last executing test programs: 9m51.92039694s ago: executing program 2 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x42) r3 = dup(r1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000180)={0x84b, 0x4, 0x4, r2, 0xc}) 9m51.527878487s ago: executing program 3 (id=173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 9m51.217614371s ago: executing program 2 (id=174): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/150) 9m50.446760166s ago: executing program 3 (id=175): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{0xf}, 0xa}}}, 0x7) 9m50.313912936s ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 9m49.500245477s ago: executing program 3 (id=179): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802c53b418126a7aed1c00000000000e7ffffffffdeffff0000df00", 0x2, 0x7ffffff8, 0x4, 0xb700, 0x400, 0x8}) 9m49.138284479s ago: executing program 2 (id=181): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8, @ANYBLOB="79a9"], 0x0) r2 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r2, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r1, 0xffffffffffffffff, 0x0) 9m48.949968626s ago: executing program 3 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x48d, 0x0, 0xfffffff7}]}) 9m48.085083998s ago: executing program 3 (id=184): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0xa, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 9m45.893476034s ago: executing program 2 (id=186): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_SET_RAND_ADDR={{0xf}, 0xa}}}, 0x7) 9m45.73700114s ago: executing program 2 (id=187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1}, 0x49cf75490397e68f) recvmsg$unix(r0, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x41) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}) 9m45.617278732s ago: executing program 2 (id=188): ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="58b1878ed0d05bd34e35ea488f075d1491bea7714906726a2cdb42212c7d1dd1911c6f40dc829d744dbffadedba0785c4e3b464afd5d5cd1d78e437dd040dbe665af65767475a7b817b96e") ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000400)={0x6, 'caif0\x00', {0x2}, 0x6}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000740)={0x0, 'netdevsim0\x00', {0x4}, 0xffff}) 9m34.992657504s ago: executing program 32 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfffffffa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 9m32.480102887s ago: executing program 33 (id=185): r0 = socket$inet6(0xa, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x22, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000680)="0000000000060000000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000040)={r6, @in6={{0xa, 0x4e22, 0xfffffff7, @mcast2, 0x74}}}, &(0x7f0000000280)=0x84) r7 = openat$binder_debug(0xffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f00000006c0)={{r1}, "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"}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r9, 0x5607, 0x12) ioctl$VT_ACTIVATE(r9, 0x5606, 0x4) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(r8, 0x4008744b, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) sendmsg$can_raw(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f0000000200)=@can={{0x4, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "817ba97dfcab7b12"}, 0x10}, 0x1, 0x0, 0x0, 0x20008090}, 0x20004800) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x5, {0x2, 0x0, 0x4}}, 0x18) 9m32.428525479s ago: executing program 34 (id=184): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000002ac1414aa00"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0xa, 0x2, 0x0, @empty=0x2000000, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 9m30.317511854s ago: executing program 35 (id=188): ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f0000000040)="58b1878ed0d05bd34e35ea488f075d1491bea7714906726a2cdb42212c7d1dd1911c6f40dc829d744dbffadedba0785c4e3b464afd5d5cd1d78e437dd040dbe665af65767475a7b817b96e") ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000400)={0x6, 'caif0\x00', {0x2}, 0x6}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000740)={0x0, 'netdevsim0\x00', {0x4}, 0xffff}) 8m45.805025183s ago: executing program 5 (id=259): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8m45.801173838s ago: executing program 6 (id=260): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f000005a800)={0x1c, &(0x7f000005a640)={0x0, 0xa}, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 8m45.299899242s ago: executing program 5 (id=262): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x173, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 8m44.115768906s ago: executing program 5 (id=265): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m44.020792081s ago: executing program 6 (id=266): r0 = socket$kcm(0x2, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xf}}}, 0x24}}, 0x240400c0) 8m43.524910645s ago: executing program 5 (id=269): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) setreuid(0xffffffffffffffff, 0xee01) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) 8m43.225303743s ago: executing program 5 (id=271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x6}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 8m42.975238088s ago: executing program 5 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xfffffffa, 0x3ff, 0x300d, 0xff, 0x5, 0x5a, 0x8, 0xfffffeff, 0x66, 0x6, 0x5, 0x10, 0x7, 0x8, 0x8, 0x3, 0x38000000, 0x4, 0xff, 0x9, 0xffff, 0x400, 0x7, 0x2, 0x6, 0x8, 0x5, 0x2b4e, 0x3, 0xffffff73, 0x4, 0x2, 0x4, 0xe49, 0xc76, 0xfffffffe, 0x800, 0xb8d0, 0x5, 0xfffffffe, 0x9, 0x40f, 0x8, 0xf, 0x0, 0x1, 0x6, 0x5, 0x8001, 0x101, 0x7, 0xbbb, 0x6, 0x101, 0x5, 0x9, 0x2, 0x10001, 0x4, 0x2, 0x2, 0x5, 0x4, 0xfffffff9, 0x3, 0x3, 0x5, 0x400, 0x6, 0x5, 0x8, 0x8, 0xfff, 0x4d, 0x8, 0x8, 0x4, 0x3, 0x80000000, 0x3, 0x7ff, 0x9, 0x2, 0x1, 0xe2, 0xffffffff, 0x10000, 0x9, 0x46d, 0x9000000, 0xe, 0x7, 0xfffffffb, 0x40, 0x8, 0x8, 0xb, 0x7, 0x1, 0x3, 0x7fff, 0xa, 0x909, 0x5, 0x8b04, 0x101, 0x5, 0x7, 0x80, 0x8, 0x7fffffff, 0x2, 0x9, 0xa3b, 0x6, 0x4, 0xf19, 0x7f, 0x15, 0x4100, 0x5, 0x2, 0x7, 0x9, 0x5, 0x3, 0x23, 0x6, 0x7, 0xb, 0xe, 0x100, 0x7, 0x9, 0x3, 0xe, 0x3, 0x1, 0x10000, 0xc, 0x6, 0x5, 0x2, 0x0, 0x40, 0xe, 0x9, 0x7, 0x2, 0x6, 0x1, 0x72, 0xf, 0x0, 0x8000, 0xfffffffa, 0x0, 0x2, 0xb1, 0x661, 0x5, 0x0, 0x3, 0x1, 0x6, 0x3, 0x2, 0x9, 0x400, 0x43b4, 0x9, 0x99, 0x3, 0x80000000, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x100, 0x4f, 0xb, 0xffffffff, 0x3, 0x43, 0xffffffff, 0xb5, 0xf9c3, 0xd, 0x1, 0x1ff, 0x7fff, 0xf, 0xbe14, 0x0, 0x40, 0x9, 0xece, 0x8001, 0x5, 0x6, 0x7, 0x9, 0x6, 0xffff, 0xffffffff, 0x7, 0x9, 0x2, 0x1, 0xdb, 0xfffffe00, 0x8000, 0x0, 0x6, 0x9, 0x7fffffff, 0x9, 0x5, 0xf95d, 0x5, 0x30, 0x4, 0x6, 0x7f, 0x7fffffff, 0xffffff3b, 0x6, 0x5, 0x3, 0x2, 0x6, 0x9, 0x2, 0xfffffff8, 0x1, 0x25, 0xfff, 0x978a, 0x220, 0x9, 0x0, 0x9, 0x7f, 0x6, 0x5, 0xd36a, 0x0, 0x2, 0x0, 0x6, 0x2dc9165, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m42.417213699s ago: executing program 6 (id=275): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c49f8f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf32106855", 0x18d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 8m41.152399659s ago: executing program 6 (id=282): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='scalable', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 8m40.869762147s ago: executing program 6 (id=283): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2501, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@x86={0x93, 0x8, 0x0, 0x0, 0x719, 0xfd, 0x4b, 0xa5, 0x40, 0x4, 0x2f, 0x9, 0x0, 0x358, 0x9, 0x13, 0x4, 0x5c, 0x76, '\x00', 0x3, 0x5e6}) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0xe000, 0x0, 0x77, 0x0, 0x3, 0x8b, 0x2, 0x0, 0x6, 0xe, 0xf4}, {0x2, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0xe, 0x0, 0x7, 0xc4, 0x5, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0xff}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0xdddd1000, 0xa, 0x7, 0x0, 0x0, 0x7, 0x20, 0x0, 0x3, 0x0, 0x3}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x41, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x9}, {0x3000, 0x7fc0}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) 8m40.492060918s ago: executing program 6 (id=285): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) sendmsg$kcm(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x84) 8m39.325873084s ago: executing program 8 (id=294): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0d, &(0x7f0000000040)) 8m37.663037613s ago: executing program 8 (id=300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 8m37.477491145s ago: executing program 8 (id=302): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/119, 0x0, 0x4000}) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) 8m37.31053681s ago: executing program 8 (id=304): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20004804}, 0x0) 8m37.128836924s ago: executing program 8 (id=306): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m37.053573053s ago: executing program 8 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x7, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) socket$packet(0x11, 0x3, 0x300) 8m27.880962245s ago: executing program 36 (id=273): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xfffffffa, 0x3ff, 0x300d, 0xff, 0x5, 0x5a, 0x8, 0xfffffeff, 0x66, 0x6, 0x5, 0x10, 0x7, 0x8, 0x8, 0x3, 0x38000000, 0x4, 0xff, 0x9, 0xffff, 0x400, 0x7, 0x2, 0x6, 0x8, 0x5, 0x2b4e, 0x3, 0xffffff73, 0x4, 0x2, 0x4, 0xe49, 0xc76, 0xfffffffe, 0x800, 0xb8d0, 0x5, 0xfffffffe, 0x9, 0x40f, 0x8, 0xf, 0x0, 0x1, 0x6, 0x5, 0x8001, 0x101, 0x7, 0xbbb, 0x6, 0x101, 0x5, 0x9, 0x2, 0x10001, 0x4, 0x2, 0x2, 0x5, 0x4, 0xfffffff9, 0x3, 0x3, 0x5, 0x400, 0x6, 0x5, 0x8, 0x8, 0xfff, 0x4d, 0x8, 0x8, 0x4, 0x3, 0x80000000, 0x3, 0x7ff, 0x9, 0x2, 0x1, 0xe2, 0xffffffff, 0x10000, 0x9, 0x46d, 0x9000000, 0xe, 0x7, 0xfffffffb, 0x40, 0x8, 0x8, 0xb, 0x7, 0x1, 0x3, 0x7fff, 0xa, 0x909, 0x5, 0x8b04, 0x101, 0x5, 0x7, 0x80, 0x8, 0x7fffffff, 0x2, 0x9, 0xa3b, 0x6, 0x4, 0xf19, 0x7f, 0x15, 0x4100, 0x5, 0x2, 0x7, 0x9, 0x5, 0x3, 0x23, 0x6, 0x7, 0xb, 0xe, 0x100, 0x7, 0x9, 0x3, 0xe, 0x3, 0x1, 0x10000, 0xc, 0x6, 0x5, 0x2, 0x0, 0x40, 0xe, 0x9, 0x7, 0x2, 0x6, 0x1, 0x72, 0xf, 0x0, 0x8000, 0xfffffffa, 0x0, 0x2, 0xb1, 0x661, 0x5, 0x0, 0x3, 0x1, 0x6, 0x3, 0x2, 0x9, 0x400, 0x43b4, 0x9, 0x99, 0x3, 0x80000000, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x3, 0x4, 0x100, 0x4f, 0xb, 0xffffffff, 0x3, 0x43, 0xffffffff, 0xb5, 0xf9c3, 0xd, 0x1, 0x1ff, 0x7fff, 0xf, 0xbe14, 0x0, 0x40, 0x9, 0xece, 0x8001, 0x5, 0x6, 0x7, 0x9, 0x6, 0xffff, 0xffffffff, 0x7, 0x9, 0x2, 0x1, 0xdb, 0xfffffe00, 0x8000, 0x0, 0x6, 0x9, 0x7fffffff, 0x9, 0x5, 0xf95d, 0x5, 0x30, 0x4, 0x6, 0x7f, 0x7fffffff, 0xffffff3b, 0x6, 0x5, 0x3, 0x2, 0x6, 0x9, 0x2, 0xfffffff8, 0x1, 0x25, 0xfff, 0x978a, 0x220, 0x9, 0x0, 0x9, 0x7f, 0x6, 0x5, 0xd36a, 0x0, 0x2, 0x0, 0x6, 0x2dc9165, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 8m25.410442438s ago: executing program 37 (id=285): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x40) sendmsg$kcm(r0, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x84) 8m21.928299872s ago: executing program 38 (id=307): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x7, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) socket$packet(0x11, 0x3, 0x300) 11.361169245s ago: executing program 9 (id=1326): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xd}, @hci_ev_le_ltk_req={{}, {0xc9, 0xf, 0x8000}}}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_open_dev$MSR(&(0x7f00000001c0), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 8.263736238s ago: executing program 4 (id=1330): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/119, 0x0, 0x4000}) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 8.10768385s ago: executing program 4 (id=1331): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x44}}, 0x40080) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040445}, 0x4808) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x4) lseek(r5, 0x851, 0x1) 7.961290497s ago: executing program 0 (id=1332): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}}, 0x0) 7.898918148s ago: executing program 9 (id=1334): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1}, 0x536a}], 0x1, 0x40000007, 0x0) 7.451690176s ago: executing program 0 (id=1335): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x24008000) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x6, 0xc9, "c2b26ddc44a3075e"}}}, 0xe) 6.46113956s ago: executing program 7 (id=1338): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1c, 0x3, 0x0, 0x0, 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="4d7e04000000000000002a00000008000200", @ANYRES32=0x0, @ANYBLOB="49c4b51feaec88f1dbe88d4e68c5967b3c985945de7c831aceffa2554e4e6bc703fbe6401035e81687ee9030c80a242e0dda65a16bfcd6f77b9f5e4e178c665d07a7b0e2f29ce6ad5827ea3bd28cfbf7244e5262f0be35b13d87c243bccffef90dc3be846bb5863d935b254fff82f74ec86cf5288d04c6d8c4b4"], 0x1c}, 0x4, 0x700000000000000}, 0x4040000) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000002200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001c000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000008a000000bf9800000000000056090000030001008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) openat$dsp1(0xffffff9c, 0x0, 0x80040, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0) 6.361884581s ago: executing program 9 (id=1339): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1}, 0x536a}], 0x1, 0x40000007, 0x0) 6.344894759s ago: executing program 0 (id=1340): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) 4.979356405s ago: executing program 9 (id=1341): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000200)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000480)=""/119, 0x0, 0x4000}) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000001c0)=0x1) 4.976753816s ago: executing program 7 (id=1342): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 4.918363745s ago: executing program 0 (id=1343): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede01"], 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x23, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476a96e4a4e0b75db47ec5454c327bb5b7233ac3507e16db41d"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 4.668723782s ago: executing program 7 (id=1344): ioctl$COMEDI_CMDTEST(0xffffffffffffffff, 0x8050640a, &(0x7f0000000100)={0x0, 0x20000, 0x0, 0x8, 0x40, 0x3, 0x2, 0xda, 0x80, 0xffb, 0xffffffff, 0x6, 0x0, 0x0, 0x0}) 4.658095659s ago: executing program 7 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}}, 0x0) 4.600116252s ago: executing program 7 (id=1346): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffff3, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0xb4, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @remote}}, 0x1e) 4.365248688s ago: executing program 4 (id=1347): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="70edd0d326cfce4f1001000000a2000000000000001000000000000000100100000e000000000000080c23a9a309fe5e4005bdf7e044ee1b97d44a8a27beafbefa1edd0d2272654502f0a28adc7f6768762e28139afc3044bec2c03debfdd2632e8790c6a01f23a0bab3a7d2e145741d139213a85c130286cfe67c74ab896fa963879d55d1012cc6ab949b00c45f775efc3151f01408c4b0d6641995feb72e3c96"], 0x28}, 0xfc40) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="28000000000000002900000005"], 0x28}}], 0x1, 0x4040040) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000340), 0x4001) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00fdfffff8ffffffffffffff00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x8, 0x0, 0x3, 0x0, "5500578ea5f4ff1dffeb0000108a02", "0b07e5d8", '\x00', "27f2764f", ["aabe8470c62224475793e8a7", "7f9cf4d2c4f439ff80e1d1c8"]}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fcdbdf25250000000e0001006e657464657673696d0000000f3fdc6a650002006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4094) 4.108163462s ago: executing program 9 (id=1348): prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) 2.877037446s ago: executing program 4 (id=1349): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1}, 0x536a}], 0x1, 0x40000007, 0x0) 2.668081188s ago: executing program 1 (id=1350): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x24008000) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x6, 0xc9, "c2b26ddc44a3075e"}}}, 0xe) 2.364775955s ago: executing program 1 (id=1351): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1}, 0x536a}], 0x1, 0x40000007, 0x0) 2.35319828s ago: executing program 9 (id=1352): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d010110000000090400"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f000005a800)={0x1c, &(0x7f000005a640)={0x0, 0xa}, 0x0, 0x0}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=0x0}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) 1.673244767s ago: executing program 0 (id=1353): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1}, 0x536a}], 