last executing test programs: 7.224420276s ago: executing program 2 (id=1718): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000409'], 0x2a, 0xfffffffffffffffc) keyctl$read(0xb, 0x0, &(0x7f0000000500)=""/116, 0x74) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x3, 0x0, &(0x7f0000001400)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) syz_emit_ethernet(0x19, &(0x7f0000000240)={@local, @link_local, @val, {@llc={0x4, {@llc={0x0, 0x0, "d2"}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000000206010300000000000006000000000005000500000000000c00078008000840000000580900020073797a300000000005000100070000000d000300686173683a6d616300000000050004"], 0x54}}, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) syz_open_dev$loop(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x203, 0x40, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0), &(0x7f00000024c0), 0x6, r3}, 0x38) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x54}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x57, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0x1, 0x6, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xf8, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x6, 0x24, 0x6, 0x0, 0x0, '\r'}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x84, 0xb}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xcd, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x1, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x80, 0x24, 0x8}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x3, 0xa, 0x8, 0x10, 0x61}, 0x8, &(0x7f0000000100)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x6, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc09}}, {0x97, &(0x7f00000001c0)=@string={0x97, 0x3, "d9b6c638d85cf0ea51b7afcec1e43015a2490dd44f994e7bdc74c70b9095c06b416f1d9d8db10690c4bec80d07dc3264509e914e5c4194bf68659b995fcb127cd4f96d4fbb6bddf4e359295d4e827e5a58d0b24c2b94bf0cf4e05afcd5d4dd51c88e37aefcacbbfbdcacd84100de5125fa24a6a204c31a5463d36940b5528c9efcc90fc6ed517d3c35e12579d5972485775fe258e3"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44e}}]}) 5.504359943s ago: executing program 1 (id=1720): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) accept$inet6(0xffffffffffffffff, &(0x7f0000000180), 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) r0 = socket(0x1, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) dup(0xffffffffffffffff) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000010000304000000000000007fff000000", @ANYRES32=0x0, @ANYBLOB="7f00000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB, @ANYRES32], 0x44}}, 0x0) 5.503985672s ago: executing program 0 (id=1721): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="1bc400000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0d00330000001ce20800720010000000"], 0x2c}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{}, {0x0, 0x0, 0x7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0xfe, 0x7, 0x2, 0x0, @tick=0x5a, {}, {0x4, 0x2}, @result={0x8001, 0x3}}], 0x1c) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f0000001500)=""/208, 0xd0}, {&(0x7f00000010c0)=""/42, 0x2a}, {0x0}, {0x0}], 0x6, 0x4, 0x0) semget$private(0x0, 0x6, 0x14b) syz_io_uring_setup(0x7937, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000000c0)) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 5.460143413s ago: executing program 1 (id=1722): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2c003300d0000000ffffffffffff08021100000050505050505000000f020000010001007206030303030303"], 0x48}}, 0x0) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f00000000c0)) write$dsp(r8, &(0x7f0000000340)="05b7402549a41789", 0x8) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000100)) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000009c0)=""/247, 0xf7, 0x0, &(0x7f0000000740)=""/160, 0xa0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x28, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0xe9, &(0x7f00000004c0)=""/233, 0x41100, 0x0, '\x00', r9, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r5, 0x0, &(0x7f0000000340), 0x0, 0x10, 0x6, @void, @value}, 0x90) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) 5.368856811s ago: executing program 0 (id=1723): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000a80)=@newtaction={0x3d4, 0x30, 0x0, 0x0, 0x0, {}, [{0x3c0, 0x1, [@m_ipt={0x15c, 0x0, 0x0, 0x0, {{0x8}, {0x134, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xd5, 0x6, {0x0, 'raw\x00', 0x0, 0x0, "8509dc22e7a9404f98dacccaa506564cc74dca4a231af762740752961405130b6e02543f067ba7abb12d0b3ad1bffdc5485b204592dd372b62bc0055447e0ceaa6660f2561356fa7768d44463d95469667179b49908ba015ab44a74528cf49d8f27c9a24e88503c1b19cbca47b70f8271bb4784c3558bfb914c26f198acab47d44c1488a68bbc0d60f709f14829d2646b118e9232444ee236aad8f9daf0a35fb6c9bb7c6025f289e34c088"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc}, {0xc}}}, @m_ipt={0x90, 0x0, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}]}, {0x39, 0x6, "f46756d0da560b4c8eabc516cc9648bbe27be1507811dea43c5f95e4668f3743240879ec861922f693e7474a6fc01d6799aff8dddf"}, {0xc}, {0xc}}}, @m_ipt={0xf4, 0x0, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x81, 0x6, "61453fca46052268c930f021de81e11f67347388ea7013d6dab247d6ebfdb82c7521bd1128b88f068070f23f0aac2aa36eaf92d75b1d4e06c1ebd79cb3ec562890a6b6e7cceb42434d044e457b059cbb615b7f378a4d26380ba9df9c6dd94fe8f699476e9ca459c8e237e6386abcb8388e57bb7ee5a85afde9a525fc42"}, {0xc}, {0xc}}}, @m_ipt={0x58, 0x1000, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x0, 'raw\x00'}}]}, {0x4}, {0xc}, {0xc}}}, @m_ipt={0x84, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x59, 0x6, "43cb2919ac7ac3f8489ca8fbac39e3759ab9748b0aba9317f53f6400cae5697c391f7e69d9fc9c86416ca123b7ca9d3d2b0c074da1bb0b4bb755a85cc81f483969da3687227ad2afe9057fbcd71f66320062f9359e"}, {0xc}, {0xc}}}]}]}, 0x3d4}}, 0x0) 5.061995883s ago: executing program 0 (id=1725): ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000340)="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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d0000000000000000008000", @ANYRES32=0x0, @ANYBLOB="0000800000000000240012800b000100697036746e6c000014000280050009000400000008000100", @ANYRES32, @ANYBLOB="08000400"], 0x4c}}, 0x0) 4.995844159s ago: executing program 4 (id=1726): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80082) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10c, &(0x7f0000000300)={0x0, 0x88a0, 0x0, 0x1, 0xe4, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3f70, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000167000/0x1000)=nil, 0x12000}) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xf, &(0x7f0000000140)=@ringbuf, &(0x7f0000000080)='GPL\x00', 0x7, 0xfe8, &(0x7f0000001e00)=""/4072, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.800514122s ago: executing program 3 (id=1727): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000de3f2a2774291f2f300d744dbf1750c082c253a6c8740af61e175ca1f6b3fbff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe62, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2d205e10, @void, @value}, 0x94) 4.696194808s ago: executing program 0 (id=1728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x3, 0x48, &(0x7f00000023c0)=ANY=[@ANYBLOB="12011001fb25052075328500a01701020301090236000107f7100609044b01045f0d40ff09050708080000f10909050f1000040b0185090582d99d00010701090506"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x74, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x400145042, 0x0) ftruncate(0xffffffffffffffff, 0x81fd) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r6, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) sendmmsg(r4, &(0x7f0000007180)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000025c0)='=', 0x1}], 0x1}}], 0x1, 0x10014) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="2814f7632a08000000", @ANYRES32=0x0, @ANYBLOB="0a000080976b64086860000004000180"], 0x28}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004f1a8600", "cf0d00", "8657e2b7e43934e4"}, 0x28) sendmsg$inet6(r0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x30}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x10}) 4.62919053s ago: executing program 3 (id=1729): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000100), 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @multicast2}}}, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4000009a}]}) 4.448514216s ago: executing program 3 (id=1730): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x9, &(0x7f0000000300)=0x2, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x23, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, &(0x7f0000000000)=0x5, 0x4, 0x0) set_mempolicy_home_node(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x0) r3 = socket$inet(0x2, 0x800, 0x6) setsockopt$sock_int(r3, 0x1, 0x3, &(0x7f0000000040)=0xffffffff, 0x4) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) bind$inet(r2, 0x0, 0x0) connect$inet(r3, 0x0, 0xfffffffffffffd37) syz_clone(0x100100, &(0x7f0000003100), 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r5, &(0x7f0000002440)=""/181, 0xb5) 4.443234773s ago: executing program 1 (id=1731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="6001000010003306000000001a000000ac1e0001000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00ed2954a5a9dfdc51"], 0x160}}, 0x0) 4.212950365s ago: executing program 4 (id=1732): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x40e03, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x310, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x2d0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0xb4, 0x6, [@m_connmark={0xb0, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x7d, 0x6, "91a991d04aa8cb411880b88050856c4a5b99aafe5cf70a535f4e162db7c30535ebf5e9ab54237bf6d2780785c80bcf9eae2d6d6d65f242d28d9992d8a093d12a497447bc2a6c4f73538dbca11ebb12d1c8ea001eac3246ebaf518402b88e3f2b51ce947977543e069be9c85124bbe592bd2ed79c20d83d312c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_ROUTE4_ACT={0x210, 0x6, [@m_tunnel_key={0x1a0, 0x19, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x58, 0x3, 0x10000001, 0x133, 0xa}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x6c, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x40, 0x6, "6ff7fc3261b3668f9e3bb8f4b5dffb173df475d820317a8647dede896e4ec999dd2c0862d475a6c071c272307b7d1840c4a5b610fb082c69a57efcad"}, {0xc}, {0xc}}}]}]}}]}, 0x310}}, 0x4000001) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x28, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0xff000000}, 0x0) 4.076295334s ago: executing program 1 (id=1733): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="1bc400000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0d00330000001ce20800720010000000"], 0x2c}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{}, {0x0, 0x0, 0x7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0xfe, 0x7, 0x2, 0x0, @tick=0x5a, {}, {0x4, 0x2}, @result={0x8001, 0x3}}], 0x1c) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f0000001500)=""/208, 0xd0}, {&(0x7f00000010c0)=""/42, 0x2a}, {0x0}, {0x0}], 0x6, 0x4, 0x0) semget$private(0x0, 0x6, 0x14b) syz_io_uring_setup(0x7937, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000000c0)) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4.026255902s ago: executing program 2 (id=1734): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000017c0), 0x4) sendto$inet6(r0, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0xf803, @loopback}, 0x1c) 3.787744606s ago: executing program 2 (id=1735): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x3, 0x80000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) io_setup(0x4, &(0x7f00000001c0)=0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x4e07, 0x0, 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0xfffd, 0x10000000002, 0x0, 0x1, r1}]) 3.628571126s ago: executing program 1 (id=1736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b7500090583"], 0x0) syz_open_dev$mouse(&(0x7f0000000280), 0x1, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x41}, {0xf, 0x1b}, 0x808}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0xfffc, 0x0, @loopback}], 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @loopback}], 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x3ff, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x27}}], 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGREP(r5, 0x80084524, 0x0) sendmmsg$inet6(r3, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x7f, @loopback}, 0xfffffffffffffdd4, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x36c, 0x0) sendmmsg$inet6(r2, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x10000}, 0x8) 3.396234799s ago: executing program 3 (id=1737): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x80, 0x0, 0x0, 0x10, 0x0, {0x8000, 0x0, 0x3f}, {0x2}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x200}) 3.395527768s ago: executing program 4 (id=1738): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) (async) r2 = socket$kcm(0x2, 0x5, 0x0) (async) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f0000000100)=r4, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9f", 0x1}], 0x1}, 0x3e8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000680)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0xfffe, @multicast1}, {0x2, 0x0, @broadcast}}) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0xffffffffffffffff}) (rerun: 32) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, {0x2, 0x4e20, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x399}) 3.381932451s ago: executing program 2 (id=1739): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x0, 0x9000000}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@empty}}]}, 0x154}}, 0x0) 3.219415892s ago: executing program 2 (id=1740): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = inotify_init() r4 = socket$kcm(0x29, 0x2, 0x0) fcntl$setstatus(r4, 0x4, 0x42800) r5 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r5, 0x5, 0x2003) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1294, 0x1320, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}}}]}}]}}, 0x0) ioprio_get$pid(0x1, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x5) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000780)={&(0x7f0000000300), 0x0, 0x0, 0x0, 0xfb, r7}, 0x38) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x80000001) syz_emit_ethernet(0x56, &(0x7f0000001100)=ANY=[@ANYBLOB="ee9f2c33084a1340817c22f2a86259046cfc1a395594aea8e091dc36b421e0aa1eabc7617885ffedc16a82d31ed0381832971db05b0110a78919475248add38b416087a35fdad728d290e7b40b3e3b79f96b839be60b3746c2436635ce692b808599ce624decda55e58724cbf661ed3fd3e8818741502bcde081096aab1460161f8a6ce657765c80fbd26ec797a0e93584979ba96fa9f411545072e16d6a2e171c3463ede1989b6512efe0fd0d0a5751604db02ec1dec9a90194265960327873e8", @ANYRES64=r3, @ANYBLOB='P\x00\x00\x00', @ANYRESDEC=r6, @ANYRES16, @ANYRES8], 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x6, 0x0, 0x2a, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2={0xff, 0x3, '\x00', 0xf}, 0x2000, 0xba08, 0x0, 0xffffffff}}) 3.148874096s ago: executing program 3 (id=1741): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="2c003300d0000000ffffffffffff08021100000050505050505000000f020000010001007206030303030303"], 0x48}}, 0x0) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000200)=0x7) ioctl$SNDCTL_DSP_GETOPTR(r8, 0x800c5012, &(0x7f0000000000)) ioctl$SNDCTL_DSP_STEREO(r8, 0xc0045003, &(0x7f00000000c0)) write$dsp(r8, &(0x7f0000000340)="05b7402549a41789", 0x8) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000100)) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000009c0)=""/247, 0xf7, 0x0, &(0x7f0000000740)=""/160, 0xa0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x10, 0x28, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0xe9, &(0x7f00000004c0)=""/233, 0x41100, 0x0, '\x00', r9, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r10, r5, 0x0, &(0x7f0000000340), 0x0, 0x10, 0x6, @void, @value}, 0x90) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) 3.130903513s ago: executing program 4 (id=1742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000400)={0x3, 0xa9a, 0x24000000, 0x6e, &(0x7f0000000300)=""/110, 0x65, &(0x7f0000000380)=""/101, 0x3c, &(0x7f0000000180)=""/60}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) (async) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000000400)={0x3, 0xa9a, 0x24000000, 0x6e, &(0x7f0000000300)=""/110, 