fe97d21a20e5a48052bf138908135c848fcd167b7b8770e5fbe2ce0952d8a3c389178a52eeca5f2a8fe93ada742df0fa7d754", 0x99, 0x5, 0x0, 0x2}, 0x0) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @device_b}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x16, 0x1}]}, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0xffffffffffffffff}}, @void}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) write$binfmt_misc(r8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0xfffffc8f) splice(r7, 0x0, r9, 0x0, 0x1800, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) 19.189215157s ago: executing program 1 (id=1955): ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0xc0105500, &(0x7f0000000400)=ANY=[@ANYBLOB="0204000001778dda"]) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = dup3(r0, r1, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000400)) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) syz_open_dev$amidi(0x0, 0x9, 0xca4c0) syz_open_dev$amidi(&(0x7f0000000000), 0x200, 0x80041) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsopen(&(0x7f0000000300)='nfs4\x00', 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x10, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) pipe(&(0x7f0000000080)) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x1c, 0x3e, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0x4, 0x1, 0x0, 0x1, [@generic]}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x28, 0x1c, 0x82f, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x80}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000000000000000000000000181100204a749fcb18ba192a301393b033e553d66a08ee7f02adc910215addeb7923556f213bcef7ecc532180d55cbc84618ec02a51aae51e8ee09d5205954accc32ca86a2612e94dcf27c579ad00ce88438b1eca4aa1f1557b0975a7044f32ead7132223541551df2c99e3f832cb161182f91605d6a040e9636533375d24ad39e681bb1c0d26f839b49a3a22a264bc0d2cb0eb91bab7c8e99ebc15292899af942824e901a9773bcb4b6e4cb4d3460c1004e389d88cac5d3ee4cd15b1180de0ac96510d7a4b663f742e9c7cc69d93af3d8", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYRES16=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000064c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x54}}, 0x0) 18.998706785s ago: executing program 1 (id=1957): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.719151281s ago: executing program 1 (id=1960): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 17.445092528s ago: executing program 1 (id=1964): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000bc0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) 16.956001863s ago: executing program 1 (id=1966): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x0, r0, 0x0, 0x0, 0x81}]) ioprio_set$pid(0x2, 0x0, 0x0) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000580)=ANY=[@ANYBLOB="0002020100000000ff020000000000000000000000000001"], 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x4000100) 7.504949727s ago: executing program 4 (id=2025): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x68, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x68}}, 0x2) 7.011541852s ago: executing program 4 (id=2027): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_0\x00'}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r2, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r1, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000a40)={0x2020}, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x69) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) munlockall() syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) io_setup(0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000240)=""/83, 0x53}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000400)=""/114, 0x72}], 0x2}}], 0x2, 0x40, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000340)={0x1, 0x1}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 5.821573492s ago: executing program 4 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r3) 4.898455718s ago: executing program 3 (id=2042): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000002e0000000800", @ANYRES32=r1, @ANYBLOB="0a0034000202020202020000060066"], 0x34}}, 0x400400c) 4.00933341s ago: executing program 2 (id=2049): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RLERRORu(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 3.039106269s ago: executing program 2 (id=2053): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB]) 2.864360135s ago: executing program 2 (id=2054): r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r0) 2.761327775s ago: executing program 2 (id=2055): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8483e0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 2.192178217s ago: executing program 0 (id=2056): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x545c, 0x0) 2.140930962s ago: executing program 0 (id=2057): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a40", @ANYRES32=r2, @ANYBLOB="14000200ff020040000000000000000000000001080008000207"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 1.278847522s ago: executing program 3 (id=2058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) 1.178209091s ago: executing program 4 (id=2059): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0x84, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000280)=0xb0) 1.060063333s ago: executing program 2 (id=2060): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r1, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000390427bd7000e9ffffff000003e4", @ANYRES32=r2, @ANYBLOB="00500600c31006003800128008000100736974002c00028008000c00", @ANYRES32, @ANYBLOB="08000300e0faff01050009000000000006000d000600"], 0x58}}, 0x0) 1.059801432s ago: executing program 3 (id=2061): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{}], 0x1}, 0x0) 979.95378ms ago: executing program 0 (id=2062): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000080), &(0x7f0000000840)=r1}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 978.48736ms ago: executing program 4 (id=2063): mq_open(0x0, 0x1, 0x89, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x20000000005) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000006100)=""/102386, 0x18ff2}, {&(0x7f00000001c0)=""/102, 0x66}], 0x2, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x4895, &(0x7f0000000680)=ANY=[]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mounts\x00') preadv(r2, &(0x7f0000000c80)=[{0x0}], 0x1, 0x4b6, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, 0x0, 0x0, 0x4) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c"], 0x110}}, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x2, 0x2}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000002040), 0x143002, 0x0) read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_STORE(r5, 0x0, 0x4) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x0, 0x0, 0x20363159}}) 821.694424ms ago: executing program 3 (id=2064): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x64, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_GROUP={0x8, 0x1b, 0x7fff}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x64}}, 0x2) 760.17129ms ago: executing program 0 (id=2065): io_uring_setup(0x696a, &(0x7f00000002c0)={0x0, 0x8b75, 0x80}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000240)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000180)=ANY=[@ANYBLOB="0004"]) 515.157903ms ago: executing program 0 (id=2066): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x34) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x80000030) fcntl$notify(r0, 0x402, 0x8000000d) 431.49349ms ago: executing program 4 (id=2067): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r1, &(0x7f0000000000), 0x100000008) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x40004580, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 415.973372ms ago: executing program 3 (id=2068): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/171, 0xab}], 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) 280.010774ms ago: executing program 0 (id=2069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) clock_settime(0x0, &(0x7f0000000080)={0x77359400}) 55.302345ms ago: executing program 2 (id=2070): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x40, &(0x7f00000008c0)={[{@nobh}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@resuid}, {@dioread_nolock}, {@usrjquota}, {@discard}, {@jqfmt_vfsv1}]}, 0xfc, 0x564, &(0x7f0000002bc0)="$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") ioprio_set$pid(0x1, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f8) sendfile(r0, r0, 0x0, 0x100000008) 0s ago: executing program 3 (id=2071): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59500000000000000000a4000", @ANYRES32=r2, @ANYBLOB="14000200ff020040000000000000000000000001080008000207"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 620.897865][ T3688] usb 1-1: config 131 has an invalid interface number: 65 but max is 0 [ 620.909269][ T3688] usb 1-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 620.910501][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 620.947224][ T3688] usb 1-1: config 131 has no interface number 0 [ 620.954882][ T3688] usb 1-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 620.968845][ T3688] usb 1-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 620.985375][ T3688] usb 1-1: config 131 interface 65 has no altsetting 0 [ 621.037530][ T4177] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 621.160099][ T4177] usb 2-1: Using ep0 maxpacket: 8 [ 621.165885][ T3688] usb 1-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 621.176369][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.196641][ T3688] usb 1-1: Product: syz [ 621.202665][ T3688] usb 1-1: Manufacturer: syz [ 621.207623][ T3688] usb 1-1: SerialNumber: syz [ 621.368177][ T4177] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 621.375848][ T4177] usb 2-1: can't read configurations, error -61 [ 621.487604][ T3694] usb 5-1: reset high-speed USB device number 71 using dummy_hcd [ 621.537861][ T4177] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 621.546163][ T3694] usb 5-1: device reset changed ep0 maxpacket size! [ 621.558921][ T7] usb 5-1: USB disconnect, device number 71 [ 621.568852][ T3688] ti_usb_3410_5052 1-1:131.65: required endpoints missing [ 621.593034][ T3688] usb 1-1: USB disconnect, device number 71 [ 621.637850][ T4177] usb 2-1: Using ep0 maxpacket: 8 [ 621.639420][ T3755] usb 3-1: USB disconnect, device number 65 [ 621.747895][ T7] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 621.807875][ T4177] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 621.815507][ T4177] usb 2-1: can't read configurations, error -61 [ 621.822207][ T4177] usb usb2-port1: unable to enumerate USB device [ 622.007603][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 622.101809][ T3755] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 622.113553][T11081] binder: 11080:11081 ioctl c0306201 0 returned -14 [ 622.147884][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 622.164631][ T7] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 622.347735][ T3755] usb 3-1: Using ep0 maxpacket: 8 [ 622.367572][ T7] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 622.384187][ T7] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 622.387865][ T3756] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 622.403824][ T7] usb 5-1: Product: syz [ 622.423293][ T7] usb 5-1: Manufacturer: syz [ 622.439243][ T7] usb 5-1: SerialNumber: syz [ 622.458112][T11089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.473649][ T3755] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.484735][ T3755] usb 3-1: config 0 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 622.499177][ T3755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 622.583476][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1691'. [ 622.657932][ T3755] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice= 9.58 [ 622.667288][ T3755] usb 3-1: New USB device strings: Mfr=64, Product=2, SerialNumber=3 [ 622.684889][ T3755] usb 3-1: Product: syz [ 622.689617][ T3755] usb 3-1: Manufacturer: syz [ 622.694257][ T3755] usb 3-1: SerialNumber: syz [ 622.706991][ T3755] usb 3-1: config 0 descriptor?? [ 622.730384][ T4231] usb 5-1: USB disconnect, device number 72 [ 622.767789][ T3756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.781083][ T3755] hub 3-1:0.0: bad descriptor, ignoring hub [ 622.787321][ T3755] hub: probe of 3-1:0.0 failed with error -5 [ 622.793893][ T3756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.806355][ T3755] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 622.813205][ T3756] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 622.830264][ T3756] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 622.852706][ T3756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.876695][ T3756] usb 1-1: config 0 descriptor?? [ 622.986557][T11079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.001803][T11079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.017715][ T3755] gspca_zc3xx: reg_w_i err -71 [ 623.359564][ T3756] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x4 [ 623.367989][ T3756] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 623.375449][ T3756] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 623.383080][ T4231] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 623.390782][ T3756] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 623.399052][ T3756] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 623.411170][ T3756] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 623.597895][ T3688] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 623.643478][ T3755] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 623.654214][ T3755] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 623.767624][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 623.779014][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 623.790458][ T4231] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 623.802027][ T4231] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 623.847556][ T3688] usb 5-1: Using ep0 maxpacket: 8 [ 623.882882][ T3755] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 623.967591][ T4231] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 623.976720][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.985961][ T4231] usb 2-1: Product: syz [ 623.990649][ T4231] usb 2-1: Manufacturer: syz [ 623.995488][ T4231] usb 2-1: SerialNumber: syz [ 624.027676][ T3688] usb 5-1: unable to get BOS descriptor or descriptor too short [ 624.034779][T11102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.118374][ T3688] usb 5-1: config 131 has an invalid interface number: 65 but max is 0 [ 624.126712][ T3688] usb 5-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 624.143489][ T3688] usb 5-1: config 131 has no interface number 0 [ 624.149977][ T3688] usb 5-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 624.162089][ T3688] usb 5-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 624.167770][ T3755] usb 3-1: device firmware changed [ 624.175860][ T3688] usb 5-1: config 131 interface 65 has no altsetting 0 [ 624.189498][ T3755] usb 3-1: USB disconnect, device number 66 [ 