0x1, 0x40000007, 0x0) 1.340572977s ago: executing program 4 (id=1354): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) 1.174005211s ago: executing program 1 (id=1355): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, 0x0) 1.023078887s ago: executing program 1 (id=1356): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}}, 0x0) 686.341062ms ago: executing program 7 (id=1357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r2) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r3) syz_genetlink_get_family_id$nl802154(0x0, r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x44, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}]}, 0x44}}, 0x40080) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x8}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040445}, 0x4808) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffd) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x4) lseek(r5, 0x851, 0x1) 684.909416ms ago: executing program 1 (id=1358): socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000001c80)=[{0x0}, {&(0x7f0000000340)="36da21", 0x3}], 0x2}}], 0x1, 0x20000000) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r1, 0x601, 0x0, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4855}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000480)={0x564, r1, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaba3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3db}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "b7b6a5fa9066fd4d4ed18fbe1cfdd8843f21c72e8618a4f5d5d4f8c50fd2dc2d89"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "35dbafffe575118183a51de674280516d6754a352a790642c856"}}, @TIPC_NLA_NODE_ID={0x4e, 0x3, "0c806bc2a2f305ffcfa19f7dd4df27000da8a1c5f267943c4a2d9813ec81284260dc0d3d99e07edb9d68cd74a99568bef7d040d623c69238dcc79ad8dd5d4f073520ab0b081156140df3"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x216}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "be37e1770d37315baee6bfea5c6d6e84b40599c87186"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "45d12bdc0d5b0d67e428e5ce7da10499643d338e"}}, @TIPC_NLA_NODE_ID={0x33, 0x3, "02feed9ac534024ebac2522b319fa6be3a32a1cb7fab77adb5c1d0a6c418527747f02f7b0de9d0afcfb6f7fe92c838"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}]}, @TIPC_NLA_NODE={0x1b4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "f8027c009e018596d9e2715f158b0bd6d019804088fecf33318e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x13, 0x3, "69efbd1392b63939a070cce9c95bb3"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0x66, 0x3, "743888f7c34415b321e742880a44b9792791eae766ef2d98c63e78096a9dcd34d6ca8ce6cd76b443555ec46cba91492cf5457c9e416996d9568d34f46c73597f78f07559bdc42ef0c75a73f8c85fd69d0a56b19e410ee448fe10ab17e15454f87438"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cc59ba3f5fcd9a8bafc642d29b4b00d672d9e7fc31d5d26747000698"}}, @TIPC_NLA_NODE_ID={0x59, 0x3, "f7bfd04dd7918fbdf9f401762c6641fc918fed9644dffd14683e831b8d3d8ecaa04641785178fd1c8c459a4d9c918cf1d6ae6b099a9d90a939ab99c86e67323ed0c471f65ee03dcd6cb3de561a2106da6c9cfe03e7"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_ID={0x35, 0x3, "5debf1ca179f0f681f9ac8904eae64ef4cce0f4dc135a9afbae0e1384c65091937bd6d2ccce5e55451fc25ddb97f0af5e0"}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x564}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x2, 0x0, 0x0, 0xf, 0x1, [], "b9"}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r4, 0xc0106441, &(0x7f0000000040)={0x0, 0x0, 0x4}) 112.587979ms ago: executing program 4 (id=1359): socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="70edd0d326cfce4f1001000000a2000000000000001000000000000000100100000e000000000000080c23a9a309fe5e4005bdf7e044ee1b97d44a8a27beafbefa1edd0d2272654502f0a28adc7f6768762e28139afc3044bec2c03debfdd2632e8790c6a01f23a0bab3a7d2e145741d139213a85c130286cfe67c74ab896fa963879d55d1012cc6ab949b00c45f775efc3151f01408c4b0d6641995feb72e3c96"], 0x28}, 0xfc40) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x24, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="28000000000000002900000005"], 0x28}}], 0x1, 0x4040040) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r2, &(0x7f0000000340), 0x4001) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x6, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(0x0, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00fdfffff8ffffffffffffff00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fcdbdf25250000000e0001006e657464657673696d0000000f3fdc6a650002006e657464657673696d300000", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4094) 62.275179ms ago: executing program 0 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="056439ce0200000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a00340002020202020200001c004c"], 0x90}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 0s ago: executing program 1 (id=1361): bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, 0x0, 0x24008000) syz_emit_vhci(&(0x7f0000000780)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x6, 0xc9, "c2b26ddc44a3075e"}}}, 0xe) kernel console output (not intermixed with test programs): batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.025517][ T9070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.025530][ T9070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.025550][ T9070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.266142][ T36] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 475.424201][ T9052] hsr_slave_0: entered promiscuous mode [ 475.425322][ T9052] hsr_slave_1: entered promiscuous mode [ 475.438400][ T9052] debugfs: 'hsr0' already exists in 'hsr' [ 475.438429][ T9052] Cannot create hsr debugfs directory [ 475.445380][ T36] usb 2-1: not running at top speed; connect to a high speed hub [ 475.467782][ T36] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 475.467821][ T36] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 475.467840][ T36] usb 2-1: config 3 has no interface number 0 [ 475.467892][ T36] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 475.467923][ T36] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 475.467948][ T36] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 475.467974][ T36] usb 2-1: config 3 interface 161 has no altsetting 0 [ 475.472505][ T36] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 475.472550][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.472571][ T36] usb 2-1: Product: ᰉ [ 475.472587][ T36] usb 2-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 475.472606][ T36] usb 2-1: SerialNumber: ࡡ [ 475.764796][ T9070] hsr_slave_0: entered promiscuous mode [ 475.776499][ T9070] hsr_slave_1: entered promiscuous mode [ 475.777654][ T9070] debugfs: 'hsr0' already exists in 'hsr' [ 475.777681][ T9070] Cannot create hsr debugfs directory [ 476.061085][ T36] option 2-1:3.161: GSM modem (1-port) converter detected [ 476.096047][ T36] usb 2-1: USB disconnect, device number 31 [ 476.134008][ T36] option 2-1:3.161: device disconnected [ 476.847337][ T9269] capability: warning: `syz.7.752' uses deprecated v2 capabilities in a way that may be insecure [ 478.399503][ T9007] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 478.494721][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 478.515963][ T8439] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 478.528924][ T9007] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 478.619343][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.684618][ T8439] usb 2-1: not running at top speed; connect to a high speed hub [ 478.698397][ T8439] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 478.698427][ T8439] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 478.698446][ T8439] usb 2-1: config 3 has no interface number 0 [ 478.698493][ T8439] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 478.698523][ T8439] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 478.698550][ T8439] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 478.698576][ T8439] usb 2-1: config 3 interface 161 has no altsetting 0 [ 478.701648][ T8439] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 478.701678][ T8439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.701698][ T8439] usb 2-1: Product: ᰉ [ 478.701712][ T8439] usb 2-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 478.701731][ T8439] usb 2-1: SerialNumber: ࡡ [ 479.546737][ T8439] option 2-1:3.161: GSM modem (1-port) converter detected [ 479.595400][ T8439] usb 2-1: USB disconnect, device number 32 [ 479.625109][ T8439] option 2-1:3.161: device disconnected [ 479.790741][ T9007] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 479.831544][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 479.966814][ T9007] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 479.992071][ T9007] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 482.536311][ T8439] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 482.738268][ T8439] usb 8-1: not running at top speed; connect to a high speed hub [ 482.741770][ T8439] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 482.741825][ T8439] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 482.741857][ T8439] usb 8-1: config 3 has no interface number 0 [ 482.741927][ T8439] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 482.741974][ T8439] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 482.742152][ T8439] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 482.742196][ T8439] usb 8-1: config 3 interface 161 has no altsetting 0 [ 482.832535][ T8439] usb 8-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 482.832570][ T8439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.832591][ T8439] usb 8-1: Product: ᰉ [ 482.832607][ T8439] usb 8-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 482.832626][ T8439] usb 8-1: SerialNumber: ࡡ [ 482.915251][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.138262][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.242638][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.244431][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.368173][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.385967][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.768301][ T8439] option 8-1:3.161: GSM modem (1-port) converter detected [ 483.836165][ T8439] usb 8-1: USB disconnect, device number 21 [ 483.876703][ T8439] option 8-1:3.161: device disconnected [ 484.331024][ T1395] bridge_slave_1: left allmulticast mode [ 484.331052][ T1395] bridge_slave_1: left promiscuous mode [ 484.331252][ T1395] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.501028][ T1395] bridge_slave_0: left allmulticast mode [ 484.501065][ T1395] bridge_slave_0: left promiscuous mode [ 484.501385][ T1395] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.766222][ T1395] bridge_slave_1: left allmulticast mode [ 484.766261][ T1395] bridge_slave_1: left promiscuous mode [ 484.766564][ T1395] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.870326][ T1395] bridge_slave_0: left allmulticast mode [ 484.870365][ T1395] bridge_slave_0: left promiscuous mode [ 484.870620][ T1395] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.556707][ T1395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.640864][ T1395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.697805][ T1395] bond0 (unregistering): Released all slaves [ 485.946887][ T1395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.008101][ T1395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.060375][ T1395] bond0 (unregistering): Released all slaves [ 486.214439][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 486.783145][ T9373] exFAT-fs (nbd1): unable to read boot sector [ 486.783160][ T9373] exFAT-fs (nbd1): failed to read boot sector [ 486.783169][ T9373] exFAT-fs (nbd1): failed to recognize exfat type [ 487.245169][ T5795] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 487.398287][ T5795] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 487.398324][ T5795] usb 2-1: config 0 interface 0 has no altsetting 0 [ 487.398359][ T5795] usb 2-1: New USB device found, idVendor=056a, idProduct=005e, bcdDevice= 0.00 [ 487.398383][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.405328][ T5795] usb 2-1: config 0 descriptor?? [ 487.411200][ T9375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 487.495035][ T5795] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 487.495061][ T5795] usbhid 2-1:0.0: can't add hid device: -22 [ 487.495176][ T5795] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 487.648667][ T5795] usb 2-1: USB disconnect, device number 33 [ 487.693260][ T1395] hsr_slave_0: left promiscuous mode [ 487.866003][ T1395] hsr_slave_1: left promiscuous mode [ 487.867084][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.929829][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.126112][ T1395] hsr_slave_0: left promiscuous mode [ 488.166290][ T1395] hsr_slave_1: left promiscuous mode [ 488.167542][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.216939][ T1395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.727556][ T1395] team0 (unregistering): Port device team_slave_1 removed [ 488.786796][ T1395] team0 (unregistering): Port device team_slave_0 removed [ 489.388544][ T1395] team0 (unregistering): Port device team_slave_1 removed [ 489.446757][ T1395] team0 (unregistering): Port device team_slave_0 removed [ 489.543206][ T9409] exFAT-fs (nbd1): unable to read boot sector [ 489.543224][ T9409] exFAT-fs (nbd1): failed to read boot sector [ 489.543234][ T9409] exFAT-fs (nbd1): failed to recognize exfat type [ 490.050362][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.447447][ T9007] veth0_vlan: entered promiscuous mode [ 491.468522][ T9007] veth1_vlan: entered promiscuous mode [ 491.941674][ T9007] veth0_macvtap: entered promiscuous mode [ 492.011172][ T9007] veth1_macvtap: entered promiscuous mode [ 492.202244][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.333863][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.380486][ T829] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.381030][ T829] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.381077][ T829] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.381114][ T829] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.840652][ T8439] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 493.071996][ T8439] usb 8-1: Using ep0 maxpacket: 32 [ 493.078039][ T8439] usb 8-1: unable to get BOS descriptor or descriptor too short [ 493.082153][ T8439] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 493.082193][ T8439] usb 8-1: can't read configurations, error -71 [ 495.233975][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.7.797'. [ 497.251406][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 497.251427][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.685948][ T9052] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 498.761672][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.790546][ T9052] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.835186][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.117357][ T1301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 499.117384][ T1301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 499.154737][ T9052] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 499.253842][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.292043][ T9052] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 499.333333][ T9052] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.805710][ T9070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 499.998390][ T9070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 500.141364][ T9070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 500.246127][ T9070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.354486][ T9070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 500.704980][ T9070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.724197][ T9510] netlink: 4 bytes leftover after parsing attributes in process `syz.7.805'. [ 500.921427][ T9070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.980285][ T9070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 501.228014][ T5839] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 501.376003][ T5839] usb 2-1: Using ep0 maxpacket: 32 [ 501.379718][ T5839] usb 2-1: config 0 has no interfaces? [ 501.386748][ T5839] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 501.386774][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.386792][ T5839] usb 2-1: Product: syz [ 501.386804][ T5839] usb 2-1: Manufacturer: syz [ 501.386818][ T5839] usb 2-1: SerialNumber: syz [ 501.451960][ T5839] usb 2-1: config 0 descriptor?? [ 501.681921][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.681997][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.795699][ T9513] binder: 9512:9513 ioctl c0306201 200000000540 returned -22 [ 501.878902][ T9526] binder: 