0x65, &(0x7f0000000380)=""/101, 0x3c, &(0x7f0000000180)=""/60}) (async) 2.148188256s ago: executing program 4 (id=1743): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x1c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}, 0x1, 0x200000000000000}, 0x0) 2.133281168s ago: executing program 3 (id=1744): syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000104000000e4d62400baf2dcad9d90faeece97243cb5087b6837cf9ade92d051e2c742"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x5522, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000003c0)={0x0, 0x0, {0x0, @struct, 0x0, 0xd2, 0x0, 0x0, 0x4, 0x0, 0x0, @usage=0x9, 0x10, 0x40}, {0x7, @usage=0x6, 0x0, 0x0, 0x6, 0x1ff, 0x0, 0xfffffffffffffff7, 0x0, @struct={0xb2, 0x7}, 0x0, 0x0, [0x6b9d]}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100008121e940e604915539b5010203010902240001000000040904000002e515bb0009050402000000000009058802"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xf, {"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", 0xfffffffffffffca6}}, 0x1006) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000140)={0xc}) 1.900381158s ago: executing program 4 (id=1745): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x7b, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b80)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="00e349000000cf"], 0x0, 0x0, 0x0, 0x0}) 1.543722371s ago: executing program 0 (id=1746): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00', @ANYRES16=0x0, @ANYBLOB="1bc400000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0d00330000001ce20800720010000000"], 0x2c}}, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000140)={0x2, 0x0, [{}, {0x0, 0x0, 0x7}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0xff00) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4008080) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0xfe, 0x7, 0x2, 0x0, @tick=0x5a, {}, {0x4, 0x2}, @result={0x8001, 0x3}}], 0x1c) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) preadv(r0, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000000)=""/183, 0xb7}, {&(0x7f0000001500)=""/208, 0xd0}, {&(0x7f00000010c0)=""/42, 0x2a}, {0x0}, {0x0}], 0x6, 0x4, 0x0) semget$private(0x0, 0x6, 0x14b) syz_io_uring_setup(0x7937, &(0x7f00000000c0), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0xc0105702, &(0x7f00000000c0)) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e0501460c1f00c7f641737da8c5df97e629d54f8eef8f4b4c287248623393943b5ba71f4c252077dee7cda5f191af639f6bc9ccce6307303924e47e62deed5d1bb5921eea00000c30f73971da9388b9ec29139dedf9d61d113d31eeef342c9d"], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.282844694s ago: executing program 0 (id=1747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000086d044fc20000000000010902240001000000000904110001030000000921000000012205000905810300"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, 0x0, 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @remote}, 0x40, r5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='R', 0x1, 0xfffffffffffffffd) r7 = socket(0x29, 0x6, 0x23b2ce15) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{0x4001ff, 0x2000006, 0x40000000, [0x9, 0x0, 0x2, 0x0, 0x4, 0x200, 0x109f6, 0x7fd]}]}) ioctl(r7, 0x8936, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x40, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0xfffffffe, 0x10}, 0xc) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='maps\x00') socket$inet6_sctp(0xa, 0x5, 0x84) preadv(r9, &(0x7f00000038c0)=[{&(0x7f0000000040)=""/95, 0x5f}], 0x1, 0x0, 0x0) writev(r3, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0xf1ff, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x1c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) 384.166034ms ago: executing program 1 (id=1748): r0 = memfd_create(0x0, 0x4) pwritev(r0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x1a, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000007300)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003180), 0x0, 0x0, 0x50}}], 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x82000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x1, 0x8000000, 0x2000, &(0x7f0000987000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, 0x0) r6 = syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100020000402505a8a440000102030109021b000101f9100309040007010701022809050900f2ffb00809"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2972, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x101, 0x171, 0x0, r5}, &(0x7f0000000100), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, &(0x7f0000000180)={0xffffffffffffffff, 0x200000000000001, 0x20000000000408}) close_range(r7, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 0s ago: executing program 2 (id=1749): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev, 0xd}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) poll(&(0x7f0000000240)=[{r5}], 0x1, 0x10000) dup3(r2, r3, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000040)={0x90000004}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8000, 0x10482) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, &(0x7f0000000080)=0xfdfdffff) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7, {0xe08}}, './file0\x00'}) getdents(r8, &(0x7f00000000c0)=""/4096, 0x1000) kernel console output (not intermixed with test programs): 3: command tx timeout [ 432.837098][T11143] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.112292][T11143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.176425][T11143] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.222001][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.229172][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.312700][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.320061][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.500310][T11143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.681186][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 433.708324][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 433.761135][T11143] veth0_vlan: entered promiscuous mode [ 433.791969][T11143] veth1_vlan: entered promiscuous mode [ 433.897459][T11143] veth0_macvtap: entered promiscuous mode [ 433.943221][T11143] veth1_macvtap: entered promiscuous mode [ 433.994762][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.036793][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.063823][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.091981][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.109431][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.133922][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.159446][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.213329][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.239965][T11143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.286948][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.310054][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.331776][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.355584][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.366846][T11307] loop3: detected capacity change from 0 to 7 [ 434.373644][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.384486][T11307] Dev loop3: unable to read RDB block 7 [ 434.390524][T11307] loop3: AHDI p1 p2 [ 434.394489][T11307] loop3: partition table partially beyond EOD, truncated [ 434.407762][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.422132][T11307] loop3: p1 size 7567738 extends beyond EOD, truncated [ 434.430267][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.453448][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.478176][T11143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.506612][T10975] udevd[10975]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 434.507876][T11143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.549443][T11143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.574137][T11143] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.587335][T11143] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.602738][T11143] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.612394][T11143] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.897059][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.927855][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.998967][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.006865][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.036150][ T29] audit: type=1326 audit(1726722240.151:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11322 comm="syz.4.1401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ed7def9 code=0x0 [ 435.070435][ T943] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 435.267821][ T943] usb 4-1: Using ep0 maxpacket: 8 [ 435.280194][ T943] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 435.301428][T11338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.336590][ T943] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 435.352295][ T8] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 435.367707][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.391148][ T943] usb 4-1: Product: syz [ 435.395827][ T943] usb 4-1: Manufacturer: syz [ 435.405072][ T943] usb 4-1: SerialNumber: syz [ 435.429788][ T943] usb 4-1: config 0 descriptor?? [ 435.457789][ T943] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 435.549960][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 435.611145][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 435.663016][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.703533][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.755187][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.805859][ T8] usb 5-1: config 0 descriptor?? [ 435.820240][T11327] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 436.351577][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0xd [ 436.367729][ T8] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 436.388420][ T8] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 436.417151][ T8] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 437.120713][T11356] hsr0: entered promiscuous mode [ 437.699163][ T8] usb 5-1: reset high-speed USB device number 70 using dummy_hcd [ 438.649154][ T5238] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 438.816303][T11377] FAULT_INJECTION: forcing a failure. [ 438.816303][T11377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.831057][T11377] CPU: 0 UID: 0 PID: 11377 Comm: syz.4.1413 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 438.841539][T11377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 438.851665][T11377] Call Trace: [ 438.855047][T11377] [ 438.858002][T11377] dump_stack_lvl+0x241/0x360 [ 438.862815][T11377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.868066][T11377] ? __pfx__printk+0x10/0x10 [ 438.872680][T11377] ? __pfx_lock_release+0x10/0x10 [ 438.877827][T11377] should_fail_ex+0x3b0/0x4e0 [ 438.882554][T11377] _copy_from_user+0x2f/0xe0 [ 438.887167][T11377] copy_msghdr_from_user+0xae/0x680 [ 438.892428][T11377] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 438.898268][T11377] __sys_sendmsg+0x237/0x390 [ 438.902879][T11377] ? __pfx___sys_sendmsg+0x10/0x10 [ 438.908036][T11377] ? vfs_write+0x7bf/0xc90 [ 438.912502][T11377] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 438.918868][T11377] ? do_syscall_64+0x100/0x230 [ 438.923658][T11377] ? do_syscall_64+0xb6/0x230 [ 438.928357][T11377] do_syscall_64+0xf3/0x230 [ 438.932901][T11377] ? clear_bhb_loop+0x35/0x90 [ 438.937609][T11377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.943533][T11377] RIP: 0033:0x7f0d9ed7def9 [ 438.947961][T11377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.967591][T11377] RSP: 002b:00007f0d9fc02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.976074][T11377] RAX: ffffffffffffffda RBX: 00007f0d9ef35f80 RCX: 00007f0d9ed7def9 [ 438.984069][T11377] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 438.992057][T11377] RBP: 00007f0d9fc02090 R08: 0000000000000000 R09: 0000000000000000 [ 439.000047][T11377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.008041][T11377] R13: 0000000000000000 R14: 00007f0d9ef35f80 R15: 00007f0d9f05fa28 [ 439.016044][T11377] [ 439.047263][ T5281] usb 5-1: USB disconnect, device number 70 [ 439.057012][ T943] gspca_zc3xx: reg_w_i err -71 [ 439.083371][ T5238] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 439.104941][ T5238] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 439.117314][ T943] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 439.148528][ T5238] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 439.169684][ T943] usb 4-1: USB disconnect, device number 67 [ 439.185436][ T5238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.205313][ T5238] usb 3-1: Product: syz [ 439.213757][ T5238] usb 3-1: Manufacturer: syz [ 439.225596][ T5238] usb 3-1: SerialNumber: syz [ 439.241890][ T5238] usb 3-1: config 0 descriptor?? [ 439.252014][ T54] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 440.087052][T11390] SET target dimension over the limit! [ 440.115066][ T29] audit: type=1326 audit(1726722245.241:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11391 comm="syz.4.1419" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d9ed7def9 code=0x0 [ 440.298120][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.311547][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.321594][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.328171][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.467735][ T943] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 440.496402][T11403] vivid-003: disconnect [ 440.541664][T11403] vivid-003: reconnect [ 440.669973][ T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 440.712140][ T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 440.742856][ T943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.756410][ T943] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.825822][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.845831][ T943] usb 5-1: config 0 descriptor?? [ 440.860680][T11395] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 441.038539][T11411] IPv6: Can't replace route, no match found [ 441.144999][T11413] tipc: Started in network mode [ 441.158009][T11413] tipc: Node identity 7f000001, cluster identity 4711 [ 441.182738][T11413] tipc: Enabled bearer , priority 10 [ 441.395718][ T943] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 441.416309][T11416] sctp: [Deprecated]: syz.1.1430 (pid 11416) Use of int in max_burst socket option deprecated. [ 441.416309][T11416] Use struct sctp_assoc_value instead [ 441.449576][ T943] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 441.489326][ T943] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 441.511180][ T5281] usb 3-1: USB disconnect, device number 54 [ 441.552439][ T943] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 442.168229][ T5238] tipc: Node number set to 2130706433 [ 442.887785][ T5227] usb 5-1: reset high-speed USB device number 71 using dummy_hcd [ 442.968237][ T940] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 443.047954][ T5281] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 443.138653][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 443.153892][ T940] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 443.174302][ T940] usb 4-1: config 0 has no interface number 0 [ 443.187259][ T940] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27 [ 443.197845][ T5305] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 443.206055][T11452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.215200][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.224070][ T940] usb 4-1: Product: syz [ 443.224218][T11452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.229768][ T940] usb 4-1: Manufacturer: syz [ 443.241252][ T940] usb 4-1: SerialNumber: syz [ 443.254374][ T940] usb 4-1: config 0 descriptor?? [ 443.258436][ T5281] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 443.264090][ T940] gspca_main: dtcs033-2.14.0 probing 0547:7303 [ 443.277977][ T5281] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 443.297746][ T5281] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 443.317543][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 443.339168][ T5281] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 443.352729][ T5281] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 