624.255331][T11102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.263605][T11102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 624.319167][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.325603][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.359026][ T3688] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 624.369124][ T3688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.377328][ T3688] usb 5-1: Product: syz [ 624.382516][ T3688] usb 5-1: Manufacturer: syz [ 624.389116][ T3688] usb 5-1: SerialNumber: syz [ 624.547526][ T3755] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 624.727656][ T4231] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 624.728789][ T3688] ti_usb_3410_5052 5-1:131.65: required endpoints missing [ 624.739848][ T4231] cdc_ncm 2-1:1.0: bind() failure [ 624.753321][ T4231] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 624.762379][ T4231] cdc_ncm 2-1:1.1: bind() failure [ 624.787498][ T3755] usb 3-1: Using ep0 maxpacket: 8 [ 624.792081][ T3688] usb 5-1: USB disconnect, device number 73 [ 624.958801][ T3755] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 624.995104][ T3755] usb 3-1: can't read configurations, error -61 [ 625.167645][ T3755] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 625.204235][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1704'. [ 625.413978][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 625.428198][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1706'. [ 625.451618][ T3755] usb 3-1: Using ep0 maxpacket: 8 [ 625.508636][ T3756] usb 1-1: USB disconnect, device number 72 [ 625.607704][ T3755] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 625.621620][ T3755] usb 3-1: can't read configurations, error -61 [ 625.640137][ T3755] usb usb3-port1: attempt power cycle [ 625.663441][T11136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1708'. [ 625.677668][ T7] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 625.883691][T11141] binder: 11140:11141 ioctl c0306201 0 returned -14 [ 625.947603][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 626.047504][ T3755] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 626.067686][ T7] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 626.086302][ T7] usb 5-1: config 0 has no interface number 1 [ 626.092790][ T7] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 626.117450][ T7] usb 5-1: config 0 interface 151 altsetting 0 has an invalid endpoint with address 0xA3, skipping [ 626.135706][ T7] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 626.139142][ T3755] usb 3-1: Using ep0 maxpacket: 8 [ 626.151882][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 626.167547][ T4232] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 626.175594][ T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 626.188577][ T3694] usb 2-1: USB disconnect, device number 60 [ 626.317677][ T3755] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 626.326111][ T3755] usb 3-1: can't read configurations, error -61 [ 626.337829][ T7] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 626.347338][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.356432][ T7] usb 5-1: Product: syz [ 626.361127][ T7] usb 5-1: Manufacturer: syz [ 626.365941][ T7] usb 5-1: SerialNumber: syz [ 626.380295][ T7] usb 5-1: config 0 descriptor?? [ 626.408071][T11128] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 626.433414][ T7] snd-usb-audio: probe of 5-1:0.151 failed with error -2 [ 626.446372][ T7] usb 5-1: invalid MIDI in EP 0 [ 626.477585][ T3755] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 626.527844][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.530513][ T7] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 626.546909][ T4232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.550732][T10937] udevd[10937]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 626.567640][ T4232] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 626.587281][ T3755] usb 3-1: Using ep0 maxpacket: 8 [ 626.593700][ T4232] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 626.603698][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.614932][ T4232] usb 1-1: config 0 descriptor?? [ 626.646089][ T7] usb 5-1: USB disconnect, device number 74 [ 626.718629][ T3694] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 626.727959][ T3755] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 626.735901][ T3755] usb 3-1: can't read configurations, error -71 [ 626.746925][ T3755] usb usb3-port1: unable to enumerate USB device [ 627.099164][ T4232] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x4 [ 627.111272][ T4232] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 627.119684][ T4232] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 627.127790][ T4232] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 627.145850][ T4232] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 627.153720][ T3755] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 627.168068][ T3694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 627.183594][ T4232] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 627.281213][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1719'. [ 627.298281][ T3694] usb 2-1: config 3 has an invalid interface number: 19 but max is 0 [ 627.306432][ T3694] usb 2-1: config 3 has an invalid interface number: 8 but max is 0 [ 627.325970][ T3694] usb 2-1: config 3 has an invalid interface number: 4 but max is 0 [ 627.335552][ T3694] usb 2-1: config 3 has 3 interfaces, different from the descriptor's value: 1 [ 627.344848][ T3694] usb 2-1: config 3 has no interface number 0 [ 627.351483][ T3694] usb 2-1: config 3 has no interface number 1 [ 627.358043][ T3694] usb 2-1: config 3 has no interface number 2 [ 627.364233][ T3694] usb 2-1: config 3 interface 19 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 627.377947][ T3694] usb 2-1: too many endpoints for config 3 interface 8 altsetting 3: 255, using maximum allowed: 30 [ 627.393055][ T3694] usb 2-1: config 3 interface 8 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 627.397672][ T3755] usb 3-1: Using ep0 maxpacket: 8 [ 627.406526][ T3694] usb 2-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 627.427818][ T3694] usb 2-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 627.439632][ T3694] usb 2-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 627.451881][ T3694] usb 2-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 627.463396][ T3694] usb 2-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 627.477338][ T3694] usb 2-1: config 3 interface 19 has no altsetting 0 [ 627.484648][ T3694] usb 2-1: config 3 interface 8 has no altsetting 0 [ 627.491708][ T3694] usb 2-1: config 3 interface 4 has no altsetting 0 [ 627.492363][ T4232] usb 1-1: USB disconnect, device number 73 [ 627.532863][T11162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 627.552110][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1718'. [ 627.567827][ T3755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 627.657638][ T3755] usb 3-1: config 131 has an invalid interface number: 65 but max is 0 [ 627.668199][ T3694] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 627.680631][ T3755] usb 3-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 627.690014][ T3694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.696092][ T3755] usb 3-1: config 131 has no interface number 0 [ 627.708694][ T3755] usb 3-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 627.721909][ T3694] usb 2-1: Product: syz [ 627.726106][ T3694] usb 2-1: Manufacturer: syz [ 627.741970][ T3755] usb 3-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 627.742016][ T3755] usb 3-1: config 131 interface 65 has no altsetting 0 [ 627.744010][ T3694] usb 2-1: SerialNumber: syz [ 627.802104][T11170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1720'. [ 627.897815][ T3755] usb 3-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 627.913310][ T3755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.921749][ T3755] usb 3-1: Product: syz [ 627.927862][ T3755] usb 3-1: Manufacturer: syz [ 627.933931][ T3755] usb 3-1: SerialNumber: syz [ 628.093282][ T3694] pl2303 2-1:3.19: required endpoints missing [ 628.159918][ T3694] pl2303 2-1:3.8: required endpoints missing [ 628.167143][ T3694] usbhid 2-1:3.8: couldn't find an input interrupt endpoint [ 628.182326][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1724'. [ 628.218512][ T3694] pl2303 2-1:3.4: required interrupt-in endpoint missing [ 628.236810][ T3694] usb 2-1: USB disconnect, device number 61 [ 628.277524][ T4231] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 628.289007][ T3755] ti_usb_3410_5052 3-1:131.65: required endpoints missing [ 628.318804][ T3755] usb 3-1: USB disconnect, device number 71 [ 628.427866][ T3634] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 628.517527][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 628.637708][ T3756] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 628.798464][ T4231] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 628.798666][ T3634] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 628.812202][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.846520][ T4231] usb 5-1: Product: syz [ 628.852814][ T4231] usb 5-1: Manufacturer: syz [ 628.866135][ T3634] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 628.867215][ T4231] usb 5-1: SerialNumber: syz [ 628.882214][ T3756] usb 1-1: Using ep0 maxpacket: 8 [ 628.887785][ T3634] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 628.906945][ T4231] usb 5-1: config 0 descriptor?? [ 628.908636][ T3634] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 628.964314][ T4231] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 628.983536][T11185] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 629.010685][T11185] kvm: pic: non byte read [ 629.015494][T11185] kvm: pic: level sensitive irq not supported [ 629.015575][T11185] kvm: pic: non byte read [ 629.058978][ T3756] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 629.066877][ T3756] usb 1-1: can't read configurations, error -61 [ 629.127790][ T3634] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 629.137164][ T3634] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.145339][ T3634] usb 4-1: Product: syz [ 629.157528][ T3634] usb 4-1: Manufacturer: syz [ 629.173407][ T3634] usb 4-1: SerialNumber: syz [ 629.207777][T11174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.227698][ T3756] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 629.455557][T11174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.476234][T11174] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 629.477587][ T4231] gspca_m5602: Failed to find a sensor [ 629.490091][ T3756] usb 1-1: Using ep0 maxpacket: 8 [ 629.515479][ T4231] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 629.549968][ T4231] usb 5-1: USB disconnect, device number 75 [ 629.647805][ T3756] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 629.657716][ T3756] usb 1-1: can't read configurations, error -61 [ 629.670500][ T3756] usb usb1-port1: attempt power cycle [ 629.682930][T11196] netlink: 'syz.1.1730': attribute type 1 has an invalid length. [ 629.777653][ T3694] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 629.894642][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1731'. [ 629.905917][T11196] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1730'. [ 629.916857][T11200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1731'. [ 629.926966][ T3634] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 629.933442][ T3634] cdc_ncm 4-1:1.0: bind() failure [ 629.954960][ T3634] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 629.962260][ T3634] cdc_ncm 4-1:1.1: bind() failure [ 630.027627][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1732'. [ 630.082447][ T3756] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 630.177784][ T3694] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 630.177862][ T3756] usb 1-1: Using ep0 maxpacket: 8 [ 630.192610][ T3694] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 630.204403][ T3694] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 630.215346][ T3694] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 630.228109][ T3694] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 630.253121][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1734'. [ 630.377951][ T3694] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 630.390730][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1735'. [ 630.393087][ T3694] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 630.416696][ T3694] usb 3-1: Product: syz [ 630.417821][ T3756] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 630.421524][ T3694] usb 3-1: Manufacturer: syz [ 630.434670][ T3756] usb 1-1: can't read configurations, error -61 [ 630.468717][ T3694] cdc_wdm 3-1:1.0: skipping garbage [ 630.473986][ T3694] cdc_wdm 3-1:1.0: skipping garbage [ 630.507256][ T3694] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 630.522088][ T3694] cdc_wdm 3-1:1.0: Unknown control protocol [ 630.607495][ T3756] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 630.697786][ T3756] usb 1-1: Using ep0 maxpacket: 8 [ 630.712756][T11194] netlink: 'syz.2.1729': attribute type 17 has an invalid length. [ 630.724098][T11194] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 630.749196][T11194] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 630.759894][T11194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 630.768599][T11194] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 630.857936][ T3756] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 630.867675][ T3694] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 630.867823][ T3756] usb 1-1: can't read configurations, error -61 [ 630.896600][T11194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.905932][ T3756] usb usb1-port1: unable to enumerate USB device [ 630.924543][T11194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.100852][ T4232] usb 4-1: USB disconnect, device number 62 [ 631.139792][ T3694] usb 5-1: Using ep0 maxpacket: 8 [ 631.241980][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1738'. [ 631.308177][ T3694] usb 5-1: unable to get BOS descriptor or descriptor too short [ 631.398183][ T3694] usb 5-1: config 131 has an invalid interface number: 65 but max is 0 [ 631.417087][ T3694] usb 5-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 631.477142][ T3694] usb 5-1: config 131 has no interface number 0 [ 631.512231][ T3694] usb 5-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 631.537882][ T3694] usb 5-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 631.558468][ T3694] usb 5-1: config 131 interface 65 has no altsetting 0 [ 631.747961][ T3694] usb 5-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 631.761270][ T3694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.769943][ T3694] usb 5-1: Product: syz [ 631.775303][ T3694] usb 5-1: Manufacturer: syz [ 631.781231][ T3694] usb 5-1: SerialNumber: syz [ 631.977617][ T3634] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 632.130406][ T3694] ti_usb_3410_5052 5-1:131.65: required endpoints missing [ 632.180369][ T3694] usb 5-1: USB disconnect, device number 76 [ 632.427607][ T3634] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 632.439674][ T3634] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 632.449544][ T3634] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.468818][ T3634] usb 1-1: config 0 descriptor?? [ 632.547680][ T4177] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 632.561409][ T3694] usb 3-1: USB disconnect, device number 72 [ 632.671739][T11234] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 632.703428][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 632.703448][ T26] audit: type=1326 audit(1726733112.770:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 632.744620][ T26] audit: type=1326 audit(1726733112.770:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 632.773921][ T26] audit: type=1326 audit(1726733112.770:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 632.806881][ T26] audit: type=1326 audit(1726733112.770:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 632.879486][ T4177] usb 4-1: Using ep0 maxpacket: 8 [ 632.881040][ T26] audit: type=1326 audit(1726733112.770:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 632.917741][ T26] audit: type=1326 audit(1726733112.770:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 632.957934][ T26] audit: type=1326 audit(1726733112.770:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 632.959649][T11242] __nla_validate_parse: 1 callbacks suppressed [ 632.959669][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 632.988855][ T26] audit: type=1326 audit(1726733112.770:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 633.035271][ T26] audit: type=1326 audit(1726733112.770:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 633.095288][ T26] audit: type=1326 audit(1726733112.770:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11235 comm="syz.4.