last executing test programs: 4m0.88416961s ago: executing program 4 (id=6392): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000000)) 4m0.818997566s ago: executing program 4 (id=6393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="85ffffff000000200000000000000000b7080000000000007baaf8ff00000000b5080000000000197b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xc, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4m0.515849397s ago: executing program 4 (id=6396): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0xfc}, 0x0) 3m58.344291759s ago: executing program 4 (id=6403): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000080000", @ANYRES32=0x0], 0x48) 3m58.119018141s ago: executing program 4 (id=6405): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x4100, 0x0) 3m57.8587464s ago: executing program 4 (id=6407): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'ipvlan1\x00', {0x2, 0xfffd, @initdev={0xac, 0x1e, 0x1, 0x0}}}) syz_io_uring_setup(0x103, &(0x7f0000000280)={0x0, 0xf18c}, &(0x7f0000000340), &(0x7f00000005c0)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000039000701000000000000000003000000040000000c0001"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x3, 0x2c) io_setup(0x4, &(0x7f00000014c0)) syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240c8080, &(0x7f0000000280)={0xa, 0x2e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x800000, 0x0, 0x50323234, 0x7}}) 16.743712382s ago: executing program 0 (id=7181): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x510, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x47c, 0x2, [@TCA_FLOW_EMATCHES={0x470, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1f8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_META={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ec8a277c38cd99", @TCF_META_TYPE_VAR="fe2802bfcc", @TCF_META_TYPE_VAR="b3342c0610"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_META={0x5c, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="82", @TCF_META_TYPE_VAR="98", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e6949b93e70242", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="66c4", @TCF_META_TYPE_VAR="a76023", @TCF_META_TYPE_VAR="08e8", @TCF_META_TYPE_VAR="8dfff919b512"]}, @TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="a2c000a8dfc2b6d930"]}]}}, @TCF_EM_META={0xd4, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="856554c3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b7f550e3aa88a9294d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8e73b72687a8c353"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="37d3b5d1afaa1380c6"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="feb9e2d7a8", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="99", @TCF_META_TYPE_VAR="d7599d7162", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8a50520b797bb6", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xffffffff]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "e8f3e9005c"}}}, @TCF_EM_NBYTE={0x10}, @TCF_EM_IPSET={0x10}]}, @TCA_EMATCH_TREE_LIST={0x13c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x58, 0x0, 0x0, 0x0, {{}, "668e74dff05c58baf0fbb061717b123cb89ce91a683c343344517576e8ba09fecbf8e75b0016b7c6b2a0c8eb04e6d16b8961097b53d295ebc7eb349e652deeb958bff39a5c9ddd43b4"}}, @TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}, @TCF_EM_META={0x34, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e9c12c77b3b239089f", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5a1d2e9e64a7cfa7"]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="0f"]}]}}, @TCF_EM_META={0x28, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='/']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="b1", @TCF_META_TYPE_VAR="0318690dbcb7ea26", @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'F'}}}, @TCF_EM_META={0x7c, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b041fb1d85"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dc70f7945540e91b", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="14", @TCF_META_TYPE_VAR="faa1ad6e"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="b750e3f4a83c2b", @TCF_META_TYPE_VAR="0ea3f381c6", @TCF_META_TYPE_VAR="e6e27fd7db48", @TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00']}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_CONTAINER={0x34, 0x0, 0x0, 0x0, {{}, "ef28b277851cdc076dd2e76fdd52eab56662e904c6a1bc8b54630eafa91be34e9fe50c97e8b2"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_MASK={0x8}]}}]}, 0x510}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 10.547129947s ago: executing program 3 (id=7198): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xb}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x5aa}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="59bb25bd700000000000010000000809000104000000"], 0x1c}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) r8 = dup(r4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r10 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="6ac1a2e7da534603ffd06f4bc169011fca2cb6a43299084ac7dc008c307f25d924690fcc4b6aec003f6526e0fdffcce8400b65e6c2af7e330e1eedc397dad71be88a11386e1a11ab9c1868c20fbcbbc27c73f59072da393f9df0bc076609b2c47373cdddce3d5143a38f965660bf0ed340ab73cf30bb273186b6ff4e4e70d47eb903227e99809c4eafc99acfe62dd17852458203aff8b65b847d013d05f981f4ee5a656333d3f809461f14630e4eb09c924b84a835b305955e06a813cfe1ee7b", 0xc0, 0xffffffffffffffff) r11 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) syz_usb_control_io$hid(r12, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io$printer(r12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_usb_control_io$cdc_ncm(r12, 0x0, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r13 = add_key$user(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x0}, &(0x7f0000001100)="ac5ff57c", 0x4, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000001000)={r13, r10, r10}, &(0x7f0000002280)=""/198, 0xc6, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r8, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) 8.148470723s ago: executing program 3 (id=7202): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}, 0x43a}], 0x1, 0x40018000, &(0x7f0000004140)={0x0, 0x989680}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01000000fffbff1fcaa0923259e3"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) 7.370690878s ago: executing program 3 (id=7203): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4044840}, 0x0) syz_usb_connect(0x0, 0x3e, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000020dafb2099041010f5050102030109022c00010000000009040000016f2bae000824020100000000092402020000000000090585da20"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f0000001140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000000c0)={{0x7, 0x0, 0x80000001, 0x1000}, 0x6, 0x30, 0x1, r5, 0x3, 0x2, 'syz1\x00', &(0x7f0000000000)=['-\x00', '/dev/snd/controlC#\x00', 'cpuset.effective_mems\x00'], 0x2b}) sync() socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000015c0)="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", 0x2000, &(0x7f0000003f00)={&(0x7f00000035c0)={0x50, 0x0, 0x7, {0x7, 0x28, 0x4, 0x2012, 0x8, 0x1, 0x6, 0x2}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003780)={0x28, 0xffffffffffffffda, 0xffffffffffffffff, {{0x80, 0x0, 0x1}}}, &(0x7f00000037c0)={0x60, 0x0, 0x9, {{0xe972, 0x100000000, 0x1, 0x76, 0x2, 0x3ff, 0x4d, 0x839}}}, 0x0, 0x0, &(0x7f00000038c0)={0x20, 0x0, 0x6}, &(0x7f0000003900)={0x78, 0x0, 0x8000000000000000, {0x3, 0x1, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6, 0x7, 0x10, 0xffffffff, 0x4000, 0x0, 0x0, 0x0, 0x3ff, 0x9}}}, &(0x7f0000003ac0)={0x90, 0xfffffffffffffffe, 0x0, {0x4, 0x0, 0x4801, 0x5, 0x0, 0xe0e, {0x3, 0x0, 0x0, 0xa, 0x3, 0x1, 0x0, 0xd9, 0xfa2, 0xe000, 0x8, 0x0, 0x0, 0x8, 0x5}}}, &(0x7f0000000400)=ANY=[@ANYBLOB="9000000000000000000000000000000005000000000000000400000000000000020000000900000079000000000000000100000000000000000000000000000001000000000000002d000000000000000600000000000000960d0000000000000100000000000100000000000000000002000000000000000000000000000000010000000000000000000000000000003520a1e07ca19494"], &(0x7f0000003d40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0080000000000000000000000500000000000000080000000000000003000000050000005c2623000000"], 0x0, &(0x7f0000003ec0)={0x20, 0x0, 0x6, {0x3}}}) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r4, @ANYRES8=r3], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) r8 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, r6}, 0x0, &(0x7f0000000200)=0x0) r10 = userfaultfd(0x801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x43c280f551f4b54}) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000380)={'\v\x00', 0x0, 0x5, 0x1, 0x0, 0x0, "f759e10000001000000000fc6300", '\x00\x00\a\x00', "0300", "e859ad13", ["8bada940edff000a00", "c2fed6bf0400000000000040", "200000001a00", "0000000000000000000100"]}) syz_io_uring_submit(0x0, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r8, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc10c5541, &(0x7f0000000080)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 4.594550148s ago: executing program 0 (id=7182): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) 4.455598893s ago: executing program 0 (id=7211): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}, 0x43a}], 0x1, 0x40018000, &(0x7f0000004140)={0x0, 0x989680}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01000000fffbff1fcaa0923259e3"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) 4.151458842s ago: executing program 3 (id=7215): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000040)={&(0x7f0000002200)=[0x0], 0x0, 0x0, 0x0, 0x8eff, 0x0, 0x1, 0x0, r1}) 3.89975955s ago: executing program 3 (id=7216): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYRES16], 0x0) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, 'WNib'}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0xb}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000200), 0x10000000006bca, 0xa00) readv(r2, &(0x7f0000000040)=[{0x0, 0x108}, {&(0x7f0000000140)=""/121, 0x79}], 0x2) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000000)=0x3) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000700000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xa4}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f0000004000)=""/102399, 0x18fff}], 0x1, 0xfffffffd, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs$userns(r6, &(0x7f0000000240)) connect$vsock_stream(r5, &(0x7f0000000340), 0x10) write$sndseq(r5, &(0x7f00000000c0)=[{0x8, 0x2, 0x5, 0x3, @time={0x799, 0x2}, {0x9, 0x9}, {0x7, 0x74}, @note={0x9, 0x4, 0x1, 0x7, 0x1}}, {0xff, 0x5, 0x2, 0x8, @tick=0x6, {0xb, 0x7}, {0xed, 0x3}, @raw32={[0x6, 0x0, 0x1]}}, {0x7, 0x5, 0x9, 0x65, @tick=0x3ff, {0x7, 0x85}, {0x9}, @ext={0x7e, &(0x7f0000000400)="d28a7fb2a32cba45a6f618d5580a9262b24c4ca7e071005b52a9711aa34e64e919b0609ef9db1ef29ded232351e8c7a23b640b03a82eba7aa02c1ad58f9b18aac42c7e650bbe641240633b56c8d89fcaaa8a5b203e598cb4ed86f3fc41e0418caf400bb8fcd4c1af497836b7edc489a8c52255c4674f2363ce5c6f11f447"}}, {0xf, 0x6d, 0x4, 0x6, @time={0x8, 0x2}, {0x2, 0x8}, {0x6b, 0x7}, @quote={{0x7f, 0xab}, 0x6, &(0x7f0000000080)={0x6, 0x0, 0xa, 0x89, @tick, {0x71, 0xf}, {0x6, 0x3}, @quote={{0x0, 0x4}, 0x80, &(0x7f0000000040)={0x0, 0xb, 0x3, 0x5, @tick=0x4, {0xfe, 0x1}, {0xc, 0x82}, @time=@tick=0x1}}}}}], 0x70) openat$cgroup_ro(r5, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000003c0)={r5}, 0x8) 3.378217914s ago: executing program 0 (id=7220): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x4b0, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x41c, 0x2, [@TCA_FLOW_EMATCHES={0x410, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1f4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_IPSET={0x10}, @TCF_EM_CMP={0x18}, @TCF_EM_META={0x50, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ec8a277c38cd99", @TCF_META_TYPE_VAR="fe2802bfcc", @TCF_META_TYPE_VAR="b3342c0610"]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}]}}, @TCF_EM_CANID={0x14}, @TCF_EM_IPSET={0x10}, @TCF_EM_META={0x58, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="82", @TCF_META_TYPE_VAR="98", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e6949b93e70242", @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x19, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="66c4", @TCF_META_TYPE_VAR="a76023", @TCF_META_TYPE_VAR="08e8", @TCF_META_TYPE_VAR="8dfff919b512"]}, @TCA_EM_META_LVALUE={0x9, 0x2, [@TCF_META_TYPE_VAR="a2c000a8df"]}]}}, @TCF_EM_META={0xd4, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x2d, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="856554c3", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b7f550e3aa88a9294d", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8e73b72687a8c353"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0xd, 0x3, [@TCF_META_TYPE_VAR="37d3b5d1afaa1380c6"]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="feb9e2d7a8", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT]}, @TCA_EM_META_LVALUE={0x25, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="99", @TCF_META_TYPE_VAR="d7599d7162", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="8a50520b797bb6", @TCF_META_TYPE_INT]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0xffffffff]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}]}}]}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14}, @TCF_EM_NBYTE={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x5, 0x0, "e8f3e9005c"}}}, @TCF_EM_NBYTE={0x10}, @TCF_EM_IPSET={0x10}]}, @TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18}, @TCF_EM_CANID={0x14}, @TCF_EM_META={0x30, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="e9c12c77b3b239089f", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5a1d2e9e64a7cfa7"]}, @TCA_EM_META_LVALUE={0x4, 0x2, [@TCF_META_TYPE_VAR]}]}}, @TCF_EM_META={0x28, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x5, 0x3, [@TCF_META_TYPE_VAR='/']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="b1", @TCF_META_TYPE_VAR="0318690dbcb7ea26", @TCF_META_TYPE_INT]}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_IPT={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_CMP={0x18}, @TCF_EM_U32={0x1c}]}, @TCA_EMATCH_TREE_LIST={0xd8, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x0, 0x0, 0x0, {{}, {0x0, 0x1, 0x0, 'F'}}}, @TCF_EM_META={0x7c, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="b041fb1d85"]}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x1d, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="dc70f7945540e91b", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="14", @TCF_META_TYPE_VAR="faa1ad6e"]}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_VAR="b750e3f4a83c2b", @TCF_META_TYPE_VAR="0ea3f381c6", @TCF_META_TYPE_VAR="e6e27fd7db48", @TCF_META_TYPE_VAR='\x00\x00\x00\x00\x00\x00\x00']}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_IPSET={0x10}, @TCF_EM_CONTAINER={0x34, 0x0, 0x0, 0x0, {{}, "ef28b277851cdc076dd2e76fdd52eab56662e904c6a1bc8b54630eafa91be34e9fe50c97e8"}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_MASK={0x8}]}}]}, 0x4b0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3.151477355s ago: executing program 0 (id=7222): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x86, 0x25, 0x56, 0x8, 0x5c6, 0x9212, 0x4783, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x3, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xac, 0x0, 0x2, 0xfc, 0x5, 0x41, 0x0, [], [{{0x9, 0x5, 0x0, 0x10}}, {}]}}, {{0x9, 0x4, 0xc3, 0x0, 0x0, 0x46, 0x24, 0xd0}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0xff, 0xff, 0x0, [], [{}]}}]}}]}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8100}, [@IFLA_MASTER={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_0\x00'}]}, 0x3c}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0xa9, 0x9}) 3.036332483s ago: executing program 2 (id=7223): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x20, 0x0) preadv2(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/176, 0xb0}, {&(0x7f0000000180)=""/228, 0xe4}, {&(0x7f0000000280)=""/199, 0xc7}, {&(0x7f0000000380)=""/164, 0xa4}, {&(0x7f0000000440)=""/227, 0xe3}], 0x7, 0x7, 0x8, 0x9) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x40c980, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000008c0)={0x0, 0x3, 0x0, &(0x7f0000000600)=[{}, {0x80000000}, {}], 0x1, 0x0, &(0x7f0000000740)=[{}], 0x4, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000840)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000940)={r2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000c40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x148, 0x0, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'pptp\x00'}, @CTA_EXPECT_HELP_NAME={0xf, 0x6, 'tftp-20000\x00'}, @CTA_EXPECT_NAT={0xac, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @private=0xa010102}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @multicast1}}}]}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000d00)={'broute\x00', 0x0, 0x0, 0x0, [0x9, 0x9, 0x1, 0x2, 0x8001, 0x46c], 0x2, &(0x7f0000000c80)=[{}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}]}, 0x98) r4 = accept4$inet(r1, &(0x7f0000000dc0)={0x2, 0x0, @initdev}, &(0x7f0000000e00)=0x10, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x4, &(0x7f0000000e40)={@local, @broadcast}, &(0x7f0000000e80)=0xc) r5 = io_uring_setup(0x7fb6, &(0x7f0000000ec0)={0x0, 0xc4e9, 0x20, 0x3, 0x7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x30, r5, 0x0) r6 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000f40)={{0x12, 0x1, 0x210, 0x0, 0x0, 0x0, 0xff, 0x46d, 0xc517, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x60, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x8, {0x9, 0x21, 0x10, 0x0, 0x1, {0x22, 0xc6d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x62, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x0, 0x3, 0x8}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x310, 0x1, 0x6f, 0xe1, 0x50, 0xa8}, 0xf, &(0x7f0000000fc0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x7, 0x6, 0x8d}]}, 0x7, [{0xe2, &(0x7f0000001000)=@string={0xe2, 0x3, "eba6d1353e36de7ca9c3d795d0cb46937261f03e2a1b1d4b6c57c42164b2bbd3e19db7ccc99a42070ee277fce7e769d8313d2cd3040ecceffbdb321bd0ccc4f204ea16d89eec6b7ab310fae7af1486ef0228bf33a3e4494d7fff43c79b17036af61ef43a03601ee79d2dd0314bc700b0dae2e2d4c393e8eee22656161f2b64a4a70ff7119de1b1b8a2c178eee56e9a4b2ebf0581b3f3e504987d489fec4729247023027390bfd09e5f5920069a2dda62cdbe0f6d59e75ba694ff69d8632f6b8d4296239a98fa0a06d7def4c0afffa534a5f4dc381d0b1279f326eca8057192a4"}}, {0x1d, &(0x7f0000001100)=@string={0x1d, 