443.370166][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 443.370561][ T5305] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 443.381416][ T5281] usb 2-1: Product: syz [ 443.393028][ T5281] usb 2-1: Manufacturer: syz [ 443.411158][ T5305] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 443.421850][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 443.427113][ T5281] cdc_wdm 2-1:1.0: skipping garbage [ 443.431090][ T5305] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 443.442159][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.449822][ T5281] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 443.450600][ T5305] usb 3-1: Product: syz [ 443.461548][ T5305] usb 3-1: Manufacturer: syz [ 443.464082][ T5281] cdc_wdm 2-1:1.0: Unknown control protocol [ 443.472558][ T5305] usb 3-1: SerialNumber: syz [ 443.496692][ T5305] usb 3-1: config 0 descriptor?? [ 443.518276][ T5227] usb 5-1: device descriptor read/64, error -71 [ 443.564884][ T5305] usb 4-1: USB disconnect, device number 68 [ 443.679194][ T940] usb 2-1: USB disconnect, device number 60 [ 443.763289][ T5227] usb 5-1: reset high-speed USB device number 71 using dummy_hcd [ 443.897919][ T5227] usb 5-1: device descriptor read/64, error -71 [ 444.138537][ T5227] usb 5-1: reset high-speed USB device number 71 using dummy_hcd [ 444.162301][T11458] sysfs: cannot create duplicate filename '/class/ieee80211/< )2U7䋡;&!i' [ 444.168607][ T5227] usb 5-1: device descriptor read/8, error -71 [ 444.185659][T11458] CPU: 0 UID: 0 PID: 11458 Comm: syz.3.1444 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 444.196172][T11458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 444.206552][T11458] Call Trace: [ 444.209879][T11458] [ 444.212854][T11458] dump_stack_lvl+0x241/0x360 [ 444.217625][T11458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.222897][T11458] ? __pfx__printk+0x10/0x10 [ 444.227545][T11458] ? sysfs_warn_dup+0x51/0xa0 [ 444.232259][T11458] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 444.237867][T11458] sysfs_warn_dup+0x8e/0xa0 [ 444.242420][T11458] sysfs_do_create_link_sd+0xbe/0x110 [ 444.247859][T11458] device_add_class_symlinks+0x1c5/0x250 [ 444.253561][T11458] device_add+0x553/0xbf0 [ 444.257967][T11458] wiphy_register+0x1d3f/0x2b30 [ 444.262893][T11458] ? __pfx_wiphy_register+0x10/0x10 [ 444.268141][T11458] ? minstrel_ht_alloc+0x72b/0x860 [ 444.273320][T11458] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 444.279461][T11458] ieee80211_register_hw+0x30fb/0x3e10 [ 444.285014][T11458] ? ieee80211_register_hw+0x1531/0x3e10 [ 444.290736][T11458] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 444.296596][T11458] ? __asan_memset+0x23/0x50 [ 444.301221][T11458] ? __hrtimer_init+0x170/0x250 [ 444.306100][T11458] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 444.311870][T11458] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 444.317969][T11458] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 444.324584][T11458] ? kstrndup+0x5c/0xb0 [ 444.328761][T11458] ? __asan_memcpy+0x40/0x70 [ 444.333380][T11458] hwsim_new_radio_nl+0xece/0x2290 [ 444.338527][T11458] ? __pfx___nla_validate_parse+0x10/0x10 [ 444.344268][T11458] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 444.349870][T11458] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 444.356319][T11458] genl_rcv_msg+0xb14/0xec0 [ 444.360838][T11458] ? mark_lock+0x9a/0x360 [ 444.365190][T11458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.370257][T11458] ? __pfx_lock_acquire+0x10/0x10 [ 444.375309][T11458] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 444.380882][T11458] ? __pfx___might_resched+0x10/0x10 [ 444.386205][T11458] netlink_rcv_skb+0x1e3/0x430 [ 444.391006][T11458] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.396062][T11458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.401388][T11458] ? __netlink_deliver_tap+0x77e/0x7c0 [ 444.406883][T11458] genl_rcv+0x28/0x40 [ 444.410883][T11458] netlink_unicast+0x7f6/0x990 [ 444.415678][T11458] ? __pfx_netlink_unicast+0x10/0x10 [ 444.420986][T11458] ? __virt_addr_valid+0x183/0x530 [ 444.426135][T11458] ? __check_object_size+0x49c/0x900 [ 444.431445][T11458] netlink_sendmsg+0x8e4/0xcb0 [ 444.436270][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.441590][T11458] ? aa_sock_msg_perm+0x91/0x160 [ 444.446547][T11458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.451857][T11458] __sock_sendmsg+0x221/0x270 [ 444.456578][T11458] ____sys_sendmsg+0x52a/0x7e0 [ 444.461379][T11458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.466706][T11458] __sys_sendmsg+0x2aa/0x390 [ 444.471321][T11458] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.476500][T11458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 444.482855][T11458] ? do_syscall_64+0x100/0x230 [ 444.487663][T11458] ? do_syscall_64+0xb6/0x230 [ 444.492386][T11458] do_syscall_64+0xf3/0x230 [ 444.496916][T11458] ? clear_bhb_loop+0x35/0x90 [ 444.501623][T11458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.507544][T11458] RIP: 0033:0x7f98c637def9 [ 444.511985][T11458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.531612][T11458] RSP: 002b:00007f98c70af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.540099][T11458] RAX: ffffffffffffffda RBX: 00007f98c6535f80 RCX: 00007f98c637def9 [ 444.548115][T11458] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000003 [ 444.556114][T11458] RBP: 00007f98c63f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 444.564139][T11458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 444.572134][T11458] R13: 0000000000000000 R14: 00007f98c6535f80 R15: 00007f98c665fa28 [ 444.580316][T11458] [ 444.718528][ T5227] usb 5-1: reset high-speed USB device number 71 using dummy_hcd [ 444.739138][T11462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.756584][T11460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.767927][ T5227] usb 5-1: device descriptor read/8, error -71 [ 444.780115][T11462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.827894][T11462] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 444.858240][T11460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.898976][ T5285] usb 5-1: USB disconnect, device number 71 [ 445.108014][ T5285] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 445.257890][ T5285] usb 5-1: device descriptor read/64, error -71 [ 445.283459][T11472] FAULT_INJECTION: forcing a failure. [ 445.283459][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 445.336022][T11472] CPU: 0 UID: 0 PID: 11472 Comm: syz.0.1449 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 445.346519][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 445.356625][T11472] Call Trace: [ 445.359973][T11472] [ 445.362951][T11472] dump_stack_lvl+0x241/0x360 [ 445.365478][ T29] audit: type=1326 audit(1726722250.491:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11470 comm="syz.0.1449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x0 [ 445.367677][T11472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.367719][T11472] ? __pfx__printk+0x10/0x10 [ 445.367753][T11472] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 445.367791][T11472] ? __pfx___might_resched+0x10/0x10 [ 445.367826][T11472] should_fail_ex+0x3b0/0x4e0 [ 445.415001][T11472] should_failslab+0xac/0x100 [ 445.419733][T11472] ? alloc_pipe_info+0xeb/0x4d0 [ 445.424645][T11472] __kmalloc_cache_noprof+0x6c/0x2c0 [ 445.430094][T11472] alloc_pipe_info+0xeb/0x4d0 [ 445.434856][T11472] splice_direct_to_actor+0xa9e/0xc80 [ 445.440388][T11472] ? aa_file_perm+0x3ef/0xf50 [ 445.445160][T11472] ? __pfx_aa_file_perm+0x10/0x10 [ 445.450333][T11472] ? __pfx_direct_splice_actor+0x10/0x10 [ 445.456025][T11472] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 445.461973][T11472] ? __fget_files+0x29/0x470 [ 445.466808][T11472] ? __pfx_lock_release+0x10/0x10 [ 445.471897][T11472] do_splice_direct+0x289/0x3e0 [ 445.476809][T11472] ? __pfx_do_splice_direct+0x10/0x10 [ 445.482233][T11472] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 445.488203][T11472] ? rw_verify_area+0x1c3/0x6f0 [ 445.493318][T11472] do_sendfile+0x561/0xe10 [ 445.497790][T11472] ? __pfx_do_sendfile+0x10/0x10 [ 445.502878][T11472] __se_sys_sendfile64+0x17c/0x1e0 [ 445.508042][T11472] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 445.513839][T11472] ? do_syscall_64+0x100/0x230 [ 445.518687][T11472] ? do_syscall_64+0xb6/0x230 [ 445.523427][T11472] do_syscall_64+0xf3/0x230 [ 445.527883][ T5285] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 445.527965][T11472] ? clear_bhb_loop+0x35/0x90 [ 445.540272][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.543911][ T29] audit: type=1326 audit(1726722250.671:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11473 comm="syz.1.1450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc7217def9 code=0x0 [ 445.546341][T11472] RIP: 0033:0x7f35c877def9 [ 445.546370][T11472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.546392][T11472] RSP: 002b:00007f35c9628038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.546420][T11472] RAX: ffffffffffffffda RBX: 00007f35c8936058 RCX: 00007f35c877def9 [ 445.609670][T11472] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 445.617699][T11472] RBP: 00007f35c9628090 R08: 0000000000000000 R09: 0000000000000000 [ 445.625809][T11472] R10: 0000000000000fff R11: 0000000000000246 R12: 0000000000000001 [ 445.633920][T11472] R13: 0000000000000000 R14: 00007f35c8936058 R15: 00007f35c8a5fa28 [ 445.642402][T11472] [ 445.657891][ T5285] usb 5-1: device descriptor read/64, error -71 [ 445.778644][ T5285] usb usb5-port1: attempt power cycle [ 445.874896][ T29] audit: type=1326 audit(1726722251.001:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11479 comm="syz.0.1451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x0 [ 445.985718][ T5281] usb 3-1: USB disconnect, device number 55 [ 446.046586][ T29] audit: type=1326 audit(1726722251.171:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11485 comm="syz.2.1453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c1d77def9 code=0x0 [ 446.127885][ T5285] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 446.137755][ T943] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 446.166226][ T5285] usb 5-1: device descriptor read/8, error -71 [ 446.291552][ T943] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 446.314414][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.343430][ T943] usb 4-1: config 0 descriptor?? [ 446.358839][ T943] cp210x 4-1:0.0: cp210x converter detected [ 446.424786][T11494] loop3: detected capacity change from 0 to 7 [ 446.445455][T11494] Dev loop3: unable to read RDB block 7 [ 446.452459][T11494] loop3: AHDI p1 p2 [ 446.458505][T11494] loop3: partition table partially beyond EOD, truncated [ 446.466065][T11494] loop3: p1 size 7567738 extends beyond EOD, truncated [ 446.473446][ T5281] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 446.514685][T10975] udevd[10975]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 446.617865][ T5285] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 446.639838][ T5285] usb 5-1: Using ep0 maxpacket: 8 [ 446.647022][ T5285] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 446.655552][ T5285] usb 5-1: can't read configurations, error -61 [ 446.659831][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 446.662964][ T5285] usb usb5-port1: unable to enumerate USB device [ 446.687860][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 446.699424][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.713791][ T5281] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.725836][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.736848][ T5281] usb 3-1: config 0 descriptor?? [ 446.743662][T11487] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 446.796323][ T943] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 446.848036][ T5284] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 447.000523][ T5284] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 447.019007][ T943] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 447.037251][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.050494][ T943] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 447.071433][ T5284] usb 2-1: config 0 descriptor?? [ 447.080494][ T943] usb 4-1: cp210x converter now attached to ttyUSB0 [ 447.099327][ T943] usb 4-1: USB disconnect, device number 69 [ 447.114941][ T943] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 447.126067][ T943] cp210x 4-1:0.0: device disconnected [ 447.224864][ T5281] plantronics 0003:047F:FFFF.001D: unknown main item tag 0xd [ 447.233176][ T5281] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 447.242598][ T5281] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 447.256113][ T5281] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 447.496909][ T5284] usb 2-1: Cannot read MAC address [ 447.506596][ T5284] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 447.866473][ T5284] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 448.038034][ T5284] usb 4-1: Using ep0 maxpacket: 8 [ 448.044815][ T5284] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 448.054254][ T5284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.065330][ T5284] usb 4-1: config 0 descriptor?? [ 448.485010][ T5284] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 448.504643][ T5284] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 448.516070][ T5284] asix 4-1:0.0: probe with driver asix failed with error -61 [ 448.545836][ T5284] usb 4-1: USB disconnect, device number 70 [ 448.594778][ T5281] usb 2-1: USB disconnect, device number 61 [ 448.601880][ T943] usb 3-1: reset high-speed USB device number 56 using dummy_hcd [ 448.731579][T11514] debugfs: Directory '< )2U7䋡;&!i' with parent 'ieee80211' already present! [ 449.017271][T11519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1462'. [ 449.135257][T11521] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1464'. [ 449.188181][ T5227] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 449.331795][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 449.350013][ T5227] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 449.374206][ T5227] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 449.405822][ T5227] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 449.425894][ T5227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.444614][ T5227] usb 4-1: Product: syz [ 449.467770][ T5227] usb 4-1: Manufacturer: syz [ 449.480502][ T5227] usb 4-1: SerialNumber: syz [ 449.511951][ T5227] usb 4-1: config 0 descriptor?? [ 449.758014][ T5281] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 449.929973][ T5281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 449.941348][ T5281] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 449.965290][ T5281] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 449.977379][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.988151][ T5281] usb 5-1: Product: syz [ 449.992997][ T5281] usb 5-1: Manufacturer: syz [ 450.004130][ T5283] usb 3-1: USB disconnect, device number 56 [ 450.044072][ T5281] usb 5-1: SerialNumber: syz [ 450.089159][ T5281] usb 5-1: config 0 descriptor?? [ 450.107991][T11530] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 450.135845][T11530] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 450.368292][T11530] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 450.396673][T11530] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 450.452434][T11541] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1470'. [ 450.606186][T11543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.610118][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 450.688217][T11543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.872139][ T29] audit: type=1326 audit(1726722256.001:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11550 comm="syz.0.1474" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x0 [ 450.917901][ T5285] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 451.097866][ T5285] usb 3-1: Using ep0 maxpacket: 8 [ 451.119533][ T5285] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 451.124493][ T5285] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.124534][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.124561][ T5285] usb 3-1: Product: syz [ 451.124581][ T5285] usb 3-1: Manufacturer: syz [ 451.124602][ T5285] usb 3-1: SerialNumber: syz [ 