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f444437def9 code=0x7ffc0000 [ 633.137543][ T4231] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 633.187280][T11247] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1748'. [ 633.297730][ T4177] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 633.308049][ T3634] usbhid 1-1:0.0: can't add hid device: -71 [ 633.314181][ T3634] usbhid: probe of 1-1:0.0 failed with error -71 [ 633.321769][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.332178][ T3634] usb 1-1: USB disconnect, device number 78 [ 633.338560][ T4177] usb 4-1: Product: syz [ 633.344940][ T4177] usb 4-1: Manufacturer: syz [ 633.351669][ T4177] usb 4-1: SerialNumber: syz [ 633.358922][ T4177] usb 4-1: config 0 descriptor?? [ 633.377588][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 633.410828][ T4177] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 633.446179][T11252] usb usb8: usbfs: process 11252 (syz.1.1750) did not claim interface 0 before use [ 633.497743][ T4231] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 633.508139][ T4231] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 633.667802][ T4231] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 633.678206][ T4231] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 633.686723][ T4231] usb 3-1: Product: syz [ 633.693861][ T4231] usb 3-1: Manufacturer: syz [ 633.699199][ T4231] usb 3-1: SerialNumber: syz [ 633.875624][ T4177] gspca_m5602: Failed to find a sensor [ 633.881380][ T4177] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 633.916980][ T4177] usb 4-1: USB disconnect, device number 63 [ 633.952837][ T4231] usb 3-1: USB disconnect, device number 73 [ 634.142219][T11260] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 634.188602][T11260] kvm: pic: non byte read [ 634.194089][T11260] kvm: pic: level sensitive irq not supported [ 634.194198][T11260] kvm: pic: non byte read [ 634.206008][T11260] kvm: pic: level sensitive irq not supported [ 634.206092][T11260] kvm: pic: non byte read [ 634.420370][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 634.435437][T11270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 634.510455][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1758'. [ 634.607593][ T4177] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 634.729919][T11285] netlink: 'syz.2.1763': attribute type 17 has an invalid length. [ 634.738115][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 634.887694][ T4177] usb 4-1: Using ep0 maxpacket: 8 [ 635.067704][ T4177] usb 4-1: unable to get BOS descriptor or descriptor too short [ 635.195475][ T4177] usb 4-1: config 131 has an invalid interface number: 65 but max is 0 [ 635.207681][ T4177] usb 4-1: config 131 has an invalid descriptor of length 200, skipping remainder of the config [ 635.227527][ T4177] usb 4-1: config 131 has no interface number 0 [ 635.244687][ T4177] usb 4-1: too many endpoints for config 131 interface 65 altsetting 248: 248, using maximum allowed: 30 [ 635.247248][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 635.265318][ T4177] usb 4-1: config 131 interface 65 altsetting 248 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 635.287808][ T4177] usb 4-1: config 131 interface 65 has no altsetting 0 [ 635.305884][T11298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1769'. [ 635.467619][ T4177] usb 4-1: New USB device found, idVendor=110a, idProduct=1131, bcdDevice=8f.a9 [ 635.478512][ T4177] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.486623][ T4177] usb 4-1: Product: syz [ 635.498595][ T4177] usb 4-1: Manufacturer: syz [ 635.503473][ T4177] usb 4-1: SerialNumber: syz [ 635.841490][ T4177] ti_usb_3410_5052 4-1:131.65: required endpoints missing [ 635.864418][ T4177] usb 4-1: USB disconnect, device number 64 [ 635.978018][T11304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 636.057619][ T4231] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 636.179361][T11312] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1777'. [ 636.298941][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 636.417749][ T4231] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 636.578001][ T4231] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 636.587216][ T4231] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 636.604965][ T4231] usb 5-1: Product: syz [ 636.613214][ T4231] usb 5-1: Manufacturer: syz [ 636.618168][ T4231] usb 5-1: SerialNumber: syz [ 636.865400][ T3634] usb 5-1: USB disconnect, device number 77 [ 637.845344][T11340] binder: 11339:11340 ioctl c0306201 0 returned -14 [ 638.137505][ T3634] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 638.517678][ T3634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.528938][ T3634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 638.539447][ T3634] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 638.552586][ T3634] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 638.561902][ T3634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.576976][ T3634] usb 4-1: config 0 descriptor?? [ 638.687763][ T4231] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 639.047596][ T4231] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 639.057985][ T4231] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 639.066930][ T4231] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 639.081092][ T4231] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 639.091308][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.138869][ T4231] hub 5-1:1.0: bad descriptor, ignoring hub [ 639.144842][ T4231] hub: probe of 5-1:1.0 failed with error -5 [ 639.157082][ T4231] cdc_wdm 5-1:1.0: skipping garbage [ 639.157614][ T3634] usbhid 4-1:0.0: can't add hid device: -71 [ 639.162397][ T4231] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 639.169106][ T3634] usbhid: probe of 4-1:0.0 failed with error -71 [ 639.193390][ T3634] usb 4-1: USB disconnect, device number 65 [ 639.344882][T11344] __nla_validate_parse: 4 callbacks suppressed [ 639.344905][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1792'. [ 639.477671][ T4177] usb 5-1: USB disconnect, device number 78 [ 642.507344][T11352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1794'. [ 642.797271][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 642.831083][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1798'. [ 643.267612][ T3634] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 643.625174][T11370] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 643.637674][T11370] kvm: pic: non byte read [ 643.638020][ T3634] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 643.642407][T11370] kvm: pic: level sensitive irq not supported [ 643.651488][T11370] kvm: pic: non byte read [ 643.657508][ T3634] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 643.658075][T11370] kvm: pic: level sensitive irq not supported [ 643.664229][ T3634] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 643.674334][T11370] kvm: pic: non byte read [ 643.701855][ T3634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 643.713289][ T3634] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 643.867892][ T3634] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 643.877126][ T3634] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 643.885421][ T3634] usb 5-1: Product: syz [ 643.897849][ T3634] usb 5-1: Manufacturer: syz [ 643.950673][ T3634] cdc_wdm 5-1:1.0: skipping garbage [ 643.955942][ T3634] cdc_wdm 5-1:1.0: skipping garbage [ 643.978156][ T3634] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 643.984125][ T3634] cdc_wdm 5-1:1.0: Unknown control protocol [ 644.154259][T11365] netlink: 'syz.4.1800': attribute type 17 has an invalid length. [ 644.180925][T11365] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 644.198499][T11365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 644.206416][T11365] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.334211][T11379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.390729][T11379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.356810][T11386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1807'. [ 645.586481][ T3661] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 645.606485][ T3661] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 645.619587][ T3661] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 645.630580][ T3661] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 645.639398][ T3661] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 645.646886][ T3661] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 646.033724][ T3754] usb 5-1: USB disconnect, device number 79 [ 646.065295][T11387] chnl_net:caif_netlink_parms(): no params data found [ 646.252273][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 646.262612][T11401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1812'. [ 646.283579][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1811'. [ 646.292923][T11401] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 646.378987][T11387] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.386159][T11387] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.408171][T11387] device bridge_slave_0 entered promiscuous mode [ 646.444365][T11387] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.463752][T11387] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.473138][T11387] device bridge_slave_1 entered promiscuous mode [ 646.531107][T11387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.531402][T11407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.560685][T11387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.638494][T11407] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1814'. [ 646.695690][ T3661] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.706102][ T3661] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.716497][ T3661] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.717622][ T22] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 646.732312][ T3661] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.741895][ T3661] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 646.749962][ T3661] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 646.796956][T11387] team0: Port device team_slave_0 added [ 646.807755][T11387] team0: Port device team_slave_1 added [ 646.832517][T11387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.839739][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.865740][T11387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.880563][T11387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.892027][T11387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.918064][T11387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.967578][ T102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.997843][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 647.038937][T11387] device hsr_slave_0 entered promiscuous mode [ 647.045848][T11387] device hsr_slave_1 entered promiscuous mode [ 647.054454][T11387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.063350][T11387] Cannot create hsr debugfs directory [ 647.114779][ T102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.236642][ T102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.287853][ T22] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 647.297155][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.306149][ T22] usb 5-1: Product: syz [ 647.310675][ T22] usb 5-1: Manufacturer: syz [ 647.326007][ T22] usb 5-1: SerialNumber: syz [ 647.341721][ T22] usb 5-1: config 0 descriptor?? [ 647.351418][ T102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.379653][ T22] gspca_main: sq930x-2.14.0 probing 2770:930c [ 647.396320][T11409] chnl_net:caif_netlink_parms(): no params data found [ 647.496275][T11387] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.599879][T11387] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.634717][T11409] bridge0: port 1(bridge_slave_0) entered blocking state [ 647.642258][T11409] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.651068][T11409] device bridge_slave_0 entered promiscuous mode [ 647.668605][T11409] bridge0: port 2(bridge_slave_1) entered blocking state [ 647.676065][T11409] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.684496][T11409] device bridge_slave_1 entered promiscuous mode [ 647.691453][ T3661] Bluetooth: hci4: command tx timeout [ 647.741964][T11387] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.819989][T11409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.000724][T11387] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.223897][T11409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.235187][T11405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.268192][T11405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.338022][ T22] gspca_sq930x: ucbus_write failed -71 [ 648.343971][ T22] sq930x: probe of 5-1:0.0 failed with error -71 [ 648.400420][ T22] usb 5-1: USB disconnect, device number 80 [ 648.680877][T11409] team0: Port device team_slave_0 added [ 648.715414][T10269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 648.726993][T10269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 648.740427][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 648.749695][T10269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 