0x3, "dca111726417614dc079f9c2a58e0823d23ff0765a240b6cc200ac"}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x42c}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x402}}, {0x21, &(0x7f00000011c0)=@string={0x21, 0x3, "5b623a49957ff45f6e1e90cc14d623593e9c28bab498cb82a0d20f7fc85f72"}}, {0x46, &(0x7f0000001200)=@string={0x46, 0x3, "edd3c5161ac2aa80245805c21bc501f08e611997f2f58ef79af2bd4267dbc8c2145fd14187deff5057a1fd88b5aecc64328c2e7e8252ec929120d1fbb36f51a86fa8ce99"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x1c09}}]}) syz_usb_control_io$hid(r6, &(0x7f0000001480)={0x24, &(0x7f0000001340)={0x0, 0x9, 0x62, {0x62, 0xb, "7d566a922b04a585b974cbc6c9da254527426df7dde512a3a05f3d9c395e7788528e5d98f562d1998799c64e53f059f942d979f53dc096430a0ec0fdeee7166757fc40c03c0b62ca6ac2a35ffeef610e5b959c654e70664207c541c912dd4244"}}, &(0x7f00000013c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}, &(0x7f0000001400)={0x0, 0x22, 0x26, {[@main, @local=@item_4={0x3, 0x2, 0x2, "de441fc0"}, @global=@item_4={0x3, 0x1, 0x7, "7b063397"}, @local=@item_4={0x3, 0x2, 0x2, "548b2645"}, @local=@item_012={0x0, 0x2, 0x2}, @global, @main=@item_4={0x3, 0x0, 0xa, "12b9386c"}, @local=@item_4={0x3, 0x2, 0x8, "c609b368"}, @main=@item_4={0x3, 0x0, 0xa, "36ce53fb"}, @local=@item_4={0x3, 0x2, 0x8, "59e95642"}]}}, &(0x7f0000001440)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x17, 0x1, {0x22, 0xf48}}}}, &(0x7f0000001680)={0x2c, &(0x7f00000014c0)={0x20, 0xd, 0x77, "ef981f412be9937b4188e8d11da325eb55994064ceef890dc929718fecf621acadbaa4ca33ba2e997ae97076fbc6c6941c608849a03135c51d8c2ac85c1b94d7b66e6fb2680ce5f9b34808b5e281b4f94838040ed11f04701501419a35e2970f538931e9b1ed1451d30389180f891c7fa9b3d88ad340db"}, &(0x7f0000001540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001580)={0x0, 0x8, 0x1, 0xe2}, &(0x7f00000015c0)={0x20, 0x1, 0x5d, "b734080a5a9ba0597aac683dc56075b1c75cf3fec540332cb715a4796bbdbd67463076704793d88c56cb4b444969e1242a6c89145c78bce61f3b365e3fbe403e059bf17c996502379c1e005348e7d9f47f96f627bdea51900cf024fcf3"}, &(0x7f0000001640)={0x20, 0x3, 0x1, 0x3}}) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f00000016c0)={@broadcast, @remote, @multicast2}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001700)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000001780)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xffffff16, @remote, 0x42}, {0xa, 0x4e20, 0x8, @private0, 0x7fff}, r7, 0xfffffff2}}, 0x48) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001800), &(0x7f0000001840)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000001880)={0x5, 0xd, 0x1, 'queue1\x00', 0x4}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x3b, 0xc, "43e0096b34ef8490dda3246f89344ab2e330d490e4459d777e040d52069de2a8ee269a6942634ced59f5b9a11416b2808b7a66f0ff6e59"}]}, @NFT_MSG_NEWSET={0x1268, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_EXPR={0x117c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x116c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xbe, 0x3, "2676a330b96fec774ffecad0604092605020fce18bf93a2aa6e3f8edff83e7508147b3e7dd45f7216a28f85146c157c186f20b5edad03e06d17cd4f321d3ba61b90e7309e75b2f99c7a2f5547df98752a9de8615d95ce8d40676158f8c1a571389b7626b8e7b98d667bfb5ef4a47bcf301a5f2bb47da76fa10059e0f2aef2b6b9c3c6f12e19aa4da7e7f0c6cdbaacccba8820500f906e88e68ffccaf3f2f8df3d3c8cd9587355026280d84b3951e5a9879d1339d49437234fd9d"}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}, @NFTA_TARGET_INFO={0x38, 0x3, "205f1e58697f6186cde147f870131b3f52bd8b57ead1eee53045a9c4e617edff1b64df3a88c12a8ecda82fa9701369b7d7014467"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0xd, 0x1, 'REDIRECT\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0x26, 0x3, "c2119c7a56c2e8d10a3fdb7cb72b3a6f5c6278dd1ba9e1977e12b4565f894312e9ef"}, @NFTA_TARGET_NAME={0xd, 0x1, 'CHECKSUM\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_DESC={0x50, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_EXPRESSIONS={0x58, 0x12, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x39}]}, @NFT_MSG_DELTABLE={0x178, 0x2, 0xa, 0x181, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x62, 0x6, "e75341d5cc37933461ae62d78b6309ef58c6bfc4c80a998e904412f4a16f01e06c0a389e479c03656a5ec708b8f8a01749bd74a6f070f99893b4ca38b4c2928f4baaa2e8ef0ef203d7bc51c4f01e03e3db7e8c1e2d6a1ae80e7a03bdeb18"}, @NFTA_TABLE_USERDATA={0xea, 0x6, "2907b7894e6a920f66eff93ce23967becc6be26c387ee0f3080a3c5fe944ec7418c4148b00dca1cc65561e9ed8c3d3b93ed298ff01cf3c547bcaaf14b2cdc1e8b99dfde8dc5f777c584c254f72fd6942697fb918e9018f7669674b1345c010f14e870dce36e73e087e54480c1c2bbbbc905625c4d69db6d604661c8179a8204df824d1e8a561dc46c2e8b9388d1812d48f16f86d3a36a0e269c990031926e671da0df9ddf38ec9041893b5d1d69a674c5b9e2398c445b9d63acf047c80d9bc95bb44b9b2b20624911cc6c4c93e15787ac4532ea0daba2a80951349f9e13b875b47d083dba69d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x84, 0x18, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x151c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000002f40), 0x44640, 0x0) read$rfkill(r8, &(0x7f0000002f80), 0x8) ioctl$KDDELIO(r4, 0x4b35, 0x3) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000002fc0)=0xd, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003000), 0x40000, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000003040)={0x4, 0xb9}) get_mempolicy(&(0x7f0000003080), &(0x7f00000030c0), 0xed2b, &(0x7f0000ffc000/0x2000)=nil, 0x2) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000003100)=""/12, &(0x7f0000003140)=0xc) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000003180)=0x9, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 2.363578895s ago: executing program 2 (id=7225): bind$netlink(0xffffffffffffffff, &(0x7f0000000080), 0xc) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) r3 = dup(r2) write$uinput_user_dev(r3, &(0x7f0000000380)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x164], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0xfffffffc]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$uinput_user_dev(r3, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x200000, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8ed4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe160, 0x1], [0x0, 0x0, 0x0, 0x20000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdb8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601780000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500ff0000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x274, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000240)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffe9b, {0x5, 0x0, "012674"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000002a006bcd9e3fe3dc6e48aa31086b876c1d0000007ea6020069000000000000000f00008bc3a0e69ee517d34460bc24cab556a705251e6182949a3651f60a84c9f5d1938037fb86a6d0bdd7fcf52b4509c5bb5a00f6985300", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mremap(&(0x7f0000a4c000/0xf000)=nil, 0xf000, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) 2.36285875s ago: executing program 1 (id=7226): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000600)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r2, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000300)='<', 0x1}], 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000280)=[{0x0, 0x0, {}, {0x0, 0x0, 0x4}}], 0x20) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x800b5eb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000400000008000000080000000000000017631d9bdb2743dcc9ad0a42ae76d7098259276ef9da5c6d49aa4cd1b3b23ff128138c9595a78435d6d03785d11113d5daba6fe441d47235c2ad576318d9e8e8e5b710686093500ae1530caf8f923863ebd8f1daf83e02c9d2a22a5b23b748f727acded2cee3873cdf6ec53b1d30848596d13bd65f6903e97c33bcecce124a5c59df21bd385bd73c560695379c0d1c9bd73f2235815190820601d4f317aa2e3adb4c7887ecd3d975643e3dab71eaa42939d2ba76", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES8=r0, @ANYRES32=r4, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, @void, @value}, 0x94) 1.44431053s ago: executing program 1 (id=7227): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) 1.313140267s ago: executing program 1 (id=7228): sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x61, 0x0, 0x0, 0x5, 0x0, 0xfff}, 0x0) 1.136020767s ago: executing program 1 (id=7229): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, 0x0}, 0x43a}], 0x1, 0x40018000, &(0x7f0000004140)={0x0, 0x989680}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01000000fffbff1fcaa0923259e3"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) 823.201674ms ago: executing program 3 (id=7230): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 737.658002ms ago: executing program 1 (id=7231): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x28, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000060015000200000014001680100008800c00031c70e9f265233b42dcbda72f3bbe1db5800500010001000000260b292b677437ed5a035380f59b63c15f8d9fec6866f845da4dbb5182e9"], 0x38}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000018000100000000000000000002000000000000060015000200000014001680100008800c00031c70e9f265233b42dcbda72f3bbe1db5800500010001000000260b292b677437ed5a035380f59b63c15f8d9fec6866f845da4dbb5182e9"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400500000008000240000000000800044000000000080003400000000008000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400500000008000240000000000800044000000000080003400000000008000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0) memfd_create(0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x800]}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x9) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000006a00010500000000fddbdf25000000000000000008", @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0x28}}, 0x0) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x1, 0xfffffffc}}}}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x7, 0x8, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x4, 0x7, 0x8, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x2c4c, 0x6, 0x8, 0x1000, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc10c5541, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 555.931498ms ago: executing program 2 (id=7232): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) r1 = socket(0xb, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) futex(0x0, 0x7, 0x82, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000ac0)=[{&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000740)=""/66, 0x42}, {&(0x7f0000000d40)=""/152, 0x98}, {&(0x7f0000000900)=""/236, 0xec}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000a00)=""/130, 0x82}, {&(0x7f0000002ec0)=""/4096, 0x1000}], 0x8, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x44, r4, 0x1, 0x0, 0x1, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xc}, {0x0, 0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000000500"}}}]}, 0x48}}, 0x0) 495.914905ms ago: executing program 2 (id=7233): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000040000000300018006000600800a0000100002800c001700070001"], 0x34}}, 0xc000) 383.933481ms ago: executing program 2 (id=7234): r0 = syz_io_uring_setup(0x3ea4, &(0x7f0000000a40), &(0x7f0000000ac0), &(0x7f0000000b00)) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000d00)={0x1, 0xae21253d9a203032, 0x0, &(0x7f0000000c80)=[{0x0}], 0x0}, 0x20) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x46, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8680000000000000000000000000001efe8800000000000000000000000001014e214e200401907844f314a1084a378300"/70], 0x0) 319.792382ms ago: executing program 2 (id=7235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="10b004fb0b88107240f9f36a76ec6dbd7c846cbd93416b2e54c18343fe9dd5320dd63283d661eaa4839f87ac96ee03197327c277d92db0a486b3a4ecabe8d0daaa6f69a5212c16fcb4ff426ee2ca4e839cae053e8ab24c33c4a57520b532a9173a04e4dc2570a8e3c065bf89caf97550ad64452a20faa67df1650026d530ed0986e0aab08cc3bd3d5bffef3a8411cc042ff106e1a7197956692c789bc7cd45762eb31bfc2f20ff0551b385a619de066092040322092104c76b19fb6ea67f98b9421209d9e0be8cbee7b6f2bd88fa9353493795a601416e40ae7c3aba49c2cf6ec0a8fe9f13d596"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x7d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001400)=""/4098, &(0x7f00000001c0)=0xffffffffffffffc9) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)={0x0, 0x0, 0xc3, {0xc3, 0x0, "a7ea3163fdfa965eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fa9cfc2276cc6b8f9629dc50c76a16acd2a1410e2b1a98bbf810ac55fb130000653047f719949f757c2fa7a15b6cff2d17e3bace82372c8b8092f7e34721ff604763ffae3b950e3aa17765c1bb6178a049a3d5a96b296d363f13e6ddcd245ec678881179f9a01a869a0e6193d680b60fd288a163dbab6e867d247602fa7ab4226b66f75d64c49b1745b06d2ccee5e3d5a9be3cfc3d736eaeb86236e3"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 57.144367ms ago: executing program 0 (id=7236): prlimit64(0x0, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) socket$netlink(0x10, 0x3, 0x8) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f0000000080), 0xff7fffffffffffee, 0x440f41) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) open(&(0x7f00000000c0)='./file0\x00', 0x101000, 0x110) ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201) r4 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0xfffffffffffffffc) sendmmsg$inet_sctp(r4, &(0x7f0000000f00)=[{&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x1e57, @private1, 0x81}, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="90ffd57337a14f06aac5d815a715a1b84c7a289ba9dcbe0c4c55fc1e3fdb2e"}], 0x0, &(0x7f0000000600)=[@sndinfo={0x0, 0x84, 0x2, {0x7, 0x200, 0x6, 0x7}}, @prinfo={0x0, 0x84, 0x5, {0x20, 0x8}}, @init={0x0, 0x84, 0x0, {0x0, 0x3, 0xffe, 0x2}}, @init={0x0, 0x84, 0x0, {0xbe4d, 0xd2fe, 0x9a5, 0x2}}, @sndrcv={0x0, 0x84, 0x1, {0x6, 0x87, 0x4, 0xffffffff, 0xff, 0x8, 0xc, 0x3}}, @dstaddrv4={0x0, 0x84, 0x7, @private=0xa010102}, @authinfo={0x0, 0x84, 0x6, {0x401}}, @init={0x0, 0x84, 0x0, {0x9, 0x734, 0x4, 0x9514}}], 0x0, 0x4884}, {&(0x7f0000000700)=@in={0x2, 0x4e22, @broadcast}, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="efe6540a16e2bb884ed9885bdfb4a607e9c7b6fc35f293e341c1567346098d186fe5ef2bb94ed7b6ff1eb5e0ebc527b75706f0654ed757b0433a67fdb8316345f8d2822a4b2af9f8cc7631b53d63a2a3c5f5f8ba5deac20d542be15d84dfeb327c6019581cd97833a70cecf3926fc6128774eabeace3a15634d0745d0bb7033ea6219b15005f71da845085f5e78578c4b07924cb8917e895be632c01cbe1d554844d63e17ff5519d063c14a7c0f3ebfeb67d1257c9940c63e96e0a113076548f9aec46c97b3c7953e879c5226f7054b58db824ad95cdd9059f26158ac341cebb0a2127040cc5192df76a6b1f80"}, {&(0x7f0000000880)="0dd92c304b8d6d6e29d99c94359d46561f58dc4932dc27c43c976d82aa91f1af73803bb5c4ecfc096100669d3f89156107d91e56bd108ce4ad2a4a4597ec872e32dc6aab2614291986682a48821de9305da176352b2d8dd6b2cdfc30e4a64bd563609a5e3b0ea0bdd813b42e0fca24ceb0e56cde02eb2f6523ec43823c9cce773216bf86ac61c5f3970482e74ed42ddfba4abae2d2edd3560e116bfb844393fbd9dab1132c2877c55f2a68e3ff3b4c1ed9466b815ed6ed08b3ba0d59b22d2f64aed96971a7f1bfc826a8acfdfdcf566f943be029a5d206a90fe7ecf649d82510560936498276053561"}], 0x0, 0x0, 0x0, 0x20000800}, {&(0x7f00000009c0)=@in={0x2, 0x4e21, @empty}, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a00)="ae2d8b100877d20b51c8e3e8eabeacf02adb820c05f8e05a650b0488577f6e11a8cad0f029f786b93deb5c5f9e41b302128cbcc8fbcc5567d80ae49170908b6dc7b1be83f9c81f76e968145850f6cf1201e172a163cddb841c35c47f1db56be5bbe4f02684e3f880718ff1195c933abbb86bb141f697ef97616f94e2b6d20d9666e1a1d095cf702679608a8cc9b43d5d224279d58418c5114de46ead758c85e5aab009ba2a9d1790750e232ce7898bcd5b04fd3d2620443c91e0a546a1de1214d201c96b20e44134941792389e60abc5c732864a1f2566"}], 0x0, 0x0, 0x0, 0x11}, {&(0x7f0000000b40)=@in={0x2, 0x4e21, @multicast2}, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b80)="37a8f3508986e7f44ae10a6d73ee0da13e4e65b405697daaab77732d82173b"}, {&(0x7f0000000bc0)="62a57e0e1ff888d7d4e9742a0382a5161969e14f65773c7adce71a5b5772450c6a7ddfff7f605accb454ce6c27bf228aa1006b7c7d62cd26602b9bac95cbbd839d26bf8ae108e9bdf73a04a83f312c000ed1f7b420b06a62c573d4c4c20417cc4d49208fedf439820b0c07bbf76d2f9d3dfff9effdffaf1ef818dae7b4bc9fb1"}, {&(0x7f0000000c40)="9b71bff77714f7e61ac7ce688efe9d9e2d3c95678c96a6ea265bdfdb36480050e48ca6f3ca77bdeceb67b93f0bdee4f958f1bfef706a708ef780b003b59a85072d7817532f071592c1854ddfe81012bd6b57faea139aa39c299e61cb79e09c364ce57fc93b4148f0a6e3054b5f20b9b0b4eecaf3852e2947b95a8e00"}, {&(0x7f0000000cc0)="67c077d75dd8a6d8db5c81ac379e3f2acb27bb1df6582d437db00a2c27771dc278c93b5cc114a0ed3d2391a0f4bb129fdede62dbf2038e293da4215e3c40d1a850155b1301a6242a0249da20dcc5fb6f321052c5f1d37ca42b2f84c13d32f8ef2c5dc02439c2e134847c8e92f540"}, {&(0x7f0000000d40)='^{I'}], 0x0, &(0x7f0000000e00)=[@authinfo={0x0, 0x84, 0x6, {0x3}}, @sndrcv={0x0, 0x84, 0x1, {0x2, 0x7, 0x1, 0xb2d, 0x1, 0x8, 0x2, 0xdca0}}, @authinfo={0x0, 0x84, 0x6, {0x7}}, @sndrcv={0x0, 0x84, 0x1, {0x8, 0xffff, 0x8000, 0x5, 0xfffffc01, 0x2, 0x1849, 0x2}}, @authinfo={0x0, 0x84, 0x6, {0x7}}, @sndrcv={0x0, 0x84, 0x1, {0xa8bc, 0x200, 0x100, 0x5, 0x5, 0x8, 0x800006, 0x9}}, @sndinfo={0x0, 0x84, 0x2, {0x8, 0x4, 0x8}}], 0x0, 0x20000000}], 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, 0x0) io_uring_setup(0x2001000b, &(0x7f00000000c0)={0x0, 0x11ae, 0x97, 0xbffffffc, 0x61}) r6 = socket$inet6(0xa, 0x4, 0x100000f) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x2, 0x1}, 0x20) 0s ago: executing program 1 (id=7237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) kernel console output (not intermixed with test programs): e_slave_1) entered forwarding state [ 2109.801523][ T8156] veth1_vlan: entered promiscuous mode [ 2109.844757][ T8156] veth0_macvtap: entered promiscuous mode [ 2109.852045][T18347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2109.855028][ T8156] veth1_macvtap: entered promiscuous mode [ 2109.877724][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2109.888903][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2109.899795][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2109.902730][T18347] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2109.917849][ T936] usb 3-1: Using ep0 maxpacket: 16 [ 