9512:9526 ioctl c0306201 200000000640 returned -22 [ 502.199352][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.386374][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.409537][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.488593][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.488787][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.630976][ T3411] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.631866][ T3411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.820381][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.868741][ T1301] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.868893][ T1301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.977569][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.977723][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.206124][ T5795] usb 2-1: USB disconnect, device number 34 [ 505.945464][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.816'. [ 506.968487][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.428535][ T9070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.061474][ T9070] veth0_vlan: entered promiscuous mode [ 509.280556][ T9070] veth1_vlan: entered promiscuous mode [ 509.735560][ T9070] veth0_macvtap: entered promiscuous mode [ 509.817549][ T9070] veth1_macvtap: entered promiscuous mode [ 510.211148][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 510.262898][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 510.265097][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 510.295086][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 510.324766][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 510.422393][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.548114][ T9070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.670265][ T1301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.672867][ T1380] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.696007][ T291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.699523][ T291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.863794][ T4912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 511.933470][ T4912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 511.944336][ T4912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 511.953366][ T4912] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 511.975179][ T4912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 512.476002][ T5604] Bluetooth: hci0: command tx timeout [ 513.178119][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.7.827'. [ 514.667052][ T5604] Bluetooth: hci2: command tx timeout [ 514.668162][ T4912] Bluetooth: hci0: command tx timeout [ 516.717423][ T5604] Bluetooth: hci2: command tx timeout [ 516.898031][ T5604] Bluetooth: hci0: command tx timeout [ 518.238734][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.839'. [ 518.796657][ T5604] Bluetooth: hci2: command tx timeout [ 518.961123][ T5604] Bluetooth: hci0: command tx timeout [ 520.876867][ T5604] Bluetooth: hci2: command tx timeout [ 525.173694][ T9593] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.175397][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.175666][ T9593] bridge_slave_0: entered allmulticast mode [ 525.204922][ T9593] bridge_slave_0: entered promiscuous mode [ 525.346733][ T3411] bridge_slave_1: left allmulticast mode [ 525.346761][ T3411] bridge_slave_1: left promiscuous mode [ 525.346950][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.516133][ T3411] bridge_slave_0: left allmulticast mode [ 525.516160][ T3411] bridge_slave_0: left promiscuous mode [ 525.516347][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.766781][ T3411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.847325][ T3411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.870262][ T3411] bond0 (unregistering): Released all slaves [ 528.922676][ T9593] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.922837][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.923093][ T9593] bridge_slave_1: entered allmulticast mode [ 528.925969][ T821] usb 8-1: new full-speed USB device number 24 using dummy_hcd [ 528.940045][ T9593] bridge_slave_1: entered promiscuous mode [ 528.953260][ T9710] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.853'. [ 529.146350][ T9593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.377872][ T9593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.555576][ T9593] team0: Port device team_slave_0 added [ 529.603887][ T9593] team0: Port device team_slave_1 added [ 529.604732][ T9602] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.605192][ T9602] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.605392][ T9602] bridge_slave_0: entered allmulticast mode [ 529.640563][ T9602] bridge_slave_0: entered promiscuous mode [ 529.679918][ T9602] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.680168][ T9602] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.680729][ T9602] bridge_slave_1: entered allmulticast mode [ 529.684339][ T9602] bridge_slave_1: entered promiscuous mode [ 529.831266][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.831284][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.831314][ T9593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.885523][ T9593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.885541][ T9593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.885570][ T9593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.024940][ T9602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.139814][ T821] usb 8-1: not running at top speed; connect to a high speed hub [ 530.141590][ T821] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 530.141618][ T821] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 530.141638][ T821] usb 8-1: config 3 has no interface number 0 [ 530.141685][ T821] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 530.141715][ T821] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 530.141742][ T821] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 530.141768][ T821] usb 8-1: config 3 interface 161 has no altsetting 0 [ 530.142410][ T9602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.147858][ T821] usb 8-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 530.147939][ T821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.148003][ T821] usb 8-1: Product: ᰉ [ 530.148045][ T821] usb 8-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 530.148099][ T821] usb 8-1: SerialNumber: ࡡ [ 531.182840][ T821] option 8-1:3.161: GSM modem (1-port) converter detected [ 531.356508][ T821] usb 8-1: USB disconnect, device number 24 [ 531.400747][ T821] option 8-1:3.161: device disconnected [ 533.420611][ T3411] hsr_slave_0: left promiscuous mode [ 533.470509][ T3411] hsr_slave_1: left promiscuous mode [ 533.473907][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.534387][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.116793][ T3411] team0 (unregistering): Port device team_slave_1 removed [ 534.176804][ T3411] team0 (unregistering): Port device team_slave_0 removed [ 534.800390][ T9593] hsr_slave_0: entered promiscuous mode [ 534.829847][ T9593] hsr_slave_1: entered promiscuous mode [ 534.834516][ T9593] debugfs: 'hsr0' already exists in 'hsr' [ 534.834544][ T9593] Cannot create hsr debugfs directory [ 534.869811][ T9602] team0: Port device team_slave_0 added [ 534.872299][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 534.913634][ T9602] team0: Port device team_slave_1 added [ 535.229901][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.229917][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.229939][ T9602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.317505][ T9602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.317524][ T9602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.317575][ T9602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.866050][ T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 536.059515][ T10] usb 10-1: not running at top speed; connect to a high speed hub [ 536.061341][ T10] usb 10-1: config 3 has an invalid interface number: 161 but max is 0 [ 536.061369][ T10] usb 10-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 536.061388][ T10] usb 10-1: config 3 has no interface number 0 [ 536.061436][ T10] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 536.061466][ T10] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 536.061493][ T10] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 536.061520][ T10] usb 10-1: config 3 interface 161 has no altsetting 0 [ 536.065119][ T10] usb 10-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 536.065151][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.065173][ T10] usb 10-1: Product: ᰉ [ 536.065188][ T10] usb 10-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 536.065207][ T10] usb 10-1: SerialNumber: ࡡ [ 536.176131][ T36] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 536.303068][ T9602] hsr_slave_0: entered promiscuous mode [ 536.322197][ T9602] hsr_slave_1: entered promiscuous mode [ 536.324958][ T9602] debugfs: 'hsr0' already exists in 'hsr' [ 536.324988][ T9602] Cannot create hsr debugfs directory [ 536.404426][ T36] usb 8-1: Using ep0 maxpacket: 8 [ 536.407992][ T36] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 536.408021][ T36] usb 8-1: config 0 has no interface number 0 [ 536.408068][ T36] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 536.408108][ T36] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 536.408188][ T36] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 536.408216][ T36] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.408309][ T36] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 536.408362][ T36] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.554047][ T36] usb 8-1: config 0 descriptor?? [ 536.663945][ T36] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 537.517608][ T36] usb 8-1: USB disconnect, device number 25 [ 537.834790][ T36] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 539.334870][ T10] option 10-1:3.161: GSM modem (1-port) converter detected [ 539.426034][ T10] usb 10-1: USB disconnect, device number 2 [ 540.975359][ T10] option 10-1:3.161: device disconnected [ 541.448747][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.1.875'. [ 542.923371][ T9811] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.879'. [ 542.985669][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22 [ 545.582707][ T3411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.809718][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 546.809798][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 546.811207][ T9870] program syz.1.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 546.812851][ T3411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.195999][ T9894] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.898'. [ 549.868293][ T3411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.205247][ T3411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.456600][ T9948] netlink: 52 bytes leftover after parsing attributes in process `syz.9.910'. [ 552.627397][ T5711] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 552.777917][ T5711] usb 10-1: Using ep0 maxpacket: 8 [ 552.783298][ T5711] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 552.783328][ T5711] usb 10-1: config 0 has no interface number 0 [ 552.783373][ T5711] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 552.783399][ T5711] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 552.783426][ T5711] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 552.783453][ T5711] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 552.783496][ T5711] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 552.783521][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.958944][ T5711] usb 10-1: config 0 descriptor?? [ 553.999513][ T5711] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 554.010755][ T5711] usb 10-1: USB disconnect, device number 3 [ 554.108265][ T5711] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 556.735660][ T3411] bridge_slave_1: left allmulticast mode [ 556.735695][ T3411] bridge_slave_1: left promiscuous mode [ 556.736105][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.028269][T10011] kvm: kvm [10009]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 557.637363][ T3411] bridge_slave_0: left allmulticast mode [ 557.637391][ T3411] bridge_slave_0: left promiscuous mode [ 557.637739][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.227127][ T36] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 558.598884][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 558.603513][ T36] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 558.603534][ T36] usb 2-1: config 0 has no interface number 0 [ 558.604008][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.604026][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 558.604045][ T36] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.604064][ T36] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.604094][ T36] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 558.604111][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.448186][ T36] usb 2-1: config 0 descriptor?? [ 559.532153][ T36] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 559.550947][ T3411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.599381][ T3411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.623624][ T3411] bond0 (unregistering): Released all slaves [ 561.374974][ T36] usb 2-1: USB disconnect, device number 35 [ 561.504062][ T36] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 563.144409][T10073] netlink: 324 bytes leftover after parsing attributes in process `syz.9.942'. [ 563.315576][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.315650][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.598068][T10102] loop4: detected capacity change from 0 to 7 [ 566.736169][ T3411] hsr_slave_0: left promiscuous mode [ 566.958824][ T3411] hsr_slave_1: left promiscuous mode [ 566.960986][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.961009][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.863727][ T3411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.863757][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.213804][ T3411] veth1_macvtap: left promiscuous mode [ 568.213916][ T3411] veth0_macvtap: left promiscuous mode [ 568.214196][ T3411] veth1_vlan: left promiscuous mode [ 568.214390][ T3411] veth0_vlan: left promiscuous mode [ 570.200241][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 570.266599][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 570.288747][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 570.311044][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 570.313067][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.335245][T10138] Bluetooth: hci5: command 0x0406 tx timeout [ 574.496413][ T5604] Bluetooth: hci3: command tx timeout [ 574.668092][ T3411] team0 (unregistering): Port device team_slave_1 removed [ 574.712569][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.9.964'. [ 574.712594][T10162] netlink: 12 bytes leftover after parsing attributes in process `syz.9.964'. [ 574.842079][ T3411] team0 (unregistering): Port device team_slave_0 removed [ 574.914807][ T5615] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 574.976668][ T5615] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 574.984056][ T5615] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 575.024382][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 575.025264][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 576.556521][ T5604] Bluetooth: hci3: command tx timeout [ 576.785097][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 578.012025][ T5604] Bluetooth: hci4: command tx timeout [ 578.905276][ T5604] Bluetooth: hci3: command tx timeout [ 579.138667][T10202] loop4: detected capacity change from 0 to 7 [ 580.011816][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 580.035889][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.035980][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 580.038591][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.039075][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 580.076060][ T5604] Bluetooth: hci4: command tx timeout [ 580.189476][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.189582][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 580.195950][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.196054][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 580.291002][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 580.291105][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 580.890003][ T5711] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 580.956810][ T5604] Bluetooth: hci3: command tx timeout [ 581.035995][ T5711] usb 10-1: Using ep0 maxpacket: 8 [ 581.068949][ T5711] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 581.068982][ T5711] usb 10-1: config 0 has no interface number 0 [ 581.069036][ T5711] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 581.069061][ T5711] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 581.069086][ T5711] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 581.069113][ T5711] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 581.069158][ T5711] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 581.069181][ T5711] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.179256][ T5711] usb 10-1: config 0 descriptor?? [ 581.196355][ T5711] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 581.577393][ T821] usb 10-1: USB disconnect, device number 4 [ 581.669078][ T821] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 583.517546][ T5604] Bluetooth: hci4: command tx timeout [ 584.642244][T10244] loop4: detected capacity change from 0 to 7 [ 584.700122][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 584.807777][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 584.807849][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 584.935578][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 584.935675][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 585.034817][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 585.034906][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 585.039542][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 585.039772][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 585.077298][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 585.077392][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 585.597245][ T5604] Bluetooth: hci4: command tx timeout [ 587.815056][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.7.991'. [ 588.206013][ T5835] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 588.359853][ T5835] usb 2-1: Using ep0 maxpacket: 8 [ 588.362323][ T5835] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 588.362390][ T5835] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 588.362413][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 588.362438][ T5835] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 588.362463][ T5835] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.362506][ T5835] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 588.362530][ T5835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.629680][ T5835] usb 2-1: GET_CAPABILITIES returned 0 [ 589.629730][ T5835] usbtmc 2-1:16.0: can't read capabilities [ 589.900956][ T8439] usb 2-1: USB disconnect, device number 36 [ 591.116533][ T3411] bridge_slave_1: left allmulticast mode [ 591.116570][ T3411] bridge_slave_1: left promiscuous mode [ 591.116999][ T3411] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.509112][ T3411] bridge_slave_0: left allmulticast mode [ 591.509153][ T3411] bridge_slave_0: left promiscuous mode [ 591.509493][ T3411] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.984006][T10286] loop4: detected capacity change from 0 to 7 [ 592.011840][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 592.015630][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.015703][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.071207][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.071310][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.106547][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.106630][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.107319][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.107392][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 592.180514][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 592.180681][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 594.131170][ T3411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.499711][ T3411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.589341][ T3411] bond0 (unregistering): Released all slaves [ 598.364072][T10331] loop4: detected capacity change from 0 to 7 [ 598.497679][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 598.499883][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.499964][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 598.504007][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.504100][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 598.532442][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.532676][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 598.551088][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.551333][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 598.578595][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 598.578865][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 598.849166][ T3411] hsr_slave_0: left promiscuous mode [ 598.886123][ T3411] hsr_slave_1: left promiscuous mode [ 598.887335][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.918257][ T3411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.103307][T10333] fuse: Bad value for 'fd' [ 602.199724][ T3411] team0 (unregistering): Port device team_slave_1 removed [ 602.264973][ T3411] team0 (unregistering): Port device team_slave_0 removed [ 602.385892][ T10] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 602.539855][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 602.541843][ T10] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 602.541874][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 602.541896][ T10] usb 2-1: config 3 has no interface number 0 [ 602.541953][ T10] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 602.541987][ T10] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 602.542017][ T10] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 602.542047][ T10] usb 2-1: config 3 interface 161 has no altsetting 0 [ 602.618423][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 602.618453][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.618472][ T10] usb 2-1: Product: ᰉ [ 602.618486][ T10] usb 2-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 603.215121][ T10] option 2-1:3.161: GSM modem (1-port) converter detected [ 603.245497][ T10] usb 2-1: USB disconnect, device number 37 [ 603.301021][ T10] option 2-1:3.161: device disconnected [ 603.944789][T10371] loop4: detected capacity change from 0 to 7 [ 604.021730][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 604.022057][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 604.022127][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 604.023506][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 604.023867][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 604.076814][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 604.076878][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 604.082960][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 604.083027][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 604.159413][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 604.159497][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 604.280462][T10136] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.280596][T10136] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.280864][T10136] bridge_slave_0: entered allmulticast mode [ 604.311060][T10136] bridge_slave_0: entered promiscuous mode [ 604.330277][T10378] fuse: Bad value for 'fd' [ 604.345537][T10136] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.345671][T10136] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.351423][T10136] bridge_slave_1: entered allmulticast mode [ 604.376110][T10136] bridge_slave_1: entered promiscuous mode [ 604.778254][T10163] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.778386][T10163] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.778640][T10163] bridge_slave_0: entered allmulticast mode [ 604.809772][T10163] bridge_slave_0: entered promiscuous mode [ 604.936325][T10136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.936719][T10163] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.936923][T10163] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.937145][T10163] bridge_slave_1: entered allmulticast mode [ 604.989061][T10163] bridge_slave_1: entered promiscuous mode [ 604.994239][T10136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.310880][T10163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.326611][T10136] team0: Port device team_slave_0 added [ 605.574763][T10163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.608802][T10136] team0: Port device team_slave_1 added [ 608.590653][T10163] team0: Port device team_slave_0 added [ 608.595475][T10136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.595494][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.595525][T10136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.651366][T10163] team0: Port device team_slave_1 added [ 608.694284][T10136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.694303][T10136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.694333][T10136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.006079][ T5616] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 609.881766][ T5616] usb 8-1: not running at top speed; connect to a high speed hub [ 609.883312][ T5616] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 609.883340][ T5616] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 609.883359][ T5616] usb 8-1: config 3 has no interface number 0 [ 609.883418][ T5616] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 609.883448][ T5616] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 609.883478][ T5616] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 609.883506][ T5616] usb 8-1: config 3 interface 161 has no altsetting 0 [ 609.942570][T10163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.942623][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.942699][T10163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.966182][ T5616] usb 8-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 609.966215][ T5616] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.966238][ T5616] usb 8-1: Product: ᰉ [ 609.966253][ T5616] usb 8-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 610.075541][T10163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 610.075561][T10163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 610.075591][T10163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 610.221813][T10136] hsr_slave_0: entered promiscuous mode [ 610.224936][T10136] hsr_slave_1: entered promiscuous mode [ 610.249815][T10136] debugfs: 'hsr0' already exists in 'hsr' [ 610.270566][T10136] Cannot create hsr debugfs directory [ 610.587241][T10163] hsr_slave_0: entered promiscuous mode [ 610.635011][T10163] hsr_slave_1: entered promiscuous mode [ 610.639203][T10163] debugfs: 'hsr0' already exists in 'hsr' [ 610.639245][T10163] Cannot create hsr debugfs directory [ 610.863296][T10413] fuse: Bad value for 'fd' [ 611.262059][T10417] loop4: detected capacity change from 0 to 7 [ 611.309649][ T5616] option 8-1:3.161: GSM modem (1-port) converter detected [ 611.310506][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.316248][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 611.316383][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 611.328061][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 611.328149][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 611.342855][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 611.346122][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 611.354526][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 611.354657][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 611.359139][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 611.359200][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 611.434213][ T5616] usb 8-1: USB disconnect, device number 26 [ 611.452693][ T5616] option 8-1:3.161: device disconnected [ 613.895957][ T10] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 614.060219][ T10] usb 8-1: not running at top speed; connect to a high speed hub [ 614.061668][ T10] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 614.061691][ T10] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 614.061710][ T10] usb 8-1: config 3 has no interface number 0 [ 614.061749][ T10] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 614.061787][ T10] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 614.061812][ T10] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 614.061839][ T10] usb 8-1: config 3 interface 161 has no altsetting 0 [ 614.109502][ T10] usb 8-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 614.109583][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.109637][ T10] usb 8-1: Product: ᰉ [ 614.109678][ T10] usb 8-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 614.109725][ T10] usb 8-1: SerialNumber: ࡡ [ 615.661977][ T10] option 8-1:3.161: GSM modem (1-port) converter detected [ 615.783177][ T10] usb 8-1: USB disconnect, device number 27 [ 615.868934][ T10] option 8-1:3.161: device disconnected [ 616.002441][ T829] bridge_slave_1: left allmulticast mode [ 616.002477][ T829] bridge_slave_1: left promiscuous mode [ 616.002760][ T829] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.250839][ T829] bridge_slave_0: left allmulticast mode [ 616.250880][ T829] bridge_slave_0: left promiscuous mode [ 616.251235][ T829] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.346140][ T5616] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 616.504095][ T5616] usb 2-1: not running at top speed; connect to a high speed hub [ 616.516195][ T5616] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 616.516225][ T5616] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 616.516245][ T5616] usb 2-1: config 3 has no interface number 0 [ 616.516294][ T5616] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 616.516324][ T5616] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 616.516351][ T5616] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 616.516379][ T5616] usb 2-1: config 3 interface 161 has no altsetting 0 [ 616.521099][ T5616] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 616.521130][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.521151][ T5616] usb 2-1: Product: ᰉ [ 616.521175][ T5616] usb 2-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 616.521193][ T5616] usb 2-1: SerialNumber: ࡡ [ 616.727403][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1045'. [ 617.402450][ T5616] option 2-1:3.161: GSM modem (1-port) converter detected [ 617.456292][ T5616] usb 2-1: USB disconnect, device number 38 [ 617.492307][ T5616] option 2-1:3.161: device disconnected [ 617.530492][ T829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.096802][ T829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.226607][ T829] bond0 (unregistering): Released all slaves [ 619.305266][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 620.362347][ T829] hsr_slave_0: left promiscuous mode [ 620.400984][ T829] hsr_slave_1: left promiscuous mode [ 620.403313][ T829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.453381][ T829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.935196][T10494] binder: 10493:10494 ioctl c0306201 200000000540 returned -22 [ 620.991548][T10498] binder: 10493:10498 ioctl c0306201 200000000640 returned -22 [ 622.133180][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1055'. [ 622.386573][ T829] team0 (unregistering): Port device team_slave_1 removed [ 622.608129][ T829] team0 (unregistering): Port device team_slave_0 removed [ 623.482186][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22 [ 624.581644][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.581718][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.889257][ T5616] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 626.085942][ T5616] usb 10-1: Using ep0 maxpacket: 8 [ 626.090471][ T5616] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 626.090502][ T5616] usb 10-1: config 0 has no interface number 0 [ 626.090547][ T5616] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 626.090573][ T5616] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 626.090600][ T5616] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 626.090626][ T5616] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 626.090668][ T5616] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 626.090691][ T5616] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.191727][ T5616] usb 10-1: config 0 descriptor?? [ 626.209048][ T5616] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 627.304371][T10558] loop4: detected capacity change from 0 to 7 [ 627.895957][ T5811] usb 10-1: USB disconnect, device number 5 [ 628.232376][ T5811] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 631.137432][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 631.200601][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 