648.780135][T10269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.790275][T10269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 648.797633][T10269] Bluetooth: hci1: command tx timeout [ 648.798134][ T3660] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 648.855794][T11409] team0: Port device team_slave_1 added [ 649.155819][T11409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.164524][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.218010][T11409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.236547][T11409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.249044][T11409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.290274][T11409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.344217][T11444] netlink: 'syz.4.1819': attribute type 17 has an invalid length. [ 649.365113][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1819'. [ 649.613334][T11387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.624990][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1820'. [ 649.643147][T11409] device hsr_slave_0 entered promiscuous mode [ 649.654069][T11409] device hsr_slave_1 entered promiscuous mode [ 649.670914][T11409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.705037][T11409] Cannot create hsr debugfs directory [ 649.715692][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 649.725313][T11387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.762546][ T3660] Bluetooth: hci4: command tx timeout [ 649.772755][T11454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1821'. [ 649.788775][T11456] device bridge0 entered promiscuous mode [ 649.795441][T11456] device macsec1 entered promiscuous mode [ 649.805854][T11456] device bridge0 left promiscuous mode [ 649.880289][T11387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.911434][T11458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.015915][T11387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 650.159592][T11467] netlink: zone id is out of range [ 650.170617][T11467] netlink: zone id is out of range [ 650.176205][T11467] netlink: zone id is out of range [ 650.182214][T11467] netlink: get zone limit has 4 unknown bytes [ 650.249351][T11462] device bridge1 entered promiscuous mode [ 650.539610][T11432] chnl_net:caif_netlink_parms(): no params data found [ 650.586805][ T102] device hsr_slave_0 left promiscuous mode [ 650.603146][ T102] device hsr_slave_1 left promiscuous mode [ 650.621702][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.636605][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.655570][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 650.671011][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.689936][ T102] device bridge_slave_1 left promiscuous mode [ 650.704052][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.723768][ T102] device bridge_slave_0 left promiscuous mode [ 650.738919][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.791753][ T102] device veth1_macvtap left promiscuous mode [ 650.798036][ T102] device veth0_macvtap left promiscuous mode [ 650.804169][ T102] device veth1_vlan left promiscuous mode [ 650.810128][ T102] device veth0_vlan left promiscuous mode [ 650.878004][ T3660] Bluetooth: hci1: command tx timeout [ 650.883627][ T3660] Bluetooth: hci2: command tx timeout [ 651.230899][T11487] __nla_validate_parse: 2 callbacks suppressed [ 651.230914][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1826'. [ 651.838545][ T3660] Bluetooth: hci4: command tx timeout [ 651.984973][ T102] team0 (unregistering): Port device team_slave_1 removed [ 652.060924][ T102] team0 (unregistering): Port device team_slave_0 removed [ 652.125906][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 652.210755][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 652.947561][ T102] bond0 (unregistering): Released all slaves [ 652.968310][ T3660] Bluetooth: hci2: command tx timeout [ 652.968913][ T3661] Bluetooth: hci1: command tx timeout [ 653.093169][T11492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 653.548618][T11432] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.555791][T11432] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.576521][T11432] device bridge_slave_0 entered promiscuous mode [ 653.591363][T11387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.736949][T11432] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.745183][T11432] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.762228][T11432] device bridge_slave_1 entered promiscuous mode [ 653.807605][ T4177] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 653.917664][ T3661] Bluetooth: hci4: command tx timeout [ 653.961806][T11522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.020626][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.028089][ T4177] usb 5-1: device descriptor read/64, error -71 [ 654.044860][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.066920][T11432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.086597][T11522] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1834'. [ 654.123529][T11387] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.139886][T11432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.225757][T11432] team0: Port device team_slave_0 added [ 654.242235][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.254532][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.267168][ T5449] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.274646][ T5449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.283367][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 654.297011][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.309065][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.317672][ T4177] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 654.319779][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.333450][ T7782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.344048][T11432] team0: Port device team_slave_1 added [ 654.391565][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 654.406652][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 654.430741][T11432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.439558][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.466971][T11432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.502882][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 654.511763][ T4177] usb 5-1: device descriptor read/64, error -71 [ 654.520117][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 654.533084][T11432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.540723][T11432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.575020][T11432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.604519][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 654.613723][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 654.623398][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 654.657719][ T4177] usb usb5-port1: attempt power cycle [ 654.673507][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 654.688585][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 654.701762][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 654.711906][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 654.724536][T11387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 654.755437][T11432] device hsr_slave_0 entered promiscuous mode [ 654.765011][T11432] device hsr_slave_1 entered promiscuous mode [ 654.784413][T11432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.809070][T11432] Cannot create hsr debugfs directory [ 654.815813][T11409] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 654.880382][T11409] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 654.930471][ T102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.959505][T11409] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 655.037591][ T3661] Bluetooth: hci2: command tx timeout [ 655.044510][ T102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.053544][ T3661] Bluetooth: hci1: command tx timeout [ 655.077063][T11409] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 655.087557][ T4177] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 655.188378][ T102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.207654][ T4177] usb 5-1: device descriptor read/8, error -71 [ 655.304280][ T102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.366067][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.398198][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 655.459575][T11387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.507818][ T4177] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 655.568957][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 655.581196][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 655.607757][ T4177] usb 5-1: device descriptor read/8, error -71 [ 655.641536][T11409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.652789][T11545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1835'. [ 655.723384][T11387] device veth0_vlan entered promiscuous mode [ 655.745836][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 655.766705][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 655.778789][ T4177] usb usb5-port1: unable to enumerate USB device [ 655.858310][T11409] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.871907][T11387] device veth1_vlan entered promiscuous mode [ 655.881255][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 655.892272][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 655.901532][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 655.957956][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.968733][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 656.129044][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 656.139326][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 656.149481][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 656.158760][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.166535][ T7782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.175502][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 656.185342][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 656.201850][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.209082][ T7782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.217648][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 656.281163][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 656.338369][ T4177] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 656.412684][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 656.432800][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.451317][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.475861][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.498025][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.515281][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.533767][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.581899][T11555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.600391][ T4177] usb 4-1: Using ep0 maxpacket: 32 [ 656.681042][T11409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 656.698350][T11409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.706672][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.717139][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.747972][ T4177] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 656.758425][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.766553][ T4177] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.809791][ T4177] usb 4-1: config 0 descriptor?? [ 656.860129][T11387] device veth0_macvtap entered promiscuous mode [ 656.870127][ T4177] gspca_main: sunplus-2.14.0 probing 041e:400b [ 656.884935][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 656.900042][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.018551][T11387] device veth1_macvtap entered promiscuous mode [ 657.029047][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 657.042231][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 657.097548][ T4177] gspca_sunplus: reg_w_riv err -71 [ 657.102878][ T4177] sunplus: probe of 4-1:0.0 failed with error -71 [ 657.117668][ T3661] Bluetooth: hci2: command tx timeout [ 657.156129][ T4177] usb 4-1: USB disconnect, device number 66 [ 657.247903][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.297779][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.327066][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.361122][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.391651][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.411525][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.427298][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.442610][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.453754][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.466562][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.486615][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 657.507522][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.532101][T11387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.543724][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.554574][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.565537][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.576839][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.596973][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.617481][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.637255][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.664865][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.689763][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.703583][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.713944][T11387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 657.724832][ T41] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 657.732685][T11387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 657.758586][T11387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.849656][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 657.879586][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 657.922247][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 657.977781][ T41] usb 5-1: Using ep0 maxpacket: 8 [ 657.988257][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.023906][T11387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.039803][T11387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.062931][T11387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.089750][T11387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.200749][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.215346][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.257781][ T41] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 658.266905][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.309709][ T41] usb 5-1: Product: syz [ 658.313969][ T41] usb 5-1: Manufacturer: syz [ 658.344392][ T41] usb 5-1: SerialNumber: syz [ 658.354230][ T41] usb 5-1: config 0 descriptor?? [ 658.387184][T11432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 658.410209][ T41] gspca_main: sq930x-2.14.0 probing 2770:930c [ 658.427179][T11409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.509155][T11602] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 