2109.922493][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2109.924811][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2109.947139][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2109.947568][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2109.957502][ T936] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 2109.978008][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2109.979661][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2109.993058][ T936] usb 3-1: config 0 descriptor?? [ 2110.012859][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.024304][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.036993][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.047691][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.057935][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.069487][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.079476][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2110.090812][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.103560][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2110.144481][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.155115][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.166147][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.177516][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.187685][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.199100][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.209320][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.221422][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.232961][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.257153][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.267291][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.299996][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.310969][ T8156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2110.335158][ T8156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2110.363837][ T8156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2110.467571][ T8156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.481078][ T8156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.507587][ T8156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.524154][ T8156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.720786][ T936] usbhid 3-1:0.0: can't add hid device: -71 [ 2110.744392][ T936] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2110.762254][ T2303] Bluetooth: hci1: command tx timeout [ 2110.790321][ T936] usb 3-1: USB disconnect, device number 45 [ 2110.894599][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2110.935597][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2110.995006][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2111.175399][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2111.212329][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2111.457288][ T8450] fuse: Bad value for 'fd' [ 2111.530262][ T8450] syz_tun: entered promiscuous mode [ 2111.617383][ T8450] syz_tun: left promiscuous mode [ 2112.042522][ T8469] xt_hashlimit: invalid interval [ 2112.104350][ T8171] veth0_vlan: entered promiscuous mode [ 2112.137241][ T8171] veth1_vlan: entered promiscuous mode [ 2112.166433][ T8481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2112.224338][ T8481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2112.269305][ T8171] veth0_macvtap: entered promiscuous mode [ 2112.303315][ T8171] veth1_macvtap: entered promiscuous mode [ 2112.383285][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.402205][T14284] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2112.408907][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.424199][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.451050][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.461696][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.472750][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.483849][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.495862][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.510287][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.524278][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.535745][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.546669][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.557119][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.567624][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.577773][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2112.582242][T14284] usb 4-1: Using ep0 maxpacket: 32 [ 2112.588661][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.607332][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2112.612930][T14284] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 2112.618129][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.634210][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.645934][T14284] usb 4-1: config 0 has no interface number 0 [ 2112.645956][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.664267][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.674964][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.685970][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.687962][T14284] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 2112.697639][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.718870][T14284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2112.727894][T14284] usb 4-1: Product: syz [ 2112.728623][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.732203][T14284] usb 4-1: Manufacturer: syz [ 2112.746884][T14284] usb 4-1: SerialNumber: syz [ 2112.755947][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.757228][T14284] usb 4-1: config 0 descriptor?? [ 2112.784548][T14284] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 2112.785448][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.803406][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.814474][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.832738][ T2303] Bluetooth: hci1: command tx timeout [ 2112.846617][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.857758][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.873649][ T8171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2112.892030][ T8171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2112.915741][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2112.975236][ T8171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2113.011906][ T8171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2113.031887][ T8171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2113.040635][ T8171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2113.163140][ T8327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2113.186567][ T8327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2113.212200][ T8327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2113.219852][T14284] gspca_topro: reg_w err -71 [ 2113.252738][T14284] gspca_topro: Sensor soi763a [ 2113.271379][ T8327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2113.275505][T14284] usb 4-1: USB disconnect, device number 88 [ 2113.287181][ T8495] FAULT_INJECTION: forcing a failure. [ 2113.287181][ T8495] name failslab, interval 1, probability 0, space 0, times 0 [ 2113.312155][ T8495] CPU: 1 UID: 0 PID: 8495 Comm: syz.1.6870 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2113.322532][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2113.332594][ T8495] Call Trace: [ 2113.335879][ T8495] [ 2113.338810][ T8495] dump_stack_lvl+0x241/0x360 [ 2113.343502][ T8495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2113.348720][ T8495] ? __pfx__printk+0x10/0x10 [ 2113.353343][ T8495] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 2113.358809][ T8495] ? __pfx___might_resched+0x10/0x10 [ 2113.364109][ T8495] ? __kasan_kmalloc_large+0x8a/0xa0 [ 2113.369416][ T8495] should_fail_ex+0x3b0/0x4e0 [ 2113.374111][ T8495] should_failslab+0xac/0x100 [ 2113.378801][ T8495] ? big_key_preparse+0x200/0x4d0 [ 2113.383829][ T8495] __kmalloc_cache_noprof+0x6c/0x2c0 [ 2113.389140][ T8495] big_key_preparse+0x200/0x4d0 [ 2113.394022][ T8495] ? __pfx_big_key_preparse+0x10/0x10 [ 2113.399410][ T8495] ? lookup_user_key+0xeb6/0x1500 [ 2113.404504][ T8495] __key_create_or_update+0x481/0xc70 [ 2113.409907][ T8495] ? __pfx___key_create_or_update+0x10/0x10 [ 2113.415836][ T8495] ? __pfx_keyring_search_iterator+0x10/0x10 [ 2113.421851][ T8495] key_create_or_update+0x42/0x60 [ 2113.426903][ T8495] __se_sys_add_key+0x33f/0x490 [ 2113.431772][ T8495] ? __pfx___se_sys_add_key+0x10/0x10 [ 2113.437166][ T8495] ? do_syscall_64+0x100/0x230 [ 2113.441940][ T8495] ? __x64_sys_add_key+0x20/0xc0 [ 2113.446882][ T8495] do_syscall_64+0xf3/0x230 [ 2113.451390][ T8495] ? clear_bhb_loop+0x35/0x90 [ 2113.456075][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2113.461973][ T8495] RIP: 0033:0x7f5d6cf7def9 [ 2113.466389][ T8495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2113.485995][ T8495] RSP: 002b:00007f5d6de57038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2113.494414][ T8495] RAX: ffffffffffffffda RBX: 00007f5d6d135f80 RCX: 00007f5d6cf7def9 [ 2113.502401][ T8495] RDX: 0000000020001400 RSI: 0000000000000000 RDI: 0000000020001380 [ 2113.510386][ T8495] RBP: 00007f5d6de57090 R08: 000000000525dbb4 R09: 0000000000000000 [ 2113.518368][ T8495] R10: 00000000000fffff R11: 0000000000000246 R12: 0000000000000001 [ 2113.526358][ T8495] R13: 0000000000000000 R14: 00007f5d6d135f80 R15: 00007f5d6d25fa28 [ 2113.534348][ T8495] [ 2113.591623][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2113.618968][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2113.696338][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2113.721628][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2113.875198][ T8327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2113.937146][ T8327] 8021q: adding VLAN 0 to HW filter on device team0 [ 2113.969083][ T7980] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.976242][ T7980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2114.028945][ T7980] bridge0: port 2(bridge_slave_1) entered blocking state [ 2114.036109][ T7980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2114.198099][ T8514] trusted_key: encrypted_key: master key parameter 'use' is invalid [ 2114.242848][ T8327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2114.332800][ T8327] veth0_vlan: entered promiscuous mode [ 2114.371113][ T8327] veth1_vlan: entered promiscuous mode [ 2114.430290][ T8327] veth0_macvtap: entered promiscuous mode [ 2114.460092][ T8327] veth1_macvtap: entered promiscuous mode [ 2114.499385][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.521608][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.545080][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.566048][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.586910][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.614087][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.635696][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.660333][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.682633][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.702961][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.725634][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.749099][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.771242][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.798508][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.818907][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.842342][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.868121][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.892877][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.923685][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2114.944916][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.968195][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.992905][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.012731][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.032157][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.052909][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.077071][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.090332][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.111191][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.139004][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.155510][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.177929][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.190882][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.213602][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.223779][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.242109][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.264098][ T8327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.283467][ T8327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.303748][ T8327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2115.376208][ T8327] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.392322][ T8327] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.401293][ T8327] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.434173][ T8327] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.542635][ T8559] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6882'. [ 2115.704771][T14216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.731664][T14216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.765601][ T8565] pimreg: entered allmulticast mode [ 2115.793161][ T7980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.817726][ T7980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.829029][ T29] audit: type=1326 audit(1726770051.917:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2116.869327][ T29] audit: type=1326 audit(1726770051.917:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2116.892752][ T29] audit: type=1326 audit(1726770051.917:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2116.916670][ T8608] FAULT_INJECTION: forcing a failure. [ 2116.916670][ T8608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2116.916700][ T8608] CPU: 0 UID: 0 PID: 8608 Comm: syz.1.6894 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2116.916723][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2116.916737][ T8608] Call Trace: [ 2116.916745][ T8608] [ 2116.916755][ T8608] dump_stack_lvl+0x241/0x360 [ 2116.916790][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2116.916820][ T8608] ? __pfx__printk+0x10/0x10 [ 2116.916850][ T8608] ? __pfx_lock_release+0x10/0x10 [ 2116.916886][ T8608] should_fail_ex+0x3b0/0x4e0 [ 2116.916912][ T8608] _copy_from_iter+0x1ed/0x1d60 [ 2116.916942][ T8608] ? __virt_addr_valid+0x183/0x530 [ 2116.916964][ T8608] ? __pfx_lock_release+0x10/0x10 [ 2116.916998][ T8608] ? __alloc_skb+0x28f/0x440 [ 2116.917027][ T8608] ? __pfx__copy_from_iter+0x10/0x10 [ 2116.917075][ T8608] ? __virt_addr_valid+0x183/0x530 [ 2116.917096][ T8608] ? __virt_addr_valid+0x183/0x530 [ 2116.917117][ T8608] ? __virt_addr_valid+0x45f/0x530 [ 2116.917151][ T8608] ? __check_object_size+0x49c/0x900 [ 2116.917182][ T8608] netlink_sendmsg+0x73d/0xcb0 [ 2116.917221][ T8608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2116.917253][ T8608] ? aa_sock_msg_perm+0x91/0x160 [ 2116.917285][ T8608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2116.917313][ T8608] __sock_sendmsg+0x221/0x270 [ 2116.917340][ T8608] ____sys_sendmsg+0x52a/0x7e0 [ 2116.917367][ T8608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2116.917401][ T8608] __sys_sendmsg+0x2aa/0x390 [ 2116.917423][ T8608] ? __pfx___sys_sendmsg+0x10/0x10 [ 2116.917448][ T8608] ? vfs_write+0x7bf/0xc90 [ 2116.917501][ T8608] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2116.917531][ T8608] ? do_syscall_64+0x100/0x230 [ 2116.917562][ T8608] ? do_syscall_64+0xb6/0x230 [ 2116.917593][ T8608] do_syscall_64+0xf3/0x230 [ 2116.917622][ T8608] ? clear_bhb_loop+0x35/0x90 [ 2117.100482][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2117.106404][ T8608] RIP: 0033:0x7f5d6cf7def9 [ 2117.110847][ T8608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2117.130459][ T8608] RSP: 002b:00007f5d6de57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2117.138884][ T8608] RAX: ffffffffffffffda RBX: 00007f5d6d135f80 RCX: 00007f5d6cf7def9 [ 2117.146863][ T8608] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 2117.154840][ T8608] RBP: 00007f5d6de57090 R08: 0000000000000000 R09: 0000000000000000 [ 2117.162844][ T8608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2117.170814][ T8608] R13: 0000000000000000 R14: 00007f5d6d135f80 R15: 00007f5d6d25fa28 [ 2117.178801][ T8608] [ 2117.181953][ C0] vkms_vblank_simulate: vblank timer overrun [ 2117.187623][ T29] audit: type=1326 audit(1726770051.917:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2117.211658][ T29] audit: type=1326 audit(1726770051.917:9409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2117.236468][ T29] audit: type=1326 audit(1726770051.917:9410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2117.258962][ T29] audit: type=1326 audit(1726770051.917:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2117.282622][ T29] audit: type=1326 audit(1726770051.917:9412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2117.360973][ T29] audit: type=1326 audit(1726770051.917:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2117.397616][ T29] audit: type=1326 audit(1726770051.917:9414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8605 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08e997def9 code=0x7ffc0000 [ 2117.843375][ T8632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2117.852441][ T8632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2118.312014][T14284] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2118.496320][T14284] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.516844][T14284] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2118.536887][T14284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.567126][T14284] usb 4-1: config 0 descriptor?? [ 2118.603943][T14284] pwc: Askey VC010 type 2 USB webcam detected. [ 2118.824655][ T8646] FAULT_INJECTION: forcing a failure. [ 2118.824655][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.870187][ T8646] CPU: 0 UID: 0 PID: 8646 Comm: syz.0.6909 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2118.880561][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2118.890636][ T8646] Call Trace: [ 2118.893936][ T8646] [ 2118.896892][ T8646] dump_stack_lvl+0x241/0x360 [ 2118.901611][ T8646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2118.906903][ T8646] ? __pfx__printk+0x10/0x10 [ 2118.911501][ T8646] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 2118.916962][ T8646] ? __pfx___might_resched+0x10/0x10 [ 2118.922271][ T8646] should_fail_ex+0x3b0/0x4e0 [ 2118.926951][ T8646] should_failslab+0xac/0x100 [ 2118.931635][ T8646] ? iommu_group_alloc+0x52/0x390 [ 2118.936666][ T8646] __kmalloc_cache_noprof+0x6c/0x2c0 [ 2118.941964][ T8646] iommu_group_alloc+0x52/0x390 [ 2118.946859][ T8646] ? generic_device_group+0x9/0x10 [ 2118.951990][ T8646] __iommu_probe_device+0x486/0x1110 [ 2118.957308][ T8646] ? down_read+0x82b/0xa40 [ 2118.961734][ T8646] ? __pfx___iommu_probe_device+0x10/0x10 [ 2118.967478][ T8646] ? __pfx_lock_acquire+0x10/0x10 [ 2118.972547][ T8646] ? __pfx_down_read+0x10/0x10 [ 2118.977341][ T8646] iommu_bus_notifier+0x8c/0x2d0 [ 2118.982318][ T8646] notifier_call_chain+0x19f/0x3e0 [ 2118.987436][ T8646] blocking_notifier_call_chain+0x69/0x90 [ 2118.993187][ T8646] bus_notify+0x141/0x180 [ 2118.997551][ T8646] device_add+0x631/0xbf0 [ 2119.001897][ T8646] iommufd_test+0x1d52/0x3e30 [ 2119.006580][ T8646] ? __pfx_iommufd_test+0x10/0x10 [ 2119.011624][ T8646] ? __pfx___might_resched+0x10/0x10 [ 2119.016914][ T8646] ? __might_fault+0xaa/0x120 [ 2119.021595][ T8646] ? __pfx_lock_release+0x10/0x10 [ 2119.026644][ T8646] ? __might_fault+0xc6/0x120 [ 2119.031336][ T8646] iommufd_fops_ioctl+0x4d6/0x5a0 [ 2119.036391][ T8646] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2119.041988][ T8646] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 2119.047557][ T8646] __se_sys_ioctl+0xf9/0x170 [ 2119.052150][ T8646] do_syscall_64+0xf3/0x230 [ 2119.056675][ T8646] ? clear_bhb_loop+0x35/0x90 [ 2119.061381][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2119.067276][ T8646] RIP: 0033:0x7fe06b97def9 [ 2119.071689][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2119.091294][ T8646] RSP: 002b:00007fe06b3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2119.099750][ T8646] RAX: ffffffffffffffda RBX: 00007fe06bb35f80 RCX: 00007fe06b97def9 [ 2119.107721][ T8646] RDX: 00000000200000c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 2119.115694][ T8646] RBP: 00007fe06b3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 2119.123680][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2119.131665][ T8646] R13: 0000000000000000 R14: 00007fe06bb35f80 R15: 00007fe06bc5fa28 [ 2119.139664][ T8646] [ 2120.063527][ T8657] dccp_close: ABORT with 6964 bytes unread [ 2120.394108][ T8665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2120.437304][ T8665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2120.487860][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6915'. [ 2120.931059][ T8] IPVS: starting estimator thread 0... [ 2120.956721][ T8672] IPVS: sed: SCTP 127.0.0.1:0 - no destination available [ 2121.042492][ T8675] IPVS: using max 29 ests per chain, 69600 per kthread [ 2121.188894][T14284] pwc: send_video_command error -71 [ 2121.258062][T14284] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 2121.274217][T14284] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 2121.316748][T14284] usb 4-1: USB disconnect, device number 89 [ 2121.702028][T14284] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 2121.842083][T14284] usb 4-1: device descriptor read/64, error -71 [ 2122.112649][T14284] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 2122.272963][T14284] usb 4-1: device descriptor read/64, error -71 [ 2122.402291][T14284] usb usb4-port1: attempt power cycle [ 2122.752426][T14284] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 2122.807462][T14284] usb 4-1: device descriptor read/8, error -71 [ 2123.062057][T14284] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 2123.102313][T14284] usb 4-1: device descriptor read/8, error -71 [ 2123.222885][T14284] usb usb4-port1: unable to enumerate USB device [ 2123.899077][ T8709] batman_adv: batadv0: Adding interface: macvtap1 [ 2123.910389][ T8709] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.935769][ C0] vkms_vblank_simulate: vblank timer overrun [ 2123.954774][ T8709] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 2124.322402][T31790] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2124.495674][T31790] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2124.505384][T31790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2124.522544][T31790] usb 3-1: config 0 descriptor?? [ 2124.534769][T31790] cp210x 3-1:0.0: cp210x converter detected [ 2124.935739][T31790] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 2124.945344][T31790] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -121 [ 2124.963724][T31790] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 2125.000145][T31790] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2125.171121][T31790] raw-gadget.2 gadget.1: failed to queue reset event [ 2125.252018][T31790] raw-gadget.2 gadget.1: failed to queue resume event [ 2125.342240][T31790] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2125.360381][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 2125.368467][T31790] raw-gadget.2 gadget.1: failed to queue reset event [ 2125.381914][ T8] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2125.440978][ T8742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2125.449554][T31790] raw-gadget.2 gadget.1: failed to queue resume event [ 2125.456880][ T8742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2125.512089][T31790] usb 2-1: device descriptor read/64, error -32 [ 2125.543573][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2125.553091][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.570328][ T8] usb 4-1: config 0 descriptor?? [ 2125.577764][ T8] cp210x 4-1:0.0: cp210x converter detected [ 2125.628173][T31790] raw-gadget.2 gadget.1: failed to queue suspend event [ 2125.640347][T31790] raw-gadget.2 gadget.1: failed to queue reset event [ 2125.725019][T31790] raw-gadget.2 gadget.1: failed to queue resume event [ 2125.798186][T31790] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2125.807803][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 2125.815894][T31790] raw-gadget.2 gadget.1: failed to queue reset event [ 2125.893327][T31790] raw-gadget.2 gadget.1: failed to queue resume event [ 2125.952462][T31790] usb 2-1: device descriptor read/64, error -32 [ 2125.980593][ T8] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2126.006495][ T8] usb 4-1: cp210x converter now attached to ttyUSB1 [ 2126.071859][T31790] raw-gadget.2 gadget.1: failed to queue suspend event [ 2126.080021][T31790] usb usb2-port1: attempt power cycle [ 2126.087615][T31790] raw-gadget.2 gadget.1: failed to queue disconnect event [ 2126.098267][T31790] raw-gadget.2 gadget.1: failed to queue reset event [ 2126.161929][ T8746] sctp: [Deprecated]: syz.1.6942 (pid 8746) Use of int in max_burst socket option deprecated. [ 2126.161929][ T8746] Use struct sctp_assoc_value instead [ 2126.179989][T31790] raw-gadget.2 gadget.1: failed to queue resume event [ 2126.188225][ T8746] x_tables: duplicate underflow at hook 3 [ 2126.194600][T31790] raw-gadget.2 gadget.1: failed to queue reset event [ 2126.425507][T31790] raw-gadget.2 gadget.1: failed to queue resume event [ 2126.522098][T31790] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2126.552270][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 2126.559456][T31790] usb 2-1: device descriptor read/8, error -32 [ 2126.692790][T31790] raw-gadget.2 gadget.1: failed to queue suspend event [ 2126.702234][T31790] raw-gadget.2 gadget.1: failed to queue reset event [ 2126.782768][T31790] raw-gadget.2 gadget.1: failed to queue resume event [ 2126.843625][T31790] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2126.913851][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 2126.921017][T31790] usb 2-1: device descriptor read/8, error -32 [ 2126.946759][ T8749] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6943'. [ 2127.038123][T31790] raw-gadget.2 gadget.1: failed to queue suspend event [ 2127.048553][T31790] usb usb2-port1: unable to enumerate USB device [ 2127.371693][ T8761] fuse: Bad value for 'fd' [ 2127.386323][ T8761] syz_tun: entered promiscuous mode [ 2127.400659][ T8761] syz_tun: left promiscuous mode [ 2127.587467][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2127.596471][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2128.080830][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6949'. [ 2128.156054][T31790] usb 3-1: USB disconnect, device number 46 [ 2128.166981][ T8772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2128.183471][T31790] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2128.193425][T31790] cp210x 3-1:0.0: device disconnected [ 2128.225722][T14284] usb 4-1: USB disconnect, device number 94 [ 2128.286307][T14284] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 2128.315424][T14284] cp210x 4-1:0.0: device disconnected [ 2128.437771][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6949'. [ 2128.572442][ T8780] team_slave_0: entered promiscuous mode [ 2128.578133][ T8780] team_slave_1: entered promiscuous mode [ 2129.216140][ T8778] team_slave_0: left promiscuous mode [ 2129.222273][ T8778] team_slave_1: left promiscuous mode [ 2129.752674][ T936] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2129.917169][ T936] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2129.939016][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2129.952760][ T936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2129.971960][ T936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2129.991913][ T936] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2130.010995][ T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2130.030419][ T936] usb 3-1: config 0 descriptor?? [ 2130.456586][ T8803] FAULT_INJECTION: forcing a failure. [ 2130.456586][ T8803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.469964][ T8803] CPU: 0 UID: 0 PID: 8803 Comm: syz.3.6959 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2130.480318][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2130.490380][ T8803] Call Trace: [ 2130.493658][ T8803] [ 2130.496599][ T8803] dump_stack_lvl+0x241/0x360 [ 2130.501307][ T8803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2130.506526][ T8803] ? __pfx__printk+0x10/0x10 [ 2130.511150][ T8803] ? snprintf+0xda/0x120 [ 2130.515415][ T8803] should_fail_ex+0x3b0/0x4e0 [ 2130.520123][ T8803] _copy_to_user+0x2f/0xb0 [ 2130.524554][ T8803] simple_read_from_buffer+0xca/0x150 [ 2130.529991][ T8803] proc_fail_nth_read+0x1e9/0x250 [ 2130.535035][ T8803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2130.540609][ T8803] ? rw_verify_area+0x55e/0x6f0 [ 2130.545473][ T8803] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2130.551050][ T8803] vfs_read+0x201/0xbc0 [ 2130.555229][ T8803] ? __pfx_lock_release+0x10/0x10 [ 2130.560282][ T8803] ? do_sock_setsockopt+0x3e2/0x720 [ 2130.565514][ T8803] ? __pfx_vfs_read+0x10/0x10 [ 2130.570195][ T8803] ? ipv6_setsockopt+0xe2/0x170 [ 2130.575077][ T8803] ? __fget_files+0x3f3/0x470 [ 2130.579881][ T8803] ? __fdget_pos+0x24e/0x320 [ 2130.584502][ T8803] ksys_read+0x1a0/0x2c0 [ 2130.588751][ T8803] ? __pfx_ksys_read+0x10/0x10 [ 2130.593539][ T8803] ? do_syscall_64+0x100/0x230 [ 2130.598421][ T8803] ? do_syscall_64+0xb6/0x230 [ 2130.603118][ T8803] do_syscall_64+0xf3/0x230 [ 2130.607651][ T8803] ? clear_bhb_loop+0x35/0x90 [ 2130.612362][ T8803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2130.618293][ T8803] RIP: 0033:0x7f127577c93c [ 2130.622719][ T8803] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2130.642335][ T8803] RSP: 002b:00007f1276571030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2130.650764][ T8803] RAX: ffffffffffffffda RBX: 00007f1275936058 RCX: 00007f127577c93c [ 2130.658734][ T8803] RDX: 000000000000000f RSI: 00007f12765710a0 RDI: 0000000000000004 [ 2130.666731][ T8803] RBP: 00007f1276571090 R08: 0000000000000000 R09: 0000000000000000 [ 2130.674719][ T8803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2130.682707][ T8803] R13: 0000000000000001 R14: 00007f1275936058 R15: 00007f1275a5fa28 [ 2130.690731][ T8803] [ 2130.902821][ T8808] FAULT_INJECTION: forcing a failure. [ 2130.902821][ T8808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.924769][ T8808] CPU: 0 UID: 0 PID: 8808 Comm: syz.3.6961 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2130.935150][ T8808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2130.945241][ T8808] Call Trace: [ 2130.948546][ T8808] [ 2130.951502][ T8808] dump_stack_lvl+0x241/0x360 [ 2130.956220][ T8808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2130.961452][ T8808] ? __pfx__printk+0x10/0x10 [ 2130.966070][ T8808] ? __pfx_lock_release+0x10/0x10 [ 2130.971128][ T8808] should_fail_ex+0x3b0/0x4e0 [ 2130.975834][ T8808] _copy_from_user+0x2f/0xe0 [ 2130.980447][ T8808] copy_msghdr_from_user+0xae/0x680 [ 2130.985681][ T8808] ? timespec64_add_safe+0x1be/0x220 [ 2130.991193][ T8808] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2130.997037][ T8808] do_recvmmsg+0x409/0xad0 [ 2131.001465][ T8808] ? mark_lock+0x9a/0x360 [ 2131.005816][ T8808] ? __pfx_do_recvmmsg+0x10/0x10 [ 2131.010804][ T8808] ? __pfx___might_resched+0x10/0x10 [ 2131.016139][ T8808] ? __might_fault+0xaa/0x120 [ 2131.020854][ T8808] ? __pfx_lock_release+0x10/0x10 [ 2131.025934][ T8808] ? vfs_write+0x7bf/0xc90 [ 2131.030390][ T8808] ? get_timespec64+0x19c/0x280 [ 2131.035289][ T8808] __x64_sys_recvmmsg+0x1b8/0x250 [ 2131.040336][ T8808] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2131.045925][ T8808] ? do_syscall_64+0x100/0x230 [ 2131.050743][ T8808] ? do_syscall_64+0xb6/0x230 [ 2131.055465][ T8808] do_syscall_64+0xf3/0x230 [ 2131.060025][ T8808] ? clear_bhb_loop+0x35/0x90 [ 2131.064758][ T8808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2131.070790][ T8808] RIP: 0033:0x7f127577def9 [ 2131.075233][ T8808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2131.094867][ T8808] RSP: 002b:00007f1276592038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2131.103309][ T8808] RAX: ffffffffffffffda RBX: 00007f1275935f80 RCX: 00007f127577def9 [ 2131.111323][ T8808] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 2131.119309][ T8808] RBP: 00007f1276592090 R08: 0000000020003700 R09: 0000000000000000 [ 2131.127299][ T8808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2131.135388][ T8808] R13: 0000000000000000 R14: 00007f1275935f80 R15: 00007f1275a5fa28 [ 2131.143414][ T8808] [ 2131.155013][ T936] usbhid 3-1:0.0: can't add hid device: -71 [ 2131.160977][ T936] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2131.222190][ T936] usb 3-1: USB disconnect, device number 47 [ 2131.296333][ T8812] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6963'. [ 2131.899799][ T8823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2131.915749][ T8823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2132.058982][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2132.092733][ T8829] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2132.183048][ T8833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6969'. [ 2132.221821][ T8833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6969'. [ 2134.750427][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.774106][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.871725][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6980'. [ 2134.902089][ T8863] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2134.911348][ T8863] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2134.921465][ T8863] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2134.931612][ T8863] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2134.955384][ T8863] vxlan0: entered promiscuous mode [ 2135.261891][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2135.413443][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2135.424705][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2135.436310][ T8] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2135.446776][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2135.457244][ T8] usb 3-1: config 0 descriptor?? [ 2135.566121][ T8870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2136.080784][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 2136.095641][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2136.139492][ T8] usb 3-1: USB disconnect, device number 48 [ 2136.528959][ T8883] syz_tun: entered promiscuous mode [ 2136.564197][ T8883] syz_tun: left promiscuous mode [ 2136.756063][T27845] Bluetooth: hci3: command 0x0406 tx timeout [ 2137.392483][T14284] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2137.564573][T14284] usb 4-1: Using ep0 maxpacket: 16 [ 2137.585462][T14284] usb 4-1: config 0 has an invalid interface number: 204 but max is 1 [ 2137.600704][T14284] usb 4-1: config 0 has an invalid interface number: 196 but max is 1 [ 2137.609570][T14284] usb 4-1: config 0 has no interface number 0 [ 2137.621689][T14284] usb 4-1: config 0 has no interface number 1 [ 2137.634825][T14284] usb 4-1: config 0 interface 204 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2137.657778][T14284] usb 4-1: config 0 interface 196 altsetting 2 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 2137.679291][T14284] usb 4-1: config 0 interface 204 has no altsetting 0 [ 2137.704185][T14284] usb 4-1: config 0 interface 196 has no altsetting 0 [ 2137.720930][T14284] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=ed.36 [ 2137.730965][T14284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.746071][T14284] usb 4-1: Product: syz [ 2137.758493][T14284] usb 4-1: Manufacturer: syz [ 2137.771206][T14284] usb 4-1: SerialNumber: syz [ 2137.792535][T14284] usb 4-1: config 0 descriptor?? [ 2138.890796][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2138.932595][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2138.974408][ T8926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2139.008835][ T8926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2139.022334][T14284] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2139.031343][T14284] snd-usb-audio 4-1:0.204: probe with driver snd-usb-audio