452.108656][ T5283] usb 4-1: USB disconnect, device number 71 [ 452.218020][ T5227] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 452.379918][ T5285] usb 3-1: USB disconnect, device number 57 [ 452.414388][ T5227] usb 2-1: device descriptor read/64, error -71 [ 452.538446][ T5281] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 452.569501][ T5281] usb 5-1: USB disconnect, device number 76 [ 452.667896][ T5227] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 452.817993][ T5227] usb 2-1: device descriptor read/64, error -71 [ 452.928050][ T5227] usb usb2-port1: attempt power cycle [ 453.267870][ T5227] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 453.298438][ T5227] usb 2-1: device descriptor read/8, error -71 [ 453.547923][ T5227] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 453.578632][ T5227] usb 2-1: device descriptor read/8, error -71 [ 453.698883][ T5227] usb usb2-port1: unable to enumerate USB device [ 454.398542][ T5281] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 454.601157][ T5281] usb 3-1: config 128 has too many interfaces: 254, using maximum allowed: 32 [ 454.627668][ T5281] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 254 [ 454.660827][ T5281] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.670365][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 454.680035][ T5281] usb 3-1: SerialNumber: syz [ 454.901545][ T5285] usb 3-1: USB disconnect, device number 58 [ 455.255964][ T5227] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 455.358711][ T5283] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 455.419584][ T5227] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x1 has invalid wMaxPacketSize 0 [ 455.429802][ T5227] usb 4-1: config 1 interface 0 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 0 [ 455.439925][ T5227] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.455628][ T5227] usb 4-1: config 1 interface 0 has no altsetting 0 [ 455.479698][ T5227] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 455.496821][ T5227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.511983][ T5283] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 455.525958][ T5227] usb 4-1: Product: syz [ 455.530941][ T5227] usb 4-1: Manufacturer: syz [ 455.532961][ T5283] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 455.535594][ T5227] usb 4-1: SerialNumber: syz [ 455.564851][ T5283] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 455.586257][ T5283] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.607128][ T5283] usb 2-1: Product: syz [ 455.616835][ T5283] usb 2-1: Manufacturer: syz [ 455.622386][ T5283] usb 2-1: SerialNumber: syz [ 455.638323][ T5283] usb 2-1: config 0 descriptor?? [ 455.658057][T11605] vivid-005: disconnect [ 455.663090][T11604] vivid-005: reconnect [ 455.837418][T11610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1493'. [ 455.875992][ T5281] usb 4-1: USB disconnect, device number 72 [ 456.285215][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.461248][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.678057][T11619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.731703][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.742271][T11619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.046704][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.188404][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 457.200784][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 457.209817][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 457.232558][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 457.241418][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 457.249277][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.570051][T11630] SET target dimension over the limit! [ 457.842652][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.856462][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.866582][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.882098][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.891602][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 457.900367][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.938853][T11625] chnl_net:caif_netlink_parms(): no params data found [ 458.117971][ T943] usb 2-1: USB disconnect, device number 66 [ 458.123168][T11639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1504'. [ 458.627984][ T943] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 458.798793][ T943] usb 2-1: Using ep0 maxpacket: 8 [ 458.811167][ T943] usb 2-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 458.826813][ T29] audit: type=1326 audit(1726722263.951:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.2.1507" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c1d77def9 code=0x0 [ 458.853593][ T943] usb 2-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 458.868657][ T943] usb 2-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 458.878684][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.887386][ T943] usb 2-1: Product: syz [ 458.892858][ T943] usb 2-1: Manufacturer: syz [ 458.898203][ T943] usb 2-1: SerialNumber: syz [ 458.923666][ T943] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 458.985072][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 459.053045][ T943] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.063439][ T943] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 459.077499][ T943] usb 2-1: media controller created [ 459.129118][ T943] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 459.177307][ T943] dvb-usb: bulk message failed: -22 (6/0) [ 459.184661][ T943] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 459.187942][ T940] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 459.200616][ T943] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76 [ 459.231142][ T943] dvb-usb: schedule remote query interval to 150 msecs. [ 459.239459][ T943] dvb-usb: bulk message failed: -22 (3/0) [ 459.288095][ T54] Bluetooth: hci0: command tx timeout [ 459.297672][ T943] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 459.338606][ T943] usb 2-1: USB disconnect, device number 67 [ 459.381717][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 459.420210][ T940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 459.433405][ T943] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 459.439799][ T940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.478175][ T940] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.504655][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.527355][ T940] usb 3-1: config 0 descriptor?? [ 459.533844][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.533949][T11664] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 459.567377][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.582426][ T12] bond0 (unregistering): Released all slaves [ 459.598727][ T12] bond1 (unregistering): (slave batadv3): Releasing backup interface [ 459.612083][ T12] bond1 (unregistering): Released all slaves [ 459.712593][ T12] : left promiscuous mode [ 459.971768][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.998612][ T54] Bluetooth: hci2: command tx timeout [ 460.020395][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.049113][ T940] plantronics 0003:047F:FFFF.001E: unknown main item tag 0xd [ 460.055775][T11625] bridge_slave_0: entered allmulticast mode [ 460.065108][T11625] bridge_slave_0: entered promiscuous mode [ 460.089176][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.096442][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.103406][ T940] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 460.128753][ T940] plantronics 0003:047F:FFFF.001E: No inputs registered, leaving [ 460.147229][T11625] bridge_slave_1: entered allmulticast mode [ 460.188159][T11625] bridge_slave_1: entered promiscuous mode [ 460.195981][ T940] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 460.331549][T11683] FAULT_INJECTION: forcing a failure. [ 460.331549][T11683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.361872][T11625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.377794][T11683] CPU: 0 UID: 0 PID: 11683 Comm: syz.1.1509 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 460.388289][T11683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 460.398402][T11683] Call Trace: [ 460.401693][T11683] [ 460.404634][T11683] dump_stack_lvl+0x241/0x360 [ 460.409427][T11683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.414670][T11683] ? __pfx__printk+0x10/0x10 [ 460.419281][T11683] ? __pfx_lock_release+0x10/0x10 [ 460.424344][T11683] should_fail_ex+0x3b0/0x4e0 [ 460.429049][T11683] _copy_from_user+0x2f/0xe0 [ 460.433677][T11683] get_user_ifreq+0xc3/0x200 [ 460.438303][T11683] sock_ioctl+0x793/0x8e0 [ 460.442652][T11683] ? __pfx_sock_ioctl+0x10/0x10 [ 460.447523][T11683] ? __fget_files+0x3f3/0x470 [ 460.452234][T11683] ? __pfx_sock_ioctl+0x10/0x10 [ 460.457108][T11683] __se_sys_ioctl+0xf9/0x170 [ 460.461728][T11683] do_syscall_64+0xf3/0x230 [ 460.466267][T11683] ? clear_bhb_loop+0x35/0x90 [ 460.470977][T11683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.476900][T11683] RIP: 0033:0x7fcc7217def9 [ 460.481341][T11683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.500969][T11683] RSP: 002b:00007fcc7302a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.509498][T11683] RAX: ffffffffffffffda RBX: 00007fcc72335f80 RCX: 00007fcc7217def9 [ 460.517490][T11683] RDX: 0000000020000600 RSI: 00000000000089f1 RDI: 0000000000000004 [ 460.525503][T11683] RBP: 00007fcc7302a090 R08: 0000000000000000 R09: 0000000000000000 [ 460.533508][T11683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.541507][T11683] R13: 0000000000000000 R14: 00007fcc72335f80 R15: 00007fcc7245fa28 [ 460.549510][T11683] [ 460.633307][T11679] debugfs: Directory '< )2U7䋡;&!i' with parent 'ieee80211' already present! [ 460.684796][T11625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.870386][T11625] team0: Port device team_slave_0 added [ 461.014388][T11625] team0: Port device team_slave_1 added [ 461.170584][T11625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.177918][T11625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.205708][T11625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.320725][T11625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.328044][T11625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.367270][T11625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.378774][ T54] Bluetooth: hci0: command tx timeout [ 461.448961][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.467962][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.487851][ T940] usb 3-1: reset high-speed USB device number 59 using dummy_hcd [ 461.510696][ T12] veth1_macvtap: left promiscuous mode [ 461.516298][ T12] veth0_macvtap: left promiscuous mode [ 461.523212][ T12] veth1_vlan: left promiscuous mode [ 461.528678][ T12] veth0_vlan: left promiscuous mode [ 461.951689][ T12] pim6reg (unregistering): left allmulticast mode [ 462.078970][ T54] Bluetooth: hci2: command tx timeout [ 462.167270][T11710] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.1516'. [ 462.188075][T11710] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 462.569090][ T5227] usb 3-1: USB disconnect, device number 59 [ 463.036549][ T12] team0 (unregistering): Port device team_slave_1 removed [ 463.153876][ T12] team0 (unregistering): Port device team_slave_0 removed [ 463.437899][ T54] Bluetooth: hci0: command tx timeout [ 463.736859][T11625] hsr_slave_0: entered promiscuous mode [ 463.754821][T11625] hsr_slave_1: entered promiscuous mode [ 463.785580][T11636] chnl_net:caif_netlink_parms(): no params data found [ 464.028463][T11717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1518'. [ 464.088176][T11722] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 464.096042][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1518'. [ 464.168419][ T54] Bluetooth: hci2: command tx timeout [ 464.211199][T11636] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.219660][T11636] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.229214][T11636] bridge_slave_0: entered allmulticast mode [ 464.236759][T11636] bridge_slave_0: entered promiscuous mode [ 464.286124][T11636] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.303492][T11636] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.319921][T11636] bridge_slave_1: entered allmulticast mode [ 464.327139][T11636] bridge_slave_1: entered promiscuous mode [ 464.357053][T11731] loop2: detected capacity change from 0 to 7 [ 464.387746][T11731] Dev loop2: unable to read RDB block 7 [ 464.435579][T11731] loop2: AHDI p1 [ 464.435618][T11731] loop2: partition table partially beyond EOD, truncated [ 464.437468][T11636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.453106][T11636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.542302][T11636] team0: Port device team_slave_0 added [ 464.544657][T11636] team0: Port device team_slave_1 added [ 464.662940][ T4685] Dev loop2: unable to read RDB block 7 [ 464.662979][ T4685] loop2: AHDI p1 [ 464.663006][ T4685] loop2: partition table partially beyond EOD, truncated [ 464.758766][T11636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.758785][T11636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.758809][T11636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.759741][T11735] tipc: Invalid UDP bearer configuration [ 464.759788][T11735] tipc: Enabling of bearer rejected, failed to enable media [ 464.770179][T11636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.770205][T11636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.770239][T11636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.931873][ T12] IPVS: stop unused estimator thread 0... [ 465.037762][ T5238] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 465.197950][ T5238] usb 3-1: Using ep0 maxpacket: 16 [ 465.206876][ T5238] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 465.218706][ T5238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.235135][ T5238] usb 3-1: Product: syz [ 465.257798][ T5238] usb 3-1: Manufacturer: syz [ 465.270458][ T5238] usb 3-1: SerialNumber: syz [ 465.315476][ T5238] usb 3-1: config 0 descriptor?? [ 465.357222][ T5238] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 465.451020][T11636] hsr_slave_0: entered promiscuous mode [ 465.462977][T11636] hsr_slave_1: entered promiscuous mode [ 465.481785][T11636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.490848][T11636] Cannot create hsr debugfs directory [ 465.496579][T11751] netlink: 'syz.1.1522': attribute type 1 has an invalid length. [ 465.528275][ T54] Bluetooth: hci0: command tx timeout [ 465.580955][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.614460][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.622808][ T5283] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 465.652969][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.820362][ T5283] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 465.833354][ T5283] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.844272][T11759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1525'. [ 465.869372][ T5283] usb 2-1: config 0 descriptor?? [ 465.893575][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.058877][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.107243][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.140730][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.240261][ T54] Bluetooth: hci2: command tx timeout [ 466.254991][ T5238] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 466.269289][ T5238] usb 3-1: USB disconnect, device number 60 [ 466.283988][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.328010][T11749] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 466.337580][T11749] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 466.355917][T11625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 466.375087][T11751] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 466.409303][T11751] bond1 (unregistering): Released all slaves [ 466.452757][T11625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 466.488102][T11625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 466.512184][ T5283] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 466.522371][ T5283] mxuport 2-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 466.532361][ T5283] mxuport 2-1:0.0: probe with driver mxuport failed with error -71 [ 466.547978][T11625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 466.576646][ T5283] usb 2-1: USB disconnect, device number 68 [ 466.820529][ T12] erspan0: left allmulticast mode [ 466.825659][ T12] erspan0: left promiscuous mode [ 466.848921][ T12] bridge0: port 3(erspan0) entered disabled state [ 466.903727][ T12] bridge_slave_1: left allmulticast mode [ 466.921387][ T12] bridge_slave_1: left promiscuous mode [ 466.927199][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.955741][ T12] bridge_slave_0: left allmulticast mode [ 466.971539][ T12] bridge_slave_0: left promiscuous mode [ 466.977336][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.204663][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.217216][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.230377][ T12] bond0 (unregistering): Released all slaves [ 468.249640][ T12] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 468.266387][ T12] bond1 (unregistering): Released all slaves [ 468.285577][ T12] bond2 (unregistering): (slave batadv2): Releasing backup interface [ 468.299791][ T12] bond2 (unregistering): Released all slaves [ 468.314706][ T12] bond3 (unregistering): (slave batadv3): Releasing backup interface [ 468.326902][ T12] bond3 (unregistering): Released all slaves [ 468.402923][T11772] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1528'. [ 468.682518][ T12] tipc: Disabling bearer [ 468.694433][ T12] tipc: Left network mode [ 468.883480][T11625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.988268][ T25] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 469.005833][T11625] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.030367][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.037532][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.148319][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.155545][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.158819][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 469.193079][ T25] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 469.214880][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.246375][ T25] usb 2-1: Product: syz [ 469.255536][ T25] usb 2-1: Manufacturer: syz [ 469.267391][ T25] usb 2-1: SerialNumber: syz [ 469.308917][ T25] usb 2-1: config 0 descriptor?? [ 469.316309][ T25] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 469.335262][ T25] usb 2-1: Detected FT232H [ 469.390869][T11636] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.406952][T11636] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.517033][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 469.546464][T11636] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.546490][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 469.588147][ T25] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 469.609242][T11636] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.619676][ T25] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 469.658249][ T25] usb 2-1: USB disconnect, device number 69 [ 469.693248][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 469.722824][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.731427][ T25] ftdi_sio 2-1:0.0: device disconnected [ 469.739440][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.763352][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.811822][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.872566][ T12] veth1_macvtap: left promiscuous mode [ 469.878452][ T12] veth0_macvtap: left promiscuous mode [ 469.885757][ T12] veth1_vlan: left promiscuous mode [ 469.894088][ T12] veth0_vlan: left promiscuous mode [ 470.370499][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.384047][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.419813][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.446438][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.472544][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 470.490013][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 470.857562][ T12] team0 (unregistering): Port device team_slave_1 removed [ 470.926411][ T12] team0 (unregistering): Port device team_slave_0 removed [ 471.552197][T11625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.697156][T11625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.763838][T11857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 471.938226][T11860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1540'. [ 472.100440][T11625] veth0_vlan: entered promiscuous mode [ 472.185733][T11636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.200922][T11625] veth1_vlan: entered promiscuous mode [ 472.272754][T11636] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.296487][T11852] chnl_net:caif_netlink_parms(): no params data found [ 472.323767][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.331006][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.370666][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.377865][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.395116][ T12] IPVS: stop unused estimator thread 0... [ 472.459491][T11625] veth0_macvtap: entered promiscuous mode [ 472.550295][T11879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.560691][ T5243] Bluetooth: hci3: command tx timeout [ 472.562671][T11625] veth1_macvtap: entered promiscuous mode [ 472.592763][T11852] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.613488][T11852] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.634414][T11852] bridge_slave_0: entered allmulticast mode [ 472.654971][T11852] bridge_slave_0: entered promiscuous mode [ 472.703317][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.736513][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.757114][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.777719][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.789797][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.808409][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.826987][T11625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.848352][T11852] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.861560][T11852] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.873024][T11852] bridge_slave_1: entered allmulticast mode [ 472.881555][T11852] bridge_slave_1: entered promiscuous mode [ 472.994601][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.049461][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.062717][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.073691][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.086184][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.099662][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.111460][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.123749][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.135310][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.172443][T11625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.196550][T11852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.259606][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.290344][T11625] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.307043][T11625] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.316992][T11625] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.326927][T11625] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.365412][T11852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.429589][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.503541][T11852] team0: Port device team_slave_0 added [ 473.566581][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.610416][T11852] team0: Port device team_slave_1 added [ 473.739911][T11852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.747065][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.775390][T11852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.803474][T11852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.811690][T11852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.839111][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.864112][T11852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.903933][T11636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.025616][T11852] hsr_slave_0: entered promiscuous mode [ 474.032172][T11852] hsr_slave_1: entered promiscuous mode [ 474.040153][T11852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.049155][T11852] Cannot create hsr debugfs directory [ 474.204361][ T12] bridge_slave_1: left allmulticast mode [ 474.215558][ T12] bridge_slave_1: left promiscuous mode [ 474.231710][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.251585][ T12] bridge_slave_0: left allmulticast mode [ 474.257442][ T12] bridge_slave_0: left promiscuous mode [ 474.265880][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.637882][ T5243] Bluetooth: hci3: command tx timeout [ 475.084941][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.112361][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.150005][ T12] bond0 (unregistering): Released all slaves [ 475.195492][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.258208][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.283692][T11891] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 475.339753][ T29] audit: type=1326 audit(1726722280.461:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.413321][ T29] audit: type=1326 audit(1726722280.461:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.435705][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.514353][ T29] audit: type=1326 audit(1726722280.471:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.536831][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.604358][ T29] audit: type=1326 audit(1726722280.471:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.644868][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.658251][ T29] audit: type=1326 audit(1726722280.471:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.676207][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.732338][ T29] audit: type=1326 audit(1726722280.471:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.755340][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.797676][ T29] audit: type=1326 audit(1726722280.471:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.820061][ C0] vkms_vblank_simulate: vblank timer overrun [ 475.867694][ T29] audit: type=1326 audit(1726722280.471:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.921793][T11636] veth0_vlan: entered promiscuous mode [ 475.951509][ T29] audit: type=1326 audit(1726722280.471:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 475.995074][ T29] audit: type=1326 audit(1726722280.471:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11892 comm="syz.0.1549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c877def9 code=0x7ffc0000 [ 476.017501][ C0] vkms_vblank_simulate: vblank timer overrun [ 476.163241][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 476.227764][ T5305] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 476.229404][T11636] veth1_vlan: entered promiscuous mode [ 476.391823][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.414087][ T5305] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.488072][ T5305] usb 2-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 476.497359][ T5305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.544371][ T5305] usb 2-1: config 0 descriptor?? [ 476.575851][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 476.587245][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'. [ 476.718737][ T5243] Bluetooth: hci3: command tx timeout [ 476.740892][ T12] hsr_slave_0: left promiscuous mode [ 476.764831][ T12] hsr_slave_1: left promiscuous mode [ 476.772321][T11911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.786455][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.794467][T11911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.796837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.839641][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.850663][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.863354][ T5305] wacom 0003:056A:033C.001F: Unknown device_type for 'HID 056a:033c'. Assuming pen. [ 476.899140][ T5305] wacom 0003:056A:033C.001F: hidraw0: USB HID v0.00 Device [HID 056a:033c] on usb-dummy_hcd.1-1/input0 [ 476.927461][ T12] veth1_macvtap: left promiscuous mode [ 476.934812][ T5305] input: Wacom Intuos PT S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:033C.001F/input/input77 [ 476.957017][ T12] veth0_macvtap: left promiscuous mode [ 476.966646][ T12] veth1_vlan: left promiscuous mode [ 476.973005][ T12] veth0_vlan: left promiscuous mode [ 477.059354][ T5283] usb 2-1: USB disconnect, device number 70 [ 477.169886][ T5238] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 477.382705][ T5238] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 477.418482][ T5238] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 477.445209][ T5238] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 477.464354][ T5238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.472610][ T5238] usb 5-1: Product: syz [ 477.477391][ T5238] usb 5-1: Manufacturer: syz [ 477.483360][ T5238] usb 5-1: SerialNumber: syz [ 477.501372][ T5238] usb 5-1: config 0 descriptor?? [ 478.234248][ T12] team0 (unregistering): Port device team_slave_1 removed [ 478.315806][ T12] team0 (unregistering): Port device team_slave_0 removed [ 478.574643][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.598603][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.798525][ T5243] Bluetooth: hci3: command tx timeout [ 479.902295][ T25] usb 5-1: USB disconnect, device number 77 [ 480.086061][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 480.217904][T11954] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1561'. [ 480.294054][T11948] netlink: 'syz.4.1561': attribute type 21 has an invalid length. [ 480.379723][T11636] veth0_macvtap: entered promiscuous mode [ 480.388389][ T5238] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 480.408088][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 480.582392][T11636] veth1_macvtap: entered promiscuous mode [ 480.588341][ T5238] usb 2-1: Using ep0 maxpacket: 8 [ 480.610872][ T5238] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 480.656452][ T5238] usb 2-1: config 0 has no interface number 0 [ 480.675049][ T5238] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.689733][ T5238] usb 2-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.692264][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.700155][ T5238] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 480.720775][ T5238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.764621][ T5238] usb 2-1: config 0 descriptor?? [ 480.806942][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.833001][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.860398][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.881858][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.945133][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.991590][T11636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.169203][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.181376][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.218020][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.232306][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.242514][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.256047][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.274402][T11636] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.300717][T11636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.335682][T11636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.369381][T11636] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.406132][T11636] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.415839][T11636] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.424714][T11636] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.467224][T11972] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1563'. [ 481.482741][T11972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1563'. [ 481.539346][T11852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 481.611988][T11852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 