631.226378][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 631.251055][ T5615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 631.258117][ T5615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.819974][T10623] fuse: Bad value for 'rootmode' [ 632.056064][ T8439] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 632.262950][ T8439] usb 2-1: not running at top speed; connect to a high speed hub [ 632.264437][ T8439] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 632.264465][ T8439] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 632.264485][ T8439] usb 2-1: config 3 has no interface number 0 [ 632.264531][ T8439] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 632.264561][ T8439] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 632.264588][ T8439] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 632.264616][ T8439] usb 2-1: config 3 interface 161 has no altsetting 0 [ 632.279066][ T8439] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 632.279152][ T8439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.279214][ T8439] usb 2-1: Product: ᰉ [ 632.279254][ T8439] usb 2-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 632.279302][ T8439] usb 2-1: SerialNumber: ࡡ [ 632.971715][T10163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 633.295669][T10163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.515962][ T5615] Bluetooth: hci0: command tx timeout [ 633.857853][ T8439] option 2-1:3.161: GSM modem (1-port) converter detected [ 633.893255][ T8439] usb 2-1: USB disconnect, device number 39 [ 633.955032][ T8439] option 2-1:3.161: device disconnected [ 634.911396][ T4912] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 634.954962][ T4912] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 634.967003][ T4912] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 634.972494][ T4912] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 635.003980][ T4912] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 636.296908][ T5615] Bluetooth: hci0: command tx timeout [ 637.435208][T10685] fuse: Unknown parameter 'use00000000000000000000' [ 637.515981][ T5615] Bluetooth: hci2: command tx timeout [ 638.315838][ T5615] Bluetooth: hci0: command tx timeout [ 639.600677][ T5615] Bluetooth: hci2: command tx timeout [ 639.745882][ T821] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 639.895882][ T821] usb 2-1: Using ep0 maxpacket: 8 [ 639.898164][ T821] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.898184][ T821] usb 2-1: config 0 has no interface number 0 [ 639.902068][ T821] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 639.902089][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.902104][ T821] usb 2-1: Product: syz [ 639.902114][ T821] usb 2-1: Manufacturer: syz [ 639.902125][ T821] usb 2-1: SerialNumber: syz [ 639.971211][ T821] usb 2-1: config 0 descriptor?? [ 639.982501][ T821] usb 2-1: selecting invalid altsetting 2 [ 639.982535][ T821] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 640.050970][T10619] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.051099][T10619] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.051329][T10619] bridge_slave_0: entered allmulticast mode [ 640.076903][T10619] bridge_slave_0: entered promiscuous mode [ 640.120288][T10619] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.120499][T10619] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.120739][T10619] bridge_slave_1: entered allmulticast mode [ 640.147023][T10619] bridge_slave_1: entered promiscuous mode [ 640.213874][T10720] binder: 10719:10720 ioctl c0306201 200000000540 returned -22 [ 640.268687][T10721] binder: 10719:10721 ioctl c0306201 200000000640 returned -22 [ 640.395981][ T5615] Bluetooth: hci0: command tx timeout [ 641.475036][T10619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.596141][T10619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.676066][ T5615] Bluetooth: hci2: command tx timeout [ 641.810810][T10733] fuse: Unknown parameter '0x0000000000000004' [ 642.393130][T10619] team0: Port device team_slave_0 added [ 642.433877][T10619] team0: Port device team_slave_1 added [ 642.647895][T10619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.647915][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.648723][T10619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.792774][T10619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.792793][T10619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.792819][T10619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.353288][T10739] fuse: Unknown parameter 'use00000000000000000000' [ 643.425237][ T10] usb 2-1: USB disconnect, device number 40 [ 643.757782][ T5615] Bluetooth: hci2: command tx timeout [ 643.921546][T10619] hsr_slave_0: entered promiscuous mode [ 643.935243][T10759] Bluetooth: MGMT ver 1.23 [ 643.940979][T10619] hsr_slave_1: entered promiscuous mode [ 643.971510][T10619] debugfs: 'hsr0' already exists in 'hsr' [ 643.971544][T10619] Cannot create hsr debugfs directory [ 644.539879][T10763] loop4: detected capacity change from 0 to 7 [ 645.310633][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 645.310862][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.310923][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 645.311548][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.311606][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 645.312172][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.312231][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 645.350628][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.350851][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 645.364547][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 645.364779][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 645.645496][ T829] bridge_slave_1: left allmulticast mode [ 645.645533][ T829] bridge_slave_1: left promiscuous mode [ 645.657418][ T829] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.852543][ T829] bridge_slave_0: left allmulticast mode [ 645.852583][ T829] bridge_slave_0: left promiscuous mode [ 645.852860][ T829] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.354057][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1104'. [ 647.997220][ T829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.149500][ T829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.189147][T10790] fuse: Unknown parameter 'use00000000000000000000' [ 648.211834][ T829] bond0 (unregistering): Released all slaves [ 648.427968][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 650.888698][ T829] hsr_slave_0: left promiscuous mode [ 650.907619][ T829] hsr_slave_1: left promiscuous mode [ 650.908859][ T829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.960488][ T829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.831199][T10817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1113'. [ 652.162927][ T829] team0 (unregistering): Port device team_slave_1 removed [ 652.300315][ T829] team0 (unregistering): Port device team_slave_0 removed [ 655.245267][ T5258] 8021q: adding VLAN 0 to HW filter on device eth22 [ 655.295936][ T821] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 655.538239][ T821] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 655.538292][ T821] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 655.538317][ T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.544098][ T821] usb 8-1: config 0 descriptor?? [ 656.285941][T10659] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.286124][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.286384][T10659] bridge_slave_0: entered allmulticast mode [ 656.290714][T10659] bridge_slave_0: entered promiscuous mode [ 656.518965][T10659] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.519162][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.519626][T10659] bridge_slave_1: entered allmulticast mode [ 657.427125][T10659] bridge_slave_1: entered promiscuous mode [ 657.832936][T10659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.131421][ T821] usbhid 8-1:0.0: can't add hid device: -71 [ 658.131558][ T821] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 658.158158][ T821] usb 8-1: USB disconnect, device number 28 [ 658.434037][T10659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.878103][T10659] team0: Port device team_slave_0 added [ 658.909655][T10659] team0: Port device team_slave_1 added [ 658.985970][ T10] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 658.991991][T10867] fuse: Bad value for 'group_id' [ 658.992012][T10867] fuse: Bad value for 'group_id' [ 659.138984][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 659.145560][ T10] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 659.145590][ T10] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 659.145611][ T10] usb 2-1: config 3 has no interface number 0 [ 659.145662][ T10] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 659.145693][ T10] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 659.204653][ T10] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 659.204690][ T10] usb 2-1: config 3 interface 161 has no altsetting 0 [ 659.231843][ T10] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 659.231877][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.231898][ T10] usb 2-1: Product: ᰉ [ 659.231914][ T10] usb 2-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 659.231932][ T10] usb 2-1: SerialNumber: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ [ 659.636255][T10659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.636273][T10659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.636303][T10659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.715463][T10659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.715487][T10659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 659.715516][T10659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.369886][ T10] option 2-1:3.161: GSM modem (1-port) converter detected [ 660.477644][ T10] usb 2-1: USB disconnect, device number 41 [ 660.538653][ T10] option 2-1:3.161: device disconnected [ 661.486234][ T8439] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 661.635979][ T8439] usb 2-1: Using ep0 maxpacket: 8 [ 661.638558][ T8439] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 661.638618][ T8439] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 661.638642][ T8439] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 661.638668][ T8439] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 661.638692][ T8439] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 661.638735][ T8439] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 661.638760][ T8439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.013234][ T8439] usb 2-1: GET_CAPABILITIES returned 0 [ 662.013285][ T8439] usbtmc 2-1:16.0: can't read capabilities [ 662.271067][ T8439] usb 2-1: USB disconnect, device number 42 [ 662.830060][T10659] hsr_slave_0: entered promiscuous mode [ 662.840045][T10659] hsr_slave_1: entered promiscuous mode [ 662.855442][T10659] debugfs: 'hsr0' already exists in 'hsr' [ 662.855473][T10659] Cannot create hsr debugfs directory [ 664.125871][ T821] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 664.323620][ T821] usb 2-1: Using ep0 maxpacket: 8 [ 664.354108][ T821] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 664.354130][ T821] usb 2-1: config 0 has no interface number 0 [ 664.354161][ T821] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 664.354178][ T821] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 664.354196][ T821] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.354220][ T821] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 664.354252][ T821] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 664.354269][ T821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.508825][ T821] usb 2-1: config 0 descriptor?? [ 664.524314][ T821] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 665.104852][ T821] usb 2-1: USB disconnect, device number 43 [ 665.104916][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 665.138627][ T821] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 665.826452][ T821] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 667.677738][ T821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.677764][ T821] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 667.677798][ T821] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 667.679602][ T821] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.753157][ T821] usb 8-1: config 0 descriptor?? [ 668.526454][ T5703] usb 8-1: USB disconnect, device number 29 [ 668.836255][T10619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 669.738655][T10619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.774012][T10619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 670.188767][T10619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.268327][T10619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 670.351434][T10619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 670.353600][T10619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 670.357035][ T5616] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 670.487752][T10619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.555842][ T5616] usb 2-1: Using ep0 maxpacket: 8 [ 670.558126][ T5616] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 670.558177][ T5616] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 670.558194][ T5616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 670.558212][ T5616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 670.558229][ T5616] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.558259][ T5616] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 670.558275][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.908632][ T5616] usb 2-1: GET_CAPABILITIES returned 0 [ 670.908685][ T5616] usbtmc 2-1:16.0: can't read capabilities [ 671.190643][ T5616] usb 2-1: USB disconnect, device number 44 [ 672.077084][T10965] loop4: detected capacity change from 0 to 7 [ 672.779723][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 672.855400][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.858224][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 672.994617][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 672.995037][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 673.065180][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.065269][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 673.091923][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.092030][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 673.094708][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 673.095112][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 674.350481][ T829] bridge_slave_1: left allmulticast mode [ 674.350515][ T829] bridge_slave_1: left promiscuous mode [ 674.350775][ T829] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.592274][ T829] bridge_slave_0: left allmulticast mode [ 674.592312][ T829] bridge_slave_0: left promiscuous mode [ 674.593810][ T829] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.181402][T11026] loop4: detected capacity change from 0 to 7 [ 679.125916][ T5616] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 679.285864][ T5616] usb 8-1: Using ep0 maxpacket: 8 [ 679.287855][ T5616] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 679.287913][ T5616] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 679.287935][ T5616] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 679.287962][ T5616] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 679.287985][ T5616] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 679.288027][ T5616] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 679.288051][ T5616] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.446822][ T829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.577453][ T829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.863833][ T5616] usb 8-1: GET_CAPABILITIES returned 0 [ 679.863883][ T5616] usbtmc 8-1:16.0: can't read capabilities [ 680.106258][T11041] loop4: detected capacity change from 0 to 7 [ 680.457456][ T829] bond0 (unregistering): Released all slaves [ 680.550292][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 680.583239][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.583327][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 680.584199][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.584273][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 680.585189][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.585277][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 680.641414][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.641505][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 680.642377][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 680.642772][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 680.915962][ T8439] usb 8-1: USB disconnect, device number 30 [ 681.812430][T10991] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1148'. [ 684.719459][ T8439] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 685.427196][ T8439] usb 10-1: Using ep0 maxpacket: 8 [ 685.608163][ T829] hsr_slave_0: left promiscuous mode [ 685.692040][ T829] hsr_slave_1: left promiscuous mode [ 685.693720][ T829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.770771][ T829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.158381][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.158466][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.260205][ T8439] usb 10-1: device descriptor read/all, error -71 [ 687.375984][ T5703] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 687.525847][ T5703] usb 2-1: Using ep0 maxpacket: 8 [ 687.530055][ T5703] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 687.530075][ T5703] usb 2-1: config 0 has no interface number 0 [ 687.532456][ T5703] usb 2-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 687.532478][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.532493][ T5703] usb 2-1: Product: syz [ 687.532503][ T5703] usb 2-1: Manufacturer: syz [ 687.532514][ T5703] usb 2-1: SerialNumber: syz [ 687.631383][ T5703] usb 2-1: config 0 descriptor?? [ 687.684665][ T5703] usb 2-1: selecting invalid altsetting 2 [ 687.684698][ T5703] i2c-cp2615 2-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 689.288550][ T829] team0 (unregistering): Port device team_slave_1 removed [ 690.078501][T11087] binder: 11080:11087 ioctl c0306201 2000000003c0 returned -22 [ 690.845417][ T829] team0 (unregistering): Port device team_slave_0 removed [ 691.100154][ T10] usb 2-1: USB disconnect, device number 45 [ 693.535589][ T4912] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 693.618124][ T4912] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 693.625673][ T4912] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 693.655899][ T4912] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 693.736768][ T4912] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 695.634067][ T8439] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 695.765973][ T5703] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 695.786324][ T8439] usb 10-1: Using ep0 maxpacket: 8 [ 695.788962][ T8439] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 695.788993][ T8439] usb 10-1: config 0 has no interface number 0 [ 695.789040][ T8439] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 695.789065][ T8439] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 695.789092][ T8439] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 695.789118][ T8439] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 695.789161][ T8439] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 695.789185][ T8439] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.899475][ T8439] usb 10-1: config 0 descriptor?? [ 695.923110][ T5703] usb 8-1: Using ep0 maxpacket: 8 [ 695.925638][ T5703] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 695.925663][ T5703] usb 8-1: config 0 has no interface number 0 [ 695.949283][ T5703] usb 8-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 695.949314][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.949344][ T5703] usb 8-1: Product: syz [ 695.949359][ T5703] usb 8-1: Manufacturer: syz [ 695.949374][ T5703] usb 8-1: SerialNumber: syz [ 695.997932][ T5615] Bluetooth: hci3: command tx timeout [ 697.062749][ T8439] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 697.516122][ T4912] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 697.616883][ T4912] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 697.658197][ T4912] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 697.705004][ T4912] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 697.744387][ T4912] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 698.054071][ T5703] usb 8-1: config 0 descriptor?? [ 698.076107][ T4912] Bluetooth: hci3: command tx timeout [ 698.604540][ T5703] usb 8-1: selecting invalid altsetting 2 [ 698.604583][ T5703] i2c-cp2615 8-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 698.607940][ T8439] usb 10-1: USB disconnect, device number 8 [ 699.717560][ T8439] ldusb 10-1:0.55: LD USB Device #0 now disconnected [ 700.231366][ T5615] Bluetooth: hci3: command tx timeout [ 700.395874][ T5615] Bluetooth: hci0: command tx timeout [ 700.922577][ T8439] usb 8-1: USB disconnect, device number 31 [ 702.237500][ T5615] Bluetooth: hci3: command tx timeout [ 702.475917][ T5615] Bluetooth: hci0: command tx timeout [ 705.097806][ T5615] Bluetooth: hci0: command tx timeout [ 705.613953][T11202] fuse: Unknown parameter '0x0000000000000004' [ 707.116543][ T5615] Bluetooth: hci0: command tx timeout [ 707.211123][T11211] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.1187'. [ 707.725922][ T8439] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 707.878724][ T8439] usb 10-1: not running at top speed; connect to a high speed hub [ 707.880098][ T8439] usb 10-1: config 3 has an invalid interface number: 161 but max is 0 [ 707.880127][ T8439] usb 10-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 707.880151][ T8439] usb 10-1: config 3 has no interface number 0 [ 707.880184][ T8439] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 707.880205][ T8439] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 707.880224][ T8439] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 707.880243][ T8439] usb 10-1: config 3 interface 161 has no altsetting 0 [ 707.882995][ T8439] usb 10-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 707.883024][ T8439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.883048][ T8439] usb 10-1: Product: ᰉ [ 707.883059][ T8439] usb 10-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 707.883073][ T8439] usb 10-1: SerialNumber: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮 [ 708.455242][T11229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1190'. [ 708.985582][ T8439] option 10-1:3.161: GSM modem (1-port) converter detected [ 709.118712][ T8439] usb 10-1: USB disconnect, device number 9 [ 709.180211][ T8439] option 10-1:3.161: device disconnected [ 709.195963][ T5616] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 709.348339][ T5616] usb 2-1: Using ep0 maxpacket: 8 [ 709.352341][T11107] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.352929][T11107] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.353170][T11107] bridge_slave_0: entered allmulticast mode [ 709.353590][ T5616] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 709.353646][ T5616] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 709.353676][ T5616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 709.353701][ T5616] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 709.353739][ T5616] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.353783][ T5616] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 709.353807][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.416310][T11107] bridge_slave_0: entered promiscuous mode [ 709.484339][T11107] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.484561][T11107] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.484828][T11107] bridge_slave_1: entered allmulticast mode [ 709.535102][T11107] bridge_slave_1: entered promiscuous mode [ 709.687407][ T5616] usb 2-1: usb_control_msg returned -71 [ 709.687459][ T5616] usbtmc 2-1:16.0: can't read capabilities [ 709.783472][ T5616] usb 2-1: USB disconnect, device number 46 [ 710.109186][T11107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.141857][T11107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 710.359879][T11107] team0: Port device team_slave_0 added [ 710.630642][T11107] team0: Port device team_slave_1 added [ 710.969956][T11107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.969977][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.970026][T11107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 711.032427][T11107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 711.032447][T11107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.032477][T11107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.117998][T11247] fuse: Unknown parameter '0x0000000000000004' [ 711.861963][T11107] hsr_slave_0: entered promiscuous mode [ 711.874730][T11107] hsr_slave_1: entered promiscuous mode [ 711.884858][T11107] debugfs: 'hsr0' already exists in 'hsr' [ 711.884888][T11107] Cannot create hsr debugfs directory [ 712.563460][ T37] audit: type=1326 audit(1784147448.542:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11261 comm="syz.9.1199" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd66d9cde59 code=0x0 [ 712.810675][ T829] bridge_slave_1: left allmulticast mode [ 712.810716][ T829] bridge_slave_1: left promiscuous mode [ 712.810998][ T829] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.968700][ T829] bridge_slave_0: left allmulticast mode [ 712.968738][ T829] bridge_slave_0: left promiscuous mode [ 712.969020][ T829] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.155954][ T8439] usb 8-1: new full-speed USB device number 32 using dummy_hcd [ 713.329164][ T8439] usb 8-1: not running at top speed; connect to a high speed hub [ 713.330944][ T8439] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 713.330973][ T8439] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 713.330994][ T8439] usb 8-1: config 3 has no interface number 0 [ 713.331046][ T8439] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 713.331077][ T8439] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 713.331104][ T8439] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 713.331133][ T8439] usb 8-1: config 3 interface 161 has no altsetting 0 [ 713.334426][ T8439] usb 8-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 713.334457][ T8439] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.334478][ T8439] usb 8-1: Product: ᰉ [ 713.334493][ T8439] usb 8-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 713.334693][ T8439] usb 8-1: SerialNumber: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮 [ 714.250211][ T8439] option 8-1:3.161: GSM modem (1-port) converter detected [ 714.298527][ T8439] usb 8-1: USB disconnect, device number 32 [ 714.315113][ T8439] option 8-1:3.161: device disconnected [ 715.367558][ T829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.487156][ T829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.570605][ T829] bond0 (unregistering): Released all slaves [ 715.733135][T11282] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.1204'. [ 715.791432][T11286] fuse: Unknown parameter '0x0000000000000004' [ 716.138171][T11142] bridge0: port 1(bridge_slave_0) entered blocking state [ 716.138393][T11142] bridge0: port 1(bridge_slave_0) entered disabled state [ 716.138656][T11142] bridge_slave_0: entered allmulticast mode [ 716.141686][T11142] bridge_slave_0: entered promiscuous mode [ 716.212831][T11142] bridge0: port 2(bridge_slave_1) entered blocking state [ 716.212963][T11142] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.213165][T11142] bridge_slave_1: entered allmulticast mode [ 716.237737][T11142] bridge_slave_1: entered promiscuous mode [ 716.575754][T11295] loop4: detected capacity change from 0 to 7 [ 717.301371][T11142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.599085][T11142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 717.746684][T11297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'. [ 717.746752][T11297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1208'. [ 717.925049][T11142] team0: Port device team_slave_0 added [ 719.268813][ T829] hsr_slave_0: left promiscuous mode [ 719.445960][ T829] hsr_slave_1: left promiscuous mode [ 719.447211][ T829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.487471][ T829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.755957][ T821] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 719.909907][ T821] usb 2-1: not running at top speed; connect to a high speed hub [ 719.927086][ T821] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 719.927116][ T821] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 719.927136][ T821] usb 2-1: config 3 has no interface number 0 [ 719.959614][ T821] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 719.959652][ T821] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 719.959679][ T821] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 719.959722][ T821] usb 2-1: config 3 interface 161 has no altsetting 0 [ 719.963083][ T821] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 719.963114][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.963136][ T821] usb 2-1: Product: ᰉ [ 719.963152][ T821] usb 2-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 719.963171][ T821] usb 2-1: SerialNumber: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮 [ 720.800984][ T821] option 2-1:3.161: GSM modem (1-port) converter detected [ 720.859016][ T821] usb 2-1: USB disconnect, device number 47 [ 720.888274][ T821] option 2-1:3.161: device disconnected [ 721.088557][ T829] team0 (unregistering): Port device team_slave_1 removed [ 721.137236][ T829] team0 (unregistering): Port device team_slave_0 removed [ 721.561556][T11317] fuse: Unknown parameter '0x0000000000000004' [ 721.707520][T11321] FAULT_INJECTION: forcing a failure. [ 721.707520][T11321] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 721.707574][T11321] CPU: 0 UID: 0 PID: 11321 Comm: syz.7.1216 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 721.707608][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 721.707632][T11321] Call Trace: [ 721.707713][T11321] [ 721.707771][T11321] dump_stack_lvl+0xe8/0x150 [ 721.707965][T11321] should_fail_ex+0x467/0x600 [ 721.708112][T11321] prepare_alloc_pages+0x223/0x690 [ 721.708201][T11321] __alloc_frozen_pages_noprof+0x12f/0x380 [ 721.708236][T11321] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 721.708299][T11321] ? __pfx_policy_nodemask+0x10/0x10 [ 721.708370][T11321] ? mtree_range_walk+0x70a/0x8c0 [ 721.708518][T11321] alloc_pages_mpol+0xce/0x280 [ 721.708553][T11321] alloc_pages_noprof+0xd2/0x2f0 [ 721.708594][T11321] __pud_alloc+0x3a/0x460 [ 721.708656][T11321] handle_mm_fault+0xe5a/0x13f0 [ 721.708747][T11321] ? handle_mm_fault+0xe8/0x13f0 [ 721.708788][T11321] ? __pfx_handle_mm_fault+0x10/0x10 [ 721.708854][T11321] ? __lock_acquire+0x683/0x2ce0 [ 721.708952][T11321] ? lock_mm_and_find_vma+0xa7/0x340 [ 721.708987][T11321] do_user_addr_fault+0x744/0x1340 [ 721.709116][T11321] exc_page_fault+0x6a/0xc0 [ 721.709183][T11321] asm_exc_page_fault+0x26/0x30 [ 721.709233][T11321] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 721.709299][T11321] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 29 05 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 721.709321][T11321] RSP: 0018:ffffc90003e5fa38 EFLAGS: 00050206 [ 721.709371][T11321] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038 [ 721.709388][T11321] RDX: 0000000000000001 RSI: 000020000000cf00 RDI: ffffc90003e5fac0 [ 721.709405][T11321] RBP: ffffc90003e5fc50 R08: ffffc90003e5faf7 R09: 1ffff920007cbf5e [ 721.709421][T11321] R10: dffffc0000000000 R11: fffff520007cbf5f R12: ffffc90003e5fbc0 [ 721.709438][T11321] R13: ffffc90003e5fac0 R14: ffffc90003e5fac0 R15: 000020000000cf00 [ 721.709475][T11321] _copy_from_user+0x7a/0xb0 [ 721.709545][T11321] ___sys_recvmsg+0x173/0x5a0 [ 721.709679][T11321] ? __pfx____sys_recvmsg+0x10/0x10 [ 721.709713][T11321] ? __fget_files+0x2a/0x420 [ 721.709805][T11321] ? __fget_files+0x3a8/0x420 [ 721.709843][T11321] do_recvmmsg+0x320/0x7f0 [ 721.709883][T11321] ? __pfx_do_recvmmsg+0x10/0x10 [ 721.709911][T11321] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 721.710016][T11321] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 721.710066][T11321] __x64_sys_recvmmsg+0x198/0x250 [ 721.710100][T11321] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 721.710139][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.710168][T11321] do_syscall_64+0x174/0x580 [ 721.710206][T11321] ? trace_irq_disable+0x3b/0x140 [ 721.710324][T11321] ? clear_bhb_loop+0x40/0x90 [ 721.710369][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.710395][T11321] RIP: 0033:0x7f1cc2d1de59 [ 721.710418][T11321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.710441][T11321] RSP: 002b:00007f1cc0f76028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 721.710466][T11321] RAX: ffffffffffffffda RBX: 00007f1cc2fa5fa0 RCX: 00007f1cc2d1de59 [ 721.710483][T11321] RDX: 0400000000000062 RSI: 000020000000cf00 RDI: 0000000000000004 [ 721.710499][T11321] RBP: 00007f1cc0f76090 R08: 0000000000000000 R09: 0000000000000000 [ 721.710513][T11321] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 721.710527][T11321] R13: 00007f1cc2fa6038 R14: 00007f1cc2fa5fa0 R15: 00007fffbbf95338 [ 721.710566][T11321] [ 722.630181][T11142] team0: Port device