failed with error -2 [ 2139.047572][T14284] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2139.083821][T14284] snd-usb-audio 4-1:0.196: probe with driver snd-usb-audio failed with error -2 [ 2139.109739][T14284] usb 4-1: USB disconnect, device number 95 [ 2139.110209][ T7841] udevd[7841]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.196/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2139.818580][ T8941] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7008'. [ 2139.851969][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7008'. [ 2140.172004][T31790] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2140.222325][ T25] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2140.353028][T31790] usb 3-1: Using ep0 maxpacket: 8 [ 2140.380835][T31790] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 2140.390417][T31790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.398706][T31790] usb 3-1: Product: syz [ 2140.402946][T31790] usb 3-1: Manufacturer: syz [ 2140.407564][T31790] usb 3-1: SerialNumber: syz [ 2140.412556][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 2140.418415][ T25] usb 4-1: too many configurations: 156, using maximum allowed: 8 [ 2140.428167][T31790] usb 3-1: config 0 descriptor?? [ 2140.444251][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2140.456871][ T25] usb 4-1: can't read configurations, error -61 [ 2140.592038][ T25] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 2140.641132][ T8961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2140.662405][ T8961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2140.666300][ T8943] loop3: detected capacity change from 0 to 7 [ 2140.682102][ T8943] Dev loop3: unable to read RDB block 7 [ 2140.698673][ T8943] loop3: AHDI p1 p2 [ 2140.702783][ T8943] loop3: partition table partially beyond EOD, truncated [ 2140.710077][ T8943] loop3: p1 size 7567738 extends beyond EOD, truncated [ 2140.762115][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 2140.768706][ T25] usb 4-1: too many configurations: 156, using maximum allowed: 8 [ 2140.786082][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2140.801194][ T25] usb 4-1: can't read configurations, error -61 [ 2140.803498][ T8] usb 3-1: USB disconnect, device number 49 [ 2140.810855][ T25] usb usb4-port1: attempt power cycle [ 2141.152182][ T25] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 2141.188214][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 2141.195640][ T25] usb 4-1: too many configurations: 156, using maximum allowed: 8 [ 2141.205166][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2141.214306][ T25] usb 4-1: can't read configurations, error -61 [ 2141.352234][ T25] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2141.401390][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 2141.408977][ T25] usb 4-1: too many configurations: 156, using maximum allowed: 8 [ 2141.433006][ T25] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 2141.440605][ T25] usb 4-1: can't read configurations, error -61 [ 2141.462877][ T25] usb usb4-port1: unable to enumerate USB device [ 2141.486051][ T8971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2141.512316][ T8971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2141.722408][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2141.872048][ T25] usb 3-1: device descriptor read/64, error -71 [ 2142.142483][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2142.302362][ T25] usb 3-1: device descriptor read/64, error -71 [ 2142.413077][ T25] usb usb3-port1: attempt power cycle [ 2142.772315][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2142.805646][ T25] usb 3-1: device descriptor read/8, error -71 [ 2143.062352][ T25] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2143.102432][ T25] usb 3-1: device descriptor read/8, error -71 [ 2143.222413][ T25] usb usb3-port1: unable to enumerate USB device [ 2143.423118][ T5279] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2143.583257][ T5279] usb 4-1: Using ep0 maxpacket: 32 [ 2143.600627][ T5279] usb 4-1: config 0 has an invalid interface number: 186 but max is 0 [ 2143.619168][ T5279] usb 4-1: config 0 has no interface number 0 [ 2143.628304][ T5279] usb 4-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2143.646680][ T5279] usb 4-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 2143.658518][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.667109][ T5279] usb 4-1: Product: syz [ 2143.671505][ T5279] usb 4-1: Manufacturer: syz [ 2143.676695][ T5279] usb 4-1: SerialNumber: syz [ 2143.685447][ T5279] usb 4-1: config 0 descriptor?? [ 2143.704256][ T8994] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 2145.311017][ T5279] mos7840 4-1:0.186: required endpoints missing [ 2145.338127][ T5279] usb 4-1: USB disconnect, device number 100 [ 2145.343394][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7028'. [ 2145.939667][ T9027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7040'. [ 2146.062166][T31790] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2146.262282][T31790] usb 3-1: Using ep0 maxpacket: 8 [ 2146.269881][ T9024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2146.302451][ T9024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2146.332563][T31790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2146.370132][T31790] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2146.381841][T31790] usb 3-1: can't read configurations, error -71 [ 2146.620146][ T9033] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2146.643367][ T9033] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2146.750980][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2146.761589][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2146.807516][ T9036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2146.818792][ T9036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2146.833485][ T9039] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2146.847250][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2146.859772][ T9039] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 2146.884201][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2146.909387][ T9039] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 2147.472701][T31790] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2147.654918][T31790] usb 3-1: config index 0 descriptor too short (expected 30614, got 18) [ 2147.673212][T31790] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 2147.696936][T31790] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2147.709670][T31790] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2147.720974][T31790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.729681][T31790] usb 3-1: Product: syz [ 2147.743917][T31790] usb 3-1: Manufacturer: syz [ 2147.758747][T31790] usb 3-1: SerialNumber: syz [ 2147.769814][T31790] usb 3-1: config 0 descriptor?? [ 2147.990667][ T9046] netlink: 'syz.2.7047': attribute type 4 has an invalid length. [ 2148.006216][ T9046] syzkaller0: entered allmulticast mode [ 2148.025680][ T9045] delete_channel: no stack [ 2148.030816][ T9045] syzkaller0: left allmulticast mode [ 2148.047034][ T25] usb 3-1: USB disconnect, device number 55 [ 2148.618924][ T9062] xt_CT: No such helper "snmp" [ 2148.837569][ T9073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7054'. [ 2148.867969][ T9073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7054'. [ 2149.316940][ T9089] FAULT_INJECTION: forcing a failure. [ 2149.316940][ T9089] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.329849][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.1.7059 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2149.340217][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2149.350326][ T9089] Call Trace: [ 2149.353639][ T9089] [ 2149.356603][ T9089] dump_stack_lvl+0x241/0x360 [ 2149.361349][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.366594][ T9089] ? __pfx__printk+0x10/0x10 [ 2149.371228][ T9089] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 2149.377147][ T9089] ? __pfx___might_resched+0x10/0x10 [ 2149.382489][ T9089] should_fail_ex+0x3b0/0x4e0 [ 2149.387208][ T9089] should_failslab+0xac/0x100 [ 2149.391933][ T9089] __kmalloc_cache_node_noprof+0x74/0x300 [ 2149.397678][ T9089] ? __get_vm_area_node+0x113/0x270 [ 2149.403009][ T9089] __get_vm_area_node+0x113/0x270 [ 2149.408071][ T9089] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 2149.414002][ T9089] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 2149.419569][ T9089] ? mark_lock+0x9a/0x360 [ 2149.423927][ T9089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2149.430310][ T9089] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 2149.435872][ T9089] __vmalloc_noprof+0x79/0x90 [ 2149.440557][ T9089] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 2149.446124][ T9089] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 2149.451523][ T9089] ? bpf_prog_alloc+0x28/0x1b0 [ 2149.456406][ T9089] bpf_prog_alloc+0x3a/0x1b0 [ 2149.461048][ T9089] bpf_prog_load+0x7f7/0x20f0 [ 2149.465774][ T9089] ? __pfx_bpf_prog_load+0x10/0x10 [ 2149.470920][ T9089] ? __pfx___might_resched+0x10/0x10 [ 2149.476235][ T9089] ? __might_fault+0xc6/0x120 [ 2149.480932][ T9089] __sys_bpf+0x4ee/0x810 [ 2149.485633][ T9089] ? __pfx___sys_bpf+0x10/0x10 [ 2149.490436][ T9089] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2149.496452][ T9089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2149.502813][ T9089] ? do_syscall_64+0x100/0x230 [ 2149.507608][ T9089] __x64_sys_bpf+0x7c/0x90 [ 2149.512053][ T9089] do_syscall_64+0xf3/0x230 [ 2149.516609][ T9089] ? clear_bhb_loop+0x35/0x90 [ 2149.521325][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.527254][ T9089] RIP: 0033:0x7f5d6cf7def9 [ 2149.531690][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2149.551319][ T9089] RSP: 002b:00007f5d6de57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2149.559763][ T9089] RAX: ffffffffffffffda RBX: 00007f5d6d135f80 RCX: 00007f5d6cf7def9 [ 2149.567755][ T9089] RDX: 0000000000000094 RSI: 0000000020000200 RDI: 0000000000000005 [ 2149.575765][ T9089] RBP: 00007f5d6de57090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.583782][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.591778][ T9089] R13: 0000000000000001 R14: 00007f5d6d135f80 R15: 00007f5d6d25fa28 [ 2149.599875][ T9089] [ 2149.624964][ T9089] syz.1.7059: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2149.646860][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.1.7059 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2149.658791][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2149.668866][ T9089] Call Trace: [ 2149.672170][ T9089] [ 2149.675130][ T9089] dump_stack_lvl+0x241/0x360 [ 2149.679952][ T9089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2149.685597][ T9089] ? __pfx__printk+0x10/0x10 [ 2149.690238][ T9089] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 2149.696683][ T9089] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 2149.703212][ T9089] warn_alloc+0x278/0x410 [ 2149.707574][ T9089] ? __pfx_warn_alloc+0x10/0x10 [ 2149.712450][ T9089] ? __get_vm_area_node+0x113/0x270 [ 2149.717661][ T9089] ? __get_vm_area_node+0x261/0x270 [ 2149.722879][ T9089] __vmalloc_node_range_noprof+0x3eb/0x1400 [ 2149.728784][ T9089] ? mark_lock+0x9a/0x360 [ 2149.733186][ T9089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2149.739537][ T9089] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 2149.745099][ T9089] __vmalloc_noprof+0x79/0x90 [ 2149.749794][ T9089] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 2149.755355][ T9089] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 2149.760743][ T9089] ? bpf_prog_alloc+0x28/0x1b0 [ 2149.765521][ T9089] bpf_prog_alloc+0x3a/0x1b0 [ 2149.770136][ T9089] bpf_prog_load+0x7f7/0x20f0 [ 2149.774843][ T9089] ? __pfx_bpf_prog_load+0x10/0x10 [ 2149.779967][ T9089] ? __pfx___might_resched+0x10/0x10 [ 2149.785957][ T9089] ? __might_fault+0xc6/0x120 [ 2149.790666][ T9089] __sys_bpf+0x4ee/0x810 [ 2149.794925][ T9089] ? __pfx___sys_bpf+0x10/0x10 [ 2149.799725][ T9089] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2149.805724][ T9089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2149.812073][ T9089] ? do_syscall_64+0x100/0x230 [ 2149.816850][ T9089] __x64_sys_bpf+0x7c/0x90 [ 2149.821273][ T9089] do_syscall_64+0xf3/0x230 [ 2149.825806][ T9089] ? clear_bhb_loop+0x35/0x90 [ 2149.830529][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.836454][ T9089] RIP: 0033:0x7f5d6cf7def9 [ 2149.840875][ T9089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2149.860574][ T9089] RSP: 002b:00007f5d6de57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2149.869005][ T9089] RAX: ffffffffffffffda RBX: 00007f5d6d135f80 RCX: 00007f5d6cf7def9 [ 2149.876991][ T9089] RDX: 0000000000000094 RSI: 0000000020000200 RDI: 0000000000000005 [ 2149.884968][ T9089] RBP: 00007f5d6de57090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.892950][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.900948][ T9089] R13: 0000000000000001 R14: 00007f5d6d135f80 R15: 00007f5d6d25fa28 [ 2149.908935][ T9089] [ 2149.932012][ T9089] Mem-Info: [ 2149.935364][ T9089] active_anon:14715 inactive_anon:24 isolated_anon:0 [ 2149.935364][ T9089] active_file:24231 inactive_file:4201 isolated_file:0 [ 2149.935364][ T9089] unevictable:768 dirty:84 writeback:0 [ 2149.935364][ T9089] slab_reclaimable:6130 slab_unreclaimable:117908 [ 2149.935364][ T9089] mapped:27235 shmem:8518 pagetables:905 [ 2149.935364][ T9089] sec_pagetables:0 bounce:0 [ 2149.935364][ T9089] kernel_misc_reclaimable:0 [ 2149.935364][ T9089] free:1327051 free_pcp:1463 free_cma:0 [ 2149.980550][ C0] vkms_vblank_simulate: vblank timer overrun [ 2150.003690][ T9089] Node 0 active_anon:58860kB inactive_anon:96kB active_file:96640kB inactive_file:16796kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108708kB dirty:308kB writeback:0kB shmem:32536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11496kB pagetables:3620kB sec_pagetables:0kB all_unreclaimable? no [ 2150.036141][ C0] vkms_vblank_simulate: vblank timer overrun [ 2150.054366][ T8] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2150.068302][ T9089] Node 1 active_anon:0kB inactive_anon:0kB active_file:284kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:232kB dirty:28kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2150.101340][ T9089] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2150.128894][ T9089] lowmem_reserve[]: 0 2467 2468 0 0 [ 2150.148193][ T9089] Node 0 DMA32 free:1371636kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:58760kB inactive_anon:96kB active_file:96612kB inactive_file:16188kB unevictable:1536kB writepending:308kB present:3129332kB managed:2554520kB mlocked:0kB bounce:0kB free_pcp:5792kB local_pcp:5404kB free_cma:0kB [ 2150.191712][ T9089] lowmem_reserve[]: 0 0 0 0 0 [ 2150.197174][ T9089] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:200kB inactive_anon:0kB active_file:28kB inactive_file:608kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:20kB free_cma:0kB [ 2150.217048][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2150.226862][ T9089] lowmem_reserve[]: 0 0 0 0 0 [ 2150.242284][ T9089] Node 1 Normal free:3923680kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:284kB inactive_file:8kB unevictable:1536kB writepending:28kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2150.246840][ T8] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.271160][ C0] vkms_vblank_simulate: vblank timer overrun [ 2150.290315][ T9089] lowmem_reserve[]: 0 0 0 0 0 [ 2150.298156][ T9089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2150.304538][ T8] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2150.311443][ T9089] Node 0 DMA32: 1515*4kB (UME) 2006*8kB (UME) 1236*16kB (UME) 284*32kB (UME) 187*64kB (UME) 92*128kB (UME) 69*256kB (ME) 26*512kB (UME) 18*1024kB (UME) 1*2048kB (E) 304*4096kB (UME) = 1371356kB [ 2150.331149][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2150.340625][T31790] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2150.356027][ T9089] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2150.360428][ T8] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 2150.371760][ T9089] Node 1 Normal: 172*4kB (UME) 54*8kB (UME) 36*16kB (UME) 168*32kB (UME) 91*64kB (UME) 33*128kB (UME) 18*256kB (UME) 9*512kB (UME) 4*1024kB (UME) 7*2048kB (UME) 947*4096kB (M) = 3923680kB [ 2150.393964][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.405418][ T9089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2150.447196][ T9089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2150.461469][ T8] usb 4-1: config 0 descriptor?? [ 2150.477268][ T9089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2150.513747][T31790] usb 3-1: Using ep0 maxpacket: 32 [ 2150.524092][T31790] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2150.541947][ T9089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2150.552589][T31790] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 2150.568697][ T9089] 36974 total pagecache pages [ 2150.575513][ T9089] 24 pages in swap cache [ 2150.581187][T31790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2150.592665][ T9089] Free swap = 124508kB [ 2150.598988][ T9089] Total swap = 124996kB [ 2150.607834][T31790] usb 3-1: config 0 descriptor?? [ 2150.616154][ T9089] 2097051 pages RAM [ 2150.619986][ T9089] 0 pages HighMem/MovableOnly [ 2150.635107][ T9089] 427083 pages reserved [ 2150.639318][ T9089] 0 pages cma reserved [ 2150.757627][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2150.770105][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2150.883838][ T8] zeroplus 0003:0C12:0005.005F: unknown main item tag 0x0 [ 2150.910015][ T8] zeroplus 0003:0C12:0005.005F: unknown main item tag 0x0 [ 2150.925176][ T8] zeroplus 0003:0C12:0005.005F: unknown main item tag 0x0 [ 2150.934917][ T8] zeroplus 0003:0C12:0005.005F: unknown main item tag 0x0 [ 2150.948462][ T8] zeroplus 0003:0C12:0005.005F: unknown main item tag 0x0 [ 2150.988772][ T8] zeroplus 0003:0C12:0005.005F: hidraw0: USB HID v0.00 Device [HID 0c12:0005] on usb-dummy_hcd.3-1/input0 [ 2151.002774][ T8] zeroplus 0003:0C12:0005.005F: no inputs found [ 2151.111146][ T5279] usb 4-1: USB disconnect, device number 101 [ 2151.896539][ T9102] hub 9-0:1.0: USB hub found [ 2151.935689][ T9102] hub 