481.655703][T11852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.705868][T11852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.909380][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.919062][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.034063][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.072949][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.083546][T11852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.163784][T11852] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.198449][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.205706][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.253502][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.260775][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.448813][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1501'. [ 482.493856][T11996] hsr0: entered promiscuous mode [ 482.593719][T11852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.746403][T11852] veth0_vlan: entered promiscuous mode [ 482.775651][T11852] veth1_vlan: entered promiscuous mode [ 482.837297][T11852] veth0_macvtap: entered promiscuous mode [ 482.870298][T11852] veth1_macvtap: entered promiscuous mode [ 482.939106][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 482.962856][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 482.965947][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.005171][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.027759][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.055780][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.076438][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.087148][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.100668][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.129514][T11852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.165249][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.204934][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.221379][ T5238] usbhid 2-1:0.17: can't add hid device: -71 [ 483.227712][ T5238] usbhid 2-1:0.17: probe with driver usbhid failed with error -71 [ 483.238387][ T5238] usb 2-1: USB disconnect, device number 71 [ 483.256723][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.305860][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.336438][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.362887][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.387725][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.408704][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.440682][T11852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.457700][T11852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.494416][T11852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.545636][T11852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.594540][T11852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.603741][ T25] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 483.637896][T11852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.687714][T11852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.788131][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 483.808578][ T25] usb 4-1: config 0 has an invalid interface number: 17 but max is 0 [ 483.836585][ T25] usb 4-1: config 0 has no interface number 0 [ 483.857885][ T25] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.891268][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.908721][ T25] usb 4-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.920498][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.937716][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 483.966510][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.009652][T10389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.029189][ T25] usb 4-1: config 0 descriptor?? [ 484.035061][T10389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.588513][T12019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1574'. [ 484.622677][T12019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1574'. [ 484.711945][ T25] usbhid 4-1:0.17: can't add hid device: -71 [ 484.740761][ T25] usbhid 4-1:0.17: probe with driver usbhid failed with error -71 [ 484.798335][ T25] usb 4-1: USB disconnect, device number 73 [ 484.806108][T12049] loop7: detected capacity change from 0 to 16384 [ 484.966386][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.046295][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.064556][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.137769][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.175592][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.218684][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.269929][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.334683][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.374906][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.428225][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.472948][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.493066][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.531473][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.567784][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.591436][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.616725][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.640247][T12049] ldm_validate_partition_table(): Disk read failed. [ 485.668915][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.709041][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.723218][T12049] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 485.734523][T12049] Buffer I/O error on dev loop7, logical block 0, async page read [ 485.748095][T12049] Dev loop7: unable to read RDB block 0 [ 485.773654][T12049] loop7: unable to read partition table [ 485.779824][T12049] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 485.911204][ T5238] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 485.973149][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 486.082910][ T5238] usb 4-1: device descriptor read/64, error -71 [ 486.162997][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 486.367906][ T5238] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 486.507943][ T5238] usb 4-1: device descriptor read/64, error -71 [ 486.581170][T12097] team_slave_0: entered promiscuous mode [ 486.587008][T12097] team_slave_1: entered promiscuous mode [ 486.611530][T12097] macvlan2: entered promiscuous mode [ 486.616947][T12097] team0: entered promiscuous mode [ 486.623238][T12097] macvlan2: entered allmulticast mode [ 486.629160][T12097] team0: entered allmulticast mode [ 486.642813][T12097] team_slave_0: entered allmulticast mode [ 486.648736][T12097] team_slave_1: entered allmulticast mode [ 486.649005][ T5238] usb usb4-port1: attempt power cycle [ 486.655752][T12097] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 486.686181][T12097] team0: left allmulticast mode [ 486.710673][T12097] team_slave_0: left allmulticast mode [ 486.734386][T12097] team_slave_1: left allmulticast mode [ 486.747467][T12097] team0: left promiscuous mode [ 486.762890][T12097] team_slave_0: left promiscuous mode [ 486.768549][T12097] team_slave_1: left promiscuous mode [ 487.027938][ T5238] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 487.050435][ T5238] usb 4-1: device descriptor read/8, error -71 [ 487.061128][T12104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 487.093125][T12104] hsr0: entered promiscuous mode [ 487.307838][ T5238] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 487.348606][ T5238] usb 4-1: device descriptor read/8, error -71 [ 487.391355][T12109] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 487.490319][ T5238] usb usb4-port1: unable to enumerate USB device [ 487.556214][T12112] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1596'. [ 487.738088][ T5285] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 487.900417][ T5285] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 487.920574][ T5227] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 487.939639][T12122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1599'. [ 487.951444][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.960854][ T5227] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 487.986852][T12122] xt_TPROXY: Can be used only with -p tcp or -p udp [ 488.005539][ T5285] usb 3-1: config 0 descriptor?? [ 488.025431][ T5227] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 488.243987][T12108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.267926][T12108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.384270][T12127] FAULT_INJECTION: forcing a failure. [ 488.384270][T12127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.446314][T12127] CPU: 0 UID: 0 PID: 12127 Comm: syz.4.1601 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 488.456994][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 488.467107][T12127] Call Trace: [ 488.470425][T12127] [ 488.473397][T12127] dump_stack_lvl+0x241/0x360 [ 488.478118][T12127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.483438][T12127] ? __pfx__printk+0x10/0x10 [ 488.488151][T12127] ? __pfx_lock_release+0x10/0x10 [ 488.493258][T12127] should_fail_ex+0x3b0/0x4e0 [ 488.498068][T12127] _copy_from_user+0x2f/0xe0 [ 488.502723][T12127] ____sys_sendmsg+0x2ef/0x7e0 [ 488.507559][T12127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.512942][T12127] __sys_sendmsg+0x2aa/0x390 [ 488.517699][T12127] ? __pfx___sys_sendmsg+0x10/0x10 [ 488.522977][T12127] ? vfs_write+0x7bf/0xc90 [ 488.527668][T12127] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 488.534069][T12127] ? do_syscall_64+0x100/0x230 [ 488.539016][T12127] ? do_syscall_64+0xb6/0x230 [ 488.543780][T12127] do_syscall_64+0xf3/0x230 [ 488.548392][T12127] ? clear_bhb_loop+0x35/0x90 [ 488.553208][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.559293][T12127] RIP: 0033:0x7f4d5eb7def9 [ 488.563819][T12127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.583550][T12127] RSP: 002b:00007f4d5fa0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.592014][T12127] RAX: ffffffffffffffda RBX: 00007f4d5ed35f80 RCX: 00007f4d5eb7def9 [ 488.600199][T12127] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000003 [ 488.608466][T12127] RBP: 00007f4d5fa0f090 R08: 0000000000000000 R09: 0000000000000000 [ 488.616582][T12127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.624691][T12127] R13: 0000000000000000 R14: 00007f4d5ed35f80 R15: 00007f4d5ee5fa28 [ 488.632727][T12127] [ 488.635813][ C0] vkms_vblank_simulate: vblank timer overrun [ 488.798853][ T5285] mxuport 3-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 488.821481][ T5285] mxuport 3-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 488.876114][ T5285] mxuport 3-1:0.0: probe with driver mxuport failed with error -71 [ 488.970040][ T5285] usb 3-1: USB disconnect, device number 61 [ 489.178894][ T5284] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 489.370807][ T5284] usb 5-1: Using ep0 maxpacket: 16 [ 489.404024][ T5284] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 489.450366][ T5284] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.507799][ T5284] usb 5-1: config 0 interface 0 has no altsetting 0 [ 489.525938][ T5284] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 489.567259][ T5284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.592182][ T5284] usb 5-1: Product: syz [ 489.596627][ T5284] usb 5-1: Manufacturer: syz [ 489.617031][ T5284] usb 5-1: SerialNumber: syz [ 489.627879][T12151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1610'. [ 489.639177][ T5284] usb 5-1: config 0 descriptor?? [ 489.674158][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1610'. [ 489.674525][ T5284] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input81 [ 489.836497][T12153] loop3: detected capacity change from 0 to 7 [ 489.892435][T12153] Dev loop3: unable to read RDB block 7 [ 489.926730][T12153] loop3: AHDI p1 p2 [ 489.943528][T12153] loop3: partition table partially beyond EOD, truncated [ 489.963826][T12153] loop3: p1 size 7567738 extends beyond EOD, truncated [ 490.022031][T10975] udevd[10975]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 490.179720][T12161] debugfs: Directory '< )2U7䋡;&!i' with parent 'ieee80211' already present! [ 490.356349][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 490.356372][ T29] audit: type=1326 audit(1726722295.481:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12165 comm="syz.3.1616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bf157def9 code=0x0 [ 490.385216][ C0] vkms_vblank_simulate: vblank timer overrun [ 490.543716][T12176] netlink: 'syz.0.1620': attribute type 1 has an invalid length. [ 490.567209][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1620'. [ 490.584435][T12176] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 490.592879][T12176] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 490.737730][ T5305] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 490.786571][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 490.796220][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1623'. [ 490.897802][ T5305] usb 3-1: device descriptor read/64, error -71 [ 491.055011][T12192] tipc: Started in network mode [ 491.060850][T12192] tipc: Node identity 7f000001, cluster identity 4711 [ 491.094374][T12192] tipc: Enabled bearer , priority 10 [ 491.149507][ T5305] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 491.298142][ T5305] usb 3-1: device descriptor read/64, error -71 [ 491.431267][ T5305] usb usb3-port1: attempt power cycle [ 491.797735][ T5305] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 491.838670][ T5305] usb 3-1: device descriptor read/8, error -71 [ 492.025226][ T5284] usb 5-1: USB disconnect, device number 78 [ 492.099990][ T5305] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 492.171891][ T5305] usb 3-1: device descriptor read/8, error -71 [ 492.207761][ T5227] tipc: Node number set to 2130706433 [ 492.298502][ T5305] usb usb3-port1: unable to enumerate USB device [ 492.537495][T12215] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1633'. [ 492.847367][T12226] loop7: detected capacity change from 0 to 16384 [ 493.081692][T12231] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1638'. [ 493.095039][T12231] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1638'. [ 493.657733][ T5305] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 493.820432][ T5305] usb 5-1: Using ep0 maxpacket: 16 [ 493.850700][ T5305] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 493.877982][ T5305] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 493.916252][ T5305] usb 5-1: config 0 interface 0 has no altsetting 0 [ 493.937040][ T5305] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 493.950827][ T5305] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.960143][ T5305] usb 5-1: Product: syz [ 493.964629][ T5305] usb 5-1: Manufacturer: syz [ 493.975632][ T5305] usb 5-1: SerialNumber: syz [ 493.986923][ T5305] usb 5-1: config 0 descriptor?? [ 494.005930][ T5305] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input82 [ 494.347882][ T943] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 494.519571][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.549118][ T943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.572639][ T943] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 494.596388][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.608278][ T943] usb 3-1: config 0 descriptor?? [ 495.041157][ T943] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 495.064958][ T943] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 495.083927][ T943] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0021/input/input83 [ 495.132598][ T943] cm6533_jd 0003:0D8C:0022.0021: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 495.322182][T12262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 495.373233][T12264] vlan2: entered promiscuous mode [ 495.378411][T12264] vlan2: entered allmulticast mode [ 495.385813][T12264] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 495.395936][T12264] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 495.406410][T12264] team0: Port device vlan2 added [ 495.439324][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1646'. [ 495.456136][T12262] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 495.481451][T12262] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 495.532914][T12262] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 496.337753][ T5305] usb 3-1: reset high-speed USB device number 66 using dummy_hcd [ 496.438335][ T5284] usb 5-1: USB disconnect, device number 79 [ 496.653652][T12291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1660'. [ 496.751968][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.956596][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.140549][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.340131][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.352755][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1666'. [ 497.416043][T12302] : entered promiscuous mode [ 497.524870][T12302] openvswitch: netlink: Port -3 exceeds max allowable 65535 [ 497.567324][T12302] libceph: resolve '0.0' (ret=-3): failed [ 497.620636][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.631974][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.647231][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 497.664474][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 497.674732][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 497.682566][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 497.769704][ T52] bridge_slave_1: left allmulticast mode [ 497.779706][ T52] bridge_slave_1: left promiscuous mode [ 497.787864][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.799959][ T52] bridge_slave_0: left allmulticast mode [ 497.805878][ T52] bridge_slave_0: left promiscuous mode [ 497.812202][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.910157][ T5285] usb 3-1: USB disconnect, device number 66 [ 498.607781][ T5305] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 498.798562][ T5305] usb 3-1: Using ep0 maxpacket: 16 [ 498.816685][ T5305] usb 3-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 498.831395][ T5305] usb 3-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 498.864929][ T5305] usb 3-1: config 0 interface 0 has no altsetting 0 [ 498.888991][ T5305] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 498.912334][ T5305] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.933316][ T5305] usb 3-1: Product: syz [ 498.945641][ T5305] usb 3-1: Manufacturer: syz [ 498.957151][ T5305] usb 3-1: SerialNumber: syz [ 498.969831][ T5305] usb 3-1: config 0 descriptor?? [ 498.983933][ T5305] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input84 [ 499.221703][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.235556][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.273673][ T52] bond0 (unregistering): Released all slaves [ 499.758027][ T54] Bluetooth: hci2: command tx timeout [ 500.071580][T12353] team_slave_0: entered promiscuous mode [ 500.077332][T12353] team_slave_1: entered promiscuous mode [ 500.084302][T12353] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 500.102258][T12353] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 500.148253][T12355] loop7: detected capacity change from 0 to 16384 [ 500.485923][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.509668][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.537414][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.553885][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.627553][ T52] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 500.647915][ T52] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 500.664256][ T52] veth1_macvtap: left promiscuous mode [ 500.679299][ T52] veth0_macvtap: left promiscuous mode [ 500.699279][ T52] veth1_vlan: left promiscuous mode [ 500.716239][ T52] veth0_vlan: left promiscuous mode [ 500.933393][ T52] team0 (unregistering): Port device vlan2 removed [ 501.399170][ T5284] usb 3-1: USB disconnect, device number 67 [ 501.597736][ T5238] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 501.686511][ T52] team0 (unregistering): Port device team_slave_1 removed [ 501.749822][ T52] team0 (unregistering): Port device team_slave_0 removed [ 501.750711][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 501.775257][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.781541][ T5238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 501.781582][ T5238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.781642][ T5238] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.793841][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.817076][ T5238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.838572][ T54] Bluetooth: hci2: command tx timeout [ 501.868240][ T5238] usb 5-1: config 0 descriptor?? [ 501.874015][T12376] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 502.392876][ T5238] plantronics 0003:047F:FFFF.0022: unknown main item tag 0xd [ 502.418627][ T5238] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 502.428935][ T5238] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 502.485089][ T5238] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 502.666551][ T5238] usb 5-1: USB disconnect, device number 80 [ 502.699294][ T943] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 502.730109][T12373] netlink: 'syz.1.1682': attribute type 4 has an invalid length. [ 502.745875][T12374] netlink: 'syz.1.1682': attribute type 4 has an invalid length. [ 502.780129][T12312] chnl_net:caif_netlink_parms(): no params data found [ 502.866395][ T29] audit: type=1326 audit(1726722307.991:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 502.885277][T12386] binder: 12385:12386 unknown command 0 [ 502.891812][ T29] audit: type=1326 audit(1726722308.011:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 502.916917][T12386] binder: 12385:12386 ioctl c0306201 20000080 returned -22 [ 502.935411][ T943] usb 3-1: Using ep0 maxpacket: 8 [ 502.945065][ T29] audit: type=1326 audit(1726722308.011:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 502.970822][T12384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1686'. [ 502.980484][ T943] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 502.998939][ T943] usb 3-1: config 0 has no interface number 0 [ 503.005212][ T943] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.030060][ T29] audit: type=1326 audit(1726722308.011:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 503.076752][ T29] audit: type=1326 audit(1726722308.011:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 503.098664][ T943] usb 3-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.137766][ T29] audit: type=1326 audit(1726722308.011:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 503.196856][ T943] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 503.240183][ T29] audit: type=1326 audit(1726722308.011:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 503.268130][ T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.277041][ T29] audit: type=1326 audit(1726722308.011:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 503.304967][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1688'. [ 503.364013][T12392] hsr0: entered promiscuous mode [ 503.369527][ T29] audit: type=1326 audit(1726722308.011:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 503.370954][ T943] usb 3-1: config 0 descriptor?? [ 503.426024][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.443624][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.447830][ T29] audit: type=1326 audit(1726722308.011:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12385 comm="syz.1.1687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc7217def9 code=0x7ffc0000 [ 503.467942][T12312] bridge_slave_0: entered allmulticast mode [ 503.522757][T12312] bridge_slave_0: entered promiscuous mode [ 503.554748][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.598764][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.606183][T12312] bridge_slave_1: entered allmulticast mode [ 503.645679][T12312] bridge_slave_1: entered promiscuous mode [ 503.782581][T12404] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1685'. [ 503.802192][T12404] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1685'. [ 503.878846][ T943] usbhid 3-1:0.17: can't add hid device: -71 [ 503.911328][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.913115][ T943] usbhid 3-1:0.17: probe with driver usbhid failed with error -71 [ 503.920963][ T54] Bluetooth: hci2: command tx timeout [ 503.988901][ T943] usb 3-1: USB disconnect, device number 68 [ 504.040516][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.138955][T12312] team0: Port device team_slave_0 added [ 504.159863][T12312] team0: Port device team_slave_1 added [ 504.239558][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.267147][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.304929][ T5227] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 504.331664][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.354516][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.367800][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.437735][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.497699][ T5227] usb 5-1: Using ep0 maxpacket: 16 [ 504.515225][ T5227] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 504.547269][ T5227] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 504.587518][ T5227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 504.610597][ T5227] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 504.630256][T12429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1697'. [ 504.632516][T12312] hsr_slave_0: entered promiscuous mode [ 504.647655][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.674750][ T5227] usb 5-1: Product: syz [ 504.681152][T12312] hsr_slave_1: entered promiscuous mode [ 504.683188][ T5227] usb 5-1: Manufacturer: syz [ 504.698127][ T5227] usb 5-1: SerialNumber: syz [ 504.705061][T12312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 504.716553][T12312] Cannot create hsr debugfs directory [ 504.725338][ T5227] usb 5-1: config 0 descriptor?? [ 504.762533][ T5227] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input86 [ 505.877169][T12386] coredump: 295(syz.1.1687): interrupted: fatal signal pending [ 505.896174][T12386] coredump: 295(syz.1.1687): written to core: VMAs: 36, size 97419264; core: 54717178 bytes, pos 92119040 [ 505.958226][T12312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 505.982838][T12312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 505.997996][ T54] Bluetooth: hci2: command tx timeout [ 506.004514][T12312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.033051][T12312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.047933][ T5238] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 506.143623][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.184274][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.221406][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.228725][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.238408][ T5238] usb 3-1: Using ep0 maxpacket: 16 [ 506.249777][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.256986][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.266634][ T5238] usb 3-1: config 0 has no interfaces? [ 506.284765][ T5238] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 506.294573][ T5238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.320176][ T5238] usb 3-1: Product: syz [ 506.324425][ T5238] usb 3-1: Manufacturer: syz [ 506.339821][ T5238] usb 3-1: SerialNumber: syz [ 506.359645][ T5238] usb 3-1: config 0 descriptor?? [ 506.433502][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.507325][T12312] veth0_vlan: entered promiscuous mode [ 506.534824][T12312] veth1_vlan: entered promiscuous mode [ 506.605412][T12312] veth0_macvtap: entered promiscuous mode [ 506.638894][T12312] veth1_macvtap: entered promiscuous mode [ 506.679950][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.705764][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.754842][ T943] usb 3-1: USB disconnect, device number 69 [ 506.765768][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.791666][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.820095][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.842236][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.865914][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.889748][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.906090][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.950419][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.982858][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.002684][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.014241][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.056022][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.081204][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.092141][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.107530][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.125908][T12312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.146792][T12312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.160862][ T5227] usb 5-1: USB disconnect, device number 81 [ 507.174859][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.186954][T12471] netlink: 'syz.1.1701': attribute type 10 has an invalid length. [ 507.332030][T12471] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 507.362756][T12473] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 507.529553][T12484] sctp: [Deprecated]: syz.2.1703 (pid 12484) Use of int in max_burst socket option deprecated. [ 507.529553][T12484] Use struct sctp_assoc_value instead [ 507.557804][T12312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.592108][T12312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.628579][T12312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.662548][T12312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.176316][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.216660][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.364161][T12508] loop3: detected capacity change from 0 to 7 [ 508.371645][T12508] Dev loop3: unable to read RDB block 7 [ 508.382055][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.398659][T12508] loop3: AHDI p1 p2 [ 508.413695][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.417344][T12508] loop3: partition table partially beyond EOD, truncated [ 508.441975][T12508] loop3: p1 size 7567738 extends beyond EOD, truncated [ 508.522698][T10975] udevd[10975]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 508.547956][ T5238] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 508.740131][ T5238] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=c2.c6 [ 508.762110][ T5238] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.781260][ T5238] usb 3-1: config 0 descriptor?? [ 508.909232][T12517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1662'. [ 509.121397][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.170869][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.436796][ T5238] mxuport 3-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 509.458018][ T5238] mxuport 3-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 509.490274][ T5238] mxuport 3-1:0.0: probe with driver mxuport failed with error -71 [ 509.495399][T12537] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1713'. [ 509.508506][ T5227] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 509.528955][ T5238] usb 3-1: USB disconnect, device number 70 [ 509.669588][ T5227] usb 5-1: Using ep0 maxpacket: 16 [ 509.686708][ T5227] usb 5-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 509.713933][ T5227] usb 5-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 509.744991][ T5227] usb 5-1: config 0 interface 0 has no altsetting 0 [ 509.755012][ T5227] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 509.774313][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.786351][T12547] netlink: 'syz.1.1715': attribute type 4 has an invalid length. [ 509.794336][ T5227] usb 5-1: Product: syz [ 509.798762][ T5227] usb 5-1: Manufacturer: syz [ 509.803649][ T5227] usb 5-1: SerialNumber: syz [ 509.830104][ T5227] usb 5-1: config 0 descriptor?? [ 509.840783][T12549] netlink: 'syz.1.1715': attribute type 4 has an invalid length. [ 509.862867][ T5227] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input88 [ 510.257770][ T5305] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 510.347776][ T5227] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 510.420084][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 510.431540][ T5305] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 510.446576][ T5305] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 510.459857][ T5305] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 510.469048][ T5305] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.484795][ T5305] usb 4-1: config 0 descriptor?? [ 510.490623][T12555] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 510.498021][ T5227] usb 2-1: Using ep0 maxpacket: 8 [ 510.514083][ T5227] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 510.523736][ T5227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.532208][ T5227] usb 2-1: Product: syz [ 510.538914][ T5227] usb 2-1: Manufacturer: syz [ 510.543723][ T5227] usb 2-1: SerialNumber: syz [ 510.554364][ T5227] usb 2-1: config 0 descriptor?? [ 510.774643][T12557] loop3: detected capacity change from 0 to 7 [ 510.785787][T12557] Dev loop3: unable to read RDB block 7 [ 510.794863][T12557] loop3: AHDI p1 p2 [ 510.805136][T12557] loop3: partition table partially beyond EOD, truncated [ 510.823251][T12557] loop3: p1 size 7567738 extends beyond EOD, truncated [ 510.863258][ T5227] usb 2-1: USB disconnect, device number 72 [ 510.890935][T10975] udevd[10975]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 510.993147][ T5305] plantronics 0003:047F:FFFF.0023: unknown main item tag 0xd [ 511.002238][ T5305] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 511.010757][ T5305] plantronics 0003:047F:FFFF.0023: No inputs registered, leaving [ 511.021665][ T5305] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 511.249734][ T5305] usb 4-1: USB disconnect, device number 78 [ 511.283160][T12569] sysfs: cannot create duplicate filename '/class/ieee80211/< )2U7䋡;&!i' [ 511.294391][T12569] CPU: 1 UID: 0 PID: 12569 Comm: syz.0.1719 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 511.304951][T12569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 511.315034][T12569] Call Trace: [ 511.318346][T12569] [ 511.321304][T12569] dump_stack_lvl+0x241/0x360 [ 511.326006][T12569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.331232][T12569] ? __pfx__printk+0x10/0x10 [ 511.335847][T12569] ? sysfs_warn_dup+0x51/0xa0 [ 511.340627][T12569] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 511.346302][T12569] sysfs_warn_dup+0x8e/0xa0 [ 511.350836][T12569] sysfs_do_create_link_sd+0xbe/0x110 [ 511.356267][T12569] device_add_class_symlinks+0x1c5/0x250 [ 511.361962][T12569] device_add+0x553/0xbf0 [ 511.366329][T12569] wiphy_register+0x1d3f/0x2b30 [ 511.371216][T12569] ? __pfx_wiphy_register+0x10/0x10 [ 511.376463][T12569] ? minstrel_ht_alloc+0x72b/0x860 [ 511.381615][T12569] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 511.387722][T12569] ieee80211_register_hw+0x30fb/0x3e10 [ 511.393228][T12569] ? ieee80211_register_hw+0x1531/0x3e10 [ 511.398897][T12569] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 511.404764][T12569] ? __asan_memset+0x23/0x50 [ 511.409418][T12569] ? __hrtimer_init+0x170/0x250 [ 511.414308][T12569] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 511.420077][T12569] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 511.426162][T12569] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 511.432859][T12569] ? kstrndup+0x5c/0xb0 [ 511.437055][T12569] ? __asan_memcpy+0x40/0x70 [ 511.441672][T12569] hwsim_new_radio_nl+0xece/0x2290 [ 511.446829][T12569] ? __pfx___nla_validate_parse+0x10/0x10 [ 511.452585][T12569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 511.458220][T12569] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 511.464614][T12569] genl_rcv_msg+0xb14/0xec0 [ 511.469147][T12569] ? mark_lock+0x9a/0x360 [ 511.473511][T12569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.478565][T12569] ? __pfx_lock_acquire+0x10/0x10 [ 511.483610][T12569] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 511.489173][T12569] ? __pfx___might_resched+0x10/0x10 [ 511.494501][T12569] netlink_rcv_skb+0x1e3/0x430 [ 511.499301][T12569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 511.504374][T12569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 511.509724][T12569] ? __netlink_deliver_tap+0x77e/0x7c0 [ 511.515234][T12569] genl_rcv+0x28/0x40 [ 511.519230][T12569] netlink_unicast+0x7f6/0x990 [ 511.524026][T12569] ? __pfx_netlink_unicast+0x10/0x10 [ 511.529324][T12569] ? __virt_addr_valid+0x183/0x530 [ 511.534448][T12569] ? __check_object_size+0x49c/0x900 [ 511.539747][T12569] netlink_sendmsg+0x8e4/0xcb0 [ 511.544536][T12569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.549859][T12569] ? aa_sock_msg_perm+0x91/0x160 [ 511.554879][T12569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 511.560218][T12569] __sock_sendmsg+0x221/0x270 [ 511.565063][T12569] ____sys_sendmsg+0x52a/0x7e0 [ 511.569858][T12569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 511.575197][T12569] __sys_sendmsg+0x2aa/0x390 [ 511.579798][T12569] ? __pfx___sys_sendmsg+0x10/0x10 [ 511.584959][T12569] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 511.591316][T12569] ? do_syscall_64+0x100/0x230 [ 511.596103][T12569] ? do_syscall_64+0xb6/0x230 [ 511.600817][T12569] do_syscall_64+0xf3/0x230 [ 511.605367][T12569] ? clear_bhb_loop+0x35/0x90 [ 511.610094][T12569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.616032][T12569] RIP: 0033:0x7f35c877def9 [ 511.620457][T12569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.640103][T12569] RSP: 002b:00007f35c9649038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 511.648550][T12569] RAX: ffffffffffffffda RBX: 00007f35c8935f80 RCX: 00007f35c877def9 [ 511.656565][T12569] RDX: 0000000000000040 RSI: 0000000020000080 RDI: 0000000000000003 [ 511.664570][T12569] RBP: 00007f35c87f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 511.672554][T12569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.680546][T12569] R13: 0000000000000000 R14: 00007f35c8935f80 R15: 00007f35c8a5fa28 [ 511.688560][T12569] [ 511.785616][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 511.803792][T12571] hsr0: entered promiscuous mode [ 512.315077][ T5285] usb 5-1: USB disconnect, device number 82 [ 513.055669][T12598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1731'. [ 513.350699][T12609] sctp: [Deprecated]: syz.2.1734 (pid 12609) Use of int in max_burst socket option deprecated. [ 513.350699][T12609] Use struct sctp_assoc_value instead [ 514.127892][ T5305] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 514.231905][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 514.259799][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'. [ 514.298371][ T5305] usb 2-1: Using ep0 maxpacket: 16 [ 514.305881][ T5305] usb 2-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0 [ 514.329014][ T5305] usb 2-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 514.344653][ T5305] usb 2-1: config 0 interface 0 has no altsetting 0 [ 514.356656][ T5305] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 514.374369][ T5305] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.384083][ T5305] usb 2-1: Product: syz [ 514.402830][ T5305] usb 2-1: Manufacturer: syz [ 514.409123][ T5305] usb 2-1: SerialNumber: syz [ 514.421420][ T5305] usb 2-1: config 0 descriptor?? [ 514.445247][ T5305] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input89 [ 514.517756][ T5227] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 514.547834][ T5285] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 514.687716][ T5227] usb 5-1: Using ep0 maxpacket: 16 [ 514.701807][ T5227] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 514.715925][ T5227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.725613][ T5285] usb 3-1: Using ep0 maxpacket: 16 [ 514.733326][ T5227] usb 5-1: Product: syz [ 514.749863][ T5285] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 514.765380][ T5227] usb 5-1: Manufacturer: syz [ 514.770833][ T5227] usb 5-1: SerialNumber: syz [ 514.776521][ T5285] usb 3-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 514.789097][ T5227] r8152-cfgselector 5-1: Unknown version 0x0000 [ 514.797439][ T5227] r8152-cfgselector 5-1: config 0 descriptor?? [ 514.814836][ T5285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.834526][ T5285] usb 3-1: config 0 descriptor?? [ 514.853080][ T5285] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 515.105280][ T5227] r8152-cfgselector 5-1: Unknown version 0x0000 [ 515.147862][ T5227] r8152-cfgselector 5-1: bad CDC descriptors [ 515.179964][ T5227] r8152-cfgselector 5-1: USB disconnect, device number 83 [ 515.266677][T12636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1743'. [ 515.287905][T12636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1743'. [ 515.537808][ T5285] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 515.698492][ T943] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 515.706078][ T5285] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 515.729006][ T5285] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 515.773016][ T5285] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 515.799362][ T5285] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.815331][ T5285] usb 4-1: Product: syz [ 515.820321][ T5285] usb 4-1: Manufacturer: syz [ 515.825557][ T5285] usb 4-1: SerialNumber: syz [ 515.839609][ T5285] usb 4-1: config 0 descriptor?? [ 515.877845][ T943] usb 5-1: Using ep0 maxpacket: 32 [ 515.890323][ T943] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.914160][ T943] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 515.957402][ T943] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 515.986864][ T943] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 516.016568][ T943] usb 5-1: Product: syz [ 516.021446][ T943] usb 5-1: Manufacturer: syz [ 516.035862][ T943] hub 5-1:4.0: USB hub found [ 516.247976][ T943] hub 5-1:4.0: 2 ports detected [ 516.533014][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.558212][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.900002][ T5238] usb 2-1: USB disconnect, device number 73 [ 517.238439][ T5284] usb 3-1: USB disconnect, device number 71 [ 517.284647][T12650] ------------[ cut here ]------------ [ 517.290332][T12650] WARNING: CPU: 1 PID: 12650 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0 [ 517.301594][T12650] Modules linked in: [ 517.305547][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.1.1748 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 517.316994][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 517.327299][T12650] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 517.333433][T12650] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 cc 4c 3e f6 e9 95 f3 ff ff e8 d2 c9 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 517.353685][T12650] RSP: 0018:ffffc90003997c40 EFLAGS: 00010287 [ 517.360165][T12650] RAX: ffffffff8bbd152e RBX: ffffc90003997e0c RCX: 0000000000040000 [ 517.368712][T12650] RDX: ffffc900092db000 RSI: 0000000000000b1c RDI: 0000000000000b1d SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 517.377728][T12650] RBP: ffffc90003997d40 R08: ffffffff8bbd121b R09: 1ffffffff2037f35 [ 517.386530][T12650] R10: dffffc0000000000 R11: fffffbfff2037f36 R12: ffff888056c92000 [ 517.394781][T12650] R13: 0000000000000101 R14: 1ffff92000732f94 R15: ffffc90003997cc0 [ 517.405289][T12650] FS: 00007fcc7302a6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 517.414485][T12650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 517.421209][T12650] CR2: 00007f846af0a338 CR3: 000000002c102000 CR4: 00000000003526f0 [ 517.429387][T12650] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 517.437717][T12650] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 517.445758][T12650] Call Trace: [ 517.449216][T12650] [ 517.452236][T12650] ? __warn+0x168/0x4e0 [ 517.456433][T12650] ? io_sq_offload_create+0xd2f/0xfd0 [ 517.462037][T12650] ? report_bug+0x2b3/0x500 [ 517.466570][T12650] ? io_sq_offload_create+0xd2f/0xfd0 [ 517.472138][T12650] ? handle_bug+0x60/0x90 [ 517.476543][T12650] ? exc_invalid_op+0x1a/0x50 [ 517.477813][ T943] hub 5-1:4.0: activate --> -90 [ 517.481360][T12650] ? asm_exc_invalid_op+0x1a/0x20 [ 517.491746][T12650] ? io_sq_offload_create+0xa1b/0xfd0 [ 517.497245][T12650] ? io_sq_offload_create+0xd2e/0xfd0 [ 517.505237][T12650] ? io_sq_offload_create+0xd2f/0xfd0 [ 517.510950][T12650] ? __pfx_io_sq_offload_create+0x10/0x10 [ 517.516772][T12650] ? io_allocate_scq_urings+0x426/0x640 [ 517.522712][T12650] io_uring_create+0x792/0x1360 [ 517.527794][T12650] __se_sys_io_uring_setup+0x2ba/0x330 [ 517.533347][T12650] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 517.539476][T12650] ? do_syscall_64+0x100/0x230 [ 517.544309][T12650] ? do_syscall_64+0xb6/0x230 [ 517.549183][T12650] do_syscall_64+0xf3/0x230 [ 517.553747][T12650] ? clear_bhb_loop+0x35/0x90 [ 517.558638][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.565377][T12650] RIP: 0033:0x7fcc7217def9 [ 517.570008][T12650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.589774][T12650] RSP: 002b:00007fcc73029fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 517.598323][T12650] RAX: ffffffffffffffda RBX: 00007fcc72335f80 RCX: 00007fcc7217def9 [ 517.607148][T12650] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000002972 [ 517.616217][T12650] RBP: 00000000200001c0 R08: 0000000000000000 R09: 0000000000000000 [ 517.624402][T12650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.632496][T12650] R13: 0000000020000100 R14: 0000000000002972 R15: 0000000000000000 [ 517.640567][T12650] [ 517.643762][T12650] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 517.651124][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.1.1748 Not tainted 6.11.0-syzkaller-05319-g4a39ac5b7d62 #0 [ 517.661863][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 517.672077][T12650] Call Trace: [ 517.675416][T12650] [ 517.678385][T12650] dump_stack_lvl+0x241/0x360 [ 517.683244][T12650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.688580][T12650] ? __pfx__printk+0x10/0x10 [ 517.693234][T12650] ? vscnprintf+0x5d/0x90 [ 517.697652][T12650] panic+0x349/0x870 [ 517.701704][T12650] ? __warn+0x177/0x4e0 [ 517.706000][T12650] ? __pfx_panic+0x10/0x10 [ 517.710571][T12650] __warn+0x34b/0x4e0 [ 517.714638][T12650] ? io_sq_offload_create+0xd2f/0xfd0 [ 517.720062][T12650] report_bug+0x2b3/0x500 [ 517.724445][T12650] ? io_sq_offload_create+0xd2f/0xfd0 [ 517.729857][T12650] handle_bug+0x60/0x90 [ 517.734067][T12650] exc_invalid_op+0x1a/0x50 [ 517.738761][T12650] asm_exc_invalid_op+0x1a/0x20 [ 517.743662][T12650] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 517.749692][T12650] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 cc 4c 3e f6 e9 95 f3 ff ff e8 d2 c9 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 517.769344][T12650] RSP: 0018:ffffc90003997c40 EFLAGS: 00010287 [ 517.775438][T12650] RAX: ffffffff8bbd152e RBX: ffffc90003997e0c RCX: 0000000000040000 [ 517.783430][T12650] RDX: ffffc900092db000 RSI: 0000000000000b1c RDI: 0000000000000b1d [ 517.791422][T12650] RBP: ffffc90003997d40 R08: ffffffff8bbd121b R09: 1ffffffff2037f35 [ 517.799523][T12650] R10: dffffc0000000000 R11: fffffbfff2037f36 R12: ffff888056c92000 [ 517.807547][T12650] R13: 0000000000000101 R14: 1ffff92000732f94 R15: ffffc90003997cc0 [ 517.815622][T12650] ? io_sq_offload_create+0xa1b/0xfd0 [ 517.821046][T12650] ? io_sq_offload_create+0xd2e/0xfd0 [ 517.826487][T12650] ? __pfx_io_sq_offload_create+0x10/0x10 [ 517.832248][T12650] ? io_allocate_scq_urings+0x426/0x640 [ 517.837830][T12650] io_uring_create+0x792/0x1360 [ 517.842752][T12650] __se_sys_io_uring_setup+0x2ba/0x330 [ 517.848354][T12650] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 517.854410][T12650] ? do_syscall_64+0x100/0x230 [ 517.859236][T12650] ? do_syscall_64+0xb6/0x230 [ 517.863961][T12650] do_syscall_64+0xf3/0x230 [ 517.868517][T12650] ? clear_bhb_loop+0x35/0x90 [ 517.873368][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.879321][T12650] RIP: 0033:0x7fcc7217def9 [ 517.883870][T12650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.903737][T12650] RSP: 002b:00007fcc73029fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 517.912304][T12650] RAX: ffffffffffffffda RBX: 00007fcc72335f80 RCX: 00007fcc7217def9 [ 517.920415][T12650] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000002972 [ 517.928445][T12650] RBP: 00000000200001c0 R08: 0000000000000000 R09: 0000000000000000 [ 517.936497][T12650] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.944532][T12650] R13: 0000000020000100 R14: 0000000000002972 R15: 0000000000000000 [ 517.952812][T12650] [ 517.956446][T12650] Kernel Offset: disabled [ 517.960929][T12650] Rebooting in 86400 seconds..