658.544198][T11602] kvm: pic: non byte read [ 658.552431][T11602] kvm: pic: level sensitive irq not supported [ 658.552767][T11602] kvm: pic: non byte read [ 658.564764][T11432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 658.578388][T11602] kvm: pic: level sensitive irq not supported [ 658.578462][T11602] kvm: pic: non byte read [ 658.580914][T11432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 658.640308][T11432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 658.703089][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 658.728712][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 658.950196][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 658.980559][ T5449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.003818][ T5449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.024591][ T102] device hsr_slave_0 left promiscuous mode [ 659.046947][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 659.063513][ T102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.094559][ T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.106557][ T102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.125984][ T102] device bridge_slave_1 left promiscuous mode [ 659.143018][ T102] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.177963][ T102] device bridge_slave_0 left promiscuous mode [ 659.188164][ T102] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.253645][ T102] device hsr_slave_1 left promiscuous mode [ 659.267298][ T102] device veth1_macvtap left promiscuous mode [ 659.267797][ T41] gspca_sq930x: ucbus_write failed -71 [ 659.274011][ T102] device veth0_macvtap left promiscuous mode [ 659.286311][ T102] device veth1_vlan left promiscuous mode [ 659.293110][ T102] device veth0_vlan left promiscuous mode [ 659.298683][ T41] sq930x: probe of 5-1:0.0 failed with error -71 [ 659.315918][ T41] usb 5-1: USB disconnect, device number 85 [ 659.497825][ T8617] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 659.769429][ T8617] usb 4-1: Using ep0 maxpacket: 16 [ 659.918028][ T8617] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 659.926104][ T8617] usb 4-1: config 0 has no interface number 0 [ 660.157049][ T8617] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 660.172578][ T8617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.217873][ T8617] usb 4-1: Product: syz [ 660.233341][ T8617] usb 4-1: Manufacturer: syz [ 660.243317][ T8617] usb 4-1: SerialNumber: syz [ 660.277024][ T8617] usb 4-1: config 0 descriptor?? [ 660.291017][ T102] team0 (unregistering): Port device team_slave_1 removed [ 660.334171][ T8617] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 660.441625][ T102] team0 (unregistering): Port device team_slave_0 removed [ 660.537171][ T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.546057][ T102] device bond_slave_1 left promiscuous mode [ 660.603862][ T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.613958][ T102] device bond_slave_0 left promiscuous mode [ 661.423185][ T102] bond0 (unregistering): Released all slaves [ 661.523351][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 661.532356][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 661.540877][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 661.552187][T11409] device veth0_vlan entered promiscuous mode [ 661.589120][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 661.600444][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.645773][ T8465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.649321][T11409] device veth1_vlan entered promiscuous mode [ 661.665285][ T8465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.738156][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.811523][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 661.844886][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.870354][T11409] device veth0_macvtap entered promiscuous mode [ 661.903257][T11432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.934561][T11409] device veth1_macvtap entered promiscuous mode [ 661.979882][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 661.991897][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 662.028298][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 662.038106][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 662.093134][T11432] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.107138][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.119223][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.133359][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.154829][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.180933][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.201621][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.216628][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.233851][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.247001][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.260648][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.271993][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.286919][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.304175][T11409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.327801][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 662.359796][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.384353][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 662.401075][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 662.413256][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.420462][ T8465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.431037][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 662.450180][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.471725][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.489134][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.501447][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.513150][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.525005][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.535446][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.546511][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.558313][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.578171][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.588771][T11409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.601100][T11409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.627598][T11409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.678136][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 662.713174][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 662.733612][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 662.770200][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 662.778951][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.786211][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.798526][T11409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.807276][T11409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.816607][T11409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.827169][T11409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.842326][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 662.874850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 662.885304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 662.896844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 662.928546][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 662.938299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 662.957431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 662.974094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 662.994511][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 663.018134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 663.026642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 663.038430][ T41] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 663.052078][T11432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 663.146317][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.187732][ T8617] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 663.196577][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.198919][ T5449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.227424][ T5449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.243039][ T8617] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 663.252997][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 663.287648][ T8617] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 663.301227][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 663.327632][ T8617] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 663.359740][ T8617] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 663.397653][ T8617] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 663.397683][ T41] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 663.428087][ T8617] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 663.436253][ T41] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 663.455255][ T41] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 663.469148][ T41] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 663.479466][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.488282][ T8617] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 663.507787][T11646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 663.568984][ T41] hub 1-1:1.0: bad descriptor, ignoring hub [ 663.574981][ T41] hub: probe of 1-1:1.0 failed with error -5 [ 663.592759][ T41] cdc_wdm 1-1:1.0: skipping garbage [ 663.613299][ T41] cdc_wdm 1-1:1.0: skipping garbage [ 663.623639][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 663.632037][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 663.638290][ T8617] usb 4-1: USB disconnect, device number 67 [ 663.651844][ T41] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 663.674079][T11432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.693131][ T41] cdc_wdm 1-1:1.0: Unknown control protocol [ 663.767978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 663.801299][ T41] usb 1-1: Failed to suspend device, error -71 [ 663.809170][ T41] usb 1-1: USB disconnect, device number 79 [ 663.816630][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 663.884005][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 663.897658][ T3756] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 663.917174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 663.948961][T11432] device veth0_vlan entered promiscuous mode [ 663.960162][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 663.994432][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 664.032939][T11432] device veth1_vlan entered promiscuous mode [ 664.049892][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1856'. [ 664.071699][T11663] device team0 entered promiscuous mode [ 664.084486][T11663] device team_slave_0 entered promiscuous mode [ 664.094222][T11663] device team_slave_1 entered promiscuous mode [ 664.127918][T11663] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 664.137726][ T3756] usb 2-1: Using ep0 maxpacket: 8 [ 664.220815][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 664.238730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 664.279441][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 664.320852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 664.342476][T11432] device veth0_macvtap entered promiscuous mode [ 664.357530][ T41] usb 1-1: new low-speed USB device number 80 using dummy_hcd [ 664.371532][T11432] device veth1_macvtap entered promiscuous mode [ 664.420431][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.427836][ T3756] usb 2-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 664.440469][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.464996][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.470226][ T3756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.486809][ T3756] usb 2-1: Product: syz [ 664.499262][ T3756] usb 2-1: Manufacturer: syz [ 664.509428][ T3756] usb 2-1: SerialNumber: syz [ 664.510251][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.525440][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.537040][ T3756] usb 2-1: config 0 descriptor?? [ 664.546499][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.556793][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.568020][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.578182][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.584522][ T3756] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 664.588897][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.588919][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.618882][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.628861][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 664.639647][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.660335][T11432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.671899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 664.680620][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 664.689019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 664.698753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 664.720397][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.732696][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.737772][ T41] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.743319][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.772125][ T41] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 664.779794][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.791693][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.806965][ T41] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 664.813345][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.819002][ T4235] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 664.839463][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.851581][ T41] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 664.859501][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.870620][T11677] loop4: detected capacity change from 0 to 764 [ 664.871095][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.893212][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.908600][T11646] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 664.938069][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.948765][ T41] hub 1-1:1.0: bad descriptor, ignoring hub [ 664.950352][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 664.954705][ T41] hub: probe of 1-1:1.0 failed with error -5 [ 664.956420][ T41] cdc_wdm 1-1:1.0: skipping garbage [ 664.965999][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 664.992819][T11432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 665.005575][T11432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 665.021409][T11432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.031527][ T41] cdc_wdm 1-1:1.0: skipping garbage [ 665.046731][ T41] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 665.053094][ T41] cdc_wdm 1-1:1.0: Unknown control protocol [ 