9-0:1.0: 8 ports detected [ 2152.841978][T14284] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2152.993502][T31790] usbhid 3-1:0.0: can't add hid device: -71 [ 2153.022027][T31790] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2153.027825][T14284] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 2153.070391][T31790] usb 3-1: USB disconnect, device number 56 [ 2153.077043][T14284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.124500][T14284] usb 4-1: Product: syz [ 2153.128765][T14284] usb 4-1: Manufacturer: syz [ 2153.186273][T14284] usb 4-1: SerialNumber: syz [ 2153.225568][T14284] usb 4-1: config 0 descriptor?? [ 2153.687323][T27845] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2153.700000][T27845] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2153.710616][T27845] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2153.724656][T27845] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2153.742886][T27845] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2153.751283][T27845] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2153.823718][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 2153.823736][ T29] audit: type=1326 audit(1726770088.917:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9138 comm="syz.1.7075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f5d6cf7def9 code=0x0 [ 2153.922153][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2154.112429][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 2154.122595][ T25] usb 3-1: no configurations [ 2154.127247][ T25] usb 3-1: can't read configurations, error -22 [ 2154.298851][ T25] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2154.313383][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.502456][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 2154.508502][ T25] usb 3-1: no configurations [ 2154.513897][ T25] usb 3-1: can't read configurations, error -22 [ 2154.530740][ T25] usb usb3-port1: attempt power cycle [ 2154.535300][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.579382][ T9123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.585722][ T9142] chnl_net:caif_netlink_parms(): no params data found [ 2154.687881][ T9123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2154.719996][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.866454][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.922448][ T25] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2154.950676][T14284] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2154.963169][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 2154.992458][ T25] usb 3-1: no configurations [ 2154.997257][ T25] usb 3-1: can't read configurations, error -22 [ 2155.052354][T14284] usb 4-1: USB disconnect, device number 102 [ 2155.141941][ T9142] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.149641][ T9142] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.159284][ T25] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2155.178579][ T9142] bridge_slave_0: entered allmulticast mode [ 2155.193509][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 2155.199882][ T9142] bridge_slave_0: entered promiscuous mode [ 2155.206071][ T25] usb 3-1: no configurations [ 2155.210710][ T25] usb 3-1: can't read configurations, error -22 [ 2155.244427][ T25] usb usb3-port1: unable to enumerate USB device [ 2155.259445][ T9142] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.259514][ T9142] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.259724][ T9142] bridge_slave_1: entered allmulticast mode [ 2155.260793][ T9142] bridge_slave_1: entered promiscuous mode [ 2155.382793][ T9142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2155.388838][ T9142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2155.451051][ T9179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2155.451354][ T9179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.517481][ T9142] team0: Port device team_slave_0 added [ 2155.526196][ T11] bridge_slave_1: left allmulticast mode [ 2155.526223][ T11] bridge_slave_1: left promiscuous mode [ 2155.526395][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.548297][ T11] bridge_slave_0: left allmulticast mode [ 2155.557232][ T11] bridge_slave_0: left promiscuous mode [ 2155.564781][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.622831][ T9184] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 2155.878467][ T2303] Bluetooth: hci6: command tx timeout [ 2156.012058][T14284] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2156.162223][ T9174] delete_channel: no stack [ 2156.166756][T14284] usb 4-1: Using ep0 maxpacket: 16 [ 2156.183461][T14284] usb 4-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00 [ 2156.213127][T14284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.224004][T14284] usb 4-1: Product: syz [ 2156.228211][T14284] usb 4-1: Manufacturer: syz [ 2156.233634][T14284] usb 4-1: SerialNumber: syz [ 2156.260612][T14284] usb 4-1: config 0 descriptor?? [ 2156.271464][T14284] usb-storage 4-1:0.0: USB Mass Storage device detected [ 2156.820234][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2156.855683][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2156.878218][ T11] bond0 (unregistering): Released all slaves [ 2156.914007][ T9142] team0: Port device team_slave_1 added [ 2157.218927][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2157.237695][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2157.323926][ T9142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2157.389195][ T9142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2157.397499][ T9142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2157.425619][ T9142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2157.954362][ T9142] hsr_slave_0: entered promiscuous mode [ 2157.960673][ T2303] Bluetooth: hci6: command tx timeout [ 2157.996135][ T9142] hsr_slave_1: entered promiscuous mode [ 2158.028346][ T9142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2158.073889][ T9142] Cannot create hsr debugfs directory [ 2158.186647][ T11] hsr_slave_0: left promiscuous mode [ 2158.227282][ T11] hsr_slave_1: left promiscuous mode [ 2158.273948][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2158.290934][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2158.381199][ T9234] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7094'. [ 2158.442507][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2158.491278][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2158.612034][ T11] veth1_macvtap: left promiscuous mode [ 2158.626302][ T11] veth0_macvtap: left promiscuous mode [ 2158.639225][ T11] veth1_vlan: left promiscuous mode [ 2158.646320][ T11] veth0_vlan: left promiscuous mode [ 2158.844137][ T8] usb 4-1: USB disconnect, device number 103 [ 2160.032018][ T2303] Bluetooth: hci6: command tx timeout [ 2160.275591][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.282036][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.693357][ T11] team0 (unregistering): Port device team_slave_1 removed [ 2160.922787][ T11] team0 (unregistering): Port device team_slave_0 removed [ 2161.646619][ T9253] tipc: Started in network mode [ 2161.651541][ T9253] tipc: Node identity 7ff, cluster identity 2 [ 2161.682109][ T9253] tipc: Node number set to 2047 [ 2162.005346][ T9272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.054718][ T9272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2162.112096][ T2303] Bluetooth: hci6: command tx timeout [ 2162.392003][T14284] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2162.581854][T14284] usb 3-1: Using ep0 maxpacket: 16 [ 2162.614632][T14284] usb 3-1: New USB device found, idVendor=5752, idProduct=75b9, bcdDevice=ae.00 [ 2162.651097][T14284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.680824][T14284] usb 3-1: Product: syz [ 2162.688377][T14284] usb 3-1: Manufacturer: syz [ 2162.698121][T14284] usb 3-1: SerialNumber: syz [ 2162.710175][T14284] usb 3-1: config 0 descriptor?? [ 2162.720747][T14284] usb-storage 3-1:0.0: USB Mass Storage device detected [ 2163.147166][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2163.180162][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2163.490785][ T9142] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2163.528266][ T9142] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2163.570872][ T9142] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2163.608236][ T9142] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2163.930135][ T9142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2164.004570][ T9142] 8021q: adding VLAN 0 to HW filter on device team0 [ 2164.072023][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 2164.079171][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2164.152282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2164.159499][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2164.341040][ T9142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2164.502015][ T9142] veth0_vlan: entered promiscuous mode [ 2164.542950][T31790] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 2164.567965][ T9142] veth1_vlan: entered promiscuous mode [ 2164.688970][ T9142] veth0_macvtap: entered promiscuous mode [ 2164.723014][ T9142] veth1_macvtap: entered promiscuous mode [ 2164.735162][T31790] usb 4-1: Using ep0 maxpacket: 32 [ 2164.752618][T31790] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2164.779716][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2164.780353][T31790] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2164.806128][T31790] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2164.828351][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2164.828361][T31790] usb 4-1: config 7 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2164.897208][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2164.898316][T31790] usb 4-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2164.941083][T31790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.950820][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.010905][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.058695][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.095054][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.127936][ T25] usb 3-1: USB disconnect, device number 61 [ 2165.130755][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.175652][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.198442][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.235257][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.263100][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.290625][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.303763][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.327512][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.358110][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.378667][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2165.387959][ T9324] overlayfs: missing 'lowerdir' [ 2165.411921][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.500563][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2165.543193][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.566968][T31790] ntrig 0003:1B96:000A.0060: unknown main item tag 0x0 [ 2165.587046][T31790] ntrig 0003:1B96:000A.0060: unknown main item tag 0x0 [ 2165.598588][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.610474][T31790] ntrig 0003:1B96:000A.0060: unknown main item tag 0x0 [ 2165.617779][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.628857][T31790] ntrig 0003:1B96:000A.0060: unknown main item tag 0x0 [ 2165.639360][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.649827][T31790] ntrig 0003:1B96:000A.0060: unknown main item tag 0x0 [ 2165.666707][T31790] ntrig 0003:1B96:000A.0060: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.3-1/input0 [ 2165.678225][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.697334][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.713767][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.725034][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.736201][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.749932][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.761094][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.786888][T31790] usb 4-1: USB disconnect, device number 104 [ 2165.799026][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.841471][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.858295][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.880395][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.892456][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.923405][ T9142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2165.935490][ T9142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2165.963351][ T9142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2166.014654][ T9142] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.051952][ T9142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.071040][ T9142] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.081013][ T9142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2166.305318][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2166.333161][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2166.360729][ T25] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 2166.437657][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2166.453815][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2166.511954][ T25] usb 4-1: device descriptor read/64, error -71 [ 2166.768246][ T25] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 2166.932225][ T25] usb 4-1: device descriptor read/64, error -71 [ 2167.052751][ T25] usb usb4-port1: attempt power cycle [ 2167.329966][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2167.365525][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2167.379139][ T9389] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7126'. [ 2167.636058][ T9393] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7127'. [ 2167.949562][ T29] audit: type=1326 audit(1726770103.037:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9398 comm="syz.2.7130" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08e997def9 code=0x0 [ 2167.971462][ C1] vkms_vblank_simulate: vblank timer overrun [ 2168.370855][ T9407] team0: Port device virt_wifi0 added [ 2168.940969][ T9417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2169.054329][ T9419] input: syz1 as /devices/virtual/input/input153 [ 2169.406432][T14216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.639046][T14216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.832644][T14216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.987270][T14216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.075683][T27845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2170.088094][T27845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2170.098663][T27845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2170.114594][T27845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2170.122315][T27845] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2170.129648][T27845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2170.399509][T14216] bridge_slave_1: left allmulticast mode [ 2170.426227][T14216] bridge_slave_1: left promiscuous mode [ 2170.434854][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.462864][T14216] bridge_slave_0: left allmulticast mode [ 2170.470243][T14216] bridge_slave_0: left promiscuous mode [ 2170.478089][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.196895][ T938] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2171.330760][T14216] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2171.344790][T14216] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2171.353819][ T938] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2171.362951][ T938] usb 4-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 2171.374226][ T938] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2171.376139][T14216] bond0 (unregistering): Released all slaves [ 2171.383352][ T938] usb 4-1: config 1 has no interface number 1 [ 2171.383405][ T938] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 2171.383439][ T938] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 2171.423341][ T938] usb 4-1: string descriptor 0 read error: -22 [ 2171.429609][ T938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2171.438795][ T938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.453722][ T938] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2171.587461][ T9424] chnl_net:caif_netlink_parms(): no params data found [ 2171.830510][ T9424] bridge0: port 1(bridge_slave_0) entered blocking state [ 2171.861873][ T9424] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.891189][ T9424] bridge_slave_0: entered allmulticast mode [ 2171.904646][ T938] usb 4-1: USB disconnect, device number 108 [ 2171.912594][ T9424] bridge_slave_0: entered promiscuous mode [ 2172.060142][T14216] hsr_slave_0: left promiscuous mode [ 2172.077824][T14216] hsr_slave_1: left promiscuous mode [ 2172.102323][T14216] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2172.138700][T14216] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2172.177054][T14216] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2172.192583][T14216] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2172.193112][ T2303] Bluetooth: hci3: command tx timeout [ 2172.302316][T14216] veth1_macvtap: left promiscuous mode [ 2172.312201][T14216] veth0_macvtap: left promiscuous mode [ 2172.317811][T14216] veth1_vlan: left promiscuous mode [ 2172.352206][T14216] veth0_vlan: left promiscuous mode [ 2172.359136][ T9468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2172.398521][ T9468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.562259][T14216] team0 (unregistering): Port device team_slave_1 removed [ 2173.637360][T14216] team0 (unregistering): Port device team_slave_0 removed [ 2174.272058][ T2303] Bluetooth: hci3: command tx timeout [ 2174.452210][ T9424] bridge0: port 2(bridge_slave_1) entered blocking state [ 2174.463823][ T9424] bridge0: port 2(bridge_slave_1) entered disabled state [ 2174.486889][ T9424] bridge_slave_1: entered allmulticast mode [ 2174.501049][ T9424] bridge_slave_1: entered promiscuous mode [ 2174.542091][ T9472] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 