team_slave_1 added [ 723.226560][T11334] FAULT_INJECTION: forcing a failure. [ 723.226560][T11334] name failslab, interval 1, probability 0, space 0, times 0 [ 723.226599][T11334] CPU: 1 UID: 0 PID: 11334 Comm: syz.9.1220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 723.226635][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 723.226648][T11334] Call Trace: [ 723.226657][T11334] [ 723.226665][T11334] dump_stack_lvl+0xe8/0x150 [ 723.226704][T11334] should_fail_ex+0x467/0x600 [ 723.226741][T11334] should_failslab+0xa8/0x100 [ 723.226838][T11334] __kmalloc_noprof+0xfe/0x780 [ 723.226885][T11334] ? tomoyo_encode+0x2ad/0x570 [ 723.226977][T11334] ? tomoyo_encode+0x2ad/0x570 [ 723.227016][T11334] tomoyo_encode+0x2ad/0x570 [ 723.227048][T11334] tomoyo_realpath_from_path+0x5fa/0x640 [ 723.227084][T11334] ? tomoyo_path_number_perm+0x219/0x5f0 [ 723.227144][T11334] tomoyo_path_number_perm+0x246/0x5f0 [ 723.227182][T11334] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 723.227216][T11334] ? __lock_acquire+0x683/0x2ce0 [ 723.227255][T11334] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 723.227293][T11334] ? hook_file_ioctl+0x1f3/0x600 [ 723.227350][T11334] ? lockdep_hardirqs_on+0x7a/0x110 [ 723.227404][T11334] ? __fget_files+0x2a/0x420 [ 723.227431][T11334] ? __fget_files+0x2a/0x420 [ 723.227452][T11334] ? __fget_files+0x3a8/0x420 [ 723.227486][T11334] ? __fget_files+0x2a/0x420 [ 723.227513][T11334] security_file_ioctl+0xc3/0x2a0 [ 723.227586][T11334] __se_sys_ioctl+0x47/0x170 [ 723.227654][T11334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.227681][T11334] do_syscall_64+0x174/0x580 [ 723.227713][T11334] ? trace_irq_disable+0x3b/0x140 [ 723.227750][T11334] ? clear_bhb_loop+0x40/0x90 [ 723.227778][T11334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.227800][T11334] RIP: 0033:0x7fd66d9cde59 [ 723.227822][T11334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.227841][T11334] RSP: 002b:00007fd66bc26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 723.227865][T11334] RAX: ffffffffffffffda RBX: 00007fd66dc55fa0 RCX: 00007fd66d9cde59 [ 723.227880][T11334] RDX: 0000200000000040 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 723.227894][T11334] RBP: 00007fd66bc26090 R08: 0000000000000000 R09: 0000000000000000 [ 723.227909][T11334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.227921][T11334] R13: 00007fd66dc56038 R14: 00007fd66dc55fa0 R15: 00007ffc255dba28 [ 723.227955][T11334] [ 723.231780][T11334] ERROR: Out of memory at tomoyo_realpath_from_path. [ 723.642119][T11142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.642138][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.642166][T11142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.708022][T11142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.708040][T11142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.708060][T11142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.254285][T11142] hsr_slave_0: entered promiscuous mode [ 724.255597][T11142] hsr_slave_1: entered promiscuous mode [ 724.258674][T11142] debugfs: 'hsr0' already exists in 'hsr' [ 724.258701][T11142] Cannot create hsr debugfs directory [ 724.286366][ T821] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 724.499853][ T821] usb 10-1: not running at top speed; connect to a high speed hub [ 724.511860][ T821] usb 10-1: config 3 has an invalid interface number: 161 but max is 0 [ 724.511889][ T821] usb 10-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 724.511907][ T821] usb 10-1: config 3 has no interface number 0 [ 724.511952][ T821] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 724.511981][ T821] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 724.512010][ T821] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 724.512036][ T821] usb 10-1: config 3 interface 161 has no altsetting 0 [ 724.515131][ T821] usb 10-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 724.515165][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.515186][ T821] usb 10-1: Product: ᰉ [ 724.515202][ T821] usb 10-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 724.515221][ T821] usb 10-1: SerialNumber: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮 [ 724.981930][T11357] fuse: Unknown parameter '0x0000000000000004' [ 725.344776][ T821] option 10-1:3.161: GSM modem (1-port) converter detected [ 725.430945][ T821] usb 10-1: USB disconnect, device number 10 [ 725.451887][ T821] option 10-1:3.161: device disconnected [ 725.603863][ T5258] 8021q: adding VLAN 0 to HW filter on device eth21 [ 725.861086][T11369] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1227'. [ 727.311095][ T829] bridge_slave_1: left allmulticast mode [ 727.311133][ T829] bridge_slave_1: left promiscuous mode [ 727.311420][ T829] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.525671][ T829] bridge_slave_0: left allmulticast mode [ 727.527596][ T829] bridge_slave_0: left promiscuous mode [ 727.527873][ T829] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.750082][T11399] fuse: Unknown parameter 'fd0x0000000000000004' [ 728.031696][T11402] Bluetooth: MGMT ver 1.23 [ 728.271825][ T829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.367062][ T829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.427795][ T829] bond0 (unregistering): Released all slaves [ 728.686811][T11405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.687378][T11405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.932614][ T5835] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 729.075980][ T8439] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 729.095962][ T5835] usb 2-1: Using ep0 maxpacket: 16 [ 729.096179][ T829] hsr_slave_0: left promiscuous mode [ 729.103636][ T5835] usb 2-1: unable to get BOS descriptor or descriptor too short [ 729.104880][ T5835] usb 2-1: config 127 has an invalid interface number: 195 but max is 1 [ 729.104906][ T5835] usb 2-1: config 127 has an invalid interface number: 207 but max is 1 [ 729.104926][ T5835] usb 2-1: config 127 has no interface number 0 [ 729.104943][ T5835] usb 2-1: config 127 has no interface number 1 [ 729.104993][ T5835] usb 2-1: config 127 interface 195 altsetting 5 bulk endpoint 0xA has invalid maxpacket 16 [ 729.105012][ T5835] usb 2-1: config 127 interface 195 has no altsetting 0 [ 729.105026][ T5835] usb 2-1: config 127 interface 207 has no altsetting 0 [ 729.183497][ T5835] usb 2-1: New USB device found, idVendor=413c, idProduct=8218, bcdDevice=15.60 [ 729.183530][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.183552][ T5835] usb 2-1: Product: syz [ 729.183567][ T5835] usb 2-1: Manufacturer: syz [ 729.183582][ T5835] usb 2-1: SerialNumber: syz [ 729.225225][ T829] hsr_slave_1: left promiscuous mode [ 729.240128][ T829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.256650][T11404] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 729.287692][ T829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.304794][ T8439] usb 10-1: not running at top speed; connect to a high speed hub [ 729.308325][ T8439] usb 10-1: config 3 has an invalid interface number: 161 but max is 0 [ 729.308375][ T8439] usb 10-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 729.308396][ T8439] usb 10-1: config 3 has no interface number 0 [ 729.308489][ T8439] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 729.308562][ T8439] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 729.308590][ T8439] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 729.308644][ T8439] usb 10-1: config 3 interface 161 has no altsetting 0 [ 729.315061][ T8439] usb 10-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 729.315094][ T8439] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.315154][ T8439] usb 10-1: Product: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮荆 [ 729.315199][ T8439] usb 10-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 729.315225][ T8439] usb 10-1: SerialNumber: С [ 729.499476][ T5835] usb 2-1: USB disconnect, device number 48 [ 729.933857][ T8439] option 10-1:3.161: GSM modem (1-port) converter detected [ 729.996392][ T8439] usb 10-1: USB disconnect, device number 11 [ 730.046257][ T8439] option 10-1:3.161: device disconnected [ 730.469114][T11421] FAULT_INJECTION: forcing a failure. [ 730.469114][T11421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.469152][T11421] CPU: 0 UID: 0 PID: 11421 Comm: syz.7.1242 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 730.469177][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 730.469191][T11421] Call Trace: [ 730.469199][T11421] [ 730.469209][T11421] dump_stack_lvl+0xe8/0x150 [ 730.469251][T11421] should_fail_ex+0x467/0x600 [ 730.469290][T11421] _copy_from_user+0x2d/0xb0 [ 730.469316][T11421] ___sys_sendmsg+0x1c6/0x360 [ 730.469340][T11421] ? __lock_acquire+0x683/0x2ce0 [ 730.469368][T11421] ? __pfx____sys_sendmsg+0x10/0x10 [ 730.469440][T11421] ? __fget_files+0x2a/0x420 [ 730.469462][T11421] ? __fget_files+0x3a8/0x420 [ 730.469495][T11421] __x64_sys_sendmsg+0x1b7/0x290 [ 730.469522][T11421] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 730.469565][T11421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.469589][T11421] do_syscall_64+0x174/0x580 [ 730.469630][T11421] ? trace_irq_disable+0x3b/0x140 [ 730.469665][T11421] ? clear_bhb_loop+0x40/0x90 [ 730.469691][T11421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.469714][T11421] RIP: 0033:0x7f1cc2d1de59 [ 730.469734][T11421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.469754][T11421] RSP: 002b:00007f1cc0f76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.469776][T11421] RAX: ffffffffffffffda RBX: 00007f1cc2fa5fa0 RCX: 00007f1cc2d1de59 [ 730.469792][T11421] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 730.469811][T11421] RBP: 00007f1cc0f76090 R08: 0000000000000000 R09: 0000000000000000 [ 730.469825][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.469838][T11421] R13: 00007f1cc2fa6038 R14: 00007f1cc2fa5fa0 R15: 00007fffbbf95338 [ 730.469873][T11421] [ 730.812570][T11423] fuse: Unknown parameter 'fd0x0000000000000004' [ 731.265250][T11427] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 731.296745][ T829] team0 (unregistering): Port device team_slave_1 removed [ 731.317875][T11430] netlink: 'syz.1.1246': attribute type 10 has an invalid length. [ 731.358303][ T829] team0 (unregistering): Port device team_slave_0 removed [ 732.164777][T11107] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 732.221319][T11107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 732.227818][T11107] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 732.298606][T11107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 732.301757][T11107] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 732.419462][T11107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 732.420637][T11107] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 732.575403][T11107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 733.197764][ T5616] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 733.312890][ T5835] IPVS: starting estimator thread 0... [ 733.391002][ T5616] usb 10-1: not running at top speed; connect to a high speed hub [ 733.392775][ T5616] usb 10-1: config 3 has an invalid interface number: 161 but max is 0 [ 733.392805][ T5616] usb 10-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 733.392835][ T5616] usb 10-1: config 3 has no interface number 0 [ 733.392885][ T5616] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 733.392916][ T5616] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 733.392944][ T5616] usb 10-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 733.392972][ T5616] usb 10-1: config 3 interface 161 has no altsetting 0 [ 733.472807][ T5616] usb 10-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 733.472837][ T5616] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.472858][ T5616] usb 10-1: Product: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮荆 [ 733.472874][ T5616] usb 10-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 733.472904][ T5616] usb 10-1: SerialNumber: С [ 733.482327][T11461] IPVS: using max 10 ests per chain, 24000 per kthread [ 733.712371][T11458] fuse: Unknown parameter 'fd0x0000000000000004' [ 734.603920][ T5616] option 10-1:3.161: GSM modem (1-port) converter detected [ 734.662720][ T5616] usb 10-1: USB disconnect, device number 12 [ 734.683015][ T5616] option 10-1:3.161: device disconnected [ 734.953450][T11107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.642302][T11107] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.693880][ T3411] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.715376][ T3411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.931316][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.931519][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 736.024081][T11142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 736.100467][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.396772][T11142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 736.524139][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.581119][T11142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 736.630896][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.671605][T11142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 736.863567][T11142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.743267][T11142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.755930][ T821] usb 8-1: new full-speed USB device number 33 using dummy_hcd [ 737.892961][T11142] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.929834][ T821] usb 8-1: not running at top speed; connect to a high speed hub [ 737.944299][ T821] usb 8-1: config 3 has an invalid interface number: 161 but max is 0 [ 737.944332][ T821] usb 8-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 737.944352][ T821] usb 8-1: config 3 has no interface number 0 [ 737.944488][ T821] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 737.944519][ T821] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 737.944547][ T821] usb 8-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 737.944573][ T821] usb 8-1: config 3 interface 161 has no altsetting 0 [ 738.029789][ T821] usb 8-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 738.029821][ T821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.029842][ T821] usb 8-1: Product: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮荆 [ 738.029859][ T821] usb 8-1: Manufacturer: 哅縙᪮㙛磥ꛫ鬁靆쬝삎顩뉘ộ୆贽晄擤錂 [ 738.029878][ T821] usb 8-1: SerialNumber: С [ 738.144828][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.144983][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.162383][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.168812][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.931353][T11521] FAULT_INJECTION: forcing a failure. [ 738.931353][T11521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.931425][T11521] CPU: 0 UID: 0 PID: 11521 Comm: syz.1.1269 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 738.931454][T11521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 738.931474][T11521] Call Trace: [ 738.931483][T11521] [ 738.931492][T11521] dump_stack_lvl+0xe8/0x150 [ 738.931534][T11521] should_fail_ex+0x467/0x600 [ 738.931575][T11521] _copy_from_user+0x2d/0xb0 [ 738.931600][T11521] kstrtouint_from_user+0xd6/0x180 [ 738.931637][T11521] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 738.931669][T11521] ? __lock_acquire+0x683/0x2ce0 [ 738.931712][T11521] proc_fail_nth_write+0x8e/0x210 [ 738.931828][T11521] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 738.931861][T11521] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 738.931884][T11521] vfs_write+0x29f/0xbb0 [ 738.931961][T11521] ? __pfx_vfs_write+0x10/0x10 [ 738.931983][T11521] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 738.932012][T11521] ? lockdep_hardirqs_on+0x7a/0x110 [ 738.932037][T11521] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 738.932063][T11521] ? mutex_lock_nested+0x152/0x1d0 [ 738.932082][T11521] ? fdget_pos+0x252/0x320 [ 738.932107][T11521] ksys_write+0x156/0x270 [ 738.932129][T11521] ? __pfx_ksys_write+0x10/0x10 [ 738.932157][T11521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.932175][T11521] do_syscall_64+0x174/0x580 [ 738.932201][T11521] ? trace_irq_disable+0x3b/0x140 [ 738.932229][T11521] ? clear_bhb_loop+0x40/0x90 [ 738.932250][T11521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.932267][T11521] RIP: 0033:0x7ff5678ae68e [ 738.932284][T11521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 738.932299][T11521] RSP: 002b:00007ff565b24fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 738.932318][T11521] RAX: ffffffffffffffda RBX: 00007ff565b256c0 RCX: 00007ff5678ae68e [ 738.932330][T11521] RDX: 0000000000000001 RSI: 00007ff565b250a0 RDI: 0000000000000005 [ 738.932340][T11521] RBP: 00007ff565b25090 R08: 0000000000000000 R09: 