665.063342][T11432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.085947][T11432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.097866][T11432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.106880][T11432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.131481][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 665.141337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 665.223829][ T4235] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 665.257812][ T4235] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 665.271999][ T8465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.289587][ T8465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.307590][ T4235] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.336915][ T5449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 665.337607][ T3756] gspca_m5602: Failed to find a sensor [ 665.358599][ T4235] usb 4-1: config 0 descriptor?? [ 665.358808][ T3701] usb 1-1: USB disconnect, device number 80 [ 665.367735][ T3756] ALi m5602 2-1:0.0: ALi m5602 webcam failed [ 665.375498][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.403532][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.430708][ T3756] usb 2-1: USB disconnect, device number 62 [ 665.481295][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 665.957738][T11687] loop1: detected capacity change from 0 to 2048 [ 666.023502][T11687] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 666.118065][ T4235] usbhid 4-1:0.0: can't add hid device: -71 [ 666.124350][ T4235] usbhid: probe of 4-1:0.0 failed with error -71 [ 666.217721][ T4235] usb 4-1: USB disconnect, device number 68 [ 666.293254][T11409] EXT4-fs (loop1): unmounting filesystem. [ 666.679713][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 666.679734][ T26] audit: type=1326 audit(1726733146.750:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 666.786997][ T26] audit: type=1326 audit(1726733146.750:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 666.831877][ T26] audit: type=1326 audit(1726733146.790:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 666.865645][ T26] audit: type=1326 audit(1726733146.790:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 666.911566][ T26] audit: type=1326 audit(1726733146.790:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 666.947280][ T26] audit: type=1326 audit(1726733146.800:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 666.985699][ T26] audit: type=1326 audit(1726733146.800:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 667.017694][ T3701] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 667.026764][ T26] audit: type=1326 audit(1726733146.800:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 667.065881][ T26] audit: type=1326 audit(1726733146.800:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 667.092058][ T26] audit: type=1326 audit(1726733146.800:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11708 comm="syz.1.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 667.216807][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1879'. [ 667.307595][ T3701] usb 3-1: Using ep0 maxpacket: 8 [ 667.509962][T11731] loop3: detected capacity change from 0 to 1024 [ 667.592706][T11731] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 667.627227][T11731] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038 (0x7fffffff) [ 667.668507][ T3701] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 667.680232][ T3701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.688502][ T3701] usb 3-1: Product: syz [ 667.692800][ T3701] usb 3-1: Manufacturer: syz [ 667.697864][ T3701] usb 3-1: SerialNumber: syz [ 667.705037][ T3701] usb 3-1: config 0 descriptor?? [ 667.750001][ T3701] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 667.890597][T10567] EXT4-fs (loop3): unmounting filesystem. [ 667.957678][ T8617] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 668.329046][ T3701] gspca_m5602: Failed to find a sensor [ 668.346218][ T3701] ALi m5602 3-1:0.0: ALi m5602 webcam failed [ 668.352569][ T8617] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 668.376215][T11769] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 668.387578][ T8617] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 668.407900][ T3701] usb 3-1: USB disconnect, device number 74 [ 668.451541][ T8617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.485423][ T8617] usb 5-1: config 0 descriptor?? [ 668.509598][T11765] xt_CT: No such helper "netbios-ns" [ 668.687738][T11775] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1896'. [ 668.737870][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1897'. [ 669.257714][ T8617] usbhid 5-1:0.0: can't add hid device: -71 [ 669.265569][ T8617] usbhid: probe of 5-1:0.0 failed with error -71 [ 669.295880][ T8617] usb 5-1: USB disconnect, device number 86 [ 670.411112][T11807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 670.422750][T11812] tipc: Started in network mode [ 670.429133][T11812] tipc: Node identity ac1414aa, cluster identity 4711 [ 670.441746][T11812] tipc: New replicast peer: 100.1.1.1 [ 670.451889][T11812] tipc: Enabled bearer , priority 10 [ 670.460154][T11810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1909'. [ 671.102521][T11837] can0: slcan on ttyS3. [ 671.252619][T11843] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1921'. [ 671.281618][T11837] can0 (unregistered): slcan off ttyS3. [ 671.288337][T11837] Falling back ldisc for ttyS3. [ 671.571643][ T3754] tipc: Node number set to 2886997162 [ 671.587691][ T3701] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 671.601001][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1926'. [ 671.637448][ T4235] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 671.757967][ T3634] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 672.004378][ T3701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.027657][ T3634] usb 3-1: Using ep0 maxpacket: 8 [ 672.038189][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 672.046201][ T3701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.069593][ T4235] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 672.079853][ T3701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 672.107667][ T3701] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 672.114786][ T4235] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.160599][ T4235] usb 1-1: config 0 descriptor?? [ 672.227639][ T3701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.264603][ T3701] usb 4-1: config 0 descriptor?? [ 672.280902][ T26] kauditd_printk_skb: 73 callbacks suppressed [ 672.280921][ T26] audit: type=1326 audit(1726733152.350:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.355078][ T26] audit: type=1326 audit(1726733152.350:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.389179][ T26] audit: type=1326 audit(1726733152.350:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.447477][ T26] audit: type=1326 audit(1726733152.350:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.447782][ T3634] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 672.490019][ T3634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.498523][ T3634] usb 3-1: Product: syz [ 672.502972][ T3634] usb 3-1: Manufacturer: syz [ 672.509018][ T3634] usb 3-1: SerialNumber: syz [ 672.528622][ T3634] usb 3-1: config 0 descriptor?? [ 672.550055][ T26] audit: type=1326 audit(1726733152.350:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.576264][ T26] audit: type=1326 audit(1726733152.350:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.626395][ T26] audit: type=1326 audit(1726733152.350:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.671781][ T26] audit: type=1326 audit(1726733152.350:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.743900][ T26] audit: type=1326 audit(1726733152.350:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.784566][ T3701] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x4 [ 672.813205][ T3701] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 672.821858][ T3634] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 672.839787][ T3701] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 672.848168][ T26] audit: type=1326 audit(1726733152.350:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11881 comm="syz.1.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f306657def9 code=0x7ffc0000 [ 672.878547][ T3701] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 672.898217][ T3701] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 672.918955][ T3701] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 672.992664][ T3701] usb 4-1: USB disconnect, device number 69 [ 673.027812][ T4235] usbhid 1-1:0.0: can't add hid device: -71 [ 673.033859][ T4235] usbhid: probe of 1-1:0.0 failed with error -71 [ 673.071150][ T4235] usb 1-1: USB disconnect, device number 81 [ 673.172772][T11898] loop1: detected capacity change from 0 to 512 [ 673.301455][T11898] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 673.323775][T11898] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.1935: invalid indirect mapped block 1 (level 1) [ 673.366770][T11898] EXT4-fs (loop1): 1 truncate cleaned up [ 673.375769][T11898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 673.417613][T11898] EXT4-fs error (device loop1): ext4_lookup:1848: inode #2: comm syz.1.1935: bad inode number: 1 [ 673.492380][T11906] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1937'. [ 673.561367][T11409] EXT4-fs (loop1): unmounting filesystem. [ 673.699638][T11914] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1939'. [ 673.758118][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.794781][T11916] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1938'. [ 674.017856][T11929] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 674.042809][T11929] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 674.069791][T11929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 674.077987][T11929] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 674.081452][T11931] loop3: detected capacity change from 0 to 164 [ 674.088998][T11929] device bridge_slave_0 left promiscuous mode [ 674.099515][T11929] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.147254][T11929] device bridge_slave_1 left promiscuous mode [ 674.185809][T11929] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.208269][T11929] bond0: (slave bond_slave_0): Releasing backup interface [ 674.275305][T11929] bond0: (slave bond_slave_1): Releasing backup interface [ 674.384222][T11929] team0: Port device team_slave_0 removed [ 674.401217][T11941] loop3: detected capacity change from 0 to 512 [ 674.446268][T11929] team0: Port device team_slave_1 removed [ 674.465337][T11929] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.473606][T11941] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 674.474641][T11929] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.483060][T11941] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038 (0x7fffffff) [ 674.518945][T11929] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.537903][T11929] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.561361][T11932] netlink: 'syz.4.1944': attribute type 1 has an invalid length. [ 674.584290][T11945] Process accounting resumed [ 674.616692][T11932] 8021q: adding VLAN 0 to HW filter on device bond1 [ 674.626953][T11933] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1944'. [ 674.692523][T11945] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 674.784224][T10567] EXT4-fs (loop3): unmounting filesystem. [ 674.920449][ T3634] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 674.942841][ T3634] dvbdev: DVB: registering new adapter (Terratec H7) [ 674.956941][ T3634] usb 3-1: media controller created [ 674.979957][T11953] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1951'. [ 674.997770][ T3634] usb read operation failed. (-32) [ 675.008605][T11955] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1952'. [ 675.008795][ T3634] dvb_usb_az6007: probe of 3-1:0.0 failed with error -5 [ 675.139952][ T22] usb 3-1: USB disconnect, device number 75 [ 675.147561][ T3756] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 675.175896][T11957] loop4: detected capacity change from 0 to 1024 [ 675.221238][T11957] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 675.269025][T11957] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 675.297079][T11957] JBD2: no valid journal superblock found [ 675.343351][T11957] EXT4-fs (loop4): error loading journal [ 675.527572][ T3756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 675.543894][T11969] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 675.559560][ T3756] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 675.569441][ T3756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.596960][ T3756] usb 4-1: config 0 descriptor?? [ 675.627481][ T3754] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 676.158143][T11977] loop1: detected capacity change from 0 to 256 [ 676.339082][ T3754] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.489619][ T3634] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 676.518810][ T3754] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 676.522623][T11976] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 676.538041][ T3754] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 676.539842][T11976] FAT-fs (loop1): Filesystem has been set read-only [ 676.560667][T11976] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 676.571409][T11976] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 676.616394][ T3754] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 676.669775][ T3754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.730291][T11964] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 676.770838][ T3754] hub 1-1:1.0: bad descriptor, ignoring hub [ 676.795475][ T3754] hub: probe of 1-1:1.0 failed with error -5 [ 676.812668][ T3754] cdc_wdm 1-1:1.0: skipping garbage [ 676.818758][ T3754] cdc_wdm 1-1:1.0: skipping garbage [ 676.837656][ T3634] usb 3-1: Using ep0 maxpacket: 8 [ 676.838055][ T3754] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 676.853492][ T3754] cdc_wdm 1-1:1.0: Unknown control protocol [ 676.949798][T11409] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 676.987928][ T3634] usb 3-1: config 0 has no interfaces? [ 676.993727][ T3634] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 677.008646][T11409] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 677.030042][ T3634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.061260][ T3634] usb 3-1: config 0 descriptor?? [ 677.092883][ T3756] usbhid 4-1:0.0: can't add hid device: -71 [ 677.107553][ T3756] usbhid: probe of 4-1:0.0 failed with error -71 [ 677.129810][ T3756] usb 4-1: USB disconnect, device number 70 [ 677.189155][T11984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 677.229351][T11984] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1965'. [ 677.307734][ T3701] usb 1-1: USB disconnect, device number 82 [ 677.434118][ T3688] usb 3-1: USB disconnect, device number 76 [ 677.482564][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.632801][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.743667][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.863314][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.910563][ T26] kauditd_printk_skb: 72 callbacks suppressed [ 677.910582][ T26] audit: type=1326 audit(1726733157.980:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 677.975329][ T26] audit: type=1326 audit(1726733158.030:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.023661][ T26] audit: type=1326 audit(1726733158.030:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.054575][ T26] audit: type=1326 audit(1726733158.030:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.085122][ T26] audit: type=1326 audit(1726733158.030:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.118132][ T26] audit: type=1326 audit(1726733158.030:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.173423][ T26] audit: type=1326 audit(1726733158.030:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.225063][ T3659] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 678.241664][ T3659] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 678.261637][ T3659] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 678.269149][ T26] audit: type=1326 audit(1726733158.030:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.292024][ T26] audit: type=1326 audit(1726733158.030:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.315538][ T26] audit: type=1326 audit(1726733158.030:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11992 comm="syz.0.