2174.713524][ T9424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2174.745934][ T9424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2174.932778][ T9424] team0: Port device team_slave_0 added [ 2174.969804][ T9424] team0: Port device team_slave_1 added [ 2175.166448][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2175.181424][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.207381][ C1] vkms_vblank_simulate: vblank timer overrun [ 2175.306494][ T9424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2175.351320][ T9424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2175.371243][ T9424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2175.443543][ T9424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2175.633613][ T9491] input: syz0 as /devices/virtual/input/input154 [ 2175.662377][ T9491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2175.683503][ T9424] hsr_slave_0: entered promiscuous mode [ 2175.703260][ T9491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2175.723263][ T9424] hsr_slave_1: entered promiscuous mode [ 2175.754424][ T9424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2175.788250][ T9424] Cannot create hsr debugfs directory [ 2176.162212][ T5279] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 2176.332011][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 2176.352463][ T2303] Bluetooth: hci3: command tx timeout [ 2176.354009][ T5279] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 2176.402396][ T5279] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 2176.411521][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2176.451376][ T5279] usb 4-1: Product: syz [ 2176.457350][ T5279] usb 4-1: Manufacturer: syz [ 2176.462244][ T5279] usb 4-1: SerialNumber: syz [ 2176.485555][ T5279] usb 4-1: config 0 descriptor?? [ 2176.511705][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7158'. [ 2176.529808][ T5279] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 2176.708721][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7159'. [ 2176.741976][ T9528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7159'. [ 2176.924995][ T9424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2176.955155][ T9424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2176.974850][ T9424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2176.990729][ T9424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2177.119560][ T9424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2177.175423][ T9424] 8021q: adding VLAN 0 to HW filter on device team0 [ 2177.199995][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2177.207215][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2177.233138][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2177.240315][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2177.332721][ T9424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2177.437057][ T9424] veth0_vlan: entered promiscuous mode [ 2177.481269][ T9424] veth1_vlan: entered promiscuous mode [ 2177.560271][ T9424] veth0_macvtap: entered promiscuous mode [ 2177.582321][ T9424] veth1_macvtap: entered promiscuous mode [ 2177.600361][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.613085][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.624772][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.635654][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.645589][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.658030][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.667953][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.692526][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.713565][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.741849][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.764187][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.785924][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.802171][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.813633][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.827141][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.839493][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.849783][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2177.871210][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.903493][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2177.936772][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2177.962814][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2177.993174][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.012217][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.033362][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.055318][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.066247][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.077006][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.088606][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.099290][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.109318][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.120555][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.132819][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.144034][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.154333][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.181003][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.197977][ T9424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2178.213151][ T9424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2178.225829][ T9424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2178.246802][ T9424] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.263909][ T9424] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.273591][ T9424] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.283746][ T9424] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2178.365846][ T5279] gspca_zc3xx: reg_w_i err -71 [ 2178.400573][ T9567] FAULT_INJECTION: forcing a failure. [ 2178.400573][ T9567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2178.432833][ T2303] Bluetooth: hci3: command tx timeout [ 2178.452290][ T9567] CPU: 1 UID: 0 PID: 9567 Comm: syz.1.7165 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2178.462686][ T9567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2178.472770][ T9567] Call Trace: [ 2178.476071][ T9567] [ 2178.479024][ T9567] dump_stack_lvl+0x241/0x360 [ 2178.483751][ T9567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2178.488964][ T9567] ? __pfx__printk+0x10/0x10 [ 2178.493567][ T9567] ? snprintf+0xda/0x120 [ 2178.497814][ T9567] should_fail_ex+0x3b0/0x4e0 [ 2178.502521][ T9567] _copy_to_user+0x2f/0xb0 [ 2178.506954][ T9567] simple_read_from_buffer+0xca/0x150 [ 2178.512346][ T9567] proc_fail_nth_read+0x1e9/0x250 [ 2178.517372][ T9567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2178.522937][ T9567] ? rw_verify_area+0x55e/0x6f0 [ 2178.527822][ T9567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2178.533386][ T9567] vfs_read+0x201/0xbc0 [ 2178.537553][ T9567] ? __pfx_lock_release+0x10/0x10 [ 2178.542602][ T9567] ? __pfx_vfs_read+0x10/0x10 [ 2178.547300][ T9567] ? __fget_files+0x3f3/0x470 [ 2178.552010][ T9567] ? __fdget_pos+0x24e/0x320 [ 2178.556611][ T9567] ksys_read+0x1a0/0x2c0 [ 2178.560864][ T9567] ? __pfx_ksys_read+0x10/0x10 [ 2178.565643][ T9567] ? do_syscall_64+0x100/0x230 [ 2178.570436][ T9567] ? do_syscall_64+0xb6/0x230 [ 2178.575137][ T9567] do_syscall_64+0xf3/0x230 [ 2178.579664][ T9567] ? clear_bhb_loop+0x35/0x90 [ 2178.584359][ T9567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2178.590262][ T9567] RIP: 0033:0x7f5d6cf7c93c [ 2178.594685][ T9567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 2178.614300][ T9567] RSP: 002b:00007f5d6de57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2178.622740][ T9567] RAX: ffffffffffffffda RBX: 00007f5d6d135f80 RCX: 00007f5d6cf7c93c [ 2178.630721][ T9567] RDX: 000000000000000f RSI: 00007f5d6de570a0 RDI: 0000000000000005 [ 2178.638699][ T9567] RBP: 00007f5d6de57090 R08: 0000000000000000 R09: 0000000000000000 [ 2178.646682][ T9567] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001 [ 2178.654785][ T9567] R13: 0000000000000000 R14: 00007f5d6d135f80 R15: 00007f5d6d25fa28 [ 2178.662782][ T9567] [ 2178.717514][T14216] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2178.727758][ T8723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2178.741992][T14216] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2178.754150][ T8723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2178.972599][ T5279] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 2178.980936][ T5279] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 2179.045319][ T5279] usb 4-1: USB disconnect, device number 109 [ 2179.074148][ T9577] input: syz0 as /devices/virtual/input/input155 [ 2179.185591][ T9577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2179.224635][ T9577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2179.712575][ T25] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2179.874057][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2179.911184][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2179.947612][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2179.962688][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2180.000035][ T25] usb 3-1: config 0 descriptor?? [ 2180.017973][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7169'. [ 2180.030946][ T25] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2180.312990][ T9622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7169'. [ 2181.114887][ T9642] dccp_invalid_packet: P.CsCov 15 exceeds packet length 400 [ 2181.137250][ T9642] kernel read not supported for file / œ7³ÏüâW)ëÇ-ë (pid: 9642 comm: syz.0.7178) [ 2181.147290][ T29] audit: type=1800 audit(1726770116.237:9435): pid=9642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7178" name=20019C1437B3CFFCC3A25729EBC72DEB dev="mqueue" ino=298415 res=0 errno=0 [ 2181.180366][ T25] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2181.371857][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 2181.383763][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2181.406516][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2181.435102][ T25] usb 4-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 2181.455404][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2181.491867][ T25] usb 4-1: config 0 descriptor?? [ 2181.498104][ T9645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.517100][ T9645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.715886][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.738687][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.028844][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.054796][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.067636][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.083700][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.110712][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.154357][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.175715][ T9647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.197006][ T9647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2182.250559][ T25] wacom 0003:056A:0028.0061: Unknown device_type for 'HID 056a:0028'. Assuming pen. [ 2182.280149][ T25] wacom 0003:056A:0028.0061: hidraw0: USB HID v0.00 Device [HID 056a:0028] on usb-dummy_hcd.3-1/input0 [ 2182.312863][ T25] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0028.0061/input/input156 [ 2182.501225][ T2569] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.540142][ T5281] usb 3-1: USB disconnect, device number 62 [ 2182.733554][ T2569] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2182.942870][ T2569] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.221496][ T2569] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.485384][T27845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2183.497315][T27845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2183.508372][T27845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2183.519052][T27845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2183.527581][T27845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2183.543319][T27845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2183.777904][ T2569] bridge_slave_1: left allmulticast mode [ 2183.798352][ T2569] bridge_slave_1: left promiscuous mode [ 2183.820761][ T2569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2183.870080][ T2569] bridge_slave_0: left allmulticast mode [ 2183.894562][ T2569] bridge_slave_0: left promiscuous mode [ 2183.924490][ T2569] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.078116][ T9632] coredump: 199(syz.3.7174): interrupted: fatal signal pending [ 2184.102085][ T9632] coredump: 199(syz.3.7174): written to core: VMAs: 40, size 93749248; core: 27466082 bytes, pos 65142784 [ 2184.294091][ T938] usb 4-1: USB disconnect, device number 110 [ 2184.687019][ T9676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2184.762901][ T9676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2185.283299][ T9684] FAULT_INJECTION: forcing a failure. [ 2185.283299][ T9684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2185.331881][ T9684] CPU: 0 UID: 0 PID: 9684 Comm: syz.3.7186 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2185.342261][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2185.352327][ T9684] Call Trace: [ 2185.355613][ T9684] [ 2185.358549][ T9684] dump_stack_lvl+0x241/0x360 [ 2185.363252][ T9684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2185.368466][ T9684] ? __pfx__printk+0x10/0x10 [ 2185.373065][ T9684] ? __pfx_lock_release+0x10/0x10 [ 2185.378096][ T9684] ? vfs_write+0x7bf/0xc90 [ 2185.382521][ T9684] should_fail_ex+0x3b0/0x4e0 [ 2185.387231][ T9684] _copy_from_user+0x2f/0xe0 [ 2185.391830][ T9684] __sys_bpf+0x1a4/0x810 [ 2185.396090][ T9684] ? __pfx___sys_bpf+0x10/0x10 [ 2185.400908][ T9684] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2185.406938][ T9684] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2185.413288][ T9684] ? do_syscall_64+0x100/0x230 [ 2185.418069][ T9684] __x64_sys_bpf+0x7c/0x90 [ 2185.422496][ T9684] do_syscall_64+0xf3/0x230 [ 2185.427018][ T9684] ? clear_bhb_loop+0x35/0x90 [ 2185.431716][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.437623][ T9684] RIP: 0033:0x7f127577def9 [ 2185.442056][ T9684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2185.461694][ T9684] RSP: 002b:00007f1276571038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2185.470149][ T9684] RAX: ffffffffffffffda RBX: 00007f1275936058 RCX: 00007f127577def9 [ 2185.478133][ T9684] RDX: 0000000000000048 RSI: 0000000020000100 RDI: 0000000000000005 [ 2185.486108][ T9684] RBP: 00007f1276571090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.494089][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.502071][ T9684] R13: 0000000000000000 R14: 00007f1275936058 R15: 00007f1275a5fa28 [ 2185.510080][ T9684] [ 2185.685598][ T9688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2185.722752][ T9688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2185.728227][ T2303] Bluetooth: hci1: command tx timeout [ 2185.778616][ T9688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2185.819786][ T9688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2185.992333][ T5281] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2186.022696][ T2569] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2186.041495][ T2569] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2186.057018][ T2569] bond0 (unregistering): Released all slaves [ 2186.069438][ T9699] input: syz0 as /devices/virtual/input/input159 [ 2186.156349][ T2569] tipc: Left network mode [ 2186.161856][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 2186.178848][ T5281] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2186.203010][ T5281] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2186.221946][ T5281] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2186.232406][ T5281] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2186.245918][ T5281] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2186.256270][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.381941][T24212] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2186.476157][ T5281] usb 3-1: usb_control_msg returned -32 [ 2186.511953][ T5281] usbtmc 3-1:16.0: can't read capabilities [ 2186.553245][T24212] usb 4-1: Using ep0 maxpacket: 16 [ 2186.598624][T24212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2186.624742][T24212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2186.664831][T24212] usb 4-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 2186.711851][T24212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2186.745822][T24212] usb 4-1: config 0 descriptor?? [ 2186.776458][ T9656] chnl_net:caif_netlink_parms(): no params data found [ 2186.831630][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2186.840940][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2186.850201][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2186.859449][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2186.877406][ T9719] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2186.956421][ T2569] hsr_slave_0: left promiscuous mode [ 2186.968387][ T2569] hsr_slave_1: left promiscuous mode [ 2186.975769][ T2569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2186.986044][ T2569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2186.995401][ T2569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2187.003550][ T2569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2187.043179][ T2569] veth1_macvtap: left promiscuous mode [ 2187.048922][ T2569] veth0_macvtap: left promiscuous mode [ 2187.055528][ T2569] veth1_vlan: left promiscuous mode [ 2187.061030][ T2569] veth0_vlan: left promiscuous mode [ 2187.453366][T24212] usbhid 4-1:0.0: can't add hid device: -71 [ 2187.464040][T24212] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2187.484511][T24212] usb 4-1: USB disconnect, device number 111 [ 2187.553519][ T2569] team0 (unregistering): Port device virt_wifi0 removed [ 2187.792104][ T2303] Bluetooth: hci1: command tx timeout [ 2187.902131][ T2569] team0 (unregistering): Port device team_slave_1 removed [ 2187.985590][ T2569] team0 (unregistering): Port device team_slave_0 removed [ 