0000000000000000 [ 738.932350][T11521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.932360][T11521] R13: 00007ff567b76128 R14: 00007ff567b76090 R15: 00007ffdb4e066a8 [ 738.932395][T11521] [ 739.422679][ T821] option 8-1:3.161: GSM modem (1-port) converter detected [ 739.456394][ T821] usb 8-1: USB disconnect, device number 33 [ 739.487855][ T821] option 8-1:3.161: device disconnected [ 739.701834][T11107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.957543][T11107] veth0_vlan: entered promiscuous mode [ 743.108734][T11142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.184472][T11107] veth1_vlan: entered promiscuous mode [ 743.483239][T11107] veth0_macvtap: entered promiscuous mode [ 743.520461][T11107] veth1_macvtap: entered promiscuous mode [ 743.663943][T11142] veth0_vlan: entered promiscuous mode [ 743.722288][T11107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.773983][T11142] veth1_vlan: entered promiscuous mode [ 743.811842][T11107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.868689][ T291] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.885100][ T291] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.946429][ T291] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.973884][ T291] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 744.396545][T11142] veth0_macvtap: entered promiscuous mode [ 745.726605][T11142] veth1_macvtap: entered promiscuous mode [ 746.130842][T11586] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 746.271091][T11142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.283885][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.283909][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.326410][T11142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.359115][ T3196] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.361951][ T3196] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.362004][ T3196] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.362045][ T3196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.243570][ T110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.243594][ T110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.443138][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.443226][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.675136][T11600] netlink: 65039 bytes leftover after parsing attributes in process `syz.7.1287'. [ 749.322342][ T110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 749.322362][ T110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.168429][ T9787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 750.168461][ T9787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 750.419455][T11633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1295'. [ 751.391803][T11643] binder: 11640:11643 ioctl c0306201 200000000540 returned -22 [ 751.428683][ T5615] Bluetooth: Frame is too long (len 12, expected len 8) [ 751.446816][T11648] binder: 11640:11648 ioctl c0306201 200000000640 returned -22 [ 751.449227][T11647] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1298'. [ 754.845948][T11612] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 754.999339][T11612] usb 5-1: Using ep0 maxpacket: 32 [ 755.000397][T11612] usb 5-1: no configurations [ 755.000414][T11612] usb 5-1: can't read configurations, error -22 [ 755.125878][T11612] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 755.905800][T11612] usb 5-1: Using ep0 maxpacket: 32 [ 755.906824][T11612] usb 5-1: no configurations [ 755.906842][T11612] usb 5-1: can't read configurations, error -22 [ 755.907331][T11612] usb usb5-port1: attempt power cycle [ 756.225450][T11703] binder: 11701:11703 ioctl c0306201 200000000540 returned -22 [ 756.283493][T11704] binder: 11701:11704 ioctl c0306201 200000000640 returned -22 [ 756.295893][T11612] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 756.316637][T11612] usb 5-1: Using ep0 maxpacket: 32 [ 756.317504][T11612] usb 5-1: no configurations [ 756.317521][T11612] usb 5-1: can't read configurations, error -22 [ 756.445851][T11612] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 756.466807][T11612] usb 5-1: Using ep0 maxpacket: 32 [ 756.467958][T11612] usb 5-1: no configurations [ 756.467986][T11612] usb 5-1: can't read configurations, error -22 [ 756.468380][T11612] usb usb5-port1: unable to enumerate USB device [ 758.775260][T11731] loop4: detected capacity change from 0 to 7 [ 759.305875][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 759.308673][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.308794][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.315378][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.315572][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.355837][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.358542][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.425920][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.426099][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.525218][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 759.534352][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 759.697396][T11736] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 760.866404][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 761.883404][T11758] loop4: detected capacity change from 0 to 7 [ 762.566025][ T5615] Bluetooth: hci5: command 0x0406 tx timeout [ 762.623172][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 762.625341][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.625426][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 762.655628][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.666322][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 762.667189][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.667269][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 762.668046][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 762.669167][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 766.112444][T11612] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 766.309536][T11612] usb 2-1: not running at top speed; connect to a high speed hub [ 766.311937][T11612] usb 2-1: config 3 has an invalid interface number: 161 but max is 0 [ 766.311973][T11612] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 766.311994][T11612] usb 2-1: config 3 has no interface number 0 [ 766.312041][T11612] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 766.312071][T11612] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 766.312100][T11612] usb 2-1: config 3 interface 161 altsetting 2 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 766.312140][T11612] usb 2-1: config 3 interface 161 has no altsetting 0 [ 766.517165][ T5616] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 766.522212][T11612] usb 2-1: New USB device found, idVendor=19d2, idProduct=1084, bcdDevice=50.4f [ 766.522246][T11612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.522269][T11612] usb 2-1: Product: Ǽ솮쑳뇥ꝱݫၻ牻缑뒽ⰾ⹡奮荆 [ 766.522287][T11612] usb 2-1: SerialNumber: С [ 766.666607][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 766.667767][ T5616] usb 1-1: no configurations [ 766.667787][ T5616] usb 1-1: can't read configurations, error -22 [ 766.795984][ T5616] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 767.165847][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 767.166821][ T5616] usb 1-1: no configurations [ 767.166841][ T5616] usb 1-1: can't read configurations, error -22 [ 767.173149][ T5616] usb usb1-port1: attempt power cycle [ 768.480426][T11612] option 2-1:3.161: GSM modem (1-port) converter detected [ 768.595814][ T5616] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 768.616807][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 768.617807][ T5616] usb 1-1: no configurations [ 768.617824][ T5616] usb 1-1: can't read configurations, error -22 [ 768.745799][ T5616] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 768.795931][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 768.798909][ T5616] usb 1-1: no configurations [ 768.798929][ T5616] usb 1-1: can't read configurations, error -22 [ 768.864929][ T5616] usb usb1-port1: unable to enumerate USB device [ 768.908783][T11612] usb 2-1: USB disconnect, device number 49 [ 769.089624][T11612] option 2-1:3.161: device disconnected [ 769.333721][ T5795] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 769.527218][ T5795] usb 10-1: Using ep0 maxpacket: 8 [ 769.529818][ T5795] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 769.529847][ T5795] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 769.529897][ T5795] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 769.529921][ T5795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.448713][ T5615] Bluetooth: hci0: link tx timeout [ 770.448923][ T5615] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 771.442899][T11861] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1360'. [ 771.588233][T11866] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'. [ 772.014660][T11865] ------------[ cut here ]------------ [ 772.014677][T11865] ODEBUG: free active (active state 0) object: ffff88803c002cb8 object type: timer_list hint: cec_wait_timeout+0x0/0x180 [ 772.014867][T11865] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: syz.4.1359/11865 [ 772.014971][T11865] Modules linked in: [ 772.014998][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.4.1359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 772.015025][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 772.015038][T11865] RIP: 0010:debug_print_object+0x18a/0x230 [ 772.015076][T11865] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 5d 54 61 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 d3 4a e2 0a 48 83 c4 10 5b 41 5c [ 772.015096][T11865] RSP: 0018:ffffc90005c2f830 EFLAGS: 00010246 [ 772.015116][T11865] RAX: 1ffffffff16dee00 RBX: dffffc0000000000 RCX: 0000000000000000 [ 772.015133][T11865] RDX: ffffffff8bca6f40 RSI: ffffffff8bca69c0 RDI: ffffffff8fba55a0 [ 772.015151][T11865] RBP: ffffffff8bca6f40 R08: ffff88803c002cb8 R09: ffffffff8b6f8380 [ 772.015169][T11865] R10: dffffc0000000000 R11: ffffffff81b15790 R12: 0000000000000000 [ 772.015185][T11865] R13: ffffffff8fba55a0 R14: ffff88803c002cb8 R15: ffffffff8b6f7000 [ 772.015203][T11865] FS: 00007fe289ef46c0(0000) GS:ffff888125c49000(0000) knlGS:0000000000000000 [ 772.015223][T11865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.015239][T11865] CR2: 00007fe28bd2b540 CR3: 000000005e516000 CR4: 00000000003526f0 [ 772.015259][T11865] Call Trace: [ 772.015269][T11865] [ 772.015278][T11865] ? __pfx_cec_wait_timeout+0x10/0x10 [ 772.015314][T11865] ? __pfx_cec_wait_timeout+0x10/0x10 [ 772.015354][T11865] debug_check_no_obj_freed+0x2e3/0x450 [ 772.015407][T11865] kfree+0x13e/0x6c0 [ 772.015474][T11865] ? cec_transmit_msg_fh+0x16f0/0x24d0 [ 772.015515][T11865] cec_transmit_msg_fh+0x16f0/0x24d0 [ 772.015564][T11865] cec_ioctl+0x2026/0x3060 [ 772.015593][T11865] ? __pfx_cec_ioctl+0x10/0x10 [ 772.015634][T11865] ? kasan_quarantine_put+0xbb/0x1f0 [ 772.015754][T11865] ? tomoyo_path_number_perm+0x219/0x5f0 [ 772.015805][T11865] ? tomoyo_path_number_perm+0x219/0x5f0 [ 772.015846][T11865] ? do_vfs_ioctl+0x1184/0x1550 [ 772.015881][T11865] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 772.015926][T11865] ? smk_tskacc+0x2fb/0x370 [ 772.015991][T11865] ? smack_file_ioctl+0x2c2/0x360 [ 772.016030][T11865] ? __pfx_smack_file_ioctl+0x10/0x10 [ 772.016076][T11865] ? __fget_files+0x2a/0x420 [ 772.016099][T11865] ? __fget_files+0x3a8/0x420 [ 772.016121][T11865] ? __fget_files+0x2a/0x420 [ 772.016147][T11865] ? bpf_lsm_file_ioctl+0x9/0x20 [ 772.016245][T11865] ? __pfx_cec_ioctl+0x10/0x10 [ 772.016269][T11865] __se_sys_ioctl+0xff/0x170 [ 772.016300][T11865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.016346][T11865] do_syscall_64+0x174/0x580 [ 772.016384][T11865] ? trace_irq_disable+0x3b/0x140 [ 772.016419][T11865] ? clear_bhb_loop+0x40/0x90 [ 772.016447][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.016472][T11865] RIP: 0033:0x7fe28bcdde59 [ 772.016493][T11865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.016513][T11865] RSP: 002b:00007fe289ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.016536][T11865] RAX: ffffffffffffffda RBX: 00007fe28bf66180 RCX: 00007fe28bcdde59 [ 772.016553][T11865] RDX: 0000200000000100 RSI: 00000000c0386105 RDI: 000000000000000a [ 772.016568][T11865] RBP: 00007fe28bd73e6f R08: 0000000000000000 R09: 0000000000000000 [ 772.016583][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.016596][T11865] R13: 00007fe28bf66218 R14: 00007fe28bf66180 R15: 00007ffdcbebff48 [ 772.016632][T11865] [ 772.016644][T11865] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 772.016661][T11865] CPU: 0 UID: 0 PID: 11865 Comm: syz.4.1359 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 772.016687][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 772.016701][T11865] Call Trace: [ 772.016710][T11865] [ 772.016720][T11865] vpanic+0x56c/0xa60 [ 772.016757][T11865] ? __pfx__printk+0x10/0x10 [ 772.016793][T11865] ? __pfx_vpanic+0x10/0x10 [ 772.016812][T11865] ? is_bpf_text_address+0x292/0x2b0 [ 772.016864][T11865] ? is_bpf_text_address+0x26/0x2b0 [ 772.016900][T11865] panic+0xc5/0xd0 [ 772.016922][T11865] ? __pfx_panic+0x10/0x10 [ 772.016963][T11865] __warn+0x315/0x4c0 [ 772.016983][T11865] ? debug_print_object+0xec/0x230 [ 772.017021][T11865] ? debug_print_object+0xec/0x230 [ 772.017057][T11865] __report_bug+0x331/0x530 [ 772.017162][T11865] ? debug_print_object+0xec/0x230 [ 772.017199][T11865] ? __pfx___report_bug+0x10/0x10 [ 772.017233][T11865] ? __lock_acquire+0x683/0x2ce0 [ 772.017270][T11865] ? __lock_acquire+0x683/0x2ce0 [ 772.017297][T11865] report_bug_entry+0x19a/0x290 [ 772.017334][T11865] ? debug_print_object+0x18a/0x230 [ 772.017367][T11865] ? debug_print_object+0x18f/0x230 [ 772.017401][T11865] handle_bug+0xce/0x200 [ 772.017425][T11865] exc_invalid_op+0x1a/0x50 [ 772.017449][T11865] asm_exc_invalid_op+0x1a/0x20 [ 772.017470][T11865] RIP: 0010:debug_print_object+0x18a/0x230 [ 772.017506][T11865] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 5d 54 61 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 d3 4a e2 0a 48 83 c4 10 5b 41 5c [ 772.017525][T11865] RSP: 0018:ffffc90005c2f830 EFLAGS: 00010246 [ 772.017543][T11865] RAX: 1ffffffff16dee00 RBX: dffffc0000000000 RCX: 0000000000000000 [ 772.017559][T11865] RDX: ffffffff8bca6f40 RSI: ffffffff8bca69c0 RDI: ffffffff8fba55a0 [ 772.017576][T11865] RBP: ffffffff8bca6f40 R08: ffff88803c002cb8 R09: ffffffff8b6f8380 [ 772.017593][T11865] R10: dffffc0000000000 R11: ffffffff81b15790 R12: 0000000000000000 [ 772.017608][T11865] R13: ffffffff8fba55a0 R14: ffff88803c002cb8 R15: ffffffff8b6f7000 [ 772.017631][T11865] ? __pfx_timer_debug_hint+0x10/0x10 [ 772.017703][T11865] ? __pfx_cec_wait_timeout+0x10/0x10 [ 772.017736][T11865] ? __pfx_cec_wait_timeout+0x10/0x10 [ 772.017776][T11865] debug_check_no_obj_freed+0x2e3/0x450 [ 772.017836][T11865] kfree+0x13e/0x6c0 [ 772.017869][T11865] ? cec_transmit_msg_fh+0x16f0/0x24d0 [ 772.017910][T11865] cec_transmit_msg_fh+0x16f0/0x24d0 [ 772.017958][T11865] cec_ioctl+0x2026/0x3060 [ 772.017987][T11865] ? __pfx_cec_ioctl+0x10/0x10 [ 772.018027][T11865] ? kasan_quarantine_put+0xbb/0x1f0 [ 772.018074][T11865] ? tomoyo_path_number_perm+0x219/0x5f0 [ 772.018111][T11865] ? tomoyo_path_number_perm+0x219/0x5f0 [ 772.018154][T11865] ? do_vfs_ioctl+0x1184/0x1550 [ 772.018185][T11865] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 772.018230][T11865] ? smk_tskacc+0x2fb/0x370 [ 772.018265][T11865] ? smack_file_ioctl+0x2c2/0x360 [ 772.018303][T11865] ? __pfx_smack_file_ioctl+0x10/0x10 [ 772.018349][T11865] ? __fget_files+0x2a/0x420 [ 772.018369][T11865] ? __fget_files+0x3a8/0x420 [ 772.018390][T11865] ? __fget_files+0x2a/0x420 [ 772.018416][T11865] ? bpf_lsm_file_ioctl+0x9/0x20 [ 772.018449][T11865] ? __pfx_cec_ioctl+0x10/0x10 [ 772.018472][T11865] __se_sys_ioctl+0xff/0x170 [ 772.018500][T11865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.018525][T11865] do_syscall_64+0x174/0x580 [ 772.018558][T11865] ? trace_irq_disable+0x3b/0x140 [ 772.018594][T11865] ? clear_bhb_loop+0x40/0x90 [ 772.018623][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.018646][T11865] RIP: 0033:0x7fe28bcdde59 [ 772.018666][T11865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.018687][T11865] RSP: 002b:00007fe289ef4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 772.018709][T11865] RAX: ffffffffffffffda RBX: 00007fe28bf66180 RCX: 00007fe28bcdde59 [ 772.018725][T11865] RDX: 0000200000000100 RSI: 00000000c0386105 RDI: 000000000000000a [ 772.018740][T11865] RBP: 00007fe28bd73e6f R08: 0000000000000000 R09: 0000000000000000 [ 772.018753][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.018766][T11865] R13: 00007fe28bf66218 R14: 00007fe28bf66180 R15: 00007ffdcbebff48 [ 772.018813][T11865] [ 772.019407][T11865] Kernel Offset: disabled