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9357def9 code=0x7ffc0000 [ 678.339102][ T3659] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 678.351784][ T3660] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 678.359454][ T3660] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 678.367760][ T11] tipc: Disabling bearer [ 678.423480][ T11] tipc: Left network mode [ 679.085651][T11996] chnl_net:caif_netlink_parms(): no params data found [ 679.337599][ T3701] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 679.476751][T11996] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.484247][T11996] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.505109][T11996] device bridge_slave_0 entered promiscuous mode [ 679.516109][T11996] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.531988][T11996] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.547762][T11996] device bridge_slave_1 entered promiscuous mode [ 679.596083][ T3701] usb 4-1: Using ep0 maxpacket: 8 [ 679.630337][T11996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.699344][ T3688] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 679.703295][T12044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.732067][T11996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 679.767933][ T3701] usb 4-1: config 0 has no interfaces? [ 679.773484][ T3701] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 679.817823][ T3701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.868346][ T3701] usb 4-1: config 0 descriptor?? [ 679.938060][ T3688] usb 5-1: device descriptor read/64, error -71 [ 679.971550][T11996] team0: Port device team_slave_0 added [ 679.982386][T12048] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 680.022628][T11996] team0: Port device team_slave_1 added [ 680.127488][ T3756] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 680.217929][ T3688] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 680.229027][T11996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.236380][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.263409][T11996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.282567][ T3701] usb 4-1: USB disconnect, device number 71 [ 680.296996][ T11] device hsr_slave_0 left promiscuous mode [ 680.312101][ T11] device hsr_slave_1 left promiscuous mode [ 680.321052][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.333991][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.342370][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.350329][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.360012][ T11] device bridge_slave_1 left promiscuous mode [ 680.366437][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.383615][ T11] device bridge_slave_0 left promiscuous mode [ 680.394667][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.427472][ T3688] usb 5-1: device descriptor read/64, error -71 [ 680.449035][ T11] device veth1_macvtap left promiscuous mode [ 680.462111][ T11] device veth0_macvtap left promiscuous mode [ 680.473804][ T11] device veth1_vlan left promiscuous mode [ 680.477823][ T3660] Bluetooth: hci1: command tx timeout [ 680.486068][ T11] device veth0_vlan left promiscuous mode [ 680.538279][ T3756] usb 1-1: unable to get BOS descriptor or descriptor too short [ 680.551952][ T3688] usb usb5-port1: attempt power cycle [ 680.627972][ T3756] usb 1-1: config 3 has an invalid interface number: 19 but max is 0 [ 680.636469][ T3756] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 680.667506][ T3756] usb 1-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 680.676583][ T3756] usb 1-1: config 3 has no interface number 1 [ 680.705712][ T3756] usb 1-1: config 3 interface 19 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 680.724175][ T3756] usb 1-1: config 3 interface 19 has no altsetting 0 [ 680.887686][ T3756] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 680.896795][ T3756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.926069][ T3756] usb 1-1: Product: syz [ 680.935164][ T3756] usb 1-1: Manufacturer: syz [ 680.945807][ T3756] usb 1-1: SerialNumber: syz [ 680.988436][ T3688] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 681.097999][ T3688] usb 5-1: device descriptor read/8, error -71 [ 681.291084][ T3756] pl2303 1-1:3.19: required endpoints missing [ 681.308259][ T3756] pl2303 1-1:3.0: required endpoints missing [ 681.326349][ T3756] usb 1-1: USB disconnect, device number 83 [ 681.402288][ T3688] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 681.517682][ T3688] usb 5-1: device descriptor read/8, error -71 [ 681.653107][ T3688] usb usb5-port1: unable to enumerate USB device [ 682.060734][ T11] team0 (unregistering): Port device team_slave_1 removed [ 682.180887][ T11] team0 (unregistering): Port device team_slave_0 removed [ 682.253806][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.373668][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.569864][ T3660] Bluetooth: hci1: command tx timeout [ 682.944873][T12097] loop2: detected capacity change from 0 to 1024 [ 683.023122][T12097] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 683.107690][ T3688] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 683.437912][ T3688] usb 5-1: Using ep0 maxpacket: 8 [ 683.497202][T12107] usb usb8: usbfs: process 12107 (syz.3.2002) did not claim interface 0 before use [ 683.587682][ T3688] usb 5-1: config 0 has no interfaces? [ 683.593281][ T3688] usb 5-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 683.620640][ T3688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.651465][ T3688] usb 5-1: config 0 descriptor?? [ 683.700798][T11432] EXT4-fs (loop2): unmounting filesystem. [ 684.093165][ T3688] usb 5-1: USB disconnect, device number 91 [ 684.107261][ T11] bond0 (unregistering): Released all slaves [ 684.301191][T11996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.317497][T11996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.380421][T11996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.541965][T11996] device hsr_slave_0 entered promiscuous mode [ 684.549878][T11996] device hsr_slave_1 entered promiscuous mode [ 684.556984][T11996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.569474][T11996] Cannot create hsr debugfs directory [ 684.640060][ T3660] Bluetooth: hci1: command tx timeout [ 684.860414][T12127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2008'. [ 685.429116][T12148] usb usb8: usbfs: process 12148 (syz.3.2014) did not claim interface 0 before use [ 685.759470][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.765841][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.217568][ T7] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 686.241231][T11996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 686.281103][T11996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 686.315027][T11996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 686.336118][T12171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2020'. [ 686.344691][T11996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 686.458375][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 686.562819][T11996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.597915][ T7] usb 3-1: config 0 has no interfaces? [ 686.603780][ T7] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 686.615404][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 686.630431][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.643047][ T7] usb 3-1: config 0 descriptor?? [ 686.658268][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 686.682280][T11996] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.708514][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 686.714623][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 686.714642][ T26] audit: type=1326 audit(1726733166.780:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 686.717698][ T3660] Bluetooth: hci1: command tx timeout [ 686.746141][ T26] audit: type=1326 audit(1726733166.790:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 686.763968][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 686.785336][ T4950] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.792551][ T4950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.810657][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 686.849230][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 686.872961][T12180] loop3: detected capacity change from 0 to 512 [ 686.894934][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 686.918379][ T26] audit: type=1326 audit(1726733166.790:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 686.951362][ T4950] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.958633][ T4950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.976002][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 686.984750][ T26] audit: type=1326 audit(1726733166.790:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 687.010514][ T26] audit: type=1326 audit(1726733166.790:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 687.018149][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 687.063289][ T26] audit: type=1326 audit(1726733166.790:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 687.088202][T12180] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 687.097753][T12180] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038 (0x7fffffff) [ 687.119119][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 687.128055][ T26] audit: type=1326 audit(1726733166.790:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 687.161980][ T26] audit: type=1326 audit(1726733166.790:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 687.186448][ T26] audit: type=1326 audit(1726733166.790:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 687.209501][ T26] audit: type=1326 audit(1726733166.890:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.3.2023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d7217def9 code=0x7ffc0000 [ 687.242210][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 687.255180][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 687.312623][ T7] usb 3-1: USB disconnect, device number 77 [ 687.322075][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 687.352343][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 687.366831][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 687.377262][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 687.401426][T10567] EXT4-fs (loop3): unmounting filesystem. [ 687.403847][T11996] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.438869][T11996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 687.467834][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 687.508282][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 687.516969][T12197] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2026'. [ 687.594641][T12207] usb usb8: usbfs: process 12207 (syz.4.2027) did not claim interface 0 before use [ 687.782450][T12211] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 688.100868][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 688.118790][ T8465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 688.150315][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 688.275682][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 688.290917][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 688.325753][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 688.358411][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 688.390732][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 688.413089][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 688.440965][T11996] device veth0_vlan entered promiscuous mode [ 688.464456][T11996] device veth1_vlan entered promiscuous mode [ 688.581419][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 688.617935][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 688.655003][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 688.695444][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 688.725177][T11996] device veth0_macvtap entered promiscuous mode [ 688.840733][T12244] device syzkaller0 entered promiscuous mode [ 688.865398][T11996] device veth1_macvtap entered promiscuous mode [ 689.543177][T12265] netlink: 'syz.3.2042': attribute type 72 has an invalid length. [ 689.551417][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2042'. [ 690.298274][T12275] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2047'. [ 690.367298][T12278] usb usb8: usbfs: process 12278 (syz.0.2048) did not claim interface 0 before use [ 693.081970][T12295] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 693.154538][T12295] team0: Device veth0_macvtap failed to register rx_handler [ 693.232111][T12299] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 693.256117][T12300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2057'. [ 693.309903][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.347535][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.382941][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.438350][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.469051][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.500259][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.532161][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.553146][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.595966][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.610728][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2063'. [ 693.643261][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.697533][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 693.723435][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 693.750626][T11996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.780554][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 693.803151][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 