2189.031856][T24212] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2189.232010][T24212] usb 4-1: Using ep0 maxpacket: 8 [ 2189.283074][T24212] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 2189.301849][T24212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2189.346443][T24212] usb 4-1: Product: syz [ 2189.350686][T24212] usb 4-1: Manufacturer: syz [ 2189.380316][T24212] usb 4-1: SerialNumber: syz [ 2189.413090][T24212] usb 4-1: config 0 descriptor?? [ 2189.434677][T24212] gspca_main: sq930x-2.14.0 probing 2770:930c [ 2189.642246][ T9740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7198'. [ 2189.708910][ T5279] usb 3-1: USB disconnect, device number 63 [ 2189.784804][ T9656] bridge0: port 1(bridge_slave_0) entered blocking state [ 2189.837668][ T9656] bridge0: port 1(bridge_slave_0) entered disabled state [ 2189.866680][ T9656] bridge_slave_0: entered allmulticast mode [ 2189.872373][ T2303] Bluetooth: hci1: command tx timeout [ 2189.882976][ T9656] bridge_slave_0: entered promiscuous mode [ 2189.994239][ T9656] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.001472][ T9656] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.026578][ T9656] bridge_slave_1: entered allmulticast mode [ 2190.043991][ T9656] bridge_slave_1: entered promiscuous mode [ 2190.117806][ T9656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2190.135137][ T9656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2190.172095][ T5279] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2190.250916][ T9656] team0: Port device team_slave_0 added [ 2190.258287][T24212] gspca_sq930x: ucbus_write failed -71 [ 2190.295442][ T9656] team0: Port device team_slave_1 added [ 2190.338618][ T5279] usb 3-1: Using ep0 maxpacket: 8 [ 2190.356375][ T2569] IPVS: stop unused estimator thread 0... [ 2190.368085][ T5279] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 2190.389895][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2190.409097][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2190.432206][ T5279] usb 3-1: Product: syz [ 2190.436410][ T5279] usb 3-1: Manufacturer: syz [ 2190.441032][ T5279] usb 3-1: SerialNumber: syz [ 2190.451776][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2190.484120][ T9656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2190.494912][T24212] gspca_sq930x: Sensor ov9630 not yet treated [ 2190.501087][T24212] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 2190.513064][ T5279] usb 3-1: config 0 descriptor?? [ 2190.540640][T24212] usb 4-1: USB disconnect, device number 112 [ 2190.573291][ T9656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2190.580345][ T9656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2190.619282][ T9656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2190.740842][ T5279] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 2190.750207][ T9656] hsr_slave_0: entered promiscuous mode [ 2190.783343][ T9656] hsr_slave_1: entered promiscuous mode [ 2190.801191][ T9656] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2190.809378][ T9656] Cannot create hsr debugfs directory [ 2191.951907][ T2303] Bluetooth: hci1: command tx timeout [ 2192.018716][ T9656] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2192.044603][ T9656] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2192.064220][ T9656] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2192.078372][ T9656] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2192.122364][T24212] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2192.194915][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2192.217984][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 2192.238159][ T2569] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.245360][ T2569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2192.261638][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.268852][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2192.312552][T24212] usb 4-1: Using ep0 maxpacket: 32 [ 2192.319490][T24212] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 2192.342360][T24212] usb 4-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 2192.351477][T24212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.366353][T24212] usb 4-1: Product: syz [ 2192.370552][T24212] usb 4-1: Manufacturer: syz [ 2192.375579][T24212] usb 4-1: SerialNumber: syz [ 2192.398933][T24212] usb 4-1: config 0 descriptor?? [ 2192.418712][ T9791] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2192.451280][ T9656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2192.479176][T24212] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2192.571930][ T9656] veth0_vlan: entered promiscuous mode [ 2192.615128][ T9656] veth1_vlan: entered promiscuous mode [ 2192.632127][ T5279] usb write operation failed. (-71) [ 2192.654698][ T5279] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2192.691552][ T5279] dvbdev: DVB: registering new adapter (Terratec H7) [ 2192.702349][ T5279] usb 3-1: media controller created [ 2192.710168][ T5279] usb read operation failed. (-71) [ 2192.717972][ T9656] veth0_macvtap: entered promiscuous mode [ 2192.735073][ T5279] usb write operation failed. (-71) [ 2192.743665][ T9656] veth1_macvtap: entered promiscuous mode [ 2192.751239][ T5279] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 2192.798280][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.822141][ T5279] usb 3-1: USB disconnect, device number 64 [ 2192.872502][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2192.904311][ T9812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2192.958179][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2192.991036][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.015270][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.026238][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.038279][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.050269][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.060252][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.071169][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.097313][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.129013][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.161879][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.204723][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.232512][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.278237][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.300362][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2193.331891][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.352185][ T9820] trusted_key: encrypted_key: key user:syz not found [ 2193.361406][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2193.377417][ T9812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.409076][ T9791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.425352][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.437896][ T9791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2193.462404][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.487499][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.511324][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.525123][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.538230][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.548683][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.579380][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.599781][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.641561][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.659274][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.670579][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.684422][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.704466][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.722338][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.758381][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.772128][ T9656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2193.783388][ T9656] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2193.879056][ T9656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2193.923407][ T9656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.945528][ T9656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.962011][ T9656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2193.971181][ T9656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2194.240272][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.286036][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.380239][T18346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2194.397500][T18346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2194.933471][ T5279] usb 4-1: USB disconnect, device number 113 [ 2195.424067][ T9875] trusted_key: encrypted_key: key user:syz not found [ 2195.532096][ T5279] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2195.576349][ T9881] netlink: 'syz.2.7218': attribute type 1 has an invalid length. [ 2195.702395][ T5279] usb 4-1: device descriptor read/64, error -71 [ 2195.856134][ T9892] netlink: 'syz.2.7219': attribute type 21 has an invalid length. [ 2195.880312][ T9892] binder: 9885:9892 ioctl 5201 0 returned -22 [ 2195.963757][ T5279] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2196.122508][ T5279] usb 4-1: device descriptor read/64, error -71 [ 2196.242243][ T5279] usb usb4-port1: attempt power cycle [ 2196.603782][ T5279] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2196.641438][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7224'. [ 2196.659129][ T5279] usb 4-1: device descriptor read/8, error -71 [ 2196.678193][ T9918] netlink: 'syz.1.7224': attribute type 11 has an invalid length. [ 2196.793238][ T9923] input: syz0 as /devices/virtual/input/input160 [ 2196.806059][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2196.850023][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2196.933002][ T5279] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2196.974372][ T5279] usb 4-1: device descriptor read/8, error -71 [ 2197.070320][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.081888][T24212] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2197.102962][ T5279] usb usb4-port1: unable to enumerate USB device [ 2197.111686][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.251895][T24212] usb 3-1: Using ep0 maxpacket: 16 [ 2197.263932][T24212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2197.283679][T24212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2197.298583][T24212] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 2197.308043][T24212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2197.327113][T24212] usb 3-1: config 0 descriptor?? [ 2197.755048][ T9963] trusted_key: encrypted_key: key user:syz not found [ 2198.006916][T24212] usbhid 3-1:0.0: can't add hid device: -71 [ 2198.020514][T24212] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2198.031534][T24212] usb 3-1: USB disconnect, device number 65 [ 2198.400775][ T9979] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7231'. [ 2198.412513][ T9980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7231'. [ 2198.433158][ T9979] mac80211_hwsim hwsim417 wlan0: entered promiscuous mode [ 2198.445078][ T9979] macsec1: entered promiscuous mode [ 2198.457408][ T9979] mac80211_hwsim hwsim417 wlan0: left promiscuous mode [ 2198.586365][ T9982] tipc: Enabling of bearer rejected, failed to enable media [ 2198.643322][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7233'. [ 2198.659577][ T9984] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 2199.092083][ T8] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2199.137659][ T9994] ------------[ cut here ]------------ [ 2199.143269][ T9994] WARNING: CPU: 0 PID: 9994 at include/linux/cpumask.h:135 io_sq_offload_create+0xd2f/0xfd0 [ 2199.153793][ T9994] Modules linked in: [ 2199.157717][ T9994] CPU: 0 UID: 0 PID: 9994 Comm: syz.0.7236 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2199.168312][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2199.178554][ T9994] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 2199.184727][ T9994] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 7c 12 3e f6 e9 95 f3 ff ff e8 42 89 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 2199.204579][ T9994] RSP: 0018:ffffc90003b4fc40 EFLAGS: 00010283 [ 2199.210984][ T9994] RAX: ffffffff8bbdf53e RBX: ffffc90003b4fe0c RCX: 0000000000040000 [ 2199.219327][ T9994] RDX: ffffc90008f59000 RSI: 0000000000001103 RDI: 0000000000001104 [ 2199.228402][ T9994] RBP: ffffc90003b4fd40 R08: ffffffff8bbdf22b R09: 1ffffffff2038b85 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2199.237440][ T9994] R10: dffffc0000000000 R11: fffffbfff2038b86 R12: ffff888075b54000 [ 2199.246809][ T9994] R13: 00000000bffffffc R14: 1ffff92000769f94 R15: ffffc90003b4fcc0 [ 2199.255336][ T9994] FS: 00007ff26b2e36c0(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 2199.259696][ T9995] trusted_key: encrypted_key: key user:syz not found [ 2199.264717][ T9994] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2199.264746][ T9994] CR2: 0000000000000000 CR3: 000000005db08000 CR4: 00000000003526f0 [ 2199.264770][ T9994] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2199.264788][ T9994] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2199.264806][ T9994] Call Trace: [ 2199.264817][ T9994] [ 2199.264829][ T9994] ? __warn+0x168/0x4e0 [ 2199.264861][ T9994] ? io_sq_offload_create+0xd2f/0xfd0 [ 2199.264894][ T9994] ? report_bug+0x2b3/0x500 [ 2199.324810][ T9994] ? io_sq_offload_create+0xd2f/0xfd0 [ 2199.331304][ T9994] ? handle_bug+0x60/0x90 [ 2199.337233][ T9994] ? exc_invalid_op+0x1a/0x50 [ 2199.342066][ T9994] ? asm_exc_invalid_op+0x1a/0x20 [ 2199.347148][ T9994] ? io_sq_offload_create+0xa1b/0xfd0 [ 2199.352760][ T9994] ? io_sq_offload_create+0xd2e/0xfd0 [ 2199.358213][ T9994] ? io_sq_offload_create+0xd2f/0xfd0 [ 2199.363724][ T9994] ? __pfx_io_sq_offload_create+0x10/0x10 [ 2199.369484][ T9994] ? io_allocate_scq_urings+0x426/0x640 [ 2199.375186][ T9994] io_uring_create+0x792/0x1360 [ 2199.380090][ T9994] __se_sys_io_uring_setup+0x2ba/0x330 [ 2199.385716][ T9994] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2199.392152][ T9994] ? do_syscall_64+0x100/0x230 [ 2199.396986][ T9994] ? do_syscall_64+0xb6/0x230 [ 2199.401947][ T9994] do_syscall_64+0xf3/0x230 [ 2199.406499][ T9994] ? clear_bhb_loop+0x35/0x90 [ 2199.411225][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.417284][ T9994] RIP: 0033:0x7ff26a57def9 [ 2199.421806][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2199.442707][ T9994] RSP: 002b:00007ff26b2e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2199.451159][ T9994] RAX: ffffffffffffffda RBX: 00007ff26a735f80 RCX: 00007ff26a57def9 [ 2199.460213][ T9994] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000002001000b [ 2199.468367][ T9994] RBP: 00007ff26a5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 2199.476764][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2199.485040][ T9994] R13: 0000000000000000 R14: 00007ff26a735f80 R15: 00007ff26a85fa28 [ 2199.493214][ T9994] [ 2199.496270][ T9994] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2199.503565][ T9994] CPU: 0 UID: 0 PID: 9994 Comm: syz.0.7236 Not tainted 6.11.0-syzkaller-07262-g839c4f596f89 #0 [ 2199.513916][ T9994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 2199.523996][ T9994] Call Trace: [ 2199.527297][ T9994] [ 2199.530247][ T9994] dump_stack_lvl+0x241/0x360 [ 2199.534974][ T9994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2199.540230][ T9994] ? __pfx__printk+0x10/0x10 [ 2199.544860][ T9994] ? vscnprintf+0x5d/0x90 [ 2199.549206][ T9994] panic+0x349/0x880 [ 2199.553119][ T9994] ? __warn+0x177/0x4e0 [ 2199.557285][ T9994] ? __pfx_panic+0x10/0x10 [ 2199.561751][ T9994] __warn+0x34b/0x4e0 [ 2199.565742][ T9994] ? io_sq_offload_create+0xd2f/0xfd0 [ 2199.571125][ T9994] report_bug+0x2b3/0x500 [ 2199.575464][ T9994] ? io_sq_offload_create+0xd2f/0xfd0 [ 2199.580857][ T9994] handle_bug+0x60/0x90 [ 2199.585025][ T9994] exc_invalid_op+0x1a/0x50 [ 2199.589533][ T9994] asm_exc_invalid_op+0x1a/0x20 [ 2199.594393][ T9994] RIP: 0010:io_sq_offload_create+0xd2f/0xfd0 [ 2199.600383][ T9994] Code: 3e f6 e9 57 f4 ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c a2 f3 ff ff 48 89 df e8 7c 12 3e f6 e9 95 f3 ff ff e8 42 89 d6 f5 90 <0f> 0b 90 e9 f3 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 4c [ 2199.619995][ T9994] RSP: 0018:ffffc90003b4fc40 EFLAGS: 00010283 [ 2199.626075][ T9994] RAX: ffffffff8bbdf53e RBX: ffffc90003b4fe0c RCX: 0000000000040000 [ 2199.634050][ T9994] RDX: ffffc90008f59000 RSI: 0000000000001103 RDI: 0000000000001104 [ 2199.642053][ T9994] RBP: ffffc90003b4fd40 R08: ffffffff8bbdf22b R09: 1ffffffff2038b85 [ 2199.650046][ T9994] R10: dffffc0000000000 R11: fffffbfff2038b86 R12: ffff888075b54000 [ 2199.658032][ T9994] R13: 00000000bffffffc R14: 1ffff92000769f94 R15: ffffc90003b4fcc0 [ 2199.666010][ T9994] ? io_sq_offload_create+0xa1b/0xfd0 [ 2199.671389][ T9994] ? io_sq_offload_create+0xd2e/0xfd0 [ 2199.676775][ T9994] ? __pfx_io_sq_offload_create+0x10/0x10 [ 2199.682503][ T9994] ? io_allocate_scq_urings+0x426/0x640 [ 2199.688055][ T9994] io_uring_create+0x792/0x1360 [ 2199.692914][ T9994] __se_sys_io_uring_setup+0x2ba/0x330 [ 2199.698384][ T9994] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2199.704402][ T9994] ? do_syscall_64+0x100/0x230 [ 2199.709193][ T9994] ? do_syscall_64+0xb6/0x230 [ 2199.713898][ T9994] do_syscall_64+0xf3/0x230 [ 2199.718424][ T9994] ? clear_bhb_loop+0x35/0x90 [ 2199.723120][ T9994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.729030][ T9994] RIP: 0033:0x7ff26a57def9 [ 2199.733455][ T9994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2199.753082][ T9994] RSP: 002b:00007ff26b2e3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 2199.761515][ T9994] RAX: ffffffffffffffda RBX: 00007ff26a735f80 RCX: 00007ff26a57def9 [ 2199.769510][ T9994] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000002001000b [ 2199.777512][ T9994] RBP: 00007ff26a5f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 2199.785497][ T9994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2199.793482][ T9994] R13: 0000000000000000 R14: 00007ff26a735f80 R15: 00007ff26a85fa28 [ 2199.801575][ T9994] [ 2199.804905][ T9994] Kernel Offset: disabled [ 2199.809234][ T9994] Rebooting in 86400 seconds..