693.822041][T12310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 693.919417][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 693.967524][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.018265][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.048891][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.069138][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.086585][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.098606][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.110735][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.120869][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.131820][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.143130][T11996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 694.154406][T11996] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 694.166624][T11996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.177884][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 694.186582][ T4950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 694.289391][T11996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.318652][T11996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.367532][T11996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.407574][T11996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.498513][T12346] loop2: detected capacity change from 0 to 1024 [ 799.507328][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 799.514358][ C0] rcu: 1-...!: (1 GPs behind) idle=c43c/1/0x4000000000000000 softirq=72007/72008 fqs=1 [ 799.525993][ C0] (detected by 0, t=10505 jiffies, g=109001, q=273 ncpus=2) [ 799.533431][ C0] Sending NMI from CPU 0 to CPUs 1: [ 799.538688][ C1] NMI backtrace for cpu 1 [ 799.538708][ C1] CPU: 1 PID: 3091 Comm: udevd Not tainted 6.1.111-syzkaller #0 [ 799.538728][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 799.538741][ C1] RIP: 0010:validate_chain+0x1f/0x5950 [ 799.538767][ C1] Code: 9f 3b 09 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec 80 02 00 00 49 89 ce 89 54 24 60 <48> 89 7c 24 78 65 48 8b 04 25 28 00 00 00 48 89 84 24 60 02 00 00 [ 799.538781][ C1] RSP: 0018:ffffc900001e07a0 EFLAGS: 00000086 [ 799.538797][ C1] RAX: 1ffffffff21896b4 RBX: ffffffff90c4b5a0 RCX: a8d35bb04e02924a [ 799.538811][ C1] RDX: 0000000000000001 RSI: ffff88807c934688 RDI: ffff88807c933b80 [ 799.538824][ C1] RBP: ffffc900001e0a50 R08: dffffc0000000000 R09: fffffbfff223b877 [ 799.538837][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807c934658 [ 799.538850][ C1] R13: ffff88807c933b80 R14: a8d35bb04e02924a R15: 1ffff1100f9268d5 [ 799.538863][ C1] FS: 00007f82ccfd0c80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 799.538879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 799.538896][ C1] CR2: 0000000000000400 CR3: 000000002cedf000 CR4: 00000000003506e0 [ 799.538911][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 799.538921][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 799.538932][ C1] Call Trace: [ 799.538940][ C1] [ 799.538948][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 799.538979][ C1] ? read_lock_is_recursive+0x10/0x10 [ 799.539006][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 799.539043][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 799.539069][ C1] ? nmi_handle+0x12e/0x440 [ 799.539096][ C1] ? nmi_handle+0x25/0x440 [ 799.539122][ C1] ? validate_chain+0x1f/0x5950 [ 799.539138][ C1] ? default_do_nmi+0x62/0x150 [ 799.539155][ C1] ? exc_nmi+0xa8/0x100 [ 799.539172][ C1] ? end_repeat_nmi+0x16/0x31 [ 799.539203][ C1] ? validate_chain+0x1f/0x5950 [ 799.539219][ C1] ? validate_chain+0x1f/0x5950 [ 799.539236][ C1] ? validate_chain+0x1f/0x5950 [ 799.539252][ C1] [ 799.539257][ C1] [ 799.539269][ C1] ? reacquire_held_locks+0x660/0x660 [ 799.539286][ C1] ? reacquire_held_locks+0x660/0x660 [ 799.539304][ C1] ? validate_chain+0x112/0x5950 [ 799.539319][ C1] ? reacquire_held_locks+0x660/0x660 [ 799.539336][ C1] ? reacquire_held_locks+0x660/0x660 [ 799.539351][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 799.539381][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 799.539406][ C1] ? mark_lock+0x9a/0x340 [ 799.539433][ C1] ? mark_lock+0x9a/0x340 [ 799.539459][ C1] __lock_acquire+0x125b/0x1f80 [ 799.539491][ C1] lock_acquire+0x1f8/0x5a0 [ 799.539515][ C1] ? advance_sched+0x47/0x970 [ 799.539541][ C1] ? read_lock_is_recursive+0x10/0x10 [ 799.539572][ C1] ? debug_deactivate+0x1d/0x280 [ 799.539594][ C1] ? __hrtimer_run_queues+0x4b0/0xe50 [ 799.539614][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 799.539638][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 799.539667][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 799.539687][ C1] _raw_spin_lock+0x2a/0x40 [ 799.539707][ C1] ? advance_sched+0x47/0x970 [ 799.539728][ C1] advance_sched+0x47/0x970 [ 799.539750][ C1] ? _raw_spin_unlock+0x40/0x40 [ 799.539770][ C1] ? debug_object_deactivate+0x63/0x380 [ 799.539799][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 799.539822][ C1] ? taprio_free_sched_cb+0x1a0/0x1a0 [ 799.539844][ C1] __hrtimer_run_queues+0x5e5/0xe50 [ 799.539873][ C1] ? hrtimer_interrupt+0x980/0x980 [ 799.539903][ C1] hrtimer_interrupt+0x392/0x980 [ 799.539935][ C1] __sysvec_apic_timer_interrupt+0x156/0x580 [ 799.539959][ C1] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 799.539980][ C1] [ 799.539986][ C1] [ 799.539991][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 799.540017][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130 [ 799.540040][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 f2 f1 30 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c7 37 ad f6 65 8b 05 98 2f 51 75 85 c0 74 3f 48 c7 04 24 0e 36 [ 799.540055][ C1] RSP: 0018:ffffc900031bf940 EFLAGS: 00000206 [ 799.540069][ C1] RAX: d1170cb5e852ed00 RBX: 1ffff92000637f2c RCX: ffffffff97333103 [ 799.540083][ C1] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: 0000000000000001 [ 799.540095][ C1] RBP: ffffc900031bf9c8 R08: dffffc0000000000 R09: fffffbfff2eac0be [ 799.540108][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 799.540120][ C1] R13: 1ffff92000637f28 R14: ffffc900031bf960 R15: 0000000000000246 [ 799.540141][ C1] ? _raw_spin_unlock+0x40/0x40 [ 799.540166][ C1] debug_check_no_obj_freed+0x455/0x4e0 [ 799.540195][ C1] ? page_ext_get+0x1d2/0x2a0 [ 799.540225][ C1] free_unref_page_prepare+0x319/0x1120 [ 799.540248][ C1] free_unref_page+0x33/0x3e0 [ 799.540268][ C1] __unfreeze_partials+0x1b7/0x210 [ 799.540295][ C1] put_cpu_partial+0x17b/0x250 [ 799.540317][ C1] ? put_cpu_partial+0x70/0x250 [ 799.540341][ C1] qlist_free_all+0x76/0xe0 [ 799.540363][ C1] kasan_quarantine_reduce+0x156/0x170 [ 799.540386][ C1] __kasan_slab_alloc+0x1f/0x70 [ 799.540403][ C1] slab_post_alloc_hook+0x52/0x3a0 [ 799.540428][ C1] kmem_cache_alloc+0x10c/0x2d0 [ 799.540449][ C1] ? getname_flags+0xb8/0x4f0 [ 799.540470][ C1] getname_flags+0xb8/0x4f0 [ 799.540489][ C1] ? bpf_get_stack_raw_tp+0x1b2/0x220 [ 799.540509][ C1] user_path_at_empty+0x28/0x60 [ 799.540531][ C1] do_readlinkat+0x114/0x3a0 [ 799.540561][ C1] ? cp_new_stat+0x6d0/0x6d0 [ 799.540586][ C1] ? print_irqtrace_events+0x210/0x210 [ 799.540616][ C1] __x64_sys_readlink+0x7b/0x90 [ 799.540642][ C1] do_syscall_64+0x3b/0xb0 [ 799.540668][ C1] ? clear_bhb_loop+0x45/0xa0 [ 799.540693][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 799.540717][ C1] RIP: 0033:0x7f82ccb17d47 [ 799.540738][ C1] Code: 73 01 c3 48 8b 0d e1 90 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b1 90 0d 00 f7 d8 64 89 01 48 [ 799.540752][ C1] RSP: 002b:00007fff0d00adf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 799.540769][ C1] RAX: ffffffffffffffda RBX: 00007fff0d00ae08 RCX: 00007f82ccb17d47 [ 799.540782][ C1] RDX: 0000000000000400 RSI: 00007fff0d00ae08 RDI: 00007fff0d00b2e8 [ 799.540794][ C1] RBP: 0000000000000400 R08: 0000556517298664 R09: 0000000000000000 [ 799.540805][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007fff0d00b2e8 [ 799.540817][ C1] R13: 00007fff0d00b258 R14: 0000556517284910 R15: 0000000000000000 [ 799.540836][ C1] [ 799.541669][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10499 jiffies! g109001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 800.198956][ C0] rcu: Possible timer handling issue on cpu=0 timer-softirq=44367 [ 800.206869][ C0] rcu: rcu_preempt kthread starved for 10500 jiffies! g109001 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 800.218604][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 800.229039][ C0] rcu: RCU grace-period kthread stack dump: [ 800.234940][ C0] task:rcu_preempt state:I stack:25528 pid:16 ppid:2 flags:0x00004000 [ 800.244181][ C0] Call Trace: [ 800.247479][ C0] [ 800.250434][ C0] __schedule+0x143f/0x4570 [ 800.254978][ C0] ? _raw_spin_unlock+0x40/0x40 [ 800.259866][ C0] ? __mod_timer+0x956/0xee0 [ 800.264489][ C0] ? release_firmware_map_entry+0x186/0x186 [ 800.270419][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 800.275832][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 800.281773][ C0] ? _raw_spin_unlock+0x40/0x40 [ 800.286678][ C0] schedule+0xbf/0x180 [ 800.290792][ C0] schedule_timeout+0x1b9/0x300 [ 800.295678][ C0] ? console_conditional_schedule+0x40/0x40 [ 800.301623][ C0] ? update_process_times+0x1b0/0x1b0 [ 800.307031][ C0] ? prepare_to_swait_event+0x329/0x350 [ 800.312620][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 800.317507][ C0] ? dump_blkd_tasks+0x810/0x810 [ 800.322567][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 800.327797][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 800.332595][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 800.338532][ C0] ? finish_swait+0xcf/0x1e0 [ 800.343161][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 800.347782][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 800.352920][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 800.358846][ C0] ? __kthread_parkme+0x168/0x1c0 [ 800.363914][ C0] kthread+0x28d/0x320 [ 800.368043][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 800.373181][ C0] ? kthread_blkcg+0xd0/0xd0 [ 800.377797][ C0] ret_from_fork+0x1f/0x30 [ 800.382260][ C0] [ 800.385296][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 800.391632][ C0] CPU: 0 PID: 11 Comm: kworker/u4:1 Not tainted 6.1.111-syzkaller #0 [ 800.399715][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 800.409895][ C0] Workqueue: events_unbound toggle_allocation_gate [ 800.416434][ C0] RIP: 0010:smp_call_function_many_cond+0x1fae/0x3460 [ 800.423225][ C0] Code: 2f 44 89 ee 83 e6 01 31 ff e8 ae 43 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 39 40 0b 00 e9 1b ff ff ff f3 90 <42> 0f b6 04 2b 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff [ 800.442942][ C0] RSP: 0018:ffffc900001075a0 EFLAGS: 00000293 [ 800.449051][ C0] RAX: ffffffff817f6f29 RBX: 1ffff110171e81b1 RCX: ffff888017f43b80 [ 800.457045][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 800.465042][ C0] RBP: ffffc90000107980 R08: ffffffff817f6ef2 R09: fffffbfff223b845 [ 800.473037][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000 [ 800.481029][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8f40d88 [ 800.489022][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 800.497971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.504573][ C0] CR2: 000002b500000000 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 800.512574][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 800.520589][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 800.528856][ C0] Call Trace: [ 800.532157][ C0] [ 800.535016][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 800.541379][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 800.547423][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 800.552411][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 800.557816][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 800.562696][ C0] ? hrtimer_run_queues+0x163/0x450 [ 800.567922][ C0] ? acct_account_cputime+0x26e/0x270 [ 800.573406][ C0] ? update_process_times+0x147/0x1b0 [ 800.578808][ C0] ? tick_sched_timer+0x386/0x550 [ 800.583856][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 800.589428][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 800.594848][ C0] ? hrtimer_interrupt+0x980/0x980 [ 800.599985][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 800.606097][ C0] ? hrtimer_interrupt+0x392/0x980 [ 800.611261][ C0] ? __sysvec_apic_timer_interrupt+0x156/0x580 [ 800.617451][ C0] ? sysvec_apic_timer_interrupt+0x8c/0xb0 [ 800.623286][ C0] [ 800.626238][ C0] [ 800.629185][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 800.635375][ C0] ? smp_call_function_many_cond+0x1f92/0x3460 [ 800.641559][ C0] ? smp_call_function_many_cond+0x1fc9/0x3460 [ 800.647752][ C0] ? smp_call_function_many_cond+0x1fae/0x3460 [ 800.653961][ C0] ? text_poke_sync+0x20/0x20 [ 800.658679][ C0] ? __text_poke+0x81a/0x9a0 [ 800.663379][ C0] ? mark_lock+0x9a/0x340 [ 800.667740][ C0] ? smp_call_function_many+0x30/0x30 [ 800.673140][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 800.679163][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 800.684394][ C0] ? _raw_spin_unlock+0x24/0x40 [ 800.689268][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 800.694844][ C0] ? __text_poke+0x81a/0x9a0 [ 800.699471][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 800.704958][ C0] ? __text_poke+0x9a0/0x9a0 [ 800.709587][ C0] ? text_poke+0x90/0x90 [ 800.713858][ C0] ? read_lock_is_recursive+0x10/0x10 [ 800.719261][ C0] ? __mutex_trylock_common+0x17e/0x2e0 [ 800.724837][ C0] ? __might_sleep+0xb0/0xb0 [ 800.729454][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 800.735663][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 800.741159][ C0] ? text_poke_sync+0x20/0x20 [ 800.745865][ C0] on_each_cpu_cond_mask+0x3b/0x80 [ 800.751005][ C0] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 800.756490][ C0] text_poke_bp_batch+0x2bb/0x940 [ 800.761548][ C0] ? arch_jump_label_transform_apply+0xe/0x20 [ 800.767645][ C0] ? text_poke_loc_init+0x680/0x680 [ 800.772877][ C0] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 800.779065][ C0] text_poke_finish+0x16/0x30 [ 800.783767][ C0] arch_jump_label_transform_apply+0x13/0x20 [ 800.789770][ C0] static_key_enable_cpuslocked+0x12e/0x250 [ 800.795694][ C0] ? process_one_work+0x7a9/0x11d0 [ 800.800837][ C0] static_key_enable+0x16/0x20 [ 800.805627][ C0] toggle_allocation_gate+0xbf/0x480 [ 800.810943][ C0] ? show_object+0xa0/0xa0 [ 800.815476][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 800.821494][ C0] ? print_irqtrace_events+0x210/0x210 [ 800.826988][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 800.832913][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 800.838141][ C0] ? process_one_work+0x7a9/0x11d0 [ 800.843278][ C0] process_one_work+0x8a9/0x11d0 [ 800.848257][ C0] ? worker_detach_from_pool+0x260/0x260 [ 800.853929][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 800.859502][ C0] ? kthread_data+0x4e/0xc0 [ 800.864045][ C0] ? wq_worker_running+0x97/0x190 [ 800.869093][ C0] worker_thread+0xa47/0x1200 [ 800.873823][ C0] kthread+0x28d/0x320 [ 800.877914][ C0] ? worker_clr_flags+0x190/0x190 [ 800.882984][ C0] ? kthread_blkcg+0xd0/0xd0 [ 800.887596][ C0] ret_from_fork